Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
File:                     7Y3fghIIo3DjpbfvjNR5fPxXdII.mft (raw, json)
Hash identifier:          oRBWYIxDrP0i3eU9A5H8LKqGO2E14dLTmiqvv2AEvRI=
Subject key identifier:   29:5E:DC:D5:72:5B:ED:C4:38:E9:75:EE:1C:72:C7:3F:40:43:29:C7
Authority key identifier: ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82
Certificate issuer:       /CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
Certificate serial:       019F90C81F1C55C840A4E24121AE394D5ADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
Manifest number:          1047
Signing time:             Thu 23 Jul 2026 21:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:01 +0000
Files and hashes:         1: 7Y3fghIIo3DjpbfvjNR5fPxXdII.crl (hash: IehdeWxKTuQ234kAwoGOZPqDr82wg+zDRB9QyJx94E8=)
                          2: Z0WVwWptGEGRyg-sh820wNyCLqg.roa (hash: +yXI8Hiac4a98uMpERPin9vZe08d6SLlySsDllVTAlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:1f:1c:55:c8:40:a4:e2:41:21:ae:39:4d:5a:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed8ddf821208a370e3a5b7ef8cd4797cfc577482
        Validity
            Not Before: Jul 23 21:01:01 2026 GMT
            Not After : Jul 24 21:01:01 2026 GMT
        Subject: CN=295edcd5725bedc438e975ee1c72c73f404329c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a3:8e:56:5b:eb:29:e8:d3:17:2a:66:ec:87:
                    10:aa:79:9c:b6:e8:ed:57:64:4f:11:1b:1e:65:58:
                    e6:38:52:3a:51:4a:76:6d:a1:77:11:bf:25:96:06:
                    c4:a8:b2:e3:60:e3:92:06:e2:44:eb:64:3e:d9:74:
                    0b:1f:9d:25:c1:bc:39:b7:da:d5:c6:68:eb:9b:54:
                    ea:d6:bf:aa:ab:9d:7b:5a:b2:82:b4:73:57:7a:23:
                    b9:53:c9:80:48:f1:f9:f7:cb:97:1b:de:6b:63:64:
                    f4:2e:73:71:88:4a:5a:fc:f2:e4:a7:c6:5e:91:a5:
                    cb:eb:3b:46:50:4d:da:4a:7a:67:92:50:e6:2a:f2:
                    77:ff:99:f0:8b:f3:ae:c3:46:b3:58:59:34:69:41:
                    8b:11:5b:d9:92:6d:f8:d8:bc:3a:8e:ca:d3:fe:7f:
                    5d:a4:d4:b1:a4:59:6e:ff:b3:52:53:62:e4:ac:f4:
                    e0:89:28:bc:17:1b:b7:1d:26:23:ac:96:1d:ef:26:
                    97:f5:b3:0e:30:50:66:d5:fa:2f:8f:95:85:e5:aa:
                    f4:20:2d:12:e3:ef:5a:c4:d4:d5:96:d1:b4:17:05:
                    20:cb:34:67:23:bd:4b:98:6d:96:9e:17:6a:3c:3b:
                    d4:b6:8f:01:89:f6:ef:9a:88:3d:bd:61:93:b1:14:
                    22:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:5E:DC:D5:72:5B:ED:C4:38:E9:75:EE:1C:72:C7:3F:40:43:29:C7
            X509v3 Authority Key Identifier:
                keyid:ED:8D:DF:82:12:08:A3:70:E3:A5:B7:EF:8C:D4:79:7C:FC:57:74:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Y3fghIIo3DjpbfvjNR5fPxXdII.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a83184-5fc5-4724-baec-e9d81e3d8b54/1/7Y3fghIIo3DjpbfvjNR5fPxXdII.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:11:13:69:07:bc:29:44:17:2a:0b:9d:d4:d7:61:64:af:ce:
         7f:e6:50:94:28:47:27:cc:34:91:a9:03:57:3b:09:9e:81:b3:
         82:5e:67:cc:24:20:c9:03:3f:41:31:80:1d:dd:38:ef:f2:ef:
         19:8e:30:ef:ee:87:0d:a0:28:9a:68:e2:c7:eb:9b:70:a5:ee:
         3a:98:9a:ef:5f:d2:91:02:a6:57:a7:6b:64:b1:c5:a5:03:fc:
         94:7b:44:ed:7e:74:c1:9f:6c:7a:8c:5a:e4:2b:56:76:ce:37:
         89:a8:c4:41:1e:4d:63:b2:6c:ed:c7:fa:8a:44:0e:ba:37:44:
         36:de:a1:a1:aa:ae:8f:ab:8a:29:ab:a6:7f:8a:44:7a:96:e1:
         7c:17:ce:ef:bd:45:9c:f9:9b:84:f0:34:cf:62:a4:35:4c:84:
         97:5d:81:6d:22:b6:ec:e5:4c:96:75:df:43:2f:4a:c9:fc:d0:
         12:72:77:5b:6f:ed:4b:10:34:48:0e:b8:75:4d:79:f6:53:18:
         3c:23:0f:25:98:1e:7b:01:da:38:c2:0d:7d:57:37:07:da:82:
         dd:3d:60:bf:cb:d4:14:08:8f:0f:e1:d2:7b:60:8b:b4:a0:d2:
         4e:68:0b:c2:4d:72:51:4b:d8:57:b7:e6:06:5d:df:e8:7f:7d:
         60:f2:45:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:57:12 2026 by rpki-client