Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
File:                     M35ja6YMcU_-h1SrnQTG0e7bm4k.mft (raw, json)
Hash identifier:          sCfRJQXhJZmkQO578PiKv+VNPUkZHGwPvL2c1d0kVRk=
Subject key identifier:   C5:3D:4B:E4:B3:F7:13:3F:E1:E5:AB:09:05:A1:95:D9:80:DD:A3:1C
Authority key identifier: 33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89
Certificate issuer:       /CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
Certificate serial:       019F8FEBCD4870B0E39228C3A6B4166A9454
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
Manifest number:          064A
Signing time:             Thu 23 Jul 2026 17:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:23 +0000
Files and hashes:         1: 9oQBTXlH4ga0jxaDaQ46_0675r4.roa (hash: lfc14Nf9rZ4eQfU7CROzJbAHaEHHz0RDwVBA24tGJp0=)
                          2: Dx65O-asK1-UgVb-ZGw1lB5CJx8.roa (hash: s8rkkFQ6+V5aJw27ojd1rWR8DbltWhE5KRrj3bBMD1U=)
                          3: M35ja6YMcU_-h1SrnQTG0e7bm4k.crl (hash: 4kWlOHaUTsyjJlDYikL0NK511cHRI+BWVcHZHTOdDvI=)
                          4: XQ2UOuVw2T7OAFZpmHMv3GBseYc.roa (hash: st9txTOnhmX0OyjM9OI6jhYL6GVTc4OxpwXxUcHPUeA=)
                          5: dcvjkQH09CTuqJvt0Sfi1gO9Pxo.roa (hash: ocviRQYdrnx+Nz5y2Ctef0U6ZWjsZGCl6lhK6/hzJjY=)
                          6: vXTxJSzPbffHQQvVDh7hY-UvAdo.roa (hash: kJvEqskagfLdxb3XxFYls86f+7m8wdk0p3O2qSE+ugQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:cd:48:70:b0:e3:92:28:c3:a6:b4:16:6a:94:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337e636ba60c714ffe8754ab9d04c6d1eedb9b89
        Validity
            Not Before: Jul 23 17:00:23 2026 GMT
            Not After : Jul 24 17:00:23 2026 GMT
        Subject: CN=c53d4be4b3f7133fe1e5ab0905a195d980dda31c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:f0:6c:db:e8:ee:89:a9:de:f2:3b:f1:01:
                    99:d3:a8:d2:3e:30:1e:66:e9:d2:52:ce:33:bc:a1:
                    9e:3c:a5:e6:84:71:6f:a9:51:7f:f2:ce:ca:5f:cd:
                    4b:b3:0f:77:de:f6:bf:8b:e9:73:3e:d2:1b:ca:8b:
                    ab:1e:46:f1:3d:bb:86:79:df:3d:16:c5:7d:5e:bb:
                    36:bd:a9:fd:a0:94:ca:2a:34:5d:3a:b5:2e:13:f0:
                    d8:3c:59:28:4f:c4:6b:20:6a:ab:a4:7c:9d:b0:54:
                    16:39:44:75:7e:13:1f:3a:8f:c4:a3:40:cd:87:cd:
                    3a:af:c5:28:fa:58:8e:a3:cc:de:09:36:06:26:40:
                    0b:bc:09:01:0a:60:43:ee:42:7c:ee:64:84:88:2a:
                    aa:36:04:c1:3f:35:6d:b0:f2:6f:1a:b5:39:14:e2:
                    f0:5b:71:d4:43:2d:f3:67:dc:b2:45:04:86:95:f2:
                    cc:87:56:4c:cc:be:69:2b:e0:c6:a8:ae:67:0a:bf:
                    49:41:b9:2f:d8:2f:f4:a3:21:2a:68:b2:db:b9:5b:
                    99:f2:24:94:9a:f4:cc:ec:e9:99:de:2f:59:39:6b:
                    e1:52:78:aa:4d:8b:da:f5:ec:de:ac:a9:8e:25:7d:
                    4c:26:63:e7:a4:94:43:59:17:d2:20:2a:4c:3b:26:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:3D:4B:E4:B3:F7:13:3F:E1:E5:AB:09:05:A1:95:D9:80:DD:A3:1C
            X509v3 Authority Key Identifier:
                keyid:33:7E:63:6B:A6:0C:71:4F:FE:87:54:AB:9D:04:C6:D1:EE:DB:9B:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M35ja6YMcU_-h1SrnQTG0e7bm4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e70c83-46fd-40b4-83c9-70c228ee9c95/1/M35ja6YMcU_-h1SrnQTG0e7bm4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b3:48:86:b3:04:7d:98:ab:97:62:f1:cb:1a:00:1d:72:f5:
         b1:b4:0b:60:15:a9:ce:c7:c6:05:54:0d:e4:6d:c5:05:20:b4:
         62:3d:d5:e0:82:69:10:48:82:07:b7:50:01:a6:53:5d:69:95:
         7c:6c:df:bb:0a:06:8e:18:f8:89:67:00:84:20:5b:b4:4c:92:
         04:8e:9e:91:b2:0e:cc:10:b4:6d:9b:ce:d7:f1:a8:63:46:db:
         d1:1d:95:d7:cc:e4:6e:d7:8a:7a:ec:ae:71:97:97:e1:37:fc:
         75:ed:04:df:26:e1:a9:e0:9a:0e:92:45:34:e2:31:34:b8:a5:
         f0:7b:cc:36:93:9b:c6:94:1f:df:be:20:c4:9e:93:b6:95:ee:
         92:27:cc:38:e9:7d:28:dc:96:32:b0:05:40:79:23:93:a3:10:
         71:a2:2e:8e:7c:65:92:23:d4:52:80:3c:f5:ed:03:d4:3a:12:
         f6:9a:05:33:4a:7a:a3:58:e4:32:60:36:df:25:53:1c:f3:5f:
         84:e6:75:a8:c0:f8:bc:1e:08:9e:b2:fa:aa:de:8a:1f:25:df:
         8e:ab:1c:4b:9f:14:f6:9e:07:65:e2:b0:d7:22:c2:52:43:bc:
         52:d2:6a:c8:89:46:49:f3:0b:10:ce:35:b9:03:db:53:36:68:
         5a:c0:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:12:12 2026 by rpki-client