Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
File:                     7C6CHYjeegETQXBCAjRvfCu5688.mft (raw, json)
Hash identifier:          IzVxRcZSC8n6ZvpF91KiRMukNqKuDpmMHjkLbQ+5FRo=
Subject key identifier:   81:B9:7F:F1:AA:E3:B1:FA:E2:E1:0A:A2:FB:FE:91:0F:92:F8:5F:F3
Authority key identifier: EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF
Certificate issuer:       /CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
Certificate serial:       019F9248C1DCAFFCA6C4AEFB13834123553F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
Manifest number:          1791
Signing time:             Fri 24 Jul 2026 04:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:09 +0000
Files and hashes:         1: 7C6CHYjeegETQXBCAjRvfCu5688.crl (hash: 8UgSh5TAFmVLx1RbRCcIwI6GEPhRUKrtLTwb752zrzA=)
                          2: 85hHBUSy8Y2Mc7vYU29WfYNmQrs.roa (hash: hECfZ/fS6sGLnY/Td9cShCJ8J6B4XtgL9wvigKz0Uo8=)
                          3: LBH8ztFntHz17Sq_yk4WOvpZIOI.roa (hash: tYe43lNMSz/FpD84gMI0wKiTsaNLmmzOrcD2RhXlgfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:c1:dc:af:fc:a6:c4:ae:fb:13:83:41:23:55:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec2e821d88de7a011341704202346f7c2bb9ebcf
        Validity
            Not Before: Jul 24 04:01:09 2026 GMT
            Not After : Jul 25 04:01:09 2026 GMT
        Subject: CN=81b97ff1aae3b1fae2e10aa2fbfe910f92f85ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:04:1c:91:04:fe:83:d1:d1:d4:80:fc:86:
                    3f:fd:5f:29:69:6b:51:26:c5:c6:63:65:35:b2:8b:
                    de:f0:91:8c:dd:fd:08:da:21:79:41:3d:32:61:5c:
                    40:86:d6:99:23:4e:ba:cb:2e:89:ee:10:61:2f:11:
                    bd:e5:20:6b:6c:5b:4a:ac:a7:8e:7a:08:17:2a:44:
                    bc:d4:b7:6a:bd:22:39:d4:ea:8e:64:9e:47:42:ac:
                    15:a4:e2:a1:3c:cf:b2:89:52:83:36:a2:b7:1b:86:
                    5d:08:f7:18:6a:d1:7b:b2:69:f2:37:da:16:12:55:
                    29:cd:46:71:5d:2a:de:aa:c1:f2:51:59:41:72:bb:
                    40:35:79:8a:c1:e9:3d:f6:64:52:31:a5:ee:ab:14:
                    1d:16:88:00:52:54:72:1c:25:bd:5a:c9:bd:58:e9:
                    98:a2:12:39:c3:9b:60:f5:46:83:94:da:a0:d4:24:
                    7d:a3:fc:82:9e:78:04:ba:25:1e:35:cb:b3:63:8a:
                    2e:58:f9:ab:ef:2b:ed:78:fe:b1:a2:b3:90:78:88:
                    0f:b1:b4:8d:0f:67:61:cb:32:c4:0b:11:86:02:4e:
                    67:f0:40:7b:3d:ee:91:47:88:93:77:9d:59:4d:76:
                    f2:39:97:28:5f:53:c7:02:2c:58:50:7f:c3:2a:6e:
                    4f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:B9:7F:F1:AA:E3:B1:FA:E2:E1:0A:A2:FB:FE:91:0F:92:F8:5F:F3
            X509v3 Authority Key Identifier:
                keyid:EC:2E:82:1D:88:DE:7A:01:13:41:70:42:02:34:6F:7C:2B:B9:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7C6CHYjeegETQXBCAjRvfCu5688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/7dda4f-f0c7-4008-9ab9-dfa0b8052614/1/7C6CHYjeegETQXBCAjRvfCu5688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:63:ec:60:3d:ea:ff:81:c1:04:64:8a:e3:97:d2:70:51:6b:
         f4:a4:16:2b:fc:7c:7e:83:a8:76:da:23:23:d1:bd:ab:8d:d0:
         d6:41:aa:b3:30:0d:1d:c2:b9:9c:37:d2:b0:25:b1:28:c5:f1:
         22:65:63:70:25:07:7d:85:b8:99:e0:c2:82:5d:88:14:e4:9e:
         62:df:ae:49:40:b3:31:34:04:c8:f8:24:13:18:48:fa:6b:a2:
         c3:be:0c:aa:78:a3:e7:f5:c9:97:90:bf:55:2f:3e:54:89:dd:
         9e:00:b4:b7:56:6d:9c:0d:d6:11:84:7d:11:78:5b:6b:49:6a:
         46:fe:63:0e:49:95:57:d5:52:47:f2:df:d0:18:dc:dd:00:45:
         52:8c:69:44:a1:29:3e:74:a1:ed:2a:c2:60:f2:e6:26:21:dd:
         94:20:45:cb:ca:73:ef:c6:5a:98:a8:d3:3b:05:3b:e5:20:8f:
         db:b2:b2:c7:87:09:bf:ee:34:80:4e:58:a8:58:d3:d6:5d:2d:
         df:40:fe:8c:b6:0a:0f:5f:63:ec:bf:3c:3e:30:d4:5f:d2:9a:
         d5:3a:32:89:8e:71:6c:81:14:7e:70:08:dd:35:7e:76:f3:00:
         d1:c1:38:44:0c:1a:c2:52:1e:7c:5e:ce:ba:8f:b3:cd:ea:b8:
         ec:18:53:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:00:57 2026 by rpki-client