Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
File:                     sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json)
Hash identifier:          DoEd9o6ErHPfTJekSyOXjaT3AioUJ4L/+GSnEp6W4EU=
Subject key identifier:   3C:0F:0E:78:BB:C4:DE:77:F4:B3:C3:9E:C1:3D:53:CB:78:7D:21:57
Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74
Certificate issuer:       /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
Certificate serial:       019F9211371BC63EAE017433EFB15F5FFCBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
Manifest number:          02EB
Signing time:             Fri 24 Jul 2026 03:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:29 +0000
Files and hashes:         1: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=)
                          2: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=)
                          3: EJPyee4QWkKrpHzgKl_UfRlSQ4k.roa (hash: UftVkTCY6ZFe1hDTUIcqILq/ecU3GKzDfqSPxTid57Y=)
                          4: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=)
                          5: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=)
                          6: dNXYaX82NX51pSFvpQpCqsG2lPo.roa (hash: 35cWo5gZ7UeSrOUHr9i+uJyPsLCbl8OtXgjF+qTOIsg=)
                          7: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: w1VFpURZcQi5aPsX1TtXdjD0VkGM5WJR0TFvyPouV1w=)
                          8: wJQhpUcYRE9YbrS1hrhEwceSpsw.roa (hash: pKy+CJ0dPgWvUI++SXNGLH/W/2Tj4mADcaq6t4MuXsE=)
                          9: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:37:1b:c6:3e:ae:01:74:33:ef:b1:5f:5f:fc:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974
        Validity
            Not Before: Jul 24 03:00:29 2026 GMT
            Not After : Jul 25 03:00:29 2026 GMT
        Subject: CN=3c0f0e78bbc4de77f4b3c39ec13d53cb787d2157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:54:33:88:84:ba:a7:c0:08:e8:d9:20:ca:6c:
                    3e:b4:c5:98:d0:f1:f6:2c:31:fa:e4:f5:ee:d7:93:
                    20:c3:f2:76:87:4b:6a:87:05:50:cf:12:5b:31:12:
                    77:ed:37:73:30:c0:57:ac:d9:52:64:f7:9c:64:1c:
                    34:44:d8:ab:ad:28:83:8b:3e:ae:3f:86:d7:1d:76:
                    fb:3d:c6:f7:50:75:c7:91:b0:bd:3d:bf:2d:be:b0:
                    f7:28:e9:e0:6e:cb:c2:aa:51:bb:52:dd:8a:99:00:
                    40:14:e7:f1:17:57:df:93:a9:cb:68:f6:72:92:f9:
                    f0:ea:ad:e0:79:3f:f7:37:70:8c:ac:a3:56:9f:15:
                    18:fd:70:c9:38:cb:aa:a8:21:4f:0d:10:e3:01:de:
                    0b:1e:69:9d:ac:ce:b3:5c:e4:3b:3d:00:b3:b2:68:
                    b6:0c:e6:7d:44:88:63:3c:28:5d:77:b9:e9:f9:44:
                    e3:b7:d1:2b:c3:72:c0:6b:6d:07:7d:42:d7:c5:b6:
                    fe:c7:08:a8:75:b0:52:d8:06:5a:0c:f3:11:c1:3c:
                    f4:9b:df:e7:6f:0a:20:52:60:57:b3:35:ae:46:17:
                    c5:fb:fe:bd:cf:50:fb:c3:17:c4:46:47:3a:c0:f0:
                    c9:61:9c:4a:23:20:f1:d7:94:03:8f:82:23:02:df:
                    18:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0F:0E:78:BB:C4:DE:77:F4:B3:C3:9E:C1:3D:53:CB:78:7D:21:57
            X509v3 Authority Key Identifier:
                keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:a6:a8:17:d8:cf:da:ef:2f:77:77:f9:0e:98:b6:c3:7a:
         47:6d:bf:21:1f:7b:67:3b:e0:56:c8:d2:55:b3:ac:24:f8:da:
         e3:7a:7e:b0:c9:e6:1b:d6:bc:74:45:af:d2:b5:8b:fc:c9:48:
         60:d5:11:2d:22:5f:02:2d:8f:20:c5:c9:8e:7c:d2:17:8a:f9:
         4b:5f:77:25:e5:64:f7:44:35:25:7c:b7:5d:30:3a:cd:64:00:
         4c:80:79:1a:fd:bd:7f:70:99:24:7e:8b:e6:e4:6f:d6:3a:7a:
         f4:e5:ad:33:09:d4:ec:99:42:68:03:0d:3a:db:5d:a1:16:0e:
         c3:20:c9:84:d6:9d:b8:e6:52:12:a3:17:20:5f:a0:e8:98:4b:
         d1:f7:19:53:53:23:a8:a5:82:0d:dc:0d:df:33:4a:57:26:c9:
         d1:32:5d:2c:fe:a9:10:54:54:40:c4:7d:6a:42:12:35:00:04:
         fe:87:a1:f9:cc:57:76:37:f6:66:1f:9d:b0:4d:4a:82:df:ab:
         66:05:6f:c6:5b:61:8f:b3:64:d7:7a:c8:bd:be:67:e1:b2:bf:
         e1:7d:3a:07:01:3b:ea:bc:bb:71:f2:1d:41:b7:41:40:a7:88:
         cd:cd:e3:b7:90:2e:24:fe:a5:df:8c:25:5b:83:83:0d:85:29:
         c4:1c:36:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:07 2026 by rpki-client