Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
File:                     G95wrxU0lDVJRmSKzWQRY-KvGx0.mft (raw, json)
Hash identifier:          Sv6gr+BMEGRQYrO4Z+Olv3r6v95gXdWKlrttdem1bP4=
Subject key identifier:   7B:2C:E0:C2:F5:DA:BE:47:5A:73:1F:DE:33:54:98:78:DF:EB:75:4C
Authority key identifier: 1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D
Certificate issuer:       /CN=1bde70af153494354946648acd641163e2af1b1d
Certificate serial:       019F93FF9EE4D06E2F5CD5F9226702352221
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
Manifest number:          0ED3
Signing time:             Fri 24 Jul 2026 12:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:30 +0000
Files and hashes:         1: 1-G_9qaTlg9_9ZXzg69NS2bmEGWE.roa (hash: +lDVdHNQmmTIYvQZgxKxtZPdzwOYciN1IB8yFnfGP4A=)
                          2: G95wrxU0lDVJRmSKzWQRY-KvGx0.crl (hash: 4ddM/sc1SwgYrUpwISNIsA8Mt8v6pXBMuM7MJhSJLXc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:9e:e4:d0:6e:2f:5c:d5:f9:22:67:02:35:22:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bde70af153494354946648acd641163e2af1b1d
        Validity
            Not Before: Jul 24 12:00:30 2026 GMT
            Not After : Jul 25 12:00:30 2026 GMT
        Subject: CN=7b2ce0c2f5dabe475a731fde33549878dfeb754c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:67:cc:c2:90:1b:ef:99:0c:79:98:90:fc:e1:
                    2d:0f:33:5c:26:8f:71:3e:29:c3:3d:6b:ec:72:19:
                    67:19:2e:3c:e9:92:f5:33:79:d7:c0:1c:15:d6:6f:
                    56:1e:3d:a2:d3:28:01:a1:a1:31:61:eb:a6:f1:28:
                    e6:4a:34:d7:a4:39:27:3c:1a:63:d2:13:f1:e4:db:
                    d5:88:38:fd:0a:fb:45:34:47:f8:54:41:fc:43:d8:
                    47:40:fe:72:26:13:e7:6c:4e:61:f5:51:4e:61:55:
                    f8:b2:2b:aa:71:26:c1:6c:e2:6b:1a:58:aa:fb:91:
                    c0:bc:37:8b:b5:11:2f:f5:ae:31:89:c6:dd:1e:b4:
                    03:6e:00:3b:9a:ea:44:bb:fc:f0:88:72:60:66:c9:
                    a6:cf:4f:38:f5:d7:dc:8b:d6:49:bb:7a:26:56:b3:
                    79:f8:25:47:e2:7d:f2:fd:94:41:66:17:e9:8a:e4:
                    06:95:2d:b0:f7:d7:e0:0d:92:da:b6:f4:86:18:26:
                    65:d4:cb:94:5c:ca:6d:15:53:75:5a:3e:42:62:5b:
                    9a:62:10:48:9f:e5:b5:0f:fa:4a:f8:c8:d6:56:86:
                    41:cc:1e:84:04:46:74:33:d8:ea:a4:d1:56:f8:90:
                    66:29:85:df:7b:92:db:8a:fe:a3:77:45:b4:ea:dd:
                    a0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:2C:E0:C2:F5:DA:BE:47:5A:73:1F:DE:33:54:98:78:DF:EB:75:4C
            X509v3 Authority Key Identifier:
                keyid:1B:DE:70:AF:15:34:94:35:49:46:64:8A:CD:64:11:63:E2:AF:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G95wrxU0lDVJRmSKzWQRY-KvGx0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/148eca-c39f-4673-886f-ecf82302f726/1/G95wrxU0lDVJRmSKzWQRY-KvGx0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:3a:20:7d:17:f5:88:40:f5:8b:db:2e:6b:66:09:18:4e:9f:
         0f:e7:05:58:4e:0f:6e:14:35:0a:17:72:27:9f:81:41:34:0d:
         14:00:90:30:e4:d4:90:27:29:a7:57:77:53:bf:39:79:8b:fd:
         ff:b4:ca:ad:b1:95:61:42:bc:d5:b4:13:4e:5d:76:3c:0c:c8:
         04:c4:38:10:a5:97:87:b9:45:f3:53:dc:e6:31:b2:86:7d:e1:
         7d:75:d7:aa:20:df:87:2a:4c:d0:cd:f0:02:a7:9d:17:13:df:
         84:34:e1:18:73:95:50:68:23:d8:f0:e9:c5:1e:a9:b6:74:a7:
         45:f5:db:12:b7:18:09:a4:cc:88:c6:92:8d:a1:a6:b4:84:22:
         fc:ee:f0:b4:4a:6e:1b:b7:9d:c9:84:4d:08:c4:b5:4d:08:b4:
         e8:89:65:d3:5b:25:94:ac:04:98:c0:21:d7:9b:69:e1:70:2e:
         5e:94:50:89:c4:84:6f:ab:c8:4e:8e:44:17:2a:8f:a3:de:28:
         a7:a0:dc:cb:ae:db:b5:f5:a8:94:cf:49:da:72:bd:11:b7:31:
         b6:8d:82:5c:c4:b8:09:e1:79:53:ca:93:ca:b2:12:43:8b:24:
         4e:0f:8c:82:87:fa:12:ca:73:6f:e5:a4:18:1b:fa:db:97:e1:
         1e:48:0e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:34:19 2026 by rpki-client