Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
File:                     p_0_iTNdz4KGZrKPrYrpk71EiHg.mft (raw, json)
Hash identifier:          +N2JyRUlz5PMgBWpgNharnHh6dc3MnsFfT+POWjJbsE=
Subject key identifier:   75:55:10:5C:25:25:F3:74:AB:52:C9:0D:BA:14:CE:C9:26:1D:73:02
Authority key identifier: A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78
Certificate issuer:       /CN=a7fd3f89335dcf828666b28fad8ae993bd448878
Certificate serial:       019F91A45938D2FE0BC18A7FCF3882FDA970
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
Manifest number:          1153
Signing time:             Fri 24 Jul 2026 01:01:34 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:34 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:34 +0000
Files and hashes:         1: N34-g76KUhTdWwWSLHfwbTaSsBk.roa (hash: +8Y68T7SxCWrExC5aY8HbPiArRVdSNLWKLaScCdYK+4=)
                          2: Qth5F4Jxy_7Urd_QUYNqQ6dh3BE.roa (hash: 7J/t016OYUhUIcd/w4kqId0UMUV/HMGOup9T1dY8o6k=)
                          3: VMk_-ZVMzNsk1GgbJTfI9LE0DME.roa (hash: UfrV1/CMx2zPrF2PH/5Pf7VA8YMgyux3npUJflT4mLo=)
                          4: WYINcTR5G8eWIm2nJo9-FZB9A-c.roa (hash: xbC6ZKVedTs8dgZW52hJX5QjfYmjqhQcuGp6AKEKmZI=)
                          5: XAZ6WKQwSbWuMdg-slN8CRUbp5I.roa (hash: B/BbMvrnmz3NQFSpm/6UYMAwSqXPT+vl+n1zXtv+BHo=)
                          6: a9JkWci0F3TTd0p2sBEzmiEjdq0.roa (hash: 5j0Wq9PZGQQ7JbTj7Kgmx1x+26TKEMnhbQ7aJjaYgsg=)
                          7: hCn3bIQg5VsX6NCOxM1ZQie7ZJ0.roa (hash: D+/5MAyrqx5oCLSLt+ymEIb8F3rOABO1+8Ywi8kb7lY=)
                          8: p_0_iTNdz4KGZrKPrYrpk71EiHg.crl (hash: n4g9fIIxYAYqrirs0Lg5KNEYhe6vBhoCl+ehFzKv2Fo=)
                          9: quvibglo6Ez0p7GLGOPHRy9oRo0.roa (hash: PHUCyCkb1CzH3KiJNE2akCPX54R84dlZX7do54X1Jww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:59:38:d2:fe:0b:c1:8a:7f:cf:38:82:fd:a9:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7fd3f89335dcf828666b28fad8ae993bd448878
        Validity
            Not Before: Jul 24 01:01:34 2026 GMT
            Not After : Jul 25 01:01:34 2026 GMT
        Subject: CN=7555105c2525f374ab52c90dba14cec9261d7302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:15:00:db:5c:c8:56:04:c2:25:ae:c3:72:
                    0e:56:f7:1b:a3:5a:48:30:2c:86:c2:3c:87:6a:7f:
                    cd:4f:10:21:d3:74:bb:3a:a9:64:97:20:d0:64:d9:
                    6b:e4:f1:54:7e:9d:86:9c:31:3e:f3:7e:39:5d:9b:
                    58:ae:5e:a1:3b:92:4e:8a:4c:d6:14:43:6c:ca:e5:
                    56:ad:17:3e:ff:db:03:f8:93:a4:a9:ba:77:62:a5:
                    55:88:14:19:74:d3:a9:32:10:36:c0:a2:99:c4:88:
                    87:ba:b9:55:00:56:72:62:91:3c:81:e2:00:0a:18:
                    ec:d2:de:39:e2:b5:8f:b9:4b:c5:81:ff:02:6b:17:
                    33:f7:18:55:b2:28:98:c6:79:73:20:19:b9:03:75:
                    af:d6:85:05:df:6b:e7:ac:51:a8:3a:69:9e:35:13:
                    49:28:47:5d:e5:16:41:28:08:f2:97:dc:de:6c:7c:
                    71:d1:6c:4b:11:72:24:6f:6f:a3:9c:64:13:28:4b:
                    5d:89:b9:5d:43:ff:3f:34:bf:78:13:57:73:cc:28:
                    bd:f7:d5:62:0e:9a:63:ae:10:07:98:90:13:dd:50:
                    8e:ee:a9:7a:c0:bc:dc:cc:af:27:f4:c2:54:b7:53:
                    80:6c:47:4c:68:2c:1b:76:2a:9a:d6:0e:db:fa:c2:
                    00:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:55:10:5C:25:25:F3:74:AB:52:C9:0D:BA:14:CE:C9:26:1D:73:02
            X509v3 Authority Key Identifier:
                keyid:A7:FD:3F:89:33:5D:CF:82:86:66:B2:8F:AD:8A:E9:93:BD:44:88:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_0_iTNdz4KGZrKPrYrpk71EiHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/388fd8-c81f-4e71-af52-c0b1ad435b95/1/p_0_iTNdz4KGZrKPrYrpk71EiHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:39:ca:13:08:0b:08:f3:3e:bf:86:5c:98:32:f2:23:82:81:
         32:c5:7e:41:3e:3e:86:2d:8a:8d:d7:ca:99:f5:2d:53:10:f0:
         dc:b9:01:50:eb:58:56:1a:1c:4a:a8:94:d4:db:1e:ec:31:e0:
         e8:4c:63:f6:d7:98:27:5f:96:41:4a:bb:d6:a4:c7:40:82:d5:
         8e:d8:de:49:b9:e1:62:50:34:49:29:7c:8a:4e:28:e1:0d:d7:
         bf:46:96:0b:15:59:06:b6:0e:91:50:b5:da:f6:9d:9b:47:5c:
         14:b0:26:c4:a3:88:cf:4c:be:d4:50:55:85:d3:e7:ac:f1:0b:
         52:a1:0f:08:a6:c7:96:99:b7:07:04:74:4a:72:ee:fe:dd:e1:
         9b:1e:4c:88:5d:0a:3d:bb:f2:dd:1f:57:ca:d4:8a:17:da:a9:
         73:db:5e:e9:9b:0c:57:06:c0:58:d8:ce:5d:75:b0:5c:68:c7:
         a6:2b:67:b0:f6:c1:a9:1a:dd:b6:73:76:99:15:12:09:93:b4:
         c4:13:c5:dd:a2:00:a1:97:98:7a:13:50:41:5f:bf:b3:4f:d9:
         95:79:b1:75:b8:df:dd:ed:5d:eb:be:b9:da:f3:b7:02:91:ab:
         0d:1b:50:db:ef:06:c5:5c:9e:64:95:52:8c:3d:aa:df:55:c4:
         3b:e6:4e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:35:08 2026 by rpki-client