Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
File:                     K7wAKis1mxqoh54cTXBFWzGS76w.mft (raw, json)
Hash identifier:          rYbXxaM/GU2zauL74X8IZueEU5zNkDbz1A2+y3rGu/M=
Subject key identifier:   AC:74:2F:09:EB:67:7F:00:33:7B:84:2F:70:5E:36:E7:EB:B9:CC:72
Authority key identifier: 2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC
Certificate issuer:       /CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
Certificate serial:       019F90907828D9459CFF464C30740AEA9EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 20:00:14 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:14 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:14 +0000
Files and hashes:         1: 2UmZFRrJ0P-2mwYSao7Xzkep2iA.roa (hash: N9+wOT3ic7u1Pc0UnkkcEFa7DljVTAIJF/p2BSuaQHw=)
                          2: K7wAKis1mxqoh54cTXBFWzGS76w.crl (hash: keDRpB2XF4S7srPmkiCWGM/x9cG53eiG9V7rJQX+8t8=)
                          3: a8hAdaOdxZFivnzP3avRHvD9kUw.roa (hash: FzlX7CBWyvP5RQUSSHhztLWIzIWu2YtxzCw2ArYeCTU=)
                          4: ncypf2iinEe-q_LnbnKjYSF5rJc.roa (hash: X77xC4nNcyrrbUpykZ9gvEucbXtxd0H2H3Sybmc5J48=)
                          5: sZzlwoV7VUnP0rnAO0okZeo6Iak.roa (hash: WXgl70GjiFz6sqLRQIYx3xNCuabeBF1y/DzdVPV9mJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:78:28:d9:45:9c:ff:46:4c:30:74:0a:ea:9e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bbc002a2b359b1aa8879e1c4d70455b3192efac
        Validity
            Not Before: Jul 23 20:00:14 2026 GMT
            Not After : Jul 24 20:00:14 2026 GMT
        Subject: CN=ac742f09eb677f00337b842f705e36e7ebb9cc72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:da:e5:20:48:29:69:ff:79:71:43:43:82:
                    77:fe:30:71:2f:7d:43:60:6c:77:0e:43:db:6a:ae:
                    d9:ba:47:08:c1:f8:fc:88:cb:3e:25:68:b6:7e:b9:
                    ca:2e:11:a8:71:e6:65:be:b8:0b:6e:d5:2b:74:f7:
                    a6:25:b1:3d:be:c2:a6:e1:16:d2:6e:84:3e:5d:b3:
                    ff:4a:66:b7:3b:03:99:2e:50:8f:69:33:ca:17:36:
                    7b:2f:96:f4:a6:fe:dc:ed:b9:c8:0e:ac:48:8e:98:
                    ed:57:dc:50:5c:a0:29:ca:30:f3:6f:41:27:0a:4e:
                    8d:e7:b3:92:68:26:48:72:c0:5d:26:b1:de:30:b0:
                    46:bf:60:98:9c:82:95:ae:2f:70:0f:bb:56:93:91:
                    25:8c:c5:7c:3c:e7:3a:40:2d:0c:96:4f:bc:48:4c:
                    cb:16:e1:e4:c0:66:b5:65:db:96:89:60:c7:7c:80:
                    01:cd:af:7b:81:d0:5d:ca:59:03:1f:8f:7c:6b:50:
                    e9:86:c6:92:27:23:c4:69:7b:48:08:35:0f:b7:1e:
                    5a:b3:1c:fc:36:72:b2:b1:20:85:0a:b8:8f:31:29:
                    27:5f:39:0f:bf:a1:91:94:ce:bf:9d:b2:67:b1:e5:
                    37:93:9c:47:fd:9d:74:38:b2:67:5d:86:b4:6b:1b:
                    05:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:74:2F:09:EB:67:7F:00:33:7B:84:2F:70:5E:36:E7:EB:B9:CC:72
            X509v3 Authority Key Identifier:
                keyid:2B:BC:00:2A:2B:35:9B:1A:A8:87:9E:1C:4D:70:45:5B:31:92:EF:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7wAKis1mxqoh54cTXBFWzGS76w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/7c3726-2dbe-4174-b164-a89889ce5f84/1/K7wAKis1mxqoh54cTXBFWzGS76w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:9a:91:46:d2:0d:73:2e:7c:4a:ba:96:82:98:09:b7:27:71:
         97:ad:ed:0d:6a:ce:85:d0:65:11:a1:b4:f9:b4:26:21:8f:33:
         06:c1:99:fe:9b:72:ac:1a:2f:a8:a1:5c:39:a4:24:7e:d1:d7:
         4e:22:81:c6:2e:53:4c:f4:32:39:6d:9a:b4:ed:50:97:07:fc:
         d1:b9:6a:16:eb:15:70:8b:5c:44:54:70:af:3f:e4:92:24:39:
         11:b4:93:73:45:4a:b1:5a:8c:73:3c:29:d4:a0:46:94:b0:4f:
         33:1e:c9:e1:6e:4f:6d:a2:72:32:ca:2e:43:d6:7b:f8:31:6c:
         19:80:67:b1:4d:2a:03:e7:31:75:62:9c:15:15:5e:b3:fd:6a:
         89:45:c2:be:46:be:77:28:92:36:f8:4b:7e:3b:0d:d5:b6:26:
         c5:ab:83:e9:87:ad:af:99:a7:4f:b3:b2:8d:12:41:7f:aa:a2:
         18:9d:f1:0a:c7:6d:ac:4c:76:aa:6b:df:d0:9c:30:55:27:ec:
         a6:03:f9:22:76:3b:d1:cb:9e:39:2a:06:27:43:33:70:3a:f8:
         f6:7a:55:f0:b3:45:d6:57:f1:e1:52:0b:ba:e5:e4:bf:52:c6:
         87:4b:de:9f:8d:14:80:91:d1:b3:0e:6a:41:3a:7f:c1:c1:6f:
         73:73:53:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:53:47 2026 by rpki-client