Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
File:                     pJKfzWHcadzPvgHV_wA1tBrJUmA.mft (raw, json)
Hash identifier:          1HkW0fcSG/F6GqM0UxFBmhoFZHPKOyDqXEDxp249EHY=
Subject key identifier:   D4:79:81:F7:21:4F:21:66:54:3D:AF:57:33:15:31:1D:5F:57:C5:4E
Authority key identifier: A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60
Certificate issuer:       /CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
Certificate serial:       019F93FF9D292C7EF281CA17863A99133DF3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
Manifest number:          12DD
Signing time:             Fri 24 Jul 2026 12:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:30 +0000
Files and hashes:         1: nS0y39FHd_KBicbFUGi66q7vdag.roa (hash: Z3Fr6bAjwL99ER5kh2Zqj12sGL3oFe9ZTzwUUnAJ/DY=)
                          2: pJKfzWHcadzPvgHV_wA1tBrJUmA.crl (hash: EDwtyvqLZJdBj2z2enqOjlzmVDKvoI47C5wKU3Kz2eY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:9d:29:2c:7e:f2:81:ca:17:86:3a:99:13:3d:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4929fcd61dc69dccfbe01d5ff0035b41ac95260
        Validity
            Not Before: Jul 24 12:00:30 2026 GMT
            Not After : Jul 25 12:00:30 2026 GMT
        Subject: CN=d47981f7214f2166543daf573315311d5f57c54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:15:48:b8:bc:a9:b9:fb:1f:83:6d:05:6f:8a:
                    88:02:37:70:fb:a1:16:43:14:1b:2e:11:83:e8:fe:
                    e8:74:00:a2:45:3a:2e:4a:ea:df:22:25:c1:84:41:
                    dd:ce:98:b7:78:d4:a1:b6:fb:e3:41:fe:d7:81:28:
                    6d:65:8a:8d:df:3e:8c:0e:ad:cd:cd:de:8e:35:28:
                    4f:08:46:3a:25:c4:53:84:fc:fe:45:da:92:95:f6:
                    05:ea:e2:56:3e:cf:ef:15:16:c6:68:e1:5a:4e:6a:
                    01:f8:4f:4f:34:84:da:5d:2a:c5:ca:0f:d2:c2:03:
                    66:2f:a4:be:cb:29:3d:fc:dd:7d:eb:21:4a:fe:f1:
                    f7:cc:86:d5:d2:1a:c3:88:38:9e:9c:19:3a:cc:2d:
                    c6:cc:af:38:43:15:c6:b6:f8:32:f6:57:5d:7a:c7:
                    bb:46:da:65:5a:ce:2c:f7:80:c4:56:5b:0d:9f:0f:
                    54:53:e9:e6:48:4b:81:42:f2:52:5b:21:e7:30:c9:
                    14:2f:4a:f9:9c:52:7e:bc:81:48:ed:59:f6:ff:10:
                    76:5d:7f:f7:94:b7:e3:d5:cc:4d:c9:45:6f:80:c7:
                    88:dd:73:d8:01:27:d0:50:54:a9:74:82:b6:28:ee:
                    9b:df:74:36:cb:09:3b:15:6a:c9:fa:c2:3c:a2:1d:
                    bf:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:79:81:F7:21:4F:21:66:54:3D:AF:57:33:15:31:1D:5F:57:C5:4E
            X509v3 Authority Key Identifier:
                keyid:A4:92:9F:CD:61:DC:69:DC:CF:BE:01:D5:FF:00:35:B4:1A:C9:52:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJKfzWHcadzPvgHV_wA1tBrJUmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/5a2117-f583-445d-b72e-eba9c5cb32d0/1/pJKfzWHcadzPvgHV_wA1tBrJUmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:c9:82:98:a5:0a:fb:e1:f9:c5:c1:30:a6:f2:71:5f:2b:9f:
         ad:a1:19:d9:eb:5a:9a:43:63:8f:69:3c:78:4e:44:80:5d:13:
         c8:c0:c7:da:54:cb:cc:8a:a2:b3:6a:00:3b:1e:ab:b3:9a:99:
         55:12:34:9e:7a:b1:7d:44:30:40:db:80:9d:15:1a:17:e1:0c:
         ee:78:66:8c:99:96:78:ed:57:9a:08:c4:fc:08:e8:93:2f:ac:
         54:85:e1:b4:e2:9c:8b:05:73:fb:e1:23:84:c0:45:5a:4d:27:
         10:23:31:65:f2:b6:2d:81:8d:1b:37:9c:4d:19:c9:26:50:0b:
         e2:a4:94:1b:57:e8:2a:e1:c7:bb:5e:79:13:1a:75:60:0a:c4:
         46:6f:dd:9f:8c:d2:c8:9d:76:c9:25:ed:54:e7:6c:0c:ce:8c:
         51:86:dc:b3:8c:59:e1:58:4a:a0:88:82:f9:4e:7f:d7:ef:b0:
         bf:33:8e:75:ac:38:12:58:2e:49:41:ea:da:81:b8:53:fe:10:
         ff:f5:3b:8a:db:21:12:e7:0e:3c:6d:ab:8b:d3:ea:d1:1e:72:
         38:70:d0:1f:42:62:b7:d1:ae:22:c6:bc:58:bb:52:d7:ba:e1:
         03:05:25:5d:9c:ee:90:dd:0e:1b:1c:d0:f2:66:21:3d:db:ff:
         77:10:b2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:03 2026 by rpki-client