Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
File:                     coB1pPvaq0LFuhkzxwL7anhBAio.mft (raw, json)
Hash identifier:          VjcoK/XWs0ntDx/IBF9yzz0LJYrfa1tA+D79czuztKo=
Subject key identifier:   04:75:B9:74:7E:88:DB:5D:11:6F:80:9C:8F:16:DF:57:FE:4A:41:95
Authority key identifier: 72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A
Certificate issuer:       /CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
Certificate serial:       019F92487C294AA2F40AD0F5811CCA730F1B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
Manifest number:          0DD5
Signing time:             Fri 24 Jul 2026 04:00:51 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:51 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:51 +0000
Files and hashes:         1: ZtxFGpkGLfCvEDe7e_u0LHXKUjk.roa (hash: s0+YXn6JExjbv7EOFAv3PA9qoMA8evHuktHkrwfwuYE=)
                          2: coB1pPvaq0LFuhkzxwL7anhBAio.crl (hash: 1OnCTywWgS3xZ/lH2eUFF9ErVJZlqXPko45B4c+gPAY=)
                          3: iRt9261buTm7shrgFKkm6kWLTGc.roa (hash: uNEt4c9Cjn1NASORr/E3c5O819CRsDanUsNnI47C9JY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:7c:29:4a:a2:f4:0a:d0:f5:81:1c:ca:73:0f:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728075a4fbdaab42c5ba1933c702fb6a7841022a
        Validity
            Not Before: Jul 24 04:00:51 2026 GMT
            Not After : Jul 25 04:00:51 2026 GMT
        Subject: CN=0475b9747e88db5d116f809c8f16df57fe4a4195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f8:aa:b2:c3:3f:df:11:57:dc:5d:92:91:46:
                    d5:a0:af:16:1a:59:46:1d:86:2c:0e:ac:19:54:ab:
                    88:f9:df:17:7c:61:e5:35:2e:a4:ec:a6:b4:76:6e:
                    da:3d:09:e1:dd:3e:33:44:68:b1:55:32:96:37:f6:
                    33:80:2d:e2:c5:a3:72:a2:bb:df:3f:ab:66:e3:a2:
                    88:2f:35:38:c9:cb:5f:f6:2d:7d:6d:81:b6:2b:86:
                    42:c7:10:01:36:59:db:0f:cb:a3:1f:62:b6:25:bd:
                    d6:44:da:5e:f4:d4:d9:8f:93:d2:58:3a:bf:a3:3e:
                    4f:cf:94:94:b6:f8:32:13:72:e9:71:1d:6b:35:d1:
                    cf:00:99:91:1a:bc:a0:aa:5f:d5:48:3f:51:52:47:
                    7a:c8:40:0e:7d:bb:f1:60:37:de:98:c0:7a:3e:68:
                    70:5d:12:0a:cb:a9:e0:6d:d6:0f:02:84:c1:d6:23:
                    6c:82:39:2c:59:d5:0d:43:1e:75:cb:5e:57:f7:4d:
                    e5:01:ee:a6:f1:42:01:b3:a9:b8:6a:5a:cd:c6:33:
                    80:d3:33:6f:e4:76:cc:91:0e:e5:fd:3c:6b:e0:82:
                    07:c6:42:00:26:3f:44:81:e1:22:76:0b:67:c1:46:
                    2f:a4:0f:4c:48:45:cd:ce:d6:38:94:9f:1e:81:5b:
                    8f:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:75:B9:74:7E:88:DB:5D:11:6F:80:9C:8F:16:DF:57:FE:4A:41:95
            X509v3 Authority Key Identifier:
                keyid:72:80:75:A4:FB:DA:AB:42:C5:BA:19:33:C7:02:FB:6A:78:41:02:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/coB1pPvaq0LFuhkzxwL7anhBAio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b75091-3aa4-4032-a394-ecd28a25feef/1/coB1pPvaq0LFuhkzxwL7anhBAio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:23:04:1f:19:a3:2d:c4:9d:a8:3f:94:9d:16:b5:85:a8:0f:
         cd:42:a9:13:e8:3e:49:f0:b9:3a:27:21:98:cb:9c:47:cf:f1:
         75:08:8c:ed:e4:28:8a:6c:90:f9:51:6e:cc:7b:0e:b6:f3:5c:
         df:58:1a:c1:6d:20:6b:d8:37:48:77:59:1a:e3:58:37:b2:cc:
         2b:6e:9f:89:61:33:08:6c:de:d2:c7:b0:8e:62:68:1d:06:6f:
         ee:27:b8:5e:15:0b:dd:39:4a:ce:8b:dc:4f:04:e9:2c:d3:62:
         9f:62:fb:47:41:12:95:86:4d:cb:6f:76:fb:69:a8:bb:40:f1:
         75:f1:58:60:78:48:b0:96:c4:bb:85:e5:0d:ba:22:6c:0d:fd:
         75:b9:da:ab:97:23:21:49:0e:b0:92:77:b3:a9:33:6c:5e:7d:
         1e:ac:c5:bc:ca:01:27:65:f9:60:42:28:6e:47:85:0f:06:cb:
         39:26:7c:82:e8:96:19:f3:2c:cd:aa:d3:15:32:c3:94:b1:a0:
         da:9d:f4:38:51:0d:2c:0a:47:eb:7c:b0:fb:b3:92:55:95:52:
         1f:d3:1f:bc:b7:f3:4d:d2:4c:9c:64:28:52:44:27:87:98:38:
         bf:9a:fa:66:a0:32:23:53:a2:1b:5a:9f:64:bf:e1:ff:5c:59:
         72:bb:86:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:59 2026 by rpki-client