Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File:                     d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier:          U13shFgqxOrylcXSPSgEKyUlwwIGjXN3VvOqqkRcyYQ=
Subject key identifier:   FC:78:09:4D:B0:1D:5D:80:49:1F:49:57:D9:01:46:F2:78:0A:7D:25
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer:       /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial:       019F94374C8964EF3E222B285783E760D307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number:          073E
Signing time:             Fri 24 Jul 2026 13:01:19 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:19 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:19 +0000
Files and hashes:         1: 1uDiO66z4_GJhppKD5iOYZne4xo.roa (hash: njjChOiFqIrX1FbvslTiBWjd0QGU3XMKBcIu3VrqVf0=)
                          2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: k7wp2IpEhWjQyVEN5cuPox+B8pv3lvbjYDBvv0X1Q4A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:4c:89:64:ef:3e:22:2b:28:57:83:e7:60:d3:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
        Validity
            Not Before: Jul 24 13:01:19 2026 GMT
            Not After : Jul 25 13:01:19 2026 GMT
        Subject: CN=fc78094db01d5d80491f4957d90146f2780a7d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:31:a5:d6:a6:78:6c:8f:e3:55:d8:da:38:7d:
                    e9:d2:34:42:1c:bd:0c:52:ca:0d:fa:ad:ff:e2:39:
                    21:1b:7c:4b:44:0c:9f:c3:e5:19:1f:b0:ab:4b:44:
                    29:d5:26:61:6c:7e:01:0c:41:5b:0a:c2:a8:35:17:
                    73:52:22:1b:ce:b4:f4:ca:18:58:e8:41:5c:5d:07:
                    d8:52:7f:18:55:80:dc:ea:2f:f8:39:21:b2:c8:14:
                    f4:f0:67:51:34:86:02:3e:6e:1c:c7:e2:04:05:f8:
                    a9:f7:6e:b8:ce:40:ab:8e:8e:af:c7:ad:9f:e2:07:
                    4c:3b:4c:7e:d2:09:57:87:ee:2f:63:fd:87:05:02:
                    90:b5:a1:68:fa:db:9e:46:6c:2d:4f:07:67:0b:85:
                    10:6f:51:4e:86:ee:82:3c:94:ec:da:85:27:45:08:
                    a6:71:eb:8d:35:bb:e9:46:69:da:66:51:59:cc:31:
                    2e:7d:a8:4c:15:f9:ba:10:b8:e7:ce:4c:43:0f:31:
                    0a:1a:f1:d3:86:9f:a1:d3:19:b0:c2:06:b7:5b:31:
                    fe:61:18:48:5b:08:f0:df:35:4f:4c:0b:89:b7:b8:
                    8f:d4:0c:7c:ea:85:c1:aa:e5:0e:3b:c8:e8:6d:28:
                    c7:9f:d5:f9:b2:95:a0:a9:0b:1d:68:84:fb:2c:69:
                    c2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:78:09:4D:B0:1D:5D:80:49:1F:49:57:D9:01:46:F2:78:0A:7D:25
            X509v3 Authority Key Identifier:
                keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:64:57:9c:20:c8:71:db:70:34:ef:1a:3e:c7:61:01:4f:b7:
         48:8e:04:79:fa:11:16:94:74:dc:40:4b:6c:9c:e4:7c:cf:ee:
         31:f7:f6:81:65:0e:68:5e:36:75:e6:4f:15:74:aa:bf:95:e9:
         d5:23:4a:05:e1:37:37:fa:54:01:57:48:6a:b0:3f:dd:57:82:
         77:70:3b:bb:c2:77:4f:b6:61:2d:e7:35:a3:95:cc:bd:5c:96:
         c7:1e:fa:0a:4e:80:af:8c:ee:1d:15:13:9a:e0:53:43:9b:60:
         b6:3a:7e:43:aa:5b:4d:9f:66:24:66:05:6f:d9:4f:09:67:37:
         49:93:0a:01:0a:c9:a0:67:e2:23:f2:88:14:20:04:77:39:d4:
         11:72:5d:22:c8:ba:15:05:57:0c:da:1e:7d:87:8f:de:74:58:
         71:a5:85:32:7a:d9:ec:c1:bb:91:e9:45:ec:a6:74:88:e4:cb:
         f2:6b:12:9b:a7:94:b8:e7:0b:d0:5d:7a:2f:e1:04:32:d5:bf:
         61:42:ae:fb:a4:6c:b3:57:70:c6:d4:10:54:97:80:c0:a9:6c:
         87:e6:3f:f7:b9:4a:32:cd:d6:33:ea:55:4b:d2:73:33:17:e7:
         5b:1a:e6:3b:61:6b:c5:15:6e:fa:67:b6:df:32:a4:46:f9:08:
         1f:94:da:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:43 2026 by rpki-client