Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File:                     _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier:          syfbogQiA1pAiuIDVY5TJBRF3nEOi+MU4VaPnjPFUtY=
Subject key identifier:   C4:22:28:AA:F5:CA:9D:AF:35:4B:10:BF:BD:22:5C:92:3F:2A:71:CF
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer:       /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial:       019F946D8042A541916EB1AB75481D792A35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number:          18FB
Signing time:             Fri 24 Jul 2026 14:00:31 +0000
Manifest this update:     Fri 24 Jul 2026 14:00:31 +0000
Manifest next update:     Sat 25 Jul 2026 14:00:31 +0000
Files and hashes:         1: O3VQfD378Glka9TjOO3TvAaw_nk.roa (hash: Ybj9UWECximKsng5EBE3xYs2FwI/4KcnIfFjWhvui64=)
                          2: WhbbTrjO4d6D8laBPplxh84WYVc.roa (hash: PR+nKFHG16xdl1/3mckLmj9yFgXPMBwN+ado5X/wpjk=)
                          3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: FhhPHmE4LEP9X6ua17JTMZ1RVZtYLUr/nP6FL4L7i68=)
                          4: kQKwgakw6fJJpqQFX4t9Q3Jjol8.asa (hash: 0NDSDQfV3NOi4CzN7cXA2+0Mse8axAaEZcFkFgHCX/U=)
                          5: trtlnARNU9GgYjNsg0NOVlqMz0s.roa (hash: oIMDX6qf+vcOR+FsuwuvFIF1QJtf1WzL/kP1bXEC8h0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:6d:80:42:a5:41:91:6e:b1:ab:75:48:1d:79:2a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
        Validity
            Not Before: Jul 24 14:00:31 2026 GMT
            Not After : Jul 25 14:00:31 2026 GMT
        Subject: CN=c42228aaf5ca9daf354b10bfbd225c923f2a71cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:94:9e:9f:50:09:82:5a:ba:3b:2f:1b:e4:41:
                    26:07:83:cc:de:e3:60:43:dd:d5:10:66:a2:f0:02:
                    03:57:1c:db:3c:d2:64:4d:42:bd:c6:37:13:fd:e1:
                    6c:f7:80:43:e0:63:8e:98:4d:8a:22:65:99:0a:cc:
                    40:41:4c:b2:b3:1c:fa:0e:19:d2:28:7d:49:9c:06:
                    fd:5d:ad:a3:ba:e3:02:1b:ed:ab:39:bf:66:c1:c1:
                    e1:9c:ab:3d:6e:01:d6:fd:a4:b3:83:bb:92:59:a1:
                    5f:99:c2:5f:db:39:f3:47:5c:01:c0:44:91:22:69:
                    d6:ec:44:39:8d:17:c3:37:1b:ec:0b:3b:f5:dd:eb:
                    e4:ff:7e:c6:de:a7:3c:43:b5:26:d4:b1:ef:d8:67:
                    2d:09:87:5d:7b:00:ac:46:07:0c:59:aa:ad:6b:d8:
                    b3:6b:2a:ba:51:88:d0:00:83:a6:e2:1f:18:4f:06:
                    9b:37:78:13:18:ba:f7:04:d8:d4:bc:35:56:4f:63:
                    ea:9e:a3:5d:7d:92:ab:bf:e1:b3:25:a9:59:8a:0a:
                    8f:b8:9a:4e:1e:36:1e:78:cf:e5:25:43:26:22:9a:
                    1b:a2:45:b9:cc:66:c5:1c:88:de:7d:86:88:71:b2:
                    4e:5a:5a:0f:1b:55:9e:98:31:f9:5b:25:81:62:69:
                    b4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:22:28:AA:F5:CA:9D:AF:35:4B:10:BF:BD:22:5C:92:3F:2A:71:CF
            X509v3 Authority Key Identifier:
                keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:42:26:ba:87:bc:fc:9c:7d:b5:bd:64:93:c8:1c:b3:c7:8c:
         8a:63:36:8f:c4:65:e4:f2:ee:f5:c0:33:50:64:14:7b:ff:d0:
         41:f5:9b:49:5c:d9:8e:80:7f:2e:9a:f4:5f:87:28:c2:63:f8:
         a1:14:ae:d1:30:fe:01:a0:73:4d:4f:05:6f:25:c2:f5:5c:a5:
         b7:c6:93:19:a7:c9:ff:43:33:d3:2b:b3:5f:ba:03:5e:0a:07:
         5b:40:0c:6a:5d:16:9e:9e:ec:90:24:be:bb:fe:be:d3:66:d6:
         2f:40:5e:a0:e9:67:de:0d:ff:16:ca:9f:08:65:fd:61:e0:71:
         ab:14:95:9c:f2:01:47:ef:91:33:b2:e8:ae:c7:d9:40:f2:1c:
         45:e6:3f:88:0e:d0:ce:73:13:be:ae:ce:03:d8:d3:5e:9e:9e:
         b3:73:c1:41:e1:92:08:7a:10:d4:c8:bd:c7:48:ca:c4:5b:70:
         42:83:34:53:db:f3:a6:28:d7:e2:d0:0e:32:d3:44:22:e5:29:
         41:3e:8a:4a:8a:2a:b3:75:d8:48:c9:be:a1:1c:7d:42:0c:b9:
         9a:c1:36:41:34:00:fc:9d:a5:d9:a4:2f:aa:9f:9a:a3:37:ef:
         37:09:78:6c:9a:17:d1:2d:33:ad:0a:c9:89:2c:72:b6:41:93:
         9a:77:f8:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:25:25 2026 by rpki-client