Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
File:                     rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json)
Hash identifier:          b2T3B5rZY7367toGqGyrEcqpZSxf1vgxoYNSo6OUT38=
Subject key identifier:   2A:35:8D:D6:95:1F:22:DC:82:44:A0:4B:DF:31:D8:08:74:01:56:3F
Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E
Certificate issuer:       /CN=adf491488a7cd8448a420945871c0b99672dc66e
Certificate serial:       019F8FB541FE91737880984441E42B6B208C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
Manifest number:          1BE0
Signing time:             Thu 23 Jul 2026 16:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:48 +0000
Files and hashes:         1: 75dR-cehxGPRjcfL78Gkb98ifxM.roa (hash: bnepiSdPwXX7m3LncvOOLQdp+VDPBt7lfnKaKeAzVyQ=)
                          2: CE-2n6Rp4Jh1U5zxhHkMvwHHJqM.roa (hash: 7GPRGqcakZo/OWJGP1jdEiP5gP5xVdkd1afOqHkdK4o=)
                          3: Qcy7H8pptHALc_HRlSPBrAjHQFk.roa (hash: c34mSfwg8wGcF0HxnO7HpnD3dUE7IsUJP/VVpFraSK8=)
                          4: UsyvIMzbpwCQaqi98UeXxjdxQJg.roa (hash: sJkdbS6hTBzgBfeTzou6A0lF/eVe4aXSvavthlsCze4=)
                          5: ZccDiUeWmi3OkVpCGa9ybRfzWUI.roa (hash: TgK/ENxpghgQEYHSAvUMPKICJH33ojk2PofhnHEenN4=)
                          6: a6Erf_tnT8pMndq3WnrW7H4B990.roa (hash: 9x4c63CxJ5UoigQePJxkpntm40rkErQOAY2jQ4vUfMc=)
                          7: bsp6BDSIWkrxR6u3xicw9RBKbtM.roa (hash: KBNbBNVVMKDz24iMEiDHeH6Ud37u/sKie2hM0HuZtdo=)
                          8: gCJ11xRpXYuuTIBFGGCZMoDz4zU.roa (hash: 2ejthbbSiGWzvnDRD4RyBPTLsVVX1AibHnvI5hPXIK0=)
                          9: knLrELnamRbYKI_hmZ4VPtqQHec.roa (hash: KpZhnOp+uvDR1vqjA12HnP6hCAQUJOuMRCA2L33u3s8=)
                          10: qFHjepGd1W1NeOB2M_HnT_9NnkI.roa (hash: qeCuA+kLoBoYh5DPSa7sfbtMwdjrN2PNoIXoYyFRFww=)
                          11: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: Ic+1RFxPlRJMf/w4RASunun9S21q91zu3tFJqJ3479c=)
                          12: u7w1cEYTaI2DzzWQmZyLzaqM5sY.roa (hash: wFc0fj1o5uFkbtmZ4aVopMpmQGltmvAuiMNJULyr7/Q=)
                          13: vYPgqeIU38WqdybFik9dzyq7KFw.roa (hash: tGivSF1hf+kOfzT9jGw45oTIw5fwWMFaayLaKlyNkIQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:41:fe:91:73:78:80:98:44:41:e4:2b:6b:20:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e
        Validity
            Not Before: Jul 23 16:00:48 2026 GMT
            Not After : Jul 24 16:00:48 2026 GMT
        Subject: CN=2a358dd6951f22dc8244a04bdf31d8087401563f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:67:be:7f:8f:17:ba:28:13:b0:01:8c:0c:b7:
                    62:ab:a7:15:bf:fe:34:9c:ea:64:a7:ab:35:52:b1:
                    47:e5:ca:5f:bd:6c:2a:3e:98:d7:57:11:fa:f0:d1:
                    27:2c:d6:8a:0a:63:d5:87:dd:9b:7d:21:d1:19:50:
                    dd:10:99:b2:e9:cf:b0:de:61:99:3a:fe:c3:30:de:
                    03:f7:2d:64:3b:2d:70:a6:bc:37:e7:73:ec:05:25:
                    46:a9:67:56:61:d9:6d:3d:24:10:e9:82:bd:14:c3:
                    1d:3d:99:6a:4a:fb:0f:54:b7:7f:7d:46:38:aa:6e:
                    d5:8d:9d:63:bf:de:b8:4d:92:6d:14:2c:6c:d4:31:
                    06:2d:b0:96:f0:a4:7f:30:83:df:cc:28:65:88:ef:
                    82:9c:3e:81:5c:98:1d:2a:87:f7:84:1a:e9:34:a7:
                    78:e5:72:15:2a:f0:17:75:03:65:e9:33:34:d4:a5:
                    42:da:27:07:49:ef:f9:64:b0:a3:67:6c:d7:1a:ae:
                    17:96:95:ec:70:45:b1:8a:70:90:0c:22:ab:c8:a3:
                    f2:92:ef:7f:f9:41:49:24:d8:4c:ea:7f:79:28:87:
                    d2:93:42:6f:a2:8f:47:9c:e9:62:b7:cb:72:a3:da:
                    ba:39:9d:e3:12:18:64:48:a7:59:54:31:4e:1e:fe:
                    41:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:35:8D:D6:95:1F:22:DC:82:44:A0:4B:DF:31:D8:08:74:01:56:3F
            X509v3 Authority Key Identifier:
                keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:ae:26:07:bb:7e:e6:18:e8:7f:3f:b1:09:37:38:89:38:32:
         20:2a:6c:4b:57:2f:16:cb:6b:03:a4:9d:6d:85:a7:77:6f:6d:
         51:96:36:a2:a0:83:c1:76:5a:88:4b:71:c2:2d:38:c1:d3:a6:
         7c:ff:aa:27:16:34:88:74:66:68:ce:0a:af:aa:f5:a5:78:d4:
         29:04:fb:0d:27:60:b3:a3:d0:ba:4a:98:6c:5e:0f:8c:a2:3d:
         c4:2b:0d:1c:81:71:86:b3:a8:c9:50:8b:64:36:06:6f:8d:c9:
         a9:7c:46:3a:df:f2:2f:6e:6a:e4:69:15:17:b6:57:90:4c:58:
         6b:79:23:20:df:53:b4:eb:5a:34:a4:ef:46:b0:74:aa:1a:82:
         f3:3e:36:e3:4d:8a:3d:8a:a0:38:65:82:91:2f:9e:fe:79:d1:
         a0:ea:44:a4:5f:01:27:b6:6b:e0:7c:8b:cd:93:3d:28:34:c8:
         41:86:33:ae:5f:7e:3d:74:48:e7:44:37:0f:0b:70:e1:e8:d0:
         23:3b:61:0e:ac:72:40:5a:3c:db:db:07:6e:4a:bf:1e:91:c0:
         fb:53:68:0f:cb:a6:fb:1a:0d:7f:39:7a:77:35:d7:18:fc:f9:
         37:66:70:6b:95:3a:3e:10:40:b1:91:e2:42:80:0f:89:f1:b8:
         ce:22:64:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:45 2026 by rpki-client