Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
File:                     35BBVe46z-P-qLv-6G6XxYyJkfQ.mft (raw, json)
Hash identifier:          nJWWbz+J6sFLG6npTrPgZU71l8W5lldhwlMqvlwxE9U=
Subject key identifier:   8A:42:18:CD:9D:57:E7:62:04:D5:87:4B:ED:56:B8:01:5E:C8:82:7C
Authority key identifier: DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4
Certificate issuer:       /CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
Certificate serial:       019F927FEFD0512A7C0DC31940DC6CDDDF5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
Manifest number:          15ED
Signing time:             Fri 24 Jul 2026 05:01:25 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:25 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:25 +0000
Files and hashes:         1: 1-SU5TbgAHR8MgakYLaYjjUFQf8c.roa (hash: +sShATexn1CpGL3qVUaN2Cdv5TDMeXUkKBe7OdFbvpU=)
                          2: 35BBVe46z-P-qLv-6G6XxYyJkfQ.crl (hash: KT8X60pllXGERnt6DFKpSPcx/H5tzqPufc1aRqWAmtA=)
                          3: z92krxSw-hPFAOTzqyVkWwbmwSQ.roa (hash: UmaQR3RHLDeTPrQrX1Vr4JMThGImksq/AjUcliH2e2A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:ef:d0:51:2a:7c:0d:c3:19:40:dc:6c:dd:df:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df904155ee3acfe3fea8bbfee86e97c58c8991f4
        Validity
            Not Before: Jul 24 05:01:25 2026 GMT
            Not After : Jul 25 05:01:25 2026 GMT
        Subject: CN=8a4218cd9d57e76204d5874bed56b8015ec8827c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ab:e7:b6:e7:a2:73:e4:a0:59:cc:1f:38:4a:
                    0a:94:1d:06:f1:b3:9e:6b:57:63:e4:3d:1c:a8:7e:
                    eb:c6:0a:b8:e8:7f:b2:04:de:ec:75:13:25:05:f9:
                    92:7a:65:53:77:75:18:8b:f2:0e:96:12:69:e5:cc:
                    8d:1c:72:c7:97:08:8d:21:fd:8e:86:38:4d:03:5f:
                    f5:52:ce:cf:a7:88:a4:7f:d7:0e:ad:e0:d2:b7:a8:
                    52:1d:b6:25:47:7e:ee:64:8b:76:41:1a:0b:bf:62:
                    7f:bd:64:27:31:55:74:09:6e:eb:c5:8a:b1:c8:c8:
                    57:92:47:2e:88:40:4f:f5:30:ae:e2:d4:1c:22:b5:
                    41:78:93:e8:68:45:00:31:cd:f1:29:73:14:a9:27:
                    97:46:f7:66:98:91:55:7f:55:5b:58:6f:6b:64:1d:
                    f1:16:f7:7b:d5:70:8a:36:ae:bd:07:94:f6:b7:dc:
                    8d:c6:73:a9:8f:02:c0:ec:7a:9f:bd:b7:22:27:6e:
                    53:1d:62:54:43:c8:31:58:99:e8:90:df:1a:16:7f:
                    3c:8a:9f:5d:55:a6:b7:c5:76:e2:ce:41:e8:5e:37:
                    71:51:72:c7:e4:43:fc:bd:e9:92:7b:13:28:cc:a8:
                    cf:3f:94:65:09:6a:df:9a:0b:55:49:70:7d:85:0e:
                    a7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:42:18:CD:9D:57:E7:62:04:D5:87:4B:ED:56:B8:01:5E:C8:82:7C
            X509v3 Authority Key Identifier:
                keyid:DF:90:41:55:EE:3A:CF:E3:FE:A8:BB:FE:E8:6E:97:C5:8C:89:91:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/35BBVe46z-P-qLv-6G6XxYyJkfQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/442e17-4198-435b-96f4-6467f44b43bf/1/35BBVe46z-P-qLv-6G6XxYyJkfQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:08:f4:56:af:e0:11:67:01:80:cc:f9:ac:1c:82:96:57:bd:
         c1:f9:88:40:5b:7a:d4:a0:7f:e3:93:55:81:04:af:f4:50:de:
         03:a6:cb:19:b9:27:72:07:31:6a:53:89:a9:2b:38:ee:48:fc:
         a2:67:aa:95:65:af:0d:4d:57:53:ab:60:b8:d3:0a:12:a1:7d:
         12:a8:7d:36:fb:27:71:2b:b7:03:a8:5b:ff:ea:46:0d:a0:c8:
         b4:09:8e:f1:ca:3a:d3:e4:dd:7d:6d:44:7e:21:10:df:80:21:
         7c:56:74:17:2e:21:66:76:e8:da:d7:df:9a:20:00:aa:99:9f:
         d3:6e:ca:b3:be:75:9c:f0:87:49:78:d9:fb:4e:11:eb:1f:8f:
         10:52:c0:54:9d:90:58:66:f1:e6:a0:22:21:7b:fb:9b:0a:18:
         67:62:50:d0:73:99:02:4a:d0:ae:1b:f5:da:82:79:a9:0b:08:
         6b:22:8a:c2:5a:17:c8:ee:97:3e:6d:7b:b3:19:96:86:c7:8c:
         8b:30:19:88:e9:0c:15:5e:05:cb:d7:d2:27:27:c9:87:51:8f:
         d7:43:cf:e6:13:e4:17:bd:b8:38:57:10:9d:d9:cb:9a:95:b8:
         92:01:94:5d:62:19:a9:ec:73:f5:72:e6:d8:af:7a:d2:ed:db:
         fd:d4:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:10:00 2026 by rpki-client