Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
File:                     p0j74dfTpqpHTeQ_qIXOLQkcUps.mft (raw, json)
Hash identifier:          b9+C8r09ZquPibv3zhmmFeAw6IzozPVDfUNuZbOyHho=
Subject key identifier:   A4:A8:5F:7F:A8:50:18:41:DF:68:D2:B1:AB:AF:C4:C7:5F:27:03:B8
Authority key identifier: A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B
Certificate issuer:       /CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
Certificate serial:       019F90C7C6842619C8F36C9FEE7FFC5E6057
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
Manifest number:          1718
Signing time:             Thu 23 Jul 2026 21:00:39 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:39 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:39 +0000
Files and hashes:         1: X2Acde_AXJbiIzf4WSQxKTMikWM.roa (hash: BQtrWQacm7ByC/7TCno2qFJsSN/6VxyfhO1qrX07bW4=)
                          2: p0j74dfTpqpHTeQ_qIXOLQkcUps.crl (hash: I/5OpEkGlPaxO2D0CcHdjTZt0cCEYw633ZdQzUw7Uxk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:c6:84:26:19:c8:f3:6c:9f:ee:7f:fc:5e:60:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a748fbe1d7d3a6aa474de43fa885ce2d091c529b
        Validity
            Not Before: Jul 23 21:00:39 2026 GMT
            Not After : Jul 24 21:00:39 2026 GMT
        Subject: CN=a4a85f7fa8501841df68d2b1abafc4c75f2703b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9a:1c:5f:7b:a6:57:7e:f4:91:2d:53:97:a9:
                    8b:21:2b:19:69:41:a7:75:f9:29:09:10:a4:79:9d:
                    2a:56:2c:c1:22:1e:9e:2e:cd:08:be:ee:a8:3f:9f:
                    85:10:8a:3e:32:bd:20:93:15:c5:80:c2:69:bd:39:
                    fe:67:cb:a9:61:ca:de:53:72:60:52:2d:ab:c8:59:
                    76:a7:62:cb:04:a4:03:b7:16:93:96:49:a2:4d:72:
                    61:18:56:03:ef:a2:4e:67:07:f6:15:f9:58:5d:95:
                    dc:75:40:04:20:66:ba:ba:9b:b0:e0:46:0a:bc:20:
                    56:eb:55:f9:af:9e:05:99:6f:f4:7f:4d:cc:d7:f6:
                    67:d4:ca:47:51:ac:48:99:ae:f3:70:30:9b:6f:96:
                    cc:17:27:41:4b:54:6f:f5:0c:26:52:fe:c8:6a:ab:
                    29:48:1d:47:03:d3:cf:9a:bf:fa:e8:f1:7b:39:39:
                    c3:d9:24:f0:17:60:ce:55:49:cb:54:80:f8:4d:49:
                    0c:1e:dc:2b:4a:7b:5c:87:91:e7:0d:74:e2:6b:eb:
                    98:1a:72:2c:df:3e:91:2d:8e:98:9b:4a:50:17:24:
                    cf:9c:9c:31:8d:d5:5e:17:fb:b1:1c:d9:fe:cd:d4:
                    fa:79:b2:95:35:35:0f:87:bf:ee:ac:37:1c:57:97:
                    ec:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A8:5F:7F:A8:50:18:41:DF:68:D2:B1:AB:AF:C4:C7:5F:27:03:B8
            X509v3 Authority Key Identifier:
                keyid:A7:48:FB:E1:D7:D3:A6:AA:47:4D:E4:3F:A8:85:CE:2D:09:1C:52:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0j74dfTpqpHTeQ_qIXOLQkcUps.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/a723d8-d8cc-4e60-85ab-6c9b5c9bfa75/1/p0j74dfTpqpHTeQ_qIXOLQkcUps.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:cb:45:e1:e0:6f:a4:78:e1:d2:f9:a7:04:81:ed:85:27:2c:
         f7:3b:8f:4b:8e:6d:68:d0:6a:6e:aa:a7:df:5e:a4:58:5d:c4:
         c1:52:eb:26:f4:cd:ca:a4:f6:33:5f:f8:5b:a2:b4:ec:d4:c9:
         46:b6:a5:03:29:57:54:bd:7c:1c:d3:f0:40:90:75:f1:0c:61:
         d2:9a:aa:1c:48:84:c1:28:20:33:27:fe:77:94:08:b0:db:9e:
         0b:e0:26:ff:26:c6:a8:29:3c:40:1f:bb:33:88:22:a2:9a:f5:
         f9:90:32:f7:0c:48:1e:ba:af:a9:8f:df:50:ff:76:53:21:ed:
         bc:11:b5:78:54:7e:8d:7d:11:d0:7d:72:b2:18:0b:8b:9a:0a:
         5e:e6:c9:27:1b:23:10:a1:16:93:e1:31:c1:17:4f:55:3c:f7:
         50:22:07:b2:39:64:96:a2:72:6b:d4:18:11:30:47:f7:9b:83:
         c0:6a:0a:4b:89:a4:be:8b:4b:cc:1b:09:03:f8:b2:53:b5:33:
         ad:7f:7a:8d:ed:f3:6a:65:e6:a0:b9:81:38:2a:3f:1f:33:2c:
         3a:08:48:84:b3:a5:4f:8f:35:8e:30:11:b7:23:5c:51:16:94:
         85:c9:f6:f6:b9:86:a9:7e:f5:6e:c2:b9:d2:a7:8d:72:0c:d8:
         38:a2:61:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:53:10 2026 by rpki-client