Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
File:                     x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft (raw, json)
Hash identifier:          NQHb3f//3Y/3DViEHNxOVf/ATDrgOLQqNsKSfcJ/y3A=
Subject key identifier:   48:FB:C2:58:09:9A:FA:B2:C5:98:98:9B:E9:C6:72:D5:F3:69:F6:7D
Authority key identifier: C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA
Certificate issuer:       /CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
Certificate serial:       019F8FB4E8A767825339A6BFCFF35C372A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
Manifest number:          08C3
Signing time:             Thu 23 Jul 2026 16:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:25 +0000
Files and hashes:         1: DvP3mhZq2qu5x8i_BDUXNsKUhm4.roa (hash: pOXeNunBUp7XMmyt7KCLlUiodAtYd49vUDG9ePb2slQ=)
                          2: GP_Mj6PAxOglARXWqt3O7csqHl0.roa (hash: 9RdzBSdQWGA/ZjrTNqzOgihxpuYok+ZxFPtV3uGFuyA=)
                          3: JjxyiyRAHIZDhSB7r9odWsogzv0.roa (hash: cTZJnhtnZxGwp2Q9A0lYiODLfA95pG6O1DIOhv9ttYY=)
                          4: M2wL5rCeB0jM50mB6flrsbDhDMc.roa (hash: p59jmbhrBjOY9sTN6aHGji7dUq9dBGCvUhr+mV9L6Uk=)
                          5: Unz4qfMKNpBLp_nQStP8Rhi7Y0o.roa (hash: CvQQy58T2+JT1V1PpCMrbgGvmKiUqKITp6SsZ8+pjsw=)
                          6: o7cFZ2_mdT4z66zcAjhDBlj9fc0.roa (hash: YKENZtDbouX123QC9IjXYuWhmGFmJEwt6IRC/Z5j654=)
                          7: tS4Ma4W65v9ZvNmewgrOi2oYCfQ.roa (hash: gRJclz6t9y/Q1g8bocXmUp9M+K0hzT5o06prGgkqzrY=)
                          8: x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl (hash: JVOLwxiVaS/Y45sll0aiaofYmrhTRWSl4Dq+pARGtD0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:e8:a7:67:82:53:39:a6:bf:cf:f3:5c:37:2a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7b623bbc54e9846748cd77b2b8b343827e5aeaa
        Validity
            Not Before: Jul 23 16:00:25 2026 GMT
            Not After : Jul 24 16:00:25 2026 GMT
        Subject: CN=48fbc258099afab2c598989be9c672d5f369f67d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:38:55:9f:2e:58:e7:6a:97:ff:bd:39:70:c0:
                    4b:c1:19:8c:96:13:19:6a:3e:8e:9b:ab:cb:9a:78:
                    d8:d9:ad:61:90:0d:da:c2:5b:0d:25:1e:b9:bb:98:
                    aa:d3:d6:06:4d:e2:16:8c:fe:30:1d:59:6f:ab:07:
                    29:ff:6c:83:b1:6e:9b:91:dc:a1:6c:28:ba:9e:1e:
                    a3:2b:8e:0d:1b:c6:21:b1:fc:49:30:80:d9:b9:10:
                    63:71:40:b7:a6:f1:fb:cc:99:5e:49:78:9f:0e:1d:
                    e5:85:0f:67:c8:64:2d:9b:d8:04:c8:f3:44:17:3f:
                    5d:2c:4c:2f:1b:e7:4f:32:e3:88:a6:58:2e:ba:95:
                    65:bb:a6:24:ce:b5:e0:db:1b:ad:e8:d5:2e:9d:a0:
                    69:d1:59:31:2c:60:10:3e:3c:9d:38:cb:e6:5d:94:
                    13:3c:18:c0:72:01:f0:3c:82:0f:75:28:3b:d1:fd:
                    3d:29:4e:02:b3:8b:1c:1a:96:03:94:47:ec:d0:d8:
                    d2:7f:0a:f6:c3:ac:5a:99:8d:d3:0f:a5:71:2a:cd:
                    41:50:4f:e6:ac:64:35:55:45:b8:7c:62:e2:05:e6:
                    d8:76:c4:29:5d:87:d9:c6:50:a9:51:da:b9:e1:e0:
                    3f:cd:b2:5e:33:04:8f:93:15:91:75:d0:98:2b:7f:
                    10:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:FB:C2:58:09:9A:FA:B2:C5:98:98:9B:E9:C6:72:D5:F3:69:F6:7D
            X509v3 Authority Key Identifier:
                keyid:C7:B6:23:BB:C5:4E:98:46:74:8C:D7:7B:2B:8B:34:38:27:E5:AE:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x7Yju8VOmEZ0jNd7K4s0OCflrqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/ed879b-e3c4-4b7a-bd0c-34e4e0679333/1/x7Yju8VOmEZ0jNd7K4s0OCflrqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:61:fc:65:89:6c:fe:21:84:f4:27:a7:2c:02:ec:cf:da:3d:
         a5:6d:70:fd:5d:fe:cb:c3:f0:97:77:06:df:f2:d9:ae:a9:bf:
         04:72:27:68:82:cc:05:71:62:e8:67:9a:25:c4:5d:37:58:31:
         7d:5a:3b:43:50:c9:ff:70:fb:37:0b:66:d4:cb:79:42:7c:70:
         26:57:84:d7:76:87:0c:2a:0e:15:d3:dc:87:d3:d7:48:8d:d9:
         bd:08:d9:38:65:0a:3a:d3:06:81:01:9a:1a:45:64:2c:ac:c5:
         8d:91:f9:34:f0:e0:66:6b:f2:f0:f3:9f:51:d1:97:52:ed:da:
         9f:19:2c:99:e1:e1:8a:ff:8f:93:b0:12:05:43:76:2f:9c:3b:
         f6:82:ab:cb:6d:f9:0b:a2:ad:83:41:1a:05:66:cd:cb:77:cb:
         9d:60:93:18:a0:3d:90:51:0a:f6:65:0f:d0:cf:11:b0:1b:b9:
         da:05:eb:9b:81:92:17:eb:6a:6d:85:50:b0:bf:c3:93:6b:b8:
         17:07:e8:0f:fd:5d:6a:7b:51:2e:17:e1:25:7f:13:18:9e:e2:
         68:ab:b8:c3:dc:ba:c4:c8:b7:7d:c7:e5:fe:eb:e7:da:90:c5:
         72:40:13:b3:ef:00:5e:d8:a1:6a:66:2a:dd:1d:44:8f:35:77:
         be:77:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:18 2026 by rpki-client