Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File:                     t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier:          hzfTPftPZGZjK1ijrKn81SeNM/aODeMJvEXvVXwsYMw=
Subject key identifier:   49:12:9C:00:2F:23:58:82:7F:03:F4:4F:F5:5C:20:A5:0F:A6:96:18
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer:       /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial:       019F90FF7FE8D7867A25708DA2ABE5460DC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number:          1A02
Signing time:             Thu 23 Jul 2026 22:01:31 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:31 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:31 +0000
Files and hashes:         1: AxrRs_0G1xHNDlwe2LgLLni1Tms.roa (hash: S3Hp+QgVYkCIxPs9hAjo43fJN2kqAExvs7uW28uJEac=)
                          2: IEHhAsm6Xmdej2oCP8axb9PFCII.roa (hash: HMNMX3CTbZjbh0WFm8CFNKQuDtEwRiZo1B5DzDBXjYE=)
                          3: QH92-KbfL63ctZl3QrX0nIExypM.roa (hash: aa3zpeOKy0KyaOR31LacRMZS9fLi4Tzjtg5JgfAnbwk=)
                          4: WGAML1YjI5zAxq5PEqT3x_V8_tY.roa (hash: 8+17DXSjFxcEUdFqGfGDD9sHzlrlToFKTDXRvABhK4A=)
                          5: bEcjbcp-y9JIahihmtoi9EK0TiQ.roa (hash: ASxCyz+NX/m3cMBGmbT/xXqWc8knXBuHgU1BoVV8rW4=)
                          6: iOtk8LXgOKxDWPlP4BKz8OTWN8E.roa (hash: kcjtUwCY22q3aM/qdCSkN7N8FHGs5xCi5hpXiJukyWQ=)
                          7: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: +L/QOD4QTDjD/vzXQWrCsZNXi6R39en56Ii00b/2C8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:7f:e8:d7:86:7a:25:70:8d:a2:ab:e5:46:0d:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
        Validity
            Not Before: Jul 23 22:01:31 2026 GMT
            Not After : Jul 24 22:01:31 2026 GMT
        Subject: CN=49129c002f2358827f03f44ff55c20a50fa69618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:25:b9:ba:33:8e:78:42:67:07:3e:12:d6:05:
                    7b:e0:90:35:ae:a0:57:fd:fa:b7:77:74:75:9d:78:
                    89:d8:76:db:ef:7a:c2:94:bb:67:4d:d2:1c:e8:a5:
                    24:d9:65:6d:d1:6c:6c:1d:5d:b2:21:81:35:7f:5c:
                    ee:76:c0:7d:6d:32:8c:b0:14:ff:d4:6c:2c:9b:cf:
                    cb:29:0b:45:de:be:70:da:c3:f7:bd:63:53:e0:a0:
                    d7:b4:8a:c4:2a:b3:c0:1f:69:3d:50:62:2f:65:06:
                    c3:be:6f:85:cc:18:3e:1a:9a:c0:b4:95:f1:ac:ac:
                    7c:7b:7d:9b:0d:b1:4c:d8:6a:45:fb:63:73:46:30:
                    dc:62:17:19:b4:06:80:1d:10:2e:5c:8e:34:00:99:
                    e2:3e:dd:09:89:47:10:ab:b1:44:73:c5:af:0c:91:
                    47:29:66:4c:69:c6:42:2b:2c:83:0a:47:14:ff:dc:
                    59:ac:b6:c0:c4:94:c0:d8:90:5d:20:5d:8c:6c:71:
                    da:d1:30:30:5c:74:71:cf:fe:2c:5f:39:53:d7:8f:
                    c5:f1:d7:91:7c:be:f8:07:9e:e7:f2:c9:88:c5:3b:
                    c4:12:f8:94:aa:a2:cd:5a:01:b0:e6:92:63:39:16:
                    28:45:d9:37:74:6b:41:e7:47:cc:e0:34:67:b2:0c:
                    05:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:12:9C:00:2F:23:58:82:7F:03:F4:4F:F5:5C:20:A5:0F:A6:96:18
            X509v3 Authority Key Identifier:
                keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a0:20:35:34:98:2d:32:ed:33:6d:56:23:d2:ae:0b:ea:4c:
         39:ab:6c:d3:a8:34:e9:47:e3:4f:c3:d0:6f:8e:86:bb:41:55:
         a2:90:30:88:b7:42:db:d6:cb:cc:3b:84:29:5a:b6:c0:7b:6e:
         36:ae:9c:20:28:b7:2d:cb:37:8c:09:1e:41:e0:2d:09:d4:d3:
         09:10:53:54:60:0b:0f:a4:60:23:0f:de:38:e7:60:eb:f2:01:
         87:95:04:d4:ec:06:c0:26:4a:5e:4c:00:86:b6:88:c8:22:af:
         fa:9c:ef:89:f1:f5:53:50:d1:6f:1b:64:12:21:e0:24:4a:3e:
         db:77:33:09:ec:db:36:5f:33:35:44:86:54:6e:70:a4:26:98:
         6c:ae:90:64:34:9b:7c:47:b6:2f:67:61:77:d3:73:1c:cf:28:
         fc:e2:43:63:4f:fa:68:5e:d1:f2:b7:d0:9f:31:9c:b9:28:d8:
         ec:2e:95:97:0a:9f:42:7b:f8:b8:69:94:e5:92:91:46:b7:99:
         f8:8d:50:71:98:e8:dd:f9:21:ca:55:44:0b:1a:ef:f0:f8:8b:
         8f:4d:ff:e0:06:6c:24:d3:d4:55:83:f0:68:84:c1:f5:2b:75:
         b2:98:79:c0:11:03:96:f7:15:c6:cd:58:4b:18:48:aa:f0:26:
         c1:c3:d8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:36:29 2026 by rpki-client