Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
File:                     7bkm-MYDqrectGqIO_YyVko_qr8.mft (raw, json)
Hash identifier:          onjdUmDu6VJrCwD72s5DMo4SNUm/0Xfthg8+OJcRLsI=
Subject key identifier:   C3:4C:FA:07:F1:EC:7E:34:C1:67:9D:BE:4B:12:C3:38:BF:E3:84:63
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Certificate issuer:       /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial:       019F8EA225FE1921DFCCCDEA938ED9B0F632
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
Manifest number:          19F5
Signing time:             Thu 23 Jul 2026 11:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:18 +0000
Files and hashes:         1: 5CiJxwVbdUZ8eM7me5oInvUUaLg.asa (hash: dP8XoNIksXb4H+NwZjef9TLwaeJ0Qhddyzp+zEO5+gw=)
                          2: 7bkm-MYDqrectGqIO_YyVko_qr8.crl (hash: zBUgrBOpjDp4dKdZDFuPNqu0/6fI+g1jrDlxkEegtRI=)
                          3: ZOavrk-QF97rJP_2jNT7lmVgOvE.roa (hash: r2s3h1w3Hjfzrez9cKoP8cqtXCYOTfAkva8ue3B7Z2Q=)
                          4: b4zo6KiTgoc5L-wE1iEGLa3ot54.roa (hash: 7qq5CHWNx2oa5BEGotuEcxfckS6TczcC6U6UJrqCLzo=)
                          5: ffZakNnkJ9qo1A3shFhtl9qXd_Q.roa (hash: zf21A+pRvsATbzNE1edRMBnzKSA0PFpPQRbeA3NRvG4=)
                          6: g2nNQ5VhHao4Apal56-pguzsiBg.asa (hash: gNuWJZ3S7x7XLK2/IgqTwexYiw/r4lDYIjTdNxVRqcE=)
                          7: ySpczFe0bFDpQcjPCdkMrRLgsk4.roa (hash: 4bkzvAWfxVndAxO5MdGK6YbLnfuFOHsrNBENCi5CdAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:25:fe:19:21:df:cc:cd:ea:93:8e:d9:b0:f6:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
        Validity
            Not Before: Jul 23 11:00:18 2026 GMT
            Not After : Jul 24 11:00:18 2026 GMT
        Subject: CN=c34cfa07f1ec7e34c1679dbe4b12c338bfe38463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:5b:f6:d3:37:25:7d:f9:52:ad:69:df:c1:
                    d2:9b:39:82:3d:2f:9d:dc:be:25:26:83:a2:cc:a8:
                    57:a5:b8:90:ee:86:28:23:e5:ab:cd:d9:22:ea:a9:
                    10:c2:40:7b:2a:34:0d:85:fe:1d:8b:fd:c2:67:e8:
                    d1:63:60:dd:a5:71:07:52:0e:56:f6:91:80:7c:8d:
                    36:90:7f:2d:59:f7:4c:e7:33:23:25:86:74:60:23:
                    e1:96:6c:23:73:ff:31:46:f9:66:b3:d9:1a:16:00:
                    ee:e9:9e:23:f7:ff:b2:ba:78:77:4e:52:b7:af:35:
                    9e:20:54:8c:61:9a:02:eb:f0:32:fb:50:32:e5:30:
                    75:03:12:b1:8e:82:8f:a7:45:1c:34:c6:06:25:d2:
                    db:49:5a:75:8b:ea:30:8a:3a:fc:8e:67:8c:81:a6:
                    40:ac:d2:96:1c:f3:bd:ff:a7:7f:4b:7a:b0:0c:6a:
                    dc:0d:4e:0d:2e:62:ea:03:f6:7f:01:8a:27:66:6b:
                    a1:68:13:33:8a:c1:a2:de:5e:dd:13:bd:cb:37:99:
                    2d:8f:a6:a4:a4:4b:71:94:21:e1:cd:ff:8a:46:74:
                    c4:11:52:ec:ce:3e:a0:2d:09:d1:be:ca:17:c4:d7:
                    c6:05:bb:34:99:8d:47:1d:f7:3b:d3:48:2d:af:8a:
                    86:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:4C:FA:07:F1:EC:7E:34:C1:67:9D:BE:4B:12:C3:38:BF:E3:84:63
            X509v3 Authority Key Identifier:
                keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:67:d1:a8:a6:ec:41:90:df:ef:06:68:b6:2e:d3:56:12:71:
         74:7c:48:a9:ee:a2:aa:61:86:9e:a5:37:ed:47:c7:ce:af:be:
         28:ab:78:7d:72:0a:8a:bf:5d:18:74:8b:71:ec:95:97:34:d1:
         8f:9e:db:d3:7a:3c:11:10:66:2d:3a:0b:53:67:3d:98:4e:43:
         7e:3a:34:5e:bb:30:9b:85:21:05:61:06:a0:2c:ad:80:d1:09:
         0f:93:e7:fa:d7:a1:96:e8:28:f9:53:1f:da:49:8b:81:4e:db:
         a3:b9:e2:0f:8c:9c:d0:2b:19:e6:05:7d:87:1a:58:fd:e2:49:
         e5:a5:3f:71:9c:ed:59:94:32:09:8c:5d:d1:da:39:77:53:6d:
         9d:2d:5e:95:a8:be:c0:bb:df:8e:4e:fb:b5:54:6d:2d:3f:a0:
         b6:94:03:5b:cf:65:a9:5a:05:bf:0f:09:be:64:0c:89:b4:a7:
         58:1e:0e:30:be:d8:51:89:6f:e4:e0:91:89:eb:01:9d:45:5b:
         9f:41:3f:a1:fa:33:73:83:e7:a0:80:82:c1:8e:00:df:85:9b:
         fc:8a:87:0c:0c:15:3a:93:42:ab:43:8f:60:cf:e0:ce:a4:a3:
         a5:e9:b4:cf:8a:d1:31:e1:25:88:c8:8e:af:6d:a0:2a:4f:c4:
         b8:dc:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:52 2026 by rpki-client