Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
File:                     79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft (raw, json)
Hash identifier:          BXV4ahOJ7Xy+TpS6YPyuFXBW5bJnLTzzD+DDU3xi0sw=
Subject key identifier:   74:77:71:A0:02:7B:63:64:36:E0:CE:D0:DE:9E:DF:3C:BA:C5:35:9A
Authority key identifier: EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69
Certificate issuer:       /CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
Certificate serial:       019F905A342C9AD85B035A8AB9DD0CE6C554
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 19:00:58 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:58 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:58 +0000
Files and hashes:         1: 5q8b-mFBKEi7KxA-qotiTf_Ngcs.roa (hash: UP1Aef3+F12caRUYXmTS+aJsJJVlKeAHOy7RJvD6MyQ=)
                          2: 79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl (hash: Boh/0OM5qcOwiKHqdL4bTnr0OjqyXESEu/RYFCcknNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:34:2c:9a:d8:5b:03:5a:8a:b9:dd:0c:e6:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efdc48d9ab10f0e42a3dc67fbd0f4cb8e44cab69
        Validity
            Not Before: Jul 23 19:00:58 2026 GMT
            Not After : Jul 24 19:00:58 2026 GMT
        Subject: CN=747771a0027b636436e0ced0de9edf3cbac5359a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:eb:da:b2:5d:4d:7c:73:74:a1:42:45:b4:b4:
                    88:da:d9:f2:d6:40:82:27:00:c2:16:40:47:36:36:
                    e5:b5:5f:d2:90:a8:dd:7f:bc:b0:12:09:e4:f5:df:
                    24:59:84:4e:07:38:a8:b7:55:19:81:28:d6:00:b6:
                    ac:a5:29:81:4c:ec:b9:1f:11:09:7d:93:8b:dd:a7:
                    fd:b9:e1:4f:f0:58:ea:5f:84:f8:88:38:9a:85:f2:
                    07:a4:11:f0:60:1a:3c:e6:12:57:ea:6b:75:ec:06:
                    ac:9a:d4:d4:f2:95:bc:60:d2:87:b0:b4:d6:59:f4:
                    84:f5:f9:86:4f:48:0c:71:4a:c0:3b:a3:df:b0:08:
                    67:de:61:25:ad:c3:d7:c0:0f:bf:75:27:0e:9d:c6:
                    b9:50:5e:6f:6b:5f:88:dc:14:70:65:6c:eb:ae:be:
                    83:4c:6c:df:0a:5f:3e:69:a1:b7:fc:f3:68:08:60:
                    99:5b:7b:2e:de:81:3c:13:47:e1:c0:19:12:58:a1:
                    b4:f3:75:fa:09:41:0d:cf:a6:f5:8a:7f:5c:2b:f4:
                    70:a0:17:1c:57:b2:ef:73:3e:41:91:d3:27:4f:aa:
                    76:b1:d6:2b:45:70:28:44:84:03:da:5c:ae:8e:dc:
                    8e:25:26:07:76:f7:bd:83:a0:64:97:11:22:71:1e:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:77:71:A0:02:7B:63:64:36:E0:CE:D0:DE:9E:DF:3C:BA:C5:35:9A
            X509v3 Authority Key Identifier:
                keyid:EF:DC:48:D9:AB:10:F0:E4:2A:3D:C6:7F:BD:0F:4C:B8:E4:4C:AB:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79xI2asQ8OQqPcZ_vQ9MuORMq2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/404feb-a8bc-4c54-90ac-0660c16efcce/1/79xI2asQ8OQqPcZ_vQ9MuORMq2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:79:5a:4c:0e:0a:80:fe:9b:32:e2:e0:7c:66:5f:d3:cb:c9:
         5c:17:c9:71:77:22:4f:6e:ac:94:70:bf:ef:92:d9:dd:77:82:
         5e:5f:b1:14:dc:d2:ca:7b:ef:a5:be:d0:dd:5b:31:69:24:34:
         28:21:19:a1:59:46:82:ac:3d:4b:43:09:70:55:0f:88:9c:99:
         9c:98:51:d0:b3:88:52:88:8c:b6:88:02:27:6e:2b:ff:f2:66:
         40:d4:a6:09:49:4c:a1:d7:09:46:aa:b5:45:3f:6d:5c:b5:b1:
         07:6a:fe:16:05:52:99:cf:b5:c8:e5:e6:d6:2e:13:b0:67:7a:
         9e:21:42:92:e5:a2:26:d2:0a:f1:a0:4b:01:5d:38:2a:7a:ec:
         85:98:dc:3c:0d:65:d0:c4:25:ee:b3:7f:da:7c:16:21:ac:bb:
         32:1e:f6:3f:ab:d7:fd:e3:fa:47:b8:a5:e9:f3:fc:85:f8:bf:
         5a:23:8d:cc:72:75:d7:2b:73:00:a5:cb:0c:b2:24:38:ea:69:
         a5:33:cd:73:6d:2a:5f:b0:51:62:3a:70:2d:86:a2:57:86:9e:
         b8:07:65:14:f4:d4:c5:9e:45:83:3a:92:5f:8c:69:80:cd:24:
         88:a9:88:a3:7b:92:6c:11:3a:08:93:d9:1c:7b:0d:bd:47:f2:
         f2:c7:b7:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:07:52 2026 by rpki-client