Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File:                     RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier:          1/kXXg/3dwRaXMtAuKq8BjqPPgC/c9eBhp7EKtaf+nI=
Subject key identifier:   E7:98:EF:FE:37:57:BF:2D:23:AD:AB:9F:99:06:14:50:50:4F:4A:C4
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer:       /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial:       019F9624F4D28B7A8A3778889C21D471CB87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number:          19A3
Signing time:             Fri 24 Jul 2026 22:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 22:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 22:00:32 +0000
Files and hashes:         1: FN53nLLPikhn5-nY05Uj4mP3Vj4.roa (hash: qx+sQ+sLjcsImqJ84C9BFMVyXO8qcwSUngwbw+Vb2nk=)
                          2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: EGZ7HcrRDQHyj0E51fDzz3N3+1nMQVJfk0VbZ/itVM8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:24:f4:d2:8b:7a:8a:37:78:88:9c:21:d4:71:cb:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
        Validity
            Not Before: Jul 24 22:00:32 2026 GMT
            Not After : Jul 25 22:00:32 2026 GMT
        Subject: CN=e798effe3757bf2d23adab9f99061450504f4ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:33:68:ff:71:b3:a9:35:18:d0:46:05:4a:e2:
                    8c:3a:79:92:7b:ec:49:29:5b:67:c0:25:77:66:c9:
                    e1:1f:5c:21:5e:c3:8d:8a:bb:8d:83:e5:e6:fc:61:
                    29:f3:09:21:a4:cf:38:73:c4:33:fb:0d:e3:33:bf:
                    c2:96:fb:c0:c3:54:75:6e:bc:2b:65:c6:89:a5:c8:
                    22:fd:a2:e5:49:1e:26:b3:ed:26:20:0d:c6:d0:6a:
                    40:d6:80:31:4a:9e:49:3e:b5:40:e6:ab:c9:d0:1f:
                    ce:1c:ef:39:18:19:51:e9:b2:e7:61:8e:3d:36:eb:
                    7d:d9:1c:3b:11:eb:be:31:ee:4d:16:9f:a6:42:b6:
                    4b:28:b1:29:09:0a:75:01:ac:91:b1:44:e3:06:13:
                    09:5e:c5:f5:71:73:b0:41:6b:17:b3:5f:e5:a1:49:
                    97:e8:5d:80:87:b5:0e:4e:dc:c2:8c:bf:8e:63:23:
                    2e:f4:a0:06:fd:56:56:80:1f:e2:92:8c:03:5e:60:
                    fc:d4:49:98:5a:45:b5:7d:b4:f9:a5:32:97:1a:f7:
                    6b:0d:d5:0a:2c:03:c2:e9:67:d3:63:40:69:92:f3:
                    d9:3e:b8:d3:06:78:23:8c:2e:c7:ca:bf:b5:12:38:
                    9d:76:ae:78:bd:c6:86:5a:22:db:8d:6e:f5:ed:10:
                    26:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:98:EF:FE:37:57:BF:2D:23:AD:AB:9F:99:06:14:50:50:4F:4A:C4
            X509v3 Authority Key Identifier:
                keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:46:aa:c3:b6:b0:1d:6a:44:c9:10:6d:85:c4:5c:b1:76:e5:
         be:7b:f7:7a:5a:e9:6d:70:0e:2d:a7:5f:84:c0:8a:f1:86:b1:
         a0:41:15:17:3d:80:d0:46:0a:f0:ca:d3:5c:74:ba:60:ae:e9:
         c3:44:0e:1a:aa:7e:89:7c:c9:0c:51:ff:f1:66:fa:27:5c:12:
         ff:3a:10:eb:d1:2e:3d:23:b9:25:12:9b:58:44:ab:99:95:ea:
         c5:42:23:2a:37:04:fc:f4:45:3a:9f:14:9d:9d:37:46:be:d2:
         9b:eb:ee:18:ca:c7:e2:f8:59:22:84:03:10:80:a3:d3:42:f2:
         93:07:51:f2:fc:02:35:6f:6e:d9:2b:50:81:c6:8e:ac:3f:cf:
         a1:99:91:18:a7:b2:c9:c6:ac:8c:5b:6d:0c:1e:c6:ca:db:ab:
         40:6e:de:09:5d:82:f3:6e:eb:a5:6c:21:77:f8:48:5f:f1:0e:
         e2:36:4a:4d:10:ae:fa:9b:ab:82:90:ad:e5:a3:34:58:33:3e:
         8c:a6:aa:05:9c:d2:e1:12:4e:19:d5:6a:6b:76:f5:ac:33:56:
         21:1f:92:67:fe:8c:ae:2a:e3:1c:aa:e0:7a:37:22:ec:1f:0c:
         19:d9:9d:f3:cf:f8:ae:bb:88:bb:00:e9:d8:11:15:5a:5e:67:
         0a:3d:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:11:16 2026 by rpki-client