Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          IovziBFOVoWn5iK7XxLiOfFDgJtn9NtI9U4lLYXruLA=
Subject key identifier:   89:BB:50:C4:DF:9B:14:2A:B2:DF:E3:D9:A8:15:AC:0A:61:D9:4E:F1
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       019F90C785C38F3B79F5BC10E4B56CD8F64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          14D7
Signing time:             Thu 23 Jul 2026 21:00:22 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:22 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:22 +0000
Files and hashes:         1: Lh9ws7Zx-Z49Y3KqDWbQ2Lm-Lb8.roa (hash: PF/ed+k7gtadd5HsxTcEuV0PkSMYqzIOsEkgaO30wiM=)
                          2: M3kEZhwNAZH2MoRits4PT4v1XYY.roa (hash: 9BRevnCxVw2l/jCPOd7XDBAI+hID2up62MsIMKdFJLE=)
                          3: Ugs1R72eLpNOvqQLq80_hJnxxCs.roa (hash: HAAX/DAdp/HiBc6dDbGVPO1NxsuLn8+Z1EDMvgnvFTM=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: PsSXpgg/kIWiv3NSERl1xTwHsmo7awfq3N6q61BKKUM=)
                          5: d1DdXgc0G77dhrd6ZdfdSd_hf70.roa (hash: VPxYVo5tR4ALJMz9uvC5RMlfofG9QR9Ag17Z6g94IPk=)
                          6: ldHMEOJiE59-H0cOPRmvSFACx0s.roa (hash: mOMIPtr1abOjWcrfM5eKbECfrNaucrP77WVejoM6ds4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:85:c3:8f:3b:79:f5:bc:10:e4:b5:6c:d8:f6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Jul 23 21:00:22 2026 GMT
            Not After : Jul 24 21:00:22 2026 GMT
        Subject: CN=89bb50c4df9b142ab2dfe3d9a815ac0a61d94ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:41:11:92:54:a7:80:1d:d0:47:ae:1d:62:48:
                    fc:e6:72:49:21:8b:67:74:62:84:d6:e5:0f:d0:43:
                    f6:8e:0e:ed:88:68:0e:e1:73:7f:84:83:1f:ba:04:
                    e9:98:ad:e8:f4:4c:d0:d1:31:e5:48:33:67:5e:c0:
                    30:28:4f:04:99:1f:6b:ba:c7:49:df:0f:31:59:19:
                    f9:5d:48:e2:4b:6f:c1:47:4e:10:8b:e8:39:81:76:
                    bc:e4:83:66:85:3e:d6:94:de:43:8b:3d:65:d9:57:
                    34:15:3d:dc:23:14:63:1d:d4:4f:52:51:b5:9f:2e:
                    3d:49:22:77:66:4c:cd:d9:98:b2:d6:e5:7e:31:fa:
                    f3:89:20:5f:3a:ab:60:5a:e7:12:ea:66:df:30:82:
                    6c:36:30:d6:47:e7:c8:26:42:7d:21:47:41:cd:1e:
                    e5:fd:5d:0d:1e:5f:f8:9e:5d:3c:27:42:fe:4d:44:
                    db:1b:fd:b4:c9:68:cd:2d:4d:14:6a:a1:d6:da:52:
                    8e:3b:d1:8a:18:ca:6b:60:0a:fa:37:81:f6:bb:c9:
                    fc:c3:01:71:84:6d:4b:e0:76:b6:34:65:b3:36:b2:
                    94:47:cf:71:80:f1:fb:31:8c:a6:9e:8e:e2:9f:e8:
                    f6:bc:94:85:8a:2e:e9:3f:dd:42:51:5f:17:f0:f0:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:BB:50:C4:DF:9B:14:2A:B2:DF:E3:D9:A8:15:AC:0A:61:D9:4E:F1
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:71:ae:94:8a:91:ed:e4:25:e0:8d:bc:32:dd:eb:8f:08:20:
         82:88:5c:56:5d:a8:b2:d7:37:68:25:05:92:94:a3:83:cf:7b:
         39:8c:f0:a4:90:f5:da:e7:36:e1:26:d9:08:06:5e:78:37:5e:
         9d:74:8f:53:99:2e:08:7a:e3:cf:0b:d3:51:88:2d:1c:67:f8:
         10:8f:9c:66:35:fa:40:97:ae:e4:45:fe:6d:1f:6e:5b:a1:3d:
         a7:5b:e3:e9:95:9d:0a:a3:6d:c5:74:17:04:f7:98:f8:7e:f3:
         21:b8:1d:b8:62:3e:7f:3a:87:b2:ee:aa:be:57:56:18:65:e0:
         ca:b7:8c:60:e1:6a:85:5d:38:4e:fa:9b:57:96:d0:a5:90:29:
         34:48:a9:a4:e6:94:d6:0f:f4:65:d9:5c:45:ba:a2:27:5e:74:
         f3:eb:0e:ca:00:63:33:66:3f:c8:13:25:c1:0b:7c:c3:e0:cb:
         7f:67:2d:c8:26:48:29:a7:c8:68:8a:63:c4:dd:f3:ef:e3:99:
         e0:61:75:58:dd:1f:06:2e:da:d4:ef:6c:dd:29:41:b3:37:25:
         e4:05:48:84:4a:7d:25:72:95:8b:b6:6a:8e:34:69:4c:74:9d:
         55:67:4c:a5:15:72:01:83:b2:f5:4f:05:d9:42:47:33:da:a6:
         04:ee:c8:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:41 2026 by rpki-client