Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
File:                     c18B8zOIfOznDMXnKS8nA96mVWA.mft (raw, json)
Hash identifier:          24B3xHIZi5RiPxkS+phlFYHb5UEGhQBQaN9fSOjkB1I=
Subject key identifier:   43:EE:FD:53:5A:68:8C:95:18:0E:1F:F0:B0:5B:4E:F3:8F:D3:40:58
Authority key identifier: 73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60
Certificate issuer:       /CN=735f01f333887cece70cc5e7292f2703dea65560
Certificate serial:       019F935AB42CC609EA5E81A1B880DBBFD252
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:22 +0000
Files and hashes:         1: 1-38aX-tskK1NxV7Z4oDc2929WTo.roa (hash: wGKChe8kk2F19A+QYee9JgDbbcid8v9Ltq24bXjsVaY=)
                          2: c18B8zOIfOznDMXnKS8nA96mVWA.crl (hash: pTnBSgHPJj1BoeSc4yyfPs2/qdBR0+QXdSkyJlXl8So=)
                          3: lKuSj2D2s_BkgbDkwq4ezJI3T3w.roa (hash: /Moy61qk0I8UDcBmGXGAKjNku/2a6wMeGyPj13SBh5o=)
                          4: mDdtQr35zduylt7DKGcUWYDRCZw.roa (hash: OTT2mWHzTpqs9Mz6NLxGSb11Gcy2ahN6UHvvbuvy6vA=)
                          5: tMqEucs9yUI4coi6ZQvwFmhxM8M.roa (hash: t3cGJbOcrlvOyLZpl4oiRqWt7x2OUIpembveyAOtfHQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:b4:2c:c6:09:ea:5e:81:a1:b8:80:db:bf:d2:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735f01f333887cece70cc5e7292f2703dea65560
        Validity
            Not Before: Jul 24 09:00:22 2026 GMT
            Not After : Jul 25 09:00:22 2026 GMT
        Subject: CN=43eefd535a688c95180e1ff0b05b4ef38fd34058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:40:94:df:a9:04:89:45:f6:59:c5:89:9f:
                    9c:f4:ca:8e:6b:54:9c:ee:a1:a7:47:ab:81:51:7f:
                    84:d4:ed:6d:98:ec:03:e4:11:58:74:84:cf:cc:e2:
                    f2:3a:d4:48:64:96:43:1b:8f:cb:93:89:68:0a:b0:
                    10:08:e4:fb:0b:1d:63:a7:55:35:24:7c:23:13:5c:
                    3a:82:08:70:b9:8b:48:a4:9a:22:b1:47:f0:02:de:
                    f9:b4:bd:28:ce:1e:be:1f:64:d1:c5:0e:46:e3:5f:
                    3e:40:eb:27:ea:84:8a:24:98:0d:12:06:77:c9:6d:
                    5c:d5:c6:90:d2:c7:ee:32:ad:f0:f6:77:68:c7:d3:
                    30:23:b3:80:b9:cd:82:17:19:60:b4:5e:2c:5f:ef:
                    02:c6:ec:cb:94:f8:eb:58:ab:88:59:d5:20:eb:1e:
                    5b:1f:fe:85:a6:8e:4e:43:ac:53:c1:17:38:d0:b6:
                    2c:34:c8:18:f1:e9:72:c7:c8:da:5f:7e:75:66:41:
                    3d:c0:84:c3:78:da:7c:00:ba:f3:19:7a:65:c2:10:
                    0a:d2:6d:39:69:d6:16:91:27:41:1e:93:09:55:12:
                    54:22:0c:5f:e0:b6:15:c3:0d:52:6d:6f:6d:df:4f:
                    1a:ad:45:3d:e0:8b:08:59:ae:4e:ac:1f:17:b2:b1:
                    d1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:EE:FD:53:5A:68:8C:95:18:0E:1F:F0:B0:5B:4E:F3:8F:D3:40:58
            X509v3 Authority Key Identifier:
                keyid:73:5F:01:F3:33:88:7C:EC:E7:0C:C5:E7:29:2F:27:03:DE:A6:55:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c18B8zOIfOznDMXnKS8nA96mVWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/c18B8zOIfOznDMXnKS8nA96mVWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:e2:66:87:d4:c2:e3:8f:f0:2e:a4:3f:f2:08:eb:23:05:13:
         90:23:0a:e4:09:8a:31:be:82:d8:9e:cf:d3:e6:c6:8f:a5:69:
         92:ef:1a:fb:ea:1b:31:1a:ab:1e:ee:74:3f:33:f8:18:2e:e1:
         b2:1b:01:e0:21:ee:6a:73:37:c7:13:9c:0d:86:49:46:d1:64:
         e7:62:13:77:b2:c6:bb:11:42:eb:b9:8a:fe:9d:80:f1:b4:44:
         54:96:63:79:36:ac:b8:5a:9b:ed:23:2f:13:39:45:d3:51:18:
         09:c3:af:3e:de:d7:03:56:e1:65:c0:c3:50:9d:7b:9d:e1:61:
         9d:1f:91:1c:2f:a1:64:d3:29:eb:95:e2:20:fe:0e:99:96:d2:
         14:d0:17:01:70:08:e1:0c:6c:bd:f4:ff:62:19:e9:3b:ed:66:
         74:3f:c5:4b:43:bd:0e:58:73:b2:54:36:dc:49:da:06:bf:3f:
         e7:0b:fd:49:76:69:12:5a:66:9b:1a:f6:a1:a3:13:a7:65:6c:
         8c:9c:8d:99:12:7f:8e:f2:fa:dd:c0:67:5a:1f:be:6c:29:5e:
         c2:88:5d:c1:71:d2:28:bd:95:a1:ef:2d:fc:c8:dd:4d:4b:4c:
         6e:93:80:55:c0:b7:d8:db:21:1e:fa:e1:fa:4f:d6:ba:40:69:
         90:45:0f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:56:19 2026 by rpki-client