Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File:                     rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier:          mks3TuVEUC3RIJDGyBq/xxqtnolQdCvUkk/zKHTwCKs=
Subject key identifier:   0A:35:6C:A3:AE:D1:B0:CC:F0:62:C4:C2:E2:D7:9E:C0:3A:FD:9B:A0
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer:       /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial:       019F91DAE902DFB28F77C415D896B73640AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number:          0B12
Signing time:             Fri 24 Jul 2026 02:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:10 +0000
Files and hashes:         1: 0r_UE69prseODZzygBvCxia-3X0.roa (hash: gkr4fLf/h/n+t25YUpdj0dN1J2aUCJ0sU9K4sKPOSZA=)
                          2: 1-0EnCQalliPsgsGf-YDpvuy83p8.roa (hash: vws009aZ/tbgou4EVRv/DzWL1VNSHfQsljchCi2mVcU=)
                          3: M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa (hash: GSKHfVVOdL2e+McXNKGIgDnG7vQB68vSPuon+3b3vBw=)
                          4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: M7dgtZwLRSQKQ7wL2qojghG8sesfGxo2ZBNfaZqdBOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:e9:02:df:b2:8f:77:c4:15:d8:96:b7:36:40:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
        Validity
            Not Before: Jul 24 02:01:10 2026 GMT
            Not After : Jul 25 02:01:10 2026 GMT
        Subject: CN=0a356ca3aed1b0ccf062c4c2e2d79ec03afd9ba0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:42:04:de:5d:73:f1:95:f8:89:82:c4:75:9f:
                    e9:84:d9:d9:5f:bf:ed:46:84:b6:95:c0:c5:63:b6:
                    70:0b:0d:d9:4d:76:88:8f:11:73:c8:33:e2:4a:d8:
                    6b:c1:9d:18:95:56:18:44:c9:cc:3a:3c:7d:30:51:
                    f2:a4:59:6d:3e:2f:73:9f:48:f5:ac:9d:a6:16:8c:
                    30:82:f8:84:04:c8:11:45:53:37:ec:c3:fb:06:77:
                    b2:60:1e:be:0c:dd:c9:a0:78:07:62:7c:e6:cf:cc:
                    0a:eb:b4:fc:c8:1e:62:87:ca:a3:d1:2f:25:13:b8:
                    f6:cc:f1:b9:bd:36:b2:48:71:1f:e7:a4:1b:13:0a:
                    8f:92:02:e7:b0:64:c1:d3:c1:4a:10:6d:36:fe:5e:
                    20:c8:06:73:fd:0b:1f:74:d5:28:84:a5:4a:9e:37:
                    84:e1:18:fe:53:42:5b:c6:7e:97:20:61:e1:b0:68:
                    67:0e:24:2f:7b:c1:9f:6d:75:79:f8:e9:ee:6b:2c:
                    6b:38:0c:7a:fa:8a:fd:bb:b4:41:99:3f:86:44:42:
                    b6:0a:7c:ad:65:6d:fb:91:3a:83:3c:6e:c8:2d:ba:
                    92:8a:1e:eb:a7:a2:41:4a:e2:30:38:0b:57:63:76:
                    20:de:29:ac:5d:6f:14:97:c7:37:15:9b:f2:79:df:
                    99:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:35:6C:A3:AE:D1:B0:CC:F0:62:C4:C2:E2:D7:9E:C0:3A:FD:9B:A0
            X509v3 Authority Key Identifier:
                keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:46:d5:52:1d:6e:10:10:8f:29:0f:ec:f4:16:b6:73:77:cc:
         e1:16:b1:af:c1:5a:5e:f2:f4:16:c5:b6:e5:0e:f0:7e:48:66:
         87:9c:4e:8b:ed:26:eb:be:80:22:7c:bc:58:31:43:5e:c7:db:
         1f:ca:27:91:39:b8:d8:33:18:c1:6c:df:98:ed:64:ab:5c:a0:
         59:6d:67:51:e7:12:2d:a5:fb:34:44:a4:f4:5a:80:d3:1e:8e:
         f2:2d:68:73:7a:c9:85:00:19:9a:8c:58:2e:2b:ef:89:97:3e:
         77:81:88:42:a5:b2:21:6e:aa:ce:65:84:9b:b1:69:66:a0:af:
         bd:96:38:b6:33:1f:ae:18:92:aa:f5:d5:53:11:48:63:9e:17:
         0c:b6:f5:95:5a:40:49:c5:2e:45:21:34:6d:02:f4:a3:0c:c7:
         dd:9f:93:35:b0:58:c1:c2:30:52:bc:bf:bb:37:e9:09:bb:e2:
         2e:9d:29:3d:aa:2f:6c:50:1b:e4:54:c1:9f:1b:82:27:5b:ee:
         4b:0f:30:af:38:36:b3:61:38:34:75:a6:09:81:14:78:07:8d:
         34:be:c2:1c:95:8d:85:64:c4:c1:5f:21:3e:c9:72:50:9d:ff:
         d1:7d:fd:22:c0:13:68:1b:81:50:de:54:46:fc:66:b1:fc:0a:
         9d:f7:cc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:01 2026 by rpki-client