Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
File:                     7bBKlDMydoAXJm9OX1bABtmOu7Q.mft (raw, json)
Hash identifier:          FliFvTRwQHLtFt+Viz8tz1ARPbnl0KBVm0cbROBJC68=
Subject key identifier:   31:28:59:86:BB:90:CE:05:E7:08:43:74:DE:68:B8:BD:49:63:29:D6
Authority key identifier: ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4
Certificate issuer:       /CN=edb04a943332768017266f4e5f56c006d98ebbb4
Certificate serial:       019F8FEC36A31E2642416EB79F84194F9516
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
Manifest number:          0FA3
Signing time:             Thu 23 Jul 2026 17:00:50 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:50 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:50 +0000
Files and hashes:         1: 6Q9jwkNZ_CGM8BQZXKAyYR4x0aI.roa (hash: z/QzXDgziKZrIsCahHMTDA0xYz8KhnucvEvlt9vMZTE=)
                          2: 7bBKlDMydoAXJm9OX1bABtmOu7Q.crl (hash: G6wC4j9e5uzf1eV7o97SKkZ9AxP2I+6kEepXJH/sorE=)
                          3: IUQL4amfQO9d-_mgLtZ7DQFH5lY.roa (hash: IsUWoVhHWQJZPcVz+Jmd+g0d0TZ9a4iovWnR9SxBaAE=)
                          4: eP5PyKE_-x6TT40a7GDlcGqsOiA.roa (hash: Ux1XyDwFFeWFB0hBYgfGJmaYREPqJbs6hAMb2HTKJNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:36:a3:1e:26:42:41:6e:b7:9f:84:19:4f:95:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edb04a943332768017266f4e5f56c006d98ebbb4
        Validity
            Not Before: Jul 23 17:00:50 2026 GMT
            Not After : Jul 24 17:00:50 2026 GMT
        Subject: CN=31285986bb90ce05e7084374de68b8bd496329d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d0:15:6d:ad:43:97:f8:95:c2:ef:47:01:f1:
                    bd:23:28:1b:e6:cb:20:f4:f4:8a:40:02:3c:5b:22:
                    e5:3b:fc:08:eb:c4:09:fe:17:12:51:c9:de:99:6c:
                    00:12:ac:53:90:fc:70:e5:a8:3c:85:65:28:a3:d2:
                    c2:b2:df:f3:8b:48:70:e0:18:3a:3f:cc:0d:5d:b0:
                    6f:6c:6c:72:c4:0f:d9:27:66:cd:09:1c:20:7b:17:
                    86:d4:21:62:52:e4:f9:53:db:d7:30:10:c8:4d:36:
                    9a:75:39:63:05:48:65:19:8b:02:40:24:63:66:0a:
                    8f:b2:63:9b:a4:b9:99:f9:5d:d9:a0:02:f7:f3:c3:
                    fb:2c:2e:88:d5:a2:70:f1:54:c3:c6:6a:e7:20:4d:
                    b2:fc:f4:47:9b:75:e0:94:5f:26:2f:a5:14:f9:04:
                    33:f0:a1:4b:9f:fc:ef:66:1a:37:0d:66:ec:1c:19:
                    a4:56:45:c1:96:ba:fa:88:ee:87:6c:98:b9:6e:2e:
                    21:a8:2a:7d:10:73:d8:36:03:9c:ae:99:33:0c:51:
                    46:8b:b0:79:37:4e:94:30:ab:96:22:fa:7e:ac:47:
                    bb:a0:fb:62:db:52:49:ca:c4:3a:46:ef:e3:90:0c:
                    50:93:af:6f:6d:cc:93:70:cd:01:f7:a1:a1:aa:d7:
                    78:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:28:59:86:BB:90:CE:05:E7:08:43:74:DE:68:B8:BD:49:63:29:D6
            X509v3 Authority Key Identifier:
                keyid:ED:B0:4A:94:33:32:76:80:17:26:6F:4E:5F:56:C0:06:D9:8E:BB:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bBKlDMydoAXJm9OX1bABtmOu7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/50a4c4-91d1-4311-b67b-e45fa64d4d2d/1/7bBKlDMydoAXJm9OX1bABtmOu7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:9e:f6:4a:cf:10:99:1b:1d:d6:39:4c:a6:dd:34:bb:b1:82:
         c7:e1:4f:c6:42:a0:25:ac:bc:94:c2:04:5b:a3:54:79:03:a9:
         50:b2:30:e2:47:a5:60:ee:ad:21:ab:ee:ec:65:00:65:13:c3:
         2d:2b:d0:1d:f7:c2:e2:4f:16:1c:9a:f4:17:c3:cb:04:9e:83:
         29:be:cb:d4:55:87:57:02:e5:65:27:78:50:7b:25:19:ca:52:
         37:17:2d:d8:b7:ba:7f:70:a2:65:c4:f3:85:1d:b9:eb:9d:75:
         22:34:d0:44:59:a3:d8:8f:cb:74:dd:db:8e:19:06:df:fd:25:
         00:0b:d5:20:97:10:66:76:bf:9b:8a:25:b4:c4:0e:83:c4:5c:
         29:f7:e1:3b:01:f2:04:d1:be:d6:8d:19:b2:d4:ea:e1:d8:44:
         43:60:39:5c:a5:f9:ab:76:73:d9:ed:15:19:a8:94:b4:e4:4d:
         c4:ef:88:1c:1f:a2:db:db:5d:ed:8a:9a:35:eb:08:84:98:1c:
         e7:e1:f1:03:23:8e:cb:c8:4f:bc:43:87:44:7e:e9:3b:97:66:
         54:93:4b:77:3a:7e:cf:db:e8:2b:c9:f3:7f:1f:59:74:50:cc:
         a4:cd:82:e7:dd:e5:92:32:59:94:50:ae:e9:ae:23:01:64:06:
         dc:d4:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:01:57 2026 by rpki-client