Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
File:                     tW-ivPsboZnQpll_uIlUwKbFEtU.mft (raw, json)
Hash identifier:          QWJy0MYuPInLSE3HM/Bw2tHESgZX7DHRwtWjIZ2ahlA=
Subject key identifier:   71:9B:9E:F2:76:93:1B:CA:72:F1:E9:2A:84:68:92:42:BA:B6:18:12
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Certificate issuer:       /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial:       019F9323ABC81039741529C177BBDBD18E61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
Manifest number:          0EBA
Signing time:             Fri 24 Jul 2026 08:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:16 +0000
Files and hashes:         1: igu1HBQCLR1V-K0-3zcWvVR38_Q.roa (hash: haVmzp4loEFEIlfjU/Ifex5GRzP7g2ubGaSjmF5LzcI=)
                          2: mi5UdugB7saftfqiUyQPEhUTU6U.roa (hash: fCT43nAEnI224CXuau2ugHoxaLrrDRNyaSrjl9LFtAY=)
                          3: tW-ivPsboZnQpll_uIlUwKbFEtU.crl (hash: Ru4uaX69rDXwjKZxse96GUnS2V2v8DxiSpknSjP84yk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:ab:c8:10:39:74:15:29:c1:77:bb:db:d1:8e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
        Validity
            Not Before: Jul 24 08:00:16 2026 GMT
            Not After : Jul 25 08:00:16 2026 GMT
        Subject: CN=719b9ef276931bca72f1e92a84689242bab61812
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ab:7b:b5:58:dd:f9:f2:08:0d:1b:7a:eb:a4:
                    58:b3:f4:b9:fb:b0:5e:dc:c3:a0:7b:0e:c8:8e:85:
                    90:4a:6e:b5:67:4b:b1:1e:06:f9:8d:fb:09:3b:c2:
                    83:a2:65:17:ab:25:a7:4e:c7:e7:f9:b5:9a:90:c1:
                    b6:de:7e:5c:82:c4:46:4c:e1:ac:bc:87:80:4b:11:
                    57:b1:b0:16:18:fa:2e:6a:33:17:10:a2:20:4e:ab:
                    50:d1:99:d4:71:19:3e:6b:2b:e9:0f:1c:c7:e3:33:
                    d1:9b:2c:b5:04:79:74:9c:af:d6:39:c9:c6:a0:9f:
                    9a:d2:fd:63:8b:05:fa:b1:6d:27:97:fd:10:cd:76:
                    e5:3e:4e:f4:8f:2b:e2:2d:9f:ea:4c:69:ce:b3:6a:
                    24:26:e8:9d:92:19:3a:50:da:7e:ce:36:1d:a0:b0:
                    be:cf:6d:d9:5d:6a:02:e0:41:db:be:be:c7:7f:4a:
                    73:1a:7b:45:c5:41:53:d1:02:39:1d:19:b2:fe:5b:
                    45:6e:de:50:8e:1f:ef:ba:df:18:22:2b:bf:5a:f1:
                    82:fa:0d:3c:73:a8:23:c9:62:0b:01:96:12:6c:ec:
                    bd:80:e1:73:9d:73:a7:b4:c9:4a:f6:13:02:d1:5b:
                    c5:8c:8a:be:05:c9:91:64:1e:0e:43:c1:cb:e8:12:
                    1e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:9B:9E:F2:76:93:1B:CA:72:F1:E9:2A:84:68:92:42:BA:B6:18:12
            X509v3 Authority Key Identifier:
                keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:6a:96:9d:eb:4f:76:78:92:ab:ca:41:01:fa:81:cb:9a:a2:
         38:82:4b:57:eb:9f:a9:a9:18:cd:2d:2a:b2:a3:d5:2a:16:dc:
         9a:59:23:26:73:4e:55:b4:dd:94:a5:c4:2e:33:9a:d3:25:6d:
         b6:e3:d4:c8:3b:fe:b1:c9:f2:87:f3:a5:a2:0b:ce:1b:3a:2c:
         69:36:04:0b:20:aa:c6:69:56:30:c7:1e:00:0b:db:e9:20:86:
         51:df:ef:ab:a5:54:c1:f9:88:34:24:05:cf:51:12:94:99:e5:
         fe:8d:b4:37:62:1d:7f:cf:2f:1a:11:93:b0:b0:41:70:38:8a:
         e9:17:4a:4c:ad:b6:eb:eb:8c:05:a1:25:d8:20:14:95:0e:56:
         b7:51:f2:4e:12:4f:75:cf:98:e6:ab:ff:21:4d:16:6c:da:db:
         39:d4:42:03:44:c5:b8:ee:d3:cf:d0:c9:07:15:37:3b:d4:ea:
         ae:12:c6:14:42:26:8e:08:0d:41:58:c3:95:43:63:ac:11:6e:
         de:8a:d2:8b:59:fd:09:18:62:e5:c3:39:0f:54:ea:61:1e:97:
         d0:16:b1:cb:7c:f9:45:fb:2c:42:27:dc:db:48:59:c5:e1:ff:
         c8:71:0e:20:1d:29:d2:e4:31:cf:46:ca:ed:d7:80:fb:22:12:
         ad:37:c8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:40:22 2026 by rpki-client