Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
File:                     gI4jjjDct1l1n7ijlNniEaKLnYc.mft (raw, json)
Hash identifier:          wqTUhYiu+8KAGOt1hvUmDOyES9ONemx2o0w3XkeDylo=
Subject key identifier:   69:B4:5F:84:92:5C:F5:AB:A3:2B:AD:F9:2D:0B:A8:DD:94:2C:BB:1F
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Certificate issuer:       /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial:       019F95B74411C77087C7E6FE8E475D02B48D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
Manifest number:          1982
Signing time:             Fri 24 Jul 2026 20:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:43 +0000
Files and hashes:         1: 6K4rT6VCuHtrpHkb6XBvfHzGcts.roa (hash: rcgp9RRt2ZMAtK8hgAgj71whrGluIkO7wLBZN77JUi8=)
                          2: 7H4eovIj7ri5a4YGeazmMZD4xU0.roa (hash: VG6bKSTJ2U4Zytr4AzXi09offh8427MPVKqZ8LWMbF8=)
                          3: C7uI61q8dQVU_3fsVaMtwm-r8h4.roa (hash: j2Y8Kx7Kbyv7kbNZrbep36yCj0SwPksojFDFgp+to00=)
                          4: EsSyiXnC44Xl8fO-3wz0FTDHjxQ.roa (hash: RCqvNh4i3hyPp+Oe+ChUyeaHuVCxT8Wqs4E9vLq+3Wo=)
                          5: TJcBJB8tMVwgDD5VmpPQL_K5MUc.roa (hash: SHSnvcEgiE0T0omJOGKRwDEpcU7UTWSZBFiCrzeaHso=)
                          6: aLeBPPf7ugWBDmXZtGstFAYR5d8.roa (hash: WCjwJf715go5YX++trIsBUfbf3PUAGqQfhdqAZp7NwQ=)
                          7: cFNkpBBI6QgxmqXdNxyE4i3ZWnQ.roa (hash: Tq1d2AHFpLFiKaiI1LAqCi5XawIGiQzqgQJ+E8gkzHI=)
                          8: gI4jjjDct1l1n7ijlNniEaKLnYc.crl (hash: CFE3ZTjWB4t7LMknEGiy97OekONmlOz7AWR8WeMj0jg=)
                          9: rqerlNmrLuq2_e9gT61g1lPKhKw.roa (hash: baZcLs1YVGyRyT3FzbboyPeCvMFaa7u6Y1jXFJdiXQI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:44:11:c7:70:87:c7:e6:fe:8e:47:5d:02:b4:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
        Validity
            Not Before: Jul 24 20:00:43 2026 GMT
            Not After : Jul 25 20:00:43 2026 GMT
        Subject: CN=69b45f84925cf5aba32badf92d0ba8dd942cbb1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:42:b2:03:43:cc:5a:24:b5:31:4f:f0:ce:86:
                    14:ca:22:1d:cd:20:a8:23:dd:8a:31:bb:43:5e:67:
                    8f:86:d3:b0:d2:79:81:41:6d:5a:a5:06:9c:7c:ac:
                    ba:c4:78:2c:8d:d4:cb:4e:3a:40:5a:82:6c:92:35:
                    94:c8:3e:9e:3f:0f:73:4f:d0:51:05:2a:0d:48:ac:
                    c0:cd:7d:5e:fd:2f:3f:c7:36:8c:5b:8e:5f:b7:f6:
                    3a:a3:f7:a5:95:a1:08:96:a5:b1:59:a3:29:9a:33:
                    de:56:a3:dc:32:c8:9d:29:47:ad:68:ee:3c:ee:4d:
                    ab:0e:be:35:b9:c5:32:62:53:c7:e9:2a:6c:c9:fd:
                    9c:dd:07:4b:f3:0a:e1:38:0f:8d:ea:bf:6e:6d:fe:
                    39:91:b5:78:ba:16:3f:f0:5d:f7:d6:7a:39:96:54:
                    d4:17:22:01:df:35:de:56:91:8c:3e:7d:ec:b1:26:
                    d3:06:f6:97:13:87:e8:7a:21:d0:07:80:78:99:ec:
                    4f:58:69:31:e0:a1:c2:99:32:34:f4:7e:c9:3c:73:
                    0c:bf:10:d0:fe:3e:ed:e0:f4:09:b0:bf:f7:1e:ae:
                    90:65:e8:3a:6d:85:2d:fc:0f:3a:e9:20:c6:71:26:
                    02:4d:73:34:9a:c4:44:30:c0:01:7a:6b:34:c8:ec:
                    82:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B4:5F:84:92:5C:F5:AB:A3:2B:AD:F9:2D:0B:A8:DD:94:2C:BB:1F
            X509v3 Authority Key Identifier:
                keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:b4:ab:7d:d3:b8:c4:dd:fd:15:0b:9e:cf:7a:3a:cd:41:27:
         0d:9e:ca:c7:e2:32:25:46:79:a8:50:11:f2:17:66:5f:89:2d:
         96:7e:67:a1:99:b3:e5:63:c3:0d:5b:81:9a:ed:61:5c:b9:35:
         8d:7f:89:0a:19:a4:17:88:71:3f:eb:c6:3b:1e:16:37:e0:04:
         bb:75:39:d2:f1:ba:3f:b1:35:82:ba:78:3e:be:75:aa:ad:c7:
         1d:96:19:0a:18:ad:af:02:8f:fd:36:31:ec:66:3f:3a:3c:c4:
         a7:9d:9b:23:6e:71:11:6a:e0:d9:33:d9:2e:94:ef:ae:44:55:
         23:dc:fe:08:ef:eb:c5:1d:b2:63:13:a8:40:bd:25:8e:77:60:
         33:10:48:77:a5:92:6b:3f:3b:8c:bf:15:b1:d8:0d:28:d8:3c:
         33:9e:ca:4b:bb:88:33:69:e0:ac:92:f3:ac:05:a6:1c:e2:dd:
         9a:26:aa:43:15:1d:67:3c:15:ed:12:5c:e1:c5:e2:4d:96:99:
         6c:2c:c5:eb:12:0e:81:dd:00:a8:45:df:6e:71:a3:9b:f9:2b:
         9e:55:65:bc:76:5b:f6:03:dc:14:99:90:59:aa:66:79:d7:a7:
         70:17:c2:ef:55:a8:f3:87:62:ff:32:34:18:d7:51:9c:5b:9b:
         a9:0c:df:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:00 2026 by rpki-client