Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
File:                     s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft (raw, json)
Hash identifier:          v+nfKG1kxycyLhYOMfga8by5vy4qxGU+tDCgIgaAwHo=
Subject key identifier:   5F:4D:EE:2B:3C:37:94:E0:3C:D7:DF:BB:05:9F:F5:68:86:35:C3:9A
Authority key identifier: B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F
Certificate issuer:       /CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
Certificate serial:       019F9391A83A9AD8E6833544853A4387635F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
Manifest number:          19D1
Signing time:             Fri 24 Jul 2026 10:00:24 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:24 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:24 +0000
Files and hashes:         1: 6k_8Ry46ufIMlLNL3Vyss6dmqJg.roa (hash: ckIzjsDp2tzcwJkmRuzZHNnhVct2HecFAgceUTxWQmI=)
                          2: F3O8-dZr8u4d-bBHpUAIaVdBxYs.roa (hash: nGzmqxCVgUOHa3kRFVvwgOvg2hHgbd0FVIdzBnCIcS8=)
                          3: LadvVkKu3wXT617aXlUlsKUiwvs.roa (hash: 5tkpntbZyp0kecx0i9/sz7tiG+x/tBJaYqWhzJ+ue10=)
                          4: bRgCnNYxProDC3XWcoK1RwC3iRo.roa (hash: TdmHYWnUww+1ilHLweinppnHuzhkh+7SLt4lxkgAHBM=)
                          5: gUsfRW5v6N4S4q5wR9juMArT4gY.roa (hash: 75aFyyp5OXyu2pt0nss+h3JtO3zNLiVM+h5iKxCtB54=)
                          6: maMxYhW9A6VAq_vow3Vq5mrJeV8.roa (hash: iGK/wAfndjwmPr7EChSqOCdboy0xOaABeT0HtMm54R8=)
                          7: s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl (hash: NTB3VIiSjvbAIS3fHk3R1ctAwLgi7eey8JGRoPyC7OU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:a8:3a:9a:d8:e6:83:35:44:85:3a:43:87:63:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3b6d9026372cfce8fde823c3ef9c9f790aae14f
        Validity
            Not Before: Jul 24 10:00:24 2026 GMT
            Not After : Jul 25 10:00:24 2026 GMT
        Subject: CN=5f4dee2b3c3794e03cd7dfbb059ff5688635c39a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:e0:7a:63:2f:6c:1d:df:f7:81:70:23:64:0d:
                    7d:32:c4:00:2e:18:da:0b:0d:15:33:72:52:12:20:
                    da:92:9e:c4:8f:32:86:e3:16:f0:c1:11:17:08:f0:
                    ee:42:98:2c:d5:c8:18:68:a9:d8:7b:91:f6:c4:91:
                    e0:d4:d2:45:62:24:97:18:23:47:e7:d6:4b:62:bf:
                    8f:28:be:9b:04:09:e0:68:cf:25:86:c1:a7:a6:25:
                    e5:30:a2:c3:6e:8c:5a:86:cb:fb:61:b0:53:7d:16:
                    01:a3:41:24:31:94:88:db:61:36:f4:b1:77:ff:97:
                    2a:47:66:51:5b:20:c6:dc:21:46:fc:1a:07:27:6d:
                    e0:88:05:26:24:20:6f:6d:ee:ff:fc:6e:e2:18:c0:
                    c5:a2:c3:b4:f1:1f:01:62:f1:a5:a6:f9:49:c3:1d:
                    0e:32:84:d1:14:43:c4:6e:3c:8e:10:8c:5b:04:06:
                    5f:ff:53:1d:1a:8a:08:c6:fb:23:9d:d8:9a:0e:fb:
                    58:f4:e6:40:1c:a2:8a:60:39:83:ec:e6:08:78:77:
                    f2:80:c2:76:d8:74:70:74:97:b6:03:9c:0b:e0:77:
                    f6:d1:4d:fe:23:96:a0:56:9f:2c:81:23:ff:36:88:
                    54:ef:ba:6e:5f:ab:3d:a6:a1:45:e0:b3:bc:34:a5:
                    db:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:4D:EE:2B:3C:37:94:E0:3C:D7:DF:BB:05:9F:F5:68:86:35:C3:9A
            X509v3 Authority Key Identifier:
                keyid:B3:B6:D9:02:63:72:CF:CE:8F:DE:82:3C:3E:F9:C9:F7:90:AA:E1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s7bZAmNyz86P3oI8PvnJ95Cq4U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/831d53-04e0-4573-acf7-d4f12b37a318/1/s7bZAmNyz86P3oI8PvnJ95Cq4U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f2:6f:1a:24:30:8a:fa:a1:eb:ca:3a:84:75:18:d6:e2:f9:
         3d:9d:af:2f:8c:89:a1:11:3f:25:41:c9:e6:ec:4e:7f:d5:e4:
         b3:36:ac:c9:81:14:9f:d0:45:81:9c:b0:5f:0c:b1:52:40:5a:
         58:c3:7c:e7:ac:d9:20:33:af:88:31:84:c8:c1:01:a1:5d:24:
         93:b7:85:85:90:f0:e5:21:25:d7:b0:6f:0e:5e:e7:6c:0e:17:
         ae:80:66:a5:57:53:11:f9:89:a2:ab:0d:a6:cb:c2:fd:7a:16:
         8a:3e:9e:51:78:cf:56:a5:dd:ae:a5:6c:10:77:5d:9a:94:11:
         ce:53:eb:f8:fb:eb:a2:6f:3e:70:d7:80:81:9e:f0:f0:12:0a:
         c5:a3:f6:fb:47:78:23:3f:c9:b0:db:ab:ce:96:d5:4c:72:ea:
         5e:7f:bc:dc:76:cd:47:a6:4a:b0:32:3b:03:15:54:1a:8b:80:
         85:69:54:88:90:5d:15:17:ee:37:fd:9d:44:38:d8:ca:96:52:
         a5:fe:25:e4:f3:05:5c:a2:b1:83:6c:7e:49:c9:11:61:80:5f:
         dd:88:a0:7c:26:b2:f3:d6:5e:0f:95:0e:a5:eb:bb:1c:c2:35:
         5d:d9:3a:ce:f1:87:3e:20:63:c0:13:11:bc:c9:8c:2e:19:24:
         95:da:77:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:22:14 2026 by rpki-client