Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
File:                     CfDczrdPEYWs2XruqsJd2l6bCTY.mft (raw, json)
Hash identifier:          afzCyY/modRYADPk3+OFKO+A5iWIVhxdXd1K50Ukyvg=
Subject key identifier:   B7:83:3B:4A:25:59:AA:2F:0A:8E:FD:A5:7E:41:D0:EE:0C:1A:DA:C6
Authority key identifier: 09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36
Certificate issuer:       /CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
Certificate serial:       019F916D2874DDBD5D07D8A3D9F01AB53692
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
Manifest number:          1591
Signing time:             Fri 24 Jul 2026 00:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:17 +0000
Files and hashes:         1: 1-0vVi4FHHAdgEAN-aAZqxiCjS0I.roa (hash: OTTvBLhkOcop4Nbi1DHyFcQk24Pft/t6CQKmbEUIG7Q=)
                          2: An2l5nFXJ60Dmnc7ytV8xeoA-4w.roa (hash: XripkKF1BDgNijV9Sww4y4Pa3QzTCZtDgL7y8YpoE00=)
                          3: CfDczrdPEYWs2XruqsJd2l6bCTY.crl (hash: 7wCSHhZLoWIQCRALTwYpDK48elZpZ1BWoiNhXKDl7FQ=)
                          4: DtNjMaX-knG3kL803vSueqhEdMU.roa (hash: D5yJVp5o771p+zwhuuRghzaJUbXhIq0JcefHW8i9ex0=)
                          5: aEg8pKYRLzgHoBTbcFWlM2bc9cY.roa (hash: /Iyi+dntnfLdprySjcri6ap8bjxvS/nEOkhR72Tr4I4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:28:74:dd:bd:5d:07:d8:a3:d9:f0:1a:b5:36:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09f0dcceb74f1185acd97aeeaac25dda5e9b0936
        Validity
            Not Before: Jul 24 00:01:17 2026 GMT
            Not After : Jul 25 00:01:17 2026 GMT
        Subject: CN=b7833b4a2559aa2f0a8efda57e41d0ee0c1adac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c0:11:28:b2:5d:0f:37:5c:91:f0:8f:98:00:
                    2c:68:74:ca:0e:02:8b:a9:bb:0c:b7:8e:5b:31:80:
                    20:34:fb:5b:f2:95:54:60:f6:81:1d:0b:e9:8b:de:
                    b9:90:bc:9f:3b:36:7a:b4:48:fa:93:bb:a9:7c:95:
                    aa:56:65:5a:fe:63:e2:43:4e:68:35:f4:5d:9d:84:
                    81:77:82:3f:85:d3:ae:5d:e0:9d:f6:6c:7a:ba:87:
                    75:f1:a7:50:23:68:d5:e9:ea:c5:4b:71:d8:f6:9f:
                    c6:db:34:42:1c:9d:1e:49:21:e4:35:aa:90:5e:2d:
                    a6:a3:a2:62:57:6d:d5:57:13:d4:28:83:f2:02:10:
                    24:83:7c:19:27:d1:e5:1d:a7:91:92:0b:fa:3f:87:
                    34:a5:19:f7:93:c5:5a:b7:14:c9:69:99:68:48:e3:
                    5e:8f:49:5c:2e:08:01:b7:fd:dd:64:e1:d5:d6:bf:
                    1e:06:bd:a2:18:19:af:bd:15:d4:be:a7:69:b8:24:
                    69:d3:d3:b8:6e:0f:a9:ce:fe:cb:0a:a5:d0:2d:88:
                    ba:3d:8d:10:16:e6:1a:f7:74:45:dc:79:1e:c8:e8:
                    2b:bf:0d:cc:3c:c7:d3:57:13:f0:39:cf:02:ca:0c:
                    ca:36:75:c1:05:53:0d:b7:97:2b:47:b0:d6:7f:cc:
                    66:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:83:3B:4A:25:59:AA:2F:0A:8E:FD:A5:7E:41:D0:EE:0C:1A:DA:C6
            X509v3 Authority Key Identifier:
                keyid:09:F0:DC:CE:B7:4F:11:85:AC:D9:7A:EE:AA:C2:5D:DA:5E:9B:09:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CfDczrdPEYWs2XruqsJd2l6bCTY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/45ac0f-383a-4eb4-b188-996189f9ce14/1/CfDczrdPEYWs2XruqsJd2l6bCTY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8e:48:e9:3e:f5:12:18:53:5c:cc:91:fc:85:67:8e:41:98:
         c0:04:03:58:d5:ed:20:a5:90:41:ed:ad:aa:62:98:de:6f:17:
         cb:2d:e8:2d:da:bf:cc:86:1b:74:55:e5:13:2e:f7:e6:c2:55:
         a8:aa:fe:df:ff:87:56:ff:97:19:c5:78:4a:ff:c4:83:09:a2:
         98:dd:7e:b1:29:1e:51:d9:bf:43:19:3a:38:c0:2e:74:46:d5:
         97:d4:7b:a6:23:f2:39:47:7e:d0:07:30:be:b3:eb:0e:e3:94:
         f8:e7:05:aa:c4:89:f8:ea:03:17:5a:26:11:5d:9a:01:94:99:
         f4:5f:d7:84:d0:33:46:5e:f1:6f:c2:3e:42:50:5e:dd:0b:0c:
         59:ab:29:9d:28:83:47:7c:47:08:ff:4b:7f:48:4a:3b:10:58:
         46:8f:e0:b0:72:b4:eb:5d:78:ff:e4:c3:a6:2a:8e:c6:37:80:
         ca:88:e6:09:cc:0e:3a:9a:69:3a:95:cd:64:18:48:41:d7:63:
         02:0a:64:da:44:68:9b:5a:f0:46:ef:69:c6:7e:e1:65:e4:b6:
         95:bd:28:b9:30:27:7c:39:52:bd:e3:68:03:9c:96:a5:a5:d3:
         01:8a:46:ae:49:5a:09:73:d0:cd:4e:49:30:81:9e:28:37:51:
         27:12:9b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:14:17 2026 by rpki-client