Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
File:                     fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft (raw, json)
Hash identifier:          r/V6mjDyacJ5rPZZjuwVRS49K+2tCqGMjO7eP20Q6ng=
Subject key identifier:   11:93:8A:C1:D3:1B:87:6E:92:0E:40:A1:71:7B:10:1B:B8:0E:E3:E3
Authority key identifier: 7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7
Certificate issuer:       /CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
Certificate serial:       019F8EA2C6E5FB79E1B590A5025E1F6090D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
Manifest number:          19DA
Signing time:             Thu 23 Jul 2026 11:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:00 +0000
Files and hashes:         1: 0TxBgKR0-mFBVPmaWWvTm14Pm-Q.asa (hash: cth+Rrm+HpFKrwXy4qDgKJSR8yMF6YAu4ac25E9vD8Y=)
                          2: J5-ZZxYB5xyEptEXT9fLN2-O3Q8.asa (hash: gEhzebzSmpk72W4Pzu8OHqW1CkeeMsXnRgMFcOTGIfo=)
                          3: f5hSjXuegoqQZTKAeHGAZTXQXRE.asa (hash: YGMhmV8NhjoGaMlAsTrNHjXtjuVZ2lqEixNHOIMRTNk=)
                          4: fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl (hash: G8VbnCcy0qkOdLEARDTps3Deox1ecHOfle5GjZeJsHo=)
                          5: jRge2qkWoaSsXp1Zw8j0h3Xqueg.roa (hash: WWZ6cjlbPPONc3JCBCxXuaN0x8z9x2JVs4zwmdInc+0=)
                          6: uyc7cEaIaFZ6Wo7I4FQYXkhPq8o.roa (hash: 5v9xHENhT3YHIH/MViJc/eB0Q9ZL8gBRplwjr1xeJHo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:c6:e5:fb:79:e1:b5:90:a5:02:5e:1f:60:90:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e45a9a0353a33c6a4f93608f9d25f27c85948b7
        Validity
            Not Before: Jul 23 11:01:00 2026 GMT
            Not After : Jul 24 11:01:00 2026 GMT
        Subject: CN=11938ac1d31b876e920e40a1717b101bb80ee3e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:fa:94:07:ae:89:96:e1:2f:5d:ab:90:13:
                    7f:a2:10:8a:e9:13:66:e7:74:57:eb:8e:b8:3d:2e:
                    68:3d:0d:af:02:31:1b:97:c5:73:40:6e:ac:2c:2f:
                    61:18:35:2f:28:b7:e5:d4:11:b0:36:c8:6f:35:9a:
                    86:ec:53:4c:fc:89:c1:e8:37:0e:2c:21:9f:77:9e:
                    23:15:7d:09:4e:bf:d0:b9:c3:33:0e:90:0d:3a:06:
                    1f:5f:72:5f:6b:fa:dd:d5:13:78:e2:3c:dc:d7:8f:
                    ef:82:20:dc:a4:ce:53:2c:0e:21:27:68:b0:ce:4d:
                    bd:b5:31:f0:8f:02:c0:d8:f4:06:8c:05:eb:b6:40:
                    fe:28:e9:50:8e:46:bf:3f:53:37:d7:c7:70:c5:ae:
                    2f:ef:87:c0:16:4f:af:ef:f3:0a:a1:bc:c5:cd:11:
                    c2:ee:cf:45:68:0f:45:bf:62:3c:3b:41:e7:59:78:
                    a3:85:6c:63:51:80:32:44:99:0a:26:45:48:37:72:
                    c8:1f:7f:79:c1:18:20:bf:ae:c2:76:7e:56:ac:2c:
                    39:c4:93:5d:8a:69:98:e8:46:7d:be:07:44:87:a7:
                    6e:6d:2e:71:4d:4a:a9:bd:39:88:6c:74:5c:0e:67:
                    c0:72:2c:bf:63:55:2d:b0:6b:39:20:b4:2f:71:7a:
                    a3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:93:8A:C1:D3:1B:87:6E:92:0E:40:A1:71:7B:10:1B:B8:0E:E3:E3
            X509v3 Authority Key Identifier:
                keyid:7E:45:A9:A0:35:3A:33:C6:A4:F9:36:08:F9:D2:5F:27:C8:59:48:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dd7beb-6f78-419b-957d-37a60c335a5d/1/fkWpoDU6M8ak-TYI-dJfJ8hZSLc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:63:20:45:97:50:a4:4f:ef:0a:09:36:ac:1f:75:60:a1:dd:
         ef:f8:e0:fb:f8:98:68:55:ec:35:a6:a9:46:77:1e:c3:de:ed:
         30:25:49:29:20:bd:0f:b3:f3:50:23:e0:e5:3a:2b:a4:37:40:
         e7:bb:db:2d:af:f2:4f:c7:66:d6:5a:4a:be:c3:71:f4:1a:63:
         b0:82:36:cc:4d:b9:c0:6a:80:90:45:d1:19:bb:a3:9b:d2:a4:
         47:27:97:1a:b7:f3:17:71:f2:de:6d:5f:29:5a:25:b9:9c:bc:
         b8:68:8f:9b:c4:60:a9:90:5f:96:6a:08:f8:33:d0:2e:53:c9:
         90:95:17:8a:07:cb:c2:9d:91:1b:ac:7c:a5:2b:14:ea:be:72:
         90:95:78:a0:1b:96:df:ad:8d:9b:66:79:84:f2:51:29:42:00:
         5c:ad:3f:e0:b3:d4:2b:43:bc:8f:81:85:9e:0c:31:9e:75:a2:
         00:a4:9b:80:e4:6c:9e:f3:71:4a:18:45:96:f5:d1:ac:7d:ef:
         73:fd:5e:0e:ff:a0:1a:fe:3e:8b:06:6d:97:15:14:08:ab:1e:
         a0:b1:4a:bc:01:f2:fa:56:d1:eb:90:d5:07:8f:dd:b4:d2:d5:
         aa:b9:c7:10:27:95:ae:fe:d4:48:f0:94:49:87:22:9c:cc:d3:
         3b:35:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:13:14 2026 by rpki-client