Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
File:                     aNVC9HJ2FI-se4mU780q8Q56SEo.mft (raw, json)
Hash identifier:          fhNEPBlnpBFiDOJZM6xEAgvqi87r97Hl9NAavAAhSUw=
Subject key identifier:   C1:36:F2:4F:AA:AE:68:E9:D8:57:8E:EA:BA:56:BD:B8:46:8B:60:62
Authority key identifier: 68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A
Certificate issuer:       /CN=68d542f47276148fac7b8994efcd2af10e7a484a
Certificate serial:       019F95496C6DE437E165BEA598EA8D9EC68C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
Manifest number:          42
Signing time:             Fri 24 Jul 2026 18:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 18:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 18:00:44 +0000
Files and hashes:         1: HSSRUKBEGAwzctbuSfK5pqFW7og.roa (hash: JzHF9cnYKiNULXtoW5fjwRQd1kJW6OGN1ZbOkNwiJFU=)
                          2: aNVC9HJ2FI-se4mU780q8Q56SEo.crl (hash: meCHNDcRcqiIQgt0qYHMUaI6H/M5Ksy+IxAdhgCE0P8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:49:6c:6d:e4:37:e1:65:be:a5:98:ea:8d:9e:c6:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d542f47276148fac7b8994efcd2af10e7a484a
        Validity
            Not Before: Jul 24 18:00:44 2026 GMT
            Not After : Jul 25 18:00:44 2026 GMT
        Subject: CN=c136f24faaae68e9d8578eeaba56bdb8468b6062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5e:b0:de:56:61:9c:6e:ae:84:9e:5d:91:d7:
                    1a:10:a7:8a:83:61:84:8f:33:36:cc:4b:91:f0:95:
                    10:94:ef:a4:13:fa:c6:b2:b4:96:77:48:89:ec:26:
                    89:f3:ee:f6:01:e7:b9:f1:69:cf:e8:39:c6:52:30:
                    4c:7b:a2:79:86:ae:fa:8d:7e:2d:25:09:11:49:db:
                    9f:9e:b9:72:29:41:31:07:b8:da:01:31:9c:31:2e:
                    79:da:80:ce:fe:ac:d0:5d:bc:ea:80:60:8e:a0:a2:
                    d7:e1:aa:47:aa:d0:ed:d9:f1:85:b7:f8:8a:de:bc:
                    eb:90:1c:24:28:39:77:ac:66:7a:07:21:05:44:07:
                    80:2c:99:d4:ba:a0:77:93:76:48:cb:b3:ad:15:d9:
                    83:ea:6c:90:22:d3:7b:ce:e9:83:f1:13:d5:71:d1:
                    61:7e:6c:c7:10:b7:ea:49:14:0e:13:24:99:ce:dc:
                    83:8c:ad:f9:b6:f8:43:87:e0:3b:17:c9:c6:c8:e9:
                    05:ea:24:6b:a0:ec:56:20:b0:e4:9b:6e:06:cf:94:
                    ba:4c:6b:18:18:c7:85:1c:8b:01:41:0d:c7:ea:5e:
                    f0:c0:dc:ff:cd:52:e2:85:59:38:66:18:9e:35:8e:
                    83:01:f1:c0:85:58:d8:42:16:55:18:0e:f8:9e:45:
                    d5:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:36:F2:4F:AA:AE:68:E9:D8:57:8E:EA:BA:56:BD:B8:46:8B:60:62
            X509v3 Authority Key Identifier:
                keyid:68:D5:42:F4:72:76:14:8F:AC:7B:89:94:EF:CD:2A:F1:0E:7A:48:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNVC9HJ2FI-se4mU780q8Q56SEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/e37d1d-d4fb-496c-af49-3420684c7e41/1/aNVC9HJ2FI-se4mU780q8Q56SEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:5d:97:39:9d:37:5d:a8:ec:f2:08:3e:33:86:e5:05:75:d6:
         19:90:8e:5c:a6:63:3e:05:8c:3f:bf:59:45:ce:87:49:96:8a:
         af:06:a5:36:da:4c:8f:f7:aa:cc:65:f8:41:d4:c9:38:e7:b5:
         d7:a5:4d:b2:f1:a3:be:13:55:15:e4:c1:96:db:2a:ce:26:dd:
         c5:8c:7d:3f:69:d7:ca:05:40:53:94:5e:ec:49:f0:f4:47:0e:
         18:c5:83:b5:ec:3e:4c:fd:e0:b8:82:7b:81:6a:ce:08:64:f0:
         e2:cb:c0:b1:29:00:32:65:15:e0:17:50:79:84:d4:ca:ee:9a:
         17:d3:64:e2:7e:a2:f9:d9:77:e5:bf:ab:86:52:9d:8a:45:91:
         aa:37:ee:b8:83:af:bd:19:0f:eb:85:32:d8:e7:14:b0:5c:26:
         8b:7b:b9:e3:30:d9:e0:a3:84:e1:8c:91:21:e0:6f:8c:3e:14:
         7e:d2:43:86:ee:eb:29:0b:87:40:dd:06:36:29:aa:89:8f:39:
         c9:e9:5f:8a:aa:8c:68:2b:91:18:d2:be:50:79:04:5f:23:44:
         c6:e1:48:50:e1:82:a4:22:21:c9:a3:87:b0:0f:77:e1:77:e6:
         f3:bb:17:38:ab:65:f8:95:d4:c9:21:23:32:9b:4d:36:0d:ef:
         af:0e:b0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:09 2026 by rpki-client