Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
File:                     7jE2ffbRhhBxySuucmUjMm9Fuio.mft (raw, json)
Hash identifier:          CMKARvydtXscnSBZgJiNBVINLTVQUk0MWwUm6a5tfTE=
Subject key identifier:   7C:91:A6:89:6A:60:E8:DC:BC:F1:0E:F8:B7:0E:E7:FC:B4:62:14:2E
Authority key identifier: EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A
Certificate issuer:       /CN=ee31367df6d1861071c92bae726523326f45ba2a
Certificate serial:       019F9135B31CF69565B481772FB397A48489
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
Manifest number:          19DC
Signing time:             Thu 23 Jul 2026 23:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:43 +0000
Files and hashes:         1: 03adZJbb-O1p_CXcQ_4M0jgNEFw.roa (hash: ew9gGSBHBbQPEdarHkUHaR6ktGIwejsj7yNx1KPoThQ=)
                          2: 1-AaYw2BfaY3XhYhRX7k0ikSXO9w.roa (hash: WyNldQk+XZoMO0b/C5jIYmrjIYQhy0dv0+KOkKWcQSE=)
                          3: 1P4VHJbsu8-KA_CDbuA3mLdiyQo.roa (hash: QETOSgaKr5YFSXBkowwoHjS2zVlXL1HHWJzh0UPdErQ=)
                          4: 7jE2ffbRhhBxySuucmUjMm9Fuio.crl (hash: T/YZbLFPlJX4CTW2aewXHSbywBw7MzSnDoigt/oi6+k=)
                          5: Fx8cnnhYnA6BH8cJUcV9Vz-n8OM.roa (hash: nBn8KMz1/qrlmEp5tnjRaNg0XQIu3L/8mlSSo9e/i1U=)
                          6: HsnhtW3Vo1ScMXDm_04rDrcrO8A.roa (hash: 5+GIeXFw3kg0H6nKxy1DPIUv8/Ly7H/qd2V/EdogjOk=)
                          7: JHDYQiALesWvByATRJ3bFGKf440.roa (hash: 4qi7uVDpfuqHxI2PwRXSylbhTlTDmB3nFH/RQRca9I4=)
                          8: M-xhOdJhOt1IVpAo6jVDD6VitCU.roa (hash: waOg7nDr7fSZGGvzIuGjBg6JCLXByvSxzjfTgEkG9Iw=)
                          9: RMbFoCYqNcmYffu8B7XKQZOpe9g.roa (hash: Bc8GrrG0ePgUPfQVi+zdsUsnCNOP4l8CwIx91Qrbgs8=)
                          10: RkJgzEGbgGQVpYMhyuLt_ciEWs0.roa (hash: s24XvC1lX1fQ9pY/tvq7aXzmmQIz7/1F7PGbhhoCpbM=)
                          11: XDRix6QDR_Gjs6-Cgo-LajMwjLo.roa (hash: D5tYwaAg7BrfpT0g1cIaNhjKGBys4m2pxD23SmcuiB0=)
                          12: YUZAH4o6lSlfa8V06bR-tRKZeJY.roa (hash: RWEnsTCPJnS0wvgpBfvSOdsOCDY+GRhBVGGh8MqvS3c=)
                          13: bKHn0qb-Jdo8C-QdUH0EoddC6R0.roa (hash: t7W3AEy6SZzLhzfSNb31m9y8L46P7EJQYuCD/DSTk0I=)
                          14: eidiHBPgQKzRSZT9OwGu9tKmDIg.roa (hash: wDu3wVyoIZQVKXQBVdzTm8+ss6XGOx6VqYvXUN2hobg=)
                          15: hO16bUk7sgMxRq4iY5R-8zAg_pw.roa (hash: muh9Cwq/x+krpQXeGbq5yotjMWT1VH8PKPWrvuCsuXA=)
                          16: k6jLYVH6C0z0KMYaezVQiNE4EPU.roa (hash: 7jskiw03SWhNj59VRgx4kkxZFbjnSw3URxMXrNwyUt0=)
                          17: x_JLnp-gge30umPx_RvTQbE6gPs.roa (hash: Ia9WGZIGIJ1OoZ2Ke+mCm85FUNL3XOpDFSZD7R/PX0c=)
                          18: ygT4_ge1ohdgPGNfdC3uMhbevTo.roa (hash: QzMQwc/7YDt82Fn8x4yXez6Z6w0QENNYIpCBlAJaBv8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:b3:1c:f6:95:65:b4:81:77:2f:b3:97:a4:84:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee31367df6d1861071c92bae726523326f45ba2a
        Validity
            Not Before: Jul 23 23:00:43 2026 GMT
            Not After : Jul 24 23:00:43 2026 GMT
        Subject: CN=7c91a6896a60e8dcbcf10ef8b70ee7fcb462142e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c2:2c:4a:a7:44:76:e5:81:f3:2f:1b:49:a7:
                    c0:09:7d:28:ec:3d:5a:e2:d8:80:23:bb:0c:48:1c:
                    02:ca:18:c4:10:f3:e4:22:9d:9f:8c:ea:c2:bd:64:
                    af:15:f4:5c:f9:e8:9b:d0:2a:e2:bb:c7:b7:33:84:
                    aa:12:8f:38:9a:e7:42:71:21:ae:20:08:b3:6f:89:
                    a3:c5:d3:56:fb:cb:45:02:3e:aa:31:8a:8a:ee:05:
                    09:ec:83:5a:fd:f2:bc:d3:ed:8c:bd:3f:0d:75:14:
                    f9:1f:bf:3e:85:c2:26:7d:66:16:be:0e:32:a7:0a:
                    b8:47:34:00:2b:5f:a4:53:d0:0b:fb:73:a1:87:85:
                    83:7b:69:df:2d:3d:59:6e:ec:a8:bc:af:9a:f1:aa:
                    8b:c4:74:03:c8:74:95:4b:fc:a2:ec:4b:10:19:39:
                    5d:6f:9f:e7:4e:34:4e:af:09:ad:0f:24:1a:24:a2:
                    f1:dd:5e:71:66:c3:3b:a4:e8:5d:80:ff:7b:9a:65:
                    48:31:55:ae:30:a2:fe:a7:62:d0:6c:bd:4d:96:75:
                    48:96:9b:2c:8d:82:b8:b5:0f:9d:f4:61:06:19:45:
                    1d:8e:a9:4a:7b:1e:e5:ea:c3:03:bf:21:f8:e4:9b:
                    a7:4a:43:c5:ea:f6:d9:92:41:75:8c:81:20:35:c4:
                    6a:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:91:A6:89:6A:60:E8:DC:BC:F1:0E:F8:B7:0E:E7:FC:B4:62:14:2E
            X509v3 Authority Key Identifier:
                keyid:EE:31:36:7D:F6:D1:86:10:71:C9:2B:AE:72:65:23:32:6F:45:BA:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jE2ffbRhhBxySuucmUjMm9Fuio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/1bb4dd-e9c4-4d3d-9a3b-1159dbfbed54/1/7jE2ffbRhhBxySuucmUjMm9Fuio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:e8:f3:d8:6f:8b:1d:4e:eb:3a:88:96:b8:ba:cd:98:35:
         79:6b:e4:e8:27:81:0a:40:45:e3:ba:a8:05:0d:9f:bc:3e:40:
         ed:2a:ad:69:45:69:6e:76:d6:26:c9:d1:2f:28:ec:a3:16:04:
         44:fd:f2:5a:37:84:fb:25:18:d2:15:4d:84:a0:2e:ba:8b:35:
         a9:de:f0:b6:62:1e:9f:7e:c5:2b:f9:1f:bf:18:3d:92:83:52:
         b1:88:32:8b:d1:41:32:c3:47:dc:61:5b:c7:1c:97:17:4e:29:
         ba:c1:fe:09:74:4c:ba:b2:79:6d:67:e0:0d:47:97:ac:4d:a3:
         83:84:4e:3a:a2:49:91:19:23:77:f4:9a:04:c5:e9:21:7d:7f:
         28:64:b7:85:40:ef:44:23:c6:20:da:77:47:bb:1c:b2:a2:11:
         7c:93:76:73:46:3e:5a:39:08:24:59:af:40:04:21:1f:12:9f:
         24:9d:60:50:2b:20:79:92:2c:a1:ab:2b:9e:ed:83:38:cf:34:
         a7:b3:4e:33:e5:0c:ad:0b:dd:93:c3:a2:a0:94:8c:97:20:a5:
         87:27:0f:d1:bd:84:bf:0d:74:6e:58:4d:41:de:8f:83:02:57:
         9e:68:8b:ad:b1:bd:95:0e:83:6e:e0:bb:bd:cd:75:f4:63:1c:
         da:c0:3d:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:39:43 2026 by rpki-client