Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
File:                     srQdL319OFfgdfKk8vnT4ETy5TY.mft (raw, json)
Hash identifier:          7GGS4K5CT3h9nmGsXdKIaY5gV7iTISZx1WsI1pA9BMs=
Subject key identifier:   C4:30:DA:FF:A1:13:B9:BB:6D:F8:67:03:2D:16:D7:18:68:34:0D:18
Authority key identifier: B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36
Certificate issuer:       /CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
Certificate serial:       019F94A4AF11A09D95856F7D6B0EF217C4B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
Manifest number:          09BD
Signing time:             Fri 24 Jul 2026 15:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:48 +0000
Files and hashes:         1: Spy7lYm24U3zdnyHMnurxfa2T6k.roa (hash: JcDra+5Gb+YXgz7R5LBtufPmpQV8nA+XRnuojSfqw4U=)
                          2: srQdL319OFfgdfKk8vnT4ETy5TY.crl (hash: lu2T3/+RiZCHg5+7yrvbN+k/7rv5AUfBl3FFkf0qJAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:af:11:a0:9d:95:85:6f:7d:6b:0e:f2:17:c4:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2b41d2f7d7d3857e075f2a4f2f9d3e044f2e536
        Validity
            Not Before: Jul 24 15:00:48 2026 GMT
            Not After : Jul 25 15:00:48 2026 GMT
        Subject: CN=c430daffa113b9bb6df867032d16d71868340d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b8:79:e6:26:13:60:fe:32:66:4e:65:d2:bd:
                    0b:4f:e2:59:a5:f4:eb:d0:44:df:21:04:a6:b4:70:
                    90:1b:8b:a6:9b:d7:19:32:37:44:bb:bc:5d:07:19:
                    ab:d4:23:7e:cd:50:79:ce:1b:4e:ee:2c:08:78:84:
                    8b:09:d3:2a:a8:19:88:8e:43:f8:7b:6a:c7:e6:17:
                    1c:e3:10:4c:6e:af:2a:e0:38:22:f2:da:7e:bb:a8:
                    39:9b:41:bd:7f:e6:7b:85:b9:d7:36:19:f4:c0:6d:
                    a8:e2:c9:16:a1:ad:44:28:db:60:20:65:51:df:40:
                    29:bd:3b:77:69:a9:cf:b6:fc:50:ee:b1:7e:db:6d:
                    bb:5e:38:64:d4:b1:e0:90:64:da:9f:36:14:cc:69:
                    09:4b:0f:ff:be:c2:b3:ef:7a:4b:a2:d9:05:4a:15:
                    df:56:55:be:d8:b6:b8:e6:8e:b6:42:82:7d:fb:a3:
                    17:77:3e:80:ae:57:02:ea:b4:a9:53:a1:59:6c:44:
                    e3:62:a1:c8:36:85:5c:db:cd:b1:ad:fb:c7:7c:24:
                    99:b3:f5:85:6c:f8:3a:6d:a7:86:07:a8:4d:e5:be:
                    4b:ba:25:80:62:ef:fa:76:b2:7d:20:0e:b8:e0:22:
                    9b:81:a1:92:df:0b:fc:2d:2c:1d:2c:7d:be:97:00:
                    de:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:30:DA:FF:A1:13:B9:BB:6D:F8:67:03:2D:16:D7:18:68:34:0D:18
            X509v3 Authority Key Identifier:
                keyid:B2:B4:1D:2F:7D:7D:38:57:E0:75:F2:A4:F2:F9:D3:E0:44:F2:E5:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/srQdL319OFfgdfKk8vnT4ETy5TY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d77ac4-dc66-434f-8423-c9e20ccd476f/1/srQdL319OFfgdfKk8vnT4ETy5TY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:66:31:29:6c:c5:c5:a5:9b:18:e9:26:17:63:8a:05:8a:07:
         00:37:e9:c9:c0:45:6d:5f:7e:cb:e6:e7:14:cc:2d:be:46:ef:
         d7:5f:62:d6:59:af:61:7e:39:6b:a1:6d:1f:3e:51:b7:a0:af:
         d2:3f:01:af:2b:5d:75:d6:e6:40:90:8c:b1:1f:8a:bd:9b:60:
         d2:99:73:3a:a9:19:61:98:34:1b:8e:e0:4a:6d:38:28:ef:c3:
         a3:77:1e:79:24:de:69:d9:92:b9:2c:cb:fb:bd:ab:46:89:ce:
         26:6e:55:7b:7f:21:2e:60:3b:8a:05:da:d9:91:9c:ad:22:e9:
         2f:1b:f9:2f:fe:5a:4f:79:73:9a:ee:18:38:5e:dc:5b:49:40:
         25:70:4d:8d:cb:0c:f7:d8:3d:2e:f4:9b:db:95:09:1c:72:e1:
         75:20:bf:68:f4:e5:87:45:57:3f:a8:ee:68:52:0c:50:1e:d2:
         cc:93:ab:e0:59:0f:7d:6c:93:0e:e7:81:54:0a:f6:3f:77:15:
         05:ee:26:e1:fc:72:46:b5:2a:33:19:66:36:a3:db:35:4b:ba:
         9d:0c:ff:45:a0:21:02:ba:1c:d7:1c:71:40:2c:8e:3a:9e:52:
         98:1d:12:28:59:a6:85:b9:b5:f8:e7:ce:22:64:ae:d7:27:f1:
         54:18:b1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:01 2026 by rpki-client