Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
File:                     59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft (raw, json)
Hash identifier:          HcskLWcUSXMCdDJ+6sMRSOQhZN7qZRpDcgY9qjYQI40=
Subject key identifier:   FF:77:39:6F:BC:4E:8D:1E:D7:80:0A:95:C8:03:5B:60:E3:6C:D4:D2
Authority key identifier: E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37
Certificate issuer:       /CN=e7d19a8fd98541ed89170a90401977a4be0bec37
Certificate serial:       019F8FB50919A1F35A9E3F0F94033CAB2FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
Manifest number:          016A
Signing time:             Thu 23 Jul 2026 16:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:33 +0000
Files and hashes:         1: 59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl (hash: g/dUHcXm8RfdnkMCu/h3yjVwPbvCGvaUnObdj6KBWSA=)
                          2: Pzk4TDA-h9RVuxch0U3icXkl6Rw.roa (hash: oUr86fQqVuN8AdhLCsQUi45dZ5KEwK640rHZ20VyoXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:09:19:a1:f3:5a:9e:3f:0f:94:03:3c:ab:2f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d19a8fd98541ed89170a90401977a4be0bec37
        Validity
            Not Before: Jul 23 16:00:33 2026 GMT
            Not After : Jul 24 16:00:33 2026 GMT
        Subject: CN=ff77396fbc4e8d1ed7800a95c8035b60e36cd4d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:18:54:ad:1e:c3:b5:8a:86:3d:cb:4f:1c:
                    a7:e7:69:30:08:9b:7b:6c:e2:07:3b:ea:31:e6:3f:
                    39:d0:97:19:09:20:de:f4:35:40:45:27:cf:b0:63:
                    ab:c8:87:45:6b:a2:63:78:89:01:ef:a7:ea:0a:d5:
                    93:71:60:e5:af:77:15:c5:e8:cc:0f:5e:93:4c:60:
                    4a:2b:12:fb:76:ad:47:c4:b1:50:b8:0e:1b:9d:8f:
                    72:9e:b5:ea:bf:9c:d7:ed:f0:f0:f7:dc:6e:5d:ac:
                    b3:31:41:81:72:41:02:38:e5:50:37:02:5d:d7:b1:
                    a1:b2:7e:4d:77:2a:07:f4:d9:48:45:89:7c:49:ca:
                    b9:ac:28:55:b7:fe:aa:3a:97:81:07:3c:0a:f8:e5:
                    66:df:48:a8:3b:dd:45:49:36:6e:99:9b:b5:db:84:
                    02:24:39:7e:98:9c:08:46:ca:8c:54:cd:dd:d0:7a:
                    15:7b:75:62:4c:60:83:29:82:93:96:4b:6b:4d:34:
                    f1:ba:03:87:1f:29:97:fd:c9:5b:0e:75:48:33:1f:
                    b7:68:dd:6a:48:3f:43:a2:23:cb:49:44:6f:91:c5:
                    bf:77:46:dc:81:70:66:2b:9b:5e:b0:9d:78:f3:3e:
                    63:23:7c:a0:28:4f:4a:a6:7f:e7:ff:6a:ca:13:17:
                    49:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:39:6F:BC:4E:8D:1E:D7:80:0A:95:C8:03:5B:60:E3:6C:D4:D2
            X509v3 Authority Key Identifier:
                keyid:E7:D1:9A:8F:D9:85:41:ED:89:17:0A:90:40:19:77:A4:BE:0B:EC:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/e62da3-bc4f-47b0-bc9f-b42a418b3036/1/59Gaj9mFQe2JFwqQQBl3pL4L7Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:66:1d:22:b0:dd:45:d2:e2:88:9a:11:59:e0:24:58:9f:6f:
         5d:47:eb:af:18:72:ee:dd:0f:1d:ae:08:e3:6a:48:2e:f8:2d:
         45:01:1d:92:d8:d5:f7:94:00:9c:42:09:5b:61:a7:9c:cc:0f:
         1b:11:02:18:a3:7a:de:f8:cf:55:95:a7:85:12:09:19:07:f2:
         03:48:9a:ac:47:9a:da:99:db:26:dd:9d:94:b2:af:33:87:3b:
         55:ef:32:4c:e0:dd:cd:d8:61:ba:cb:f6:4d:84:64:ae:11:42:
         3e:93:dc:fa:3e:c8:ad:27:99:87:4d:00:91:d0:a1:fc:cc:77:
         43:96:98:41:8d:8a:8d:61:59:f2:4f:8c:9e:19:0a:50:8a:d3:
         d0:72:43:f3:77:33:af:23:37:46:e0:8d:e8:a0:07:4f:94:d8:
         7b:f4:17:47:c9:58:28:48:bd:cc:96:4d:cf:7b:41:ec:53:e1:
         e7:3f:29:4c:ab:a5:4c:86:b2:81:9a:21:aa:29:7e:c7:b2:51:
         fa:b7:b0:e7:fc:c5:84:51:94:66:e8:de:7c:dd:c3:df:83:6e:
         82:80:e3:70:c9:74:ff:ee:31:b0:f2:07:b1:12:ce:35:95:a9:
         48:bc:d4:ea:af:e5:1f:84:06:c8:ac:3d:bf:14:8c:56:bd:96:
         24:86:9f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:38 2026 by rpki-client