Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
File:                     B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft (raw, json)
Hash identifier:          VpxZDni0E0RpCz0LSP7Fe5YeGlZLvDwPiciRMx7/DUI=
Subject key identifier:   D6:79:E0:CD:A8:A5:EA:85:3C:3C:A0:E5:44:31:BC:57:B2:35:F2:89
Authority key identifier: 07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18
Certificate issuer:       /CN=07d44a52778aa65f736e72436003f6654f268318
Certificate serial:       019F9135DE149B2D96480BE23078184372B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 23:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:54 +0000
Files and hashes:         1: 5NepKsibkXxq0cC5aAvvP_8JjP4.roa (hash: 7HOC7sGZGamyWKAmcPUs1h2P6lOKJ+z20+QYh7rUkew=)
                          2: B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl (hash: LzTMaszBmPawBEG3s7K8cUTDpiy2mZbbktKw587pUow=)
                          3: PTKJDn9baa8GDsyUDbvLdvKpH_Y.roa (hash: M6ZYD9tQnpCFir5Cu0FNk295lOfSt9eoRIH1690apck=)
                          4: VGYXm9SrAnPQDO4KzyfYQTctcKE.roa (hash: t6wWWjbtPwKCRrEiQDaW7hfJLS6tTVFXTMhhJiW17DM=)
                          5: ecvQXZ3AprCLKejnaTOVVFlxHok.roa (hash: UJHUQBi7HS/efD3FVZTiVWpdVXwILbRze3oIm83qHnA=)
                          6: h1mEZ62DMm3uuyaJJJmPKB4-m6s.roa (hash: AOIevC2x+LRQ++ZcMrIM2D+bhkF+aQN4GCC5pvrUkG0=)
                          7: k_NknFuW4fn4bDMEidouhfOP4yE.roa (hash: /QvV9YqG7NdPkIkhFC2G0RzWP2PLlZH/17cSaHRPmK8=)
                          8: q3xB1TlmhDj055zlvy4aiXlZXlk.roa (hash: 3L2aJ4MWJ0YKmWL4+Damuuwr/sJjzRrBG+ZnvYerwp4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:de:14:9b:2d:96:48:0b:e2:30:78:18:43:72:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d44a52778aa65f736e72436003f6654f268318
        Validity
            Not Before: Jul 23 23:00:54 2026 GMT
            Not After : Jul 24 23:00:54 2026 GMT
        Subject: CN=d679e0cda8a5ea853c3ca0e54431bc57b235f289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:29:80:3e:d3:34:03:ed:3c:84:61:cb:ce:ec:
                    2b:b9:60:62:8f:1b:a5:b9:6c:86:f0:9a:5a:2e:f2:
                    a9:df:74:ea:33:22:7f:f6:f7:d9:78:39:64:65:37:
                    0b:58:8b:94:13:2b:47:4d:d1:34:36:52:09:38:04:
                    cc:79:9f:8b:29:01:5b:10:49:90:c5:27:b2:9e:09:
                    af:4f:08:af:ec:db:db:1c:59:f5:b1:e6:c3:fb:4f:
                    54:da:32:84:f8:79:03:78:ad:5e:f1:54:e3:ef:77:
                    5d:19:10:4c:2e:54:85:17:bb:a7:39:85:b1:42:87:
                    13:69:ef:02:9a:44:04:b4:01:30:66:0d:19:d2:ea:
                    81:d5:9f:97:87:72:3d:20:d9:00:55:44:76:36:85:
                    92:3b:dc:57:33:74:e1:10:af:36:39:dd:97:e9:61:
                    08:ce:ee:e1:48:a3:f3:cb:b1:16:3f:1d:50:78:57:
                    31:14:ff:16:11:01:c1:19:c1:35:20:29:52:5d:37:
                    ef:d0:bd:95:74:98:cc:ab:0d:e1:6c:9d:11:c3:64:
                    54:4b:a2:e6:00:da:12:20:5e:27:61:fc:f0:00:58:
                    04:75:d6:de:50:13:3a:da:08:72:df:e5:78:3e:51:
                    2c:8c:20:88:7f:78:fb:64:27:60:2f:00:cd:af:a9:
                    29:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:79:E0:CD:A8:A5:EA:85:3C:3C:A0:E5:44:31:BC:57:B2:35:F2:89
            X509v3 Authority Key Identifier:
                keyid:07:D4:4A:52:77:8A:A6:5F:73:6E:72:43:60:03:F6:65:4F:26:83:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9RKUneKpl9zbnJDYAP2ZU8mgxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/813cbc-4fa4-4646-a8db-1d28a60e0e30/1/B9RKUneKpl9zbnJDYAP2ZU8mgxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:fe:78:fe:3a:35:21:d9:93:ba:68:79:44:d6:37:3d:a5:bb:
         c7:c2:26:0b:4c:5b:7b:f6:36:19:71:74:bc:12:85:4f:8a:f2:
         f8:d0:90:c2:0d:61:e8:0d:02:b4:ce:1b:14:5e:48:6f:b3:99:
         7f:f6:ab:f4:bf:d7:c5:a7:09:75:05:ed:ea:77:ba:89:5d:f5:
         a3:6b:26:f2:c1:43:4d:71:6c:0d:18:2a:cf:56:8e:bd:36:2c:
         1f:ff:19:40:2d:d9:89:c7:14:1e:90:7b:ba:84:1a:aa:6a:dd:
         16:1a:df:d2:4d:50:ad:22:e7:1d:2f:7c:79:b5:ef:c4:cb:ed:
         95:fc:6a:ee:fe:e1:45:bc:74:b0:4a:a7:99:32:f1:fb:35:40:
         f9:0a:23:df:39:74:8f:61:8d:8d:3c:9c:c1:0b:c7:44:29:e0:
         0b:cb:ba:34:09:2f:6c:a5:53:2f:00:8b:7e:3d:56:e1:e2:c5:
         9c:ce:cc:47:1c:be:bc:7a:43:56:8c:59:63:05:4c:1d:30:d1:
         45:a9:eb:93:27:f4:b6:00:cf:7d:c0:da:83:4d:a5:db:c9:a6:
         f3:db:08:5e:e3:0b:e6:14:53:4f:a7:6e:0b:fd:63:9a:89:b0:
         da:8c:3b:be:65:6e:f7:c6:37:89:53:e2:20:27:d2:f6:dc:1d:
         86:b2:7e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:03:53 2026 by rpki-client