Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
File:                     fGc9qtbZMX8BAdQaBCph5XaJRTo.mft (raw, json)
Hash identifier:          IIz2/ZoEFDGQh+3Lk2eThDtixQ5eRrWqddIOpPHdlYI=
Subject key identifier:   E1:BC:1F:17:26:09:78:71:F8:75:13:CB:93:12:AD:A2:EC:46:3E:77
Authority key identifier: 7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A
Certificate issuer:       /CN=7c673daad6d9317f0101d41a042a61e57689453a
Certificate serial:       019F9090A83029E93F3C8BDE63A9BFE9C9D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
Manifest number:          1429
Signing time:             Thu 23 Jul 2026 20:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:27 +0000
Files and hashes:         1: JMoQAtlSwgIPEDgOxqxN_chfnzU.roa (hash: B9hvkkVw6cavGGlkuEdGYncWF7hdCzROq/BGKrEIOQo=)
                          2: fGc9qtbZMX8BAdQaBCph5XaJRTo.crl (hash: Qw3aD7dZCqAddCoSVHnCTkhQc43GieqlRn52O0M1awg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:a8:30:29:e9:3f:3c:8b:de:63:a9:bf:e9:c9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c673daad6d9317f0101d41a042a61e57689453a
        Validity
            Not Before: Jul 23 20:00:27 2026 GMT
            Not After : Jul 24 20:00:27 2026 GMT
        Subject: CN=e1bc1f1726097871f87513cb9312ada2ec463e77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:bc:34:26:c4:5f:2d:ba:39:7c:76:67:ed:
                    4c:dc:55:64:78:b3:70:f5:c5:6f:c2:e6:bf:60:c3:
                    07:15:08:63:95:7c:39:ad:a0:8f:bf:b4:eb:91:c1:
                    3a:5d:44:96:30:b2:13:25:be:83:27:a4:9d:4b:b3:
                    80:03:84:1f:44:65:bc:da:32:31:4b:50:17:3c:b7:
                    27:ca:8e:6c:28:fc:1b:06:44:83:da:7b:4a:e0:58:
                    96:18:57:d9:ac:79:0a:65:13:21:01:02:6a:6f:0a:
                    b3:e9:11:e0:d7:57:ee:a5:23:0c:65:12:b1:3b:29:
                    9a:0f:6d:d0:d1:94:d6:54:ec:cf:5d:13:30:fe:82:
                    1c:be:c6:85:1c:ac:90:0f:16:5f:b2:b4:1b:8c:23:
                    6e:87:39:f8:45:21:92:d0:a6:1f:de:2d:93:99:bb:
                    de:dd:7b:6b:a3:e8:ec:1b:ea:69:2b:ad:ae:de:00:
                    2a:c1:23:2e:92:0c:a7:52:7a:fc:bf:ff:30:3f:1e:
                    c1:98:b0:f7:85:d1:48:66:5b:3f:ed:5b:68:90:a0:
                    4b:d7:65:38:e8:93:90:66:14:f7:63:97:62:aa:dc:
                    fc:49:a7:b6:69:bf:64:63:23:2a:4a:f5:15:be:c1:
                    04:68:15:96:2e:82:f3:f2:7b:09:26:65:91:e6:20:
                    90:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:BC:1F:17:26:09:78:71:F8:75:13:CB:93:12:AD:A2:EC:46:3E:77
            X509v3 Authority Key Identifier:
                keyid:7C:67:3D:AA:D6:D9:31:7F:01:01:D4:1A:04:2A:61:E5:76:89:45:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGc9qtbZMX8BAdQaBCph5XaJRTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f037db-7592-4b62-bdaa-04e46ef0cd21/1/fGc9qtbZMX8BAdQaBCph5XaJRTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:03:02:a6:0b:60:05:83:25:07:cb:ee:57:0a:6c:bc:e7:53:
         5a:c4:be:d2:2b:ed:1b:ef:11:43:cb:cc:86:74:c3:03:e8:ec:
         64:2a:0f:12:01:75:c0:ac:9a:57:0a:e5:3c:1a:f3:4f:f3:73:
         40:f1:e1:a1:89:4e:8e:0b:1f:fe:d0:6b:a7:bf:cc:93:00:12:
         6a:bc:d7:3f:06:bc:2a:2a:15:b3:bb:50:42:b9:83:3e:49:bb:
         57:12:5e:17:2a:d7:15:85:8d:c3:b7:e5:cf:48:be:e1:ae:3f:
         ec:db:8e:e9:3f:aa:8c:1f:10:ff:06:ce:5c:5a:63:68:8e:24:
         00:b5:83:63:77:93:32:24:4a:6a:54:ee:8c:00:cd:ef:12:7d:
         47:94:fa:00:0d:57:fb:5c:04:79:32:58:08:7f:cf:80:fd:c9:
         0b:b3:80:7a:78:81:04:a4:6e:7a:b6:33:de:a9:a2:d4:7c:32:
         5f:30:a9:3a:5b:27:bb:78:ce:1d:49:73:1a:ab:e1:53:7c:30:
         3e:32:f5:fe:c8:35:e5:7a:01:9e:07:39:ef:7b:e6:26:c7:ce:
         c6:2b:84:a7:93:d0:c0:33:2b:a4:df:63:85:4d:35:ab:5f:9a:
         5a:06:58:16:95:a2:bb:82:de:63:f1:ad:ee:ee:a0:5c:8f:d6:
         c8:b5:3e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:45:29 2026 by rpki-client