Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
File:                     fCnC9XI_KexeDnk-c6tVuKHIa6k.mft (raw, json)
Hash identifier:          +hpVzayvONttwJ/uHRWiasH9OTQnOv3jHG+If3QIIEk=
Subject key identifier:   58:D4:89:BE:7C:18:58:AC:74:6D:8B:50:22:94:03:63:FB:1D:D7:55
Authority key identifier: 7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9
Certificate issuer:       /CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
Certificate serial:       019F94A44ADFE5F49E5AEBE11D28EE58F52E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
Manifest number:          0974
Signing time:             Fri 24 Jul 2026 15:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:22 +0000
Files and hashes:         1: 7oxbulzY2boNaAxovnlWeEdnhvk.roa (hash: uX0ykLCKBF2SBolWYgvfJLXxPgVn9j68zHuR3GSzDLo=)
                          2: ImYdN1r7SuqmH4KCOghmFfGT43A.roa (hash: C3iHTDptRbcDAgsUC9QRyc1MkBmaJjNlKZ93XUJOKLw=)
                          3: fCnC9XI_KexeDnk-c6tVuKHIa6k.crl (hash: LfXjJkxtKgG4ijgZO1ULYrhlDoIIONBYip1wz3sv6n4=)
                          4: mmK4BcjEIajvATTw8BCsnASXF-E.roa (hash: n3pCENYT8mZdK4x4Xmug43GNcd+EWFtMNaK1ThGL1zg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:4a:df:e5:f4:9e:5a:eb:e1:1d:28:ee:58:f5:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c29c2f5723f29ec5e0e793e73ab55b8a1c86ba9
        Validity
            Not Before: Jul 24 15:00:22 2026 GMT
            Not After : Jul 25 15:00:22 2026 GMT
        Subject: CN=58d489be7c1858ac746d8b5022940363fb1dd755
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:4a:bf:36:a9:ff:f4:93:99:93:7a:96:c5:
                    7a:41:92:bb:b0:81:a1:42:6b:ad:45:09:1c:f5:eb:
                    28:9e:83:13:b5:f3:c9:88:6f:0d:07:f9:3c:a2:1a:
                    96:f0:f9:96:76:a7:d0:c8:13:74:38:a9:58:69:c4:
                    bb:00:07:f2:ee:98:23:c4:c9:c0:34:ec:75:3e:fd:
                    5f:1a:c1:92:39:2b:92:75:ae:0e:e8:00:c0:38:ff:
                    f0:50:d3:57:12:3e:38:79:56:d6:52:b4:44:e0:b8:
                    dd:27:d2:7a:45:f6:5a:dc:12:f1:08:02:03:bb:83:
                    53:5f:68:3e:c2:a0:e3:e3:7d:d4:3a:6e:a8:27:7c:
                    c5:45:0a:d5:bd:b4:b9:12:fe:6d:39:78:54:9e:24:
                    e4:e4:45:85:a9:d6:9e:71:9d:d1:c0:96:51:c2:e3:
                    ca:e7:2b:63:a2:f8:e2:10:84:f5:cf:8d:08:33:b3:
                    99:d5:1f:67:db:d5:60:e2:66:0b:bc:8a:35:54:a6:
                    8c:e9:8b:3b:5c:46:4e:6f:75:d9:49:4d:4c:49:65:
                    ff:4d:c3:2e:e8:34:90:f2:d6:34:9e:e5:c1:dc:6a:
                    b1:df:c3:38:46:3e:4c:e5:5c:95:7d:10:72:5e:0d:
                    24:11:fd:c2:e2:db:55:fb:fb:96:46:49:2f:cd:73:
                    95:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D4:89:BE:7C:18:58:AC:74:6D:8B:50:22:94:03:63:FB:1D:D7:55
            X509v3 Authority Key Identifier:
                keyid:7C:29:C2:F5:72:3F:29:EC:5E:0E:79:3E:73:AB:55:B8:A1:C8:6B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fCnC9XI_KexeDnk-c6tVuKHIa6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d99fac-35dc-4f2c-8f95-f195223d03b3/1/fCnC9XI_KexeDnk-c6tVuKHIa6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:3c:e3:18:db:59:d5:98:d7:c5:d0:74:37:ba:1b:53:68:3e:
         d0:75:1b:7c:cc:81:33:aa:2a:df:41:d8:91:92:b4:30:bb:2c:
         36:d4:91:49:8b:f8:12:d0:f3:85:af:84:87:20:1b:ff:e7:89:
         0d:32:74:64:70:e3:d9:06:2f:e8:7d:1d:93:c8:6c:be:84:2f:
         0f:8e:9f:19:80:17:07:8d:6f:5c:63:42:4d:75:40:58:cb:35:
         32:d2:9d:49:98:9b:49:18:12:d0:4e:83:61:0d:96:d4:1d:04:
         52:61:96:01:f1:e4:0f:6a:48:56:68:50:19:ab:28:c4:4f:79:
         e1:91:5a:e1:75:0c:01:e3:48:2f:1d:f3:7f:70:07:f5:36:75:
         bd:45:9e:0e:23:2e:0d:bd:1c:1c:8b:90:e9:0d:78:e7:1d:f3:
         c9:17:9b:80:93:73:8b:5d:55:f8:30:d9:59:e5:1d:da:ae:82:
         27:c3:cb:0e:1f:b7:2a:2c:40:f1:77:dd:03:57:a0:e2:18:cd:
         9a:f6:2c:a8:f2:04:ae:73:50:4a:e6:58:89:1d:ca:91:59:14:
         ab:7d:36:1a:54:5e:7a:20:39:74:59:0c:27:58:fb:13:f6:f0:
         45:fb:13:22:8b:8a:12:1f:56:ef:92:bc:10:93:65:cb:f4:1f:
         b1:a7:40:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:35 2026 by rpki-client