Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
File:                     ruCNkzby5s0WXrcwKX_m0gyDw5o.mft (raw, json)
Hash identifier:          SZ5Hoq5FW869Mt2v0YQ/pBAzq5QiydB7BbXRw0bjVnk=
Subject key identifier:   73:C2:55:AD:D2:7C:4F:A6:CE:2A:6C:3D:19:C2:40:1E:D7:E3:F7:1A
Authority key identifier: AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A
Certificate issuer:       /CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
Certificate serial:       019F93C8989124C6B1C1E5DC6D2877C2E1D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
Manifest number:          1713
Signing time:             Fri 24 Jul 2026 11:00:24 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:24 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:24 +0000
Files and hashes:         1: 123WXGbRTZdeisXrE-k_3g3EMvk.roa (hash: PVrjq81b7ONxfTHO259I9HIBssHsthuK6wCJzCfRRBw=)
                          2: 3JLEaN47mFd4AJ1ulcTajHwX46Q.roa (hash: 7nuv0xJK6J/Wz9ZBABmkHA68zDZCu6LbMkw8k4JA0aY=)
                          3: 3m4ZcWe4AoRitpxIdoHTfvPCTz4.roa (hash: R1IDNKkyr2PRIrfMe44b/uoEQJhofAwIdcVDkSZ0J1s=)
                          4: ktGWBH_rz8CZASP_zJHcbXXlp7Y.roa (hash: WQj8sJ8bysuFkPbFG5oVPz6oUf8fVBbz+1mkOQXAzAY=)
                          5: qmwlU-LpszPGm_f_AiX4jfEipIU.roa (hash: eBcbl11HwyKBKgKCJIYPrcRxwRYlzqQyOytUqmTgqj8=)
                          6: ruCNkzby5s0WXrcwKX_m0gyDw5o.crl (hash: jG48Rg7AUEHtQJqsTNZA7R7hFuIcm8+dlYk8NOjTwkE=)
                          7: wwateRuj040-ENpDYQ6qLA2XVl0.roa (hash: NH6PZI4atftudx1FEvFD8kdIjwc++XEY3pey7kw2zFs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:98:91:24:c6:b1:c1:e5:dc:6d:28:77:c2:e1:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aee08d9336f2e6cd165eb730297fe6d20c83c39a
        Validity
            Not Before: Jul 24 11:00:24 2026 GMT
            Not After : Jul 25 11:00:24 2026 GMT
        Subject: CN=73c255add27c4fa6ce2a6c3d19c2401ed7e3f71a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:24:e1:6d:34:f0:30:bb:2c:36:09:ad:45:00:
                    1f:6c:40:a5:c7:fb:35:c9:e5:67:08:15:88:4e:0b:
                    1d:f5:19:3a:70:9a:6a:8c:51:f8:d4:97:d2:a1:fa:
                    ef:e4:92:c7:1c:93:32:0b:37:26:f1:92:f4:07:f1:
                    e9:aa:63:40:4c:8b:0e:3e:e3:97:52:f1:f7:13:e8:
                    8d:2f:6f:7e:37:5f:53:a3:10:f1:07:29:fe:d7:7b:
                    d6:06:de:db:9d:15:2f:ac:58:c1:9f:19:ff:b3:79:
                    b3:70:25:41:02:d5:dd:83:ff:f7:57:52:89:e8:9d:
                    8a:ef:a4:07:04:35:4d:60:c2:2e:b5:69:95:12:ff:
                    d3:02:8e:f8:85:24:2e:de:ad:d3:ef:b9:ad:da:4a:
                    8e:04:c0:1e:87:8a:0f:75:3f:23:cd:fc:62:8d:c9:
                    5a:a9:a8:f3:b0:ea:e3:b2:10:15:44:14:29:df:16:
                    58:c9:e5:d8:9b:6c:21:ac:73:70:18:4c:44:62:fe:
                    91:5b:72:d1:82:96:55:82:01:bb:70:f8:4c:ee:c7:
                    a8:49:dc:e0:2f:1d:cb:22:36:f7:c7:2f:d7:2e:4d:
                    44:c0:1c:fa:a7:77:74:c8:f5:52:a7:4a:43:27:27:
                    9c:a5:24:0d:27:fd:b7:34:11:01:26:29:6c:d9:85:
                    8b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:C2:55:AD:D2:7C:4F:A6:CE:2A:6C:3D:19:C2:40:1E:D7:E3:F7:1A
            X509v3 Authority Key Identifier:
                keyid:AE:E0:8D:93:36:F2:E6:CD:16:5E:B7:30:29:7F:E6:D2:0C:83:C3:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ruCNkzby5s0WXrcwKX_m0gyDw5o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f853f8-2071-49de-b6a0-497bedd71eb9/1/ruCNkzby5s0WXrcwKX_m0gyDw5o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cd:be:14:79:37:50:d3:bc:82:6a:a8:fe:d2:59:56:1f:c2:
         d9:42:4e:48:56:ab:b7:cd:7d:52:0c:5a:a8:1e:b1:4c:35:bf:
         35:ce:00:52:a2:69:de:70:eb:a7:19:97:9d:0e:f0:bb:d1:55:
         e8:31:f4:49:3b:d8:72:3c:77:93:f7:a8:3a:6c:7a:b9:09:03:
         b1:74:46:cb:68:28:36:9d:20:ae:20:a9:23:68:2b:4a:60:7d:
         68:06:e4:f7:90:b5:2a:33:3b:e1:13:41:88:12:ad:eb:19:e5:
         dd:c9:27:b2:dd:50:8a:53:35:87:65:a5:2d:15:75:29:38:97:
         d5:f1:e4:36:45:06:90:75:bb:ef:51:a0:54:81:1a:2e:7d:1a:
         b2:48:43:d0:f3:fa:9a:19:46:e9:20:ed:8f:f3:f1:b8:51:63:
         61:72:be:9b:2d:88:03:80:f2:78:d4:6c:4f:df:16:a7:bc:d3:
         a0:ea:bd:6e:51:ac:37:b7:86:bd:4e:0b:67:7d:08:3a:0c:49:
         df:84:72:09:dd:b0:ce:69:8d:93:61:c6:ff:64:b5:2a:88:8a:
         37:a5:ff:8f:4f:a1:76:54:b9:7f:35:89:b0:ef:2f:48:41:8f:
         50:2f:97:65:3b:69:4f:7f:53:84:07:f5:c5:84:45:fd:63:6e:
         f4:fb:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:07:13 2026 by rpki-client