Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File:                     m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier:          10GavoyuxuOM5pGFLXEFx74V+xYN1pilmM7Xb+M1hFo=
Subject key identifier:   E0:6B:BA:D8:B2:AD:39:4E:76:68:2A:FA:13:DA:10:BD:CE:2F:63:04
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer:       /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial:       019F92119EE66D2D597D79149281B50D80D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 03:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:55 +0000
Files and hashes:         1: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: NNiuSDUrzwALDCX9utgR4f4uDAvlXWwK57vVlXzElbs=)
                          2: rUqausp6DPOMmVyNhwwtnCu8uOI.roa (hash: mGV2O68I7SUJIySepwpfOUclIH+MBiTk0XkuVOdxx9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:9e:e6:6d:2d:59:7d:79:14:92:81:b5:0d:80:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
        Validity
            Not Before: Jul 24 03:00:55 2026 GMT
            Not After : Jul 25 03:00:55 2026 GMT
        Subject: CN=e06bbad8b2ad394e76682afa13da10bdce2f6304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:b2:51:9f:80:5a:4b:8f:b1:5e:fd:7d:1d:
                    d7:7a:50:8c:2d:82:56:2b:2f:4a:17:b7:88:14:00:
                    9d:e4:99:0f:0f:6c:9a:cb:16:cd:b8:7b:a8:94:8f:
                    20:39:48:c5:28:79:a0:d2:cd:d7:51:45:a8:bb:04:
                    33:c2:b7:af:71:d6:4f:07:41:17:77:29:b7:27:ac:
                    52:d0:39:5b:ce:fe:b0:07:4f:c9:7f:39:a1:94:3e:
                    5e:f0:f8:42:56:b5:60:b1:c4:41:50:60:01:37:4d:
                    ed:48:9b:dd:5b:73:d2:c2:05:c8:33:9c:ac:45:c6:
                    9b:5f:89:ed:41:5b:3c:0d:9e:7f:af:f9:2d:ef:14:
                    f3:ba:d1:1a:06:c2:08:27:4f:2b:6f:e6:c6:fd:fc:
                    96:bd:dd:c8:c9:fc:a5:0a:39:51:58:95:04:1c:de:
                    6d:77:14:31:65:56:2a:4c:61:65:9d:d8:0a:ac:99:
                    f5:b3:2d:3e:58:e2:fc:a1:b4:da:31:54:2e:d4:40:
                    ce:12:5c:7d:5a:e7:36:83:92:ee:44:4c:4a:d1:dd:
                    88:a2:a0:b5:e4:2d:5b:6f:4d:28:f1:02:35:06:32:
                    40:b6:0a:9e:f1:7a:a5:1b:17:6f:1c:84:d8:24:33:
                    18:90:e8:2e:6c:23:99:6e:da:a0:7d:53:52:d8:4b:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:6B:BA:D8:B2:AD:39:4E:76:68:2A:FA:13:DA:10:BD:CE:2F:63:04
            X509v3 Authority Key Identifier:
                keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:2f:da:0c:a7:25:e9:86:29:5f:28:2f:3f:c0:8e:22:29:04:
         2f:8b:bb:9c:81:a6:e5:c6:01:6c:a5:22:f2:b6:80:36:63:2d:
         9e:24:d9:e6:aa:62:f6:97:af:d7:db:9b:4e:67:e9:c3:4a:65:
         95:97:bc:ea:a0:52:1b:6f:7d:f7:83:31:33:a3:fb:81:73:ff:
         03:4d:4b:ba:1c:f2:05:7e:6f:4b:fa:33:12:1a:d2:42:fc:d3:
         18:b9:ac:f4:0b:9b:16:29:b1:f7:f2:75:0d:93:38:88:b2:7a:
         92:c5:4a:9e:7b:ec:5d:52:97:ec:15:e5:65:93:9d:89:ce:64:
         f5:72:1d:18:0d:f4:4d:c9:31:43:b0:7b:10:df:14:70:c5:b4:
         69:21:4e:70:10:a2:9f:03:eb:a7:a7:91:63:e1:58:ad:ce:a8:
         6e:24:81:60:83:2f:12:35:44:1c:65:69:03:f9:27:9d:42:2e:
         9b:c9:3c:71:f7:f6:9c:dd:a1:0b:c4:4b:e6:47:63:18:2a:d4:
         7a:54:75:90:1a:66:b4:b7:4b:ff:4b:d1:1e:d4:4d:06:dc:d0:
         b0:b3:45:f6:26:4c:cf:43:84:46:dc:ef:39:ef:b4:0e:00:6f:
         28:e5:f8:06:de:aa:ac:9d:f1:f7:f4:d9:e8:c2:d1:bf:12:c2:
         db:7a:7b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:23:32 2026 by rpki-client