Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
File:                     _AUWm-THSVJnJZffED7rG0e7aKM.mft (raw, json)
Hash identifier:          TcvEEUpSC+VvNDJnZatuhnMXJZAIujlCQ3b4vBI5vd8=
Subject key identifier:   67:06:FE:37:60:54:BE:28:79:E9:EB:71:D0:DC:31:9C:FF:64:98:44
Authority key identifier: FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3
Certificate issuer:       /CN=fc05169be4c74952672597df103eeb1b47bb68a3
Certificate serial:       019F8F47298A07993358A0C74AFB112DAE5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
Manifest number:          1944
Signing time:             Thu 23 Jul 2026 14:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:33 +0000
Files and hashes:         1: DN6ibs0Loqd_NOxwUKm9cSPY9FY.roa (hash: ly/1jnGi4XaTvL79PLWpmLP/HTUBejKbIP2HPKBANGI=)
                          2: Zf7DrK8VgTcUBYLpDP6TFzvtYb4.asa (hash: zQXIIEVa+4GIr6adcdZrybN+3Q6Rn0+pi8q/LwSjWvw=)
                          3: _AUWm-THSVJnJZffED7rG0e7aKM.crl (hash: Sblp814eih8ZsPaYefRozadyrILqJkx0dIJuhD70Ar8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:29:8a:07:99:33:58:a0:c7:4a:fb:11:2d:ae:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc05169be4c74952672597df103eeb1b47bb68a3
        Validity
            Not Before: Jul 23 14:00:33 2026 GMT
            Not After : Jul 24 14:00:33 2026 GMT
        Subject: CN=6706fe376054be2879e9eb71d0dc319cff649844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:26:b5:c4:85:13:16:1e:5b:5b:d9:78:a2:a2:
                    da:d9:e3:db:23:99:ed:22:99:de:e9:ab:2f:01:a1:
                    0d:4a:24:73:c7:3e:a8:63:c0:88:f7:15:c9:9a:92:
                    b8:d1:e0:ca:c5:43:16:d7:4d:21:dc:59:dd:66:6f:
                    bc:ba:f4:c9:ac:e1:82:9b:68:b4:24:48:20:4d:c3:
                    b1:e3:f6:da:85:3a:20:4d:6b:cf:14:dc:d2:8a:e2:
                    f4:cd:30:a8:d4:13:32:54:ac:e0:ed:01:ba:af:e4:
                    6b:9b:ba:6a:9c:7d:ab:5a:cb:86:fe:43:a9:6a:d3:
                    bd:03:80:f3:f9:ff:33:45:f3:62:10:42:cd:6f:2b:
                    f2:5e:a6:65:c0:ed:fb:69:42:6f:ea:57:b7:bc:75:
                    39:5d:96:67:48:e6:cf:7d:61:3f:b7:40:24:6b:da:
                    39:cd:77:12:78:29:65:da:94:84:1f:2f:0e:89:f1:
                    5c:42:cd:0f:e3:c6:bc:b4:ce:4b:ed:b6:d5:f9:6b:
                    fc:84:2c:e6:44:b8:5c:4e:dd:85:4e:ea:ac:aa:07:
                    6b:61:05:07:66:ac:62:42:de:70:b0:0f:75:c2:d0:
                    1f:1f:1e:90:12:37:22:6b:78:cb:a9:c8:95:24:bd:
                    b2:9a:b7:8d:fb:d6:fe:af:35:0d:f9:58:68:18:92:
                    3c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:06:FE:37:60:54:BE:28:79:E9:EB:71:D0:DC:31:9C:FF:64:98:44
            X509v3 Authority Key Identifier:
                keyid:FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3b:ee:e2:f0:31:a5:cd:e8:0d:43:da:da:ca:8c:7c:0a:de:
         92:04:3d:41:d7:07:18:56:bf:a8:2f:21:80:d8:81:7c:52:5e:
         1d:12:c9:ce:4c:74:6f:f4:73:66:b0:dc:df:d2:13:be:14:f8:
         02:b4:58:27:91:e5:60:7f:28:52:c5:d5:f3:50:2f:bb:b1:08:
         0f:a1:9b:93:b1:02:11:2f:7b:36:b7:55:25:99:4e:ab:df:51:
         a4:fc:19:a5:aa:fc:5d:ad:3d:32:fc:d2:35:f5:ff:fb:10:2b:
         cc:94:2c:51:e6:6c:0c:89:8f:06:98:6d:99:a4:c8:34:e0:f8:
         ce:89:ef:78:56:d0:b4:ba:d7:34:48:f2:28:dc:40:2e:1d:ce:
         a0:e7:c0:16:d7:88:e2:ec:73:7d:b8:07:bc:90:99:d0:a4:d7:
         05:5a:7a:b3:69:74:7c:4b:ec:0b:e2:90:ae:68:af:3c:5f:1b:
         d1:5f:3f:1b:e9:06:2a:b5:43:8e:5e:db:89:ad:cd:9b:f4:b2:
         ea:16:bf:76:dd:98:20:c8:e4:07:a8:c6:4b:81:64:3a:4a:e9:
         b5:19:e6:a4:36:27:32:de:68:90:19:0d:7c:e0:a5:33:cc:f4:
         0e:2e:7a:32:3c:6c:2c:57:ca:71:70:da:16:fe:a9:0e:e9:28:
         79:d3:06:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:08:49 2026 by rpki-client