Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
File:                     e71RJyBktjssZjwClroR216iOMA.mft (raw, json)
Hash identifier:          Yni5Jbshs+HnqIWE139VBTtlUVB66DOgvg7vwU6LBd0=
Subject key identifier:   7C:16:5D:B2:99:E3:9B:8D:3C:36:BD:86:92:10:20:A3:28:BD:9A:42
Authority key identifier: 7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0
Certificate issuer:       /CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
Certificate serial:       019F91A4253F69B1647CB7B16E72FA523B12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
Manifest number:          19D1
Signing time:             Fri 24 Jul 2026 01:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:21 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:21 +0000
Files and hashes:         1: I2q3ifUktwdWLFVk814q3GS4fWI.roa (hash: IGOlAHTyV8D50YrVyxyBur7sPUQLiEB5K2gkPY8V5KM=)
                          2: OxGf8ePayJwU09gGZnySyoA8iyo.roa (hash: yf38tU7zRVwzX10bjvQIj5OiLgW6pM5L8OevnEJQOXA=)
                          3: RVARB5gmjTf2RYyiXEPOpOXxCDs.roa (hash: K6dew7DJ4uzjFiJigW12hfzcSGSynvBz3c731CNk5sM=)
                          4: Tn1byzDG3LC_-4W5cdtymqE-7H8.roa (hash: Lg0SZJ99rab4Y0en6j2xpoNxdMlIboyOteh0f0kPzyU=)
                          5: YueSZbKV98CmzxsiRfWA83jDNEs.roa (hash: pu97V45FIqBvOF8XHHzv+H1DedOkRlyDXAiuHDoYLCw=)
                          6: cGSyEqlaNLY1LymfACjH5x7qwiY.roa (hash: PPsjXk3d3JTucJBSEkB9JMB6kS1QWHypumoBDsX0uds=)
                          7: e71RJyBktjssZjwClroR216iOMA.crl (hash: aUpfAo+P+Btd4ZpSrMm3GDQIltIZZT6dqxQYHAJXFeo=)
                          8: gne3kq1o-I5H5isdKeVnYHfgRM8.roa (hash: OHMcztr6MiSOs8pzNesHKIFuwuf6t31tDx5kJSWgBCw=)
                          9: oeuzQUYyPkW-V2UkOlxP_jVk-4w.roa (hash: c4HWnVLhY5gwzEC9ub/fPbXgeg83cue7m376DrPhXoA=)
                          10: w2zX0OlEApQBeN-eJRqrMs7-KhQ.roa (hash: VAl4aNgTKdrb4Wh3EXu5ag7LbozTNcCxOnMz/M31Mvo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:25:3f:69:b1:64:7c:b7:b1:6e:72:fa:52:3b:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7bbd51272064b63b2c663c0296ba11db5ea238c0
        Validity
            Not Before: Jul 24 01:01:21 2026 GMT
            Not After : Jul 25 01:01:21 2026 GMT
        Subject: CN=7c165db299e39b8d3c36bd86921020a328bd9a42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:0f:ee:db:da:df:1f:b4:33:0a:b1:5d:82:
                    7b:52:41:7a:b5:7f:3c:60:62:c5:df:70:a3:34:2a:
                    93:4b:ad:59:4a:c6:52:1b:91:31:1b:c4:78:bf:da:
                    f3:94:20:f6:36:a6:fb:13:79:e1:dc:00:70:7a:e8:
                    bc:4f:c9:5c:6e:dd:e4:dc:bb:ff:0a:62:7b:d1:fc:
                    92:69:1c:fc:f9:d0:04:cb:ce:3c:27:11:1e:8c:81:
                    3a:54:10:ab:56:b7:98:7d:dd:cf:5d:34:3b:41:e1:
                    79:76:a8:cd:10:f7:50:ad:a9:46:25:b3:22:df:fc:
                    3c:87:c9:03:fe:dc:d5:46:a8:70:d3:c5:da:e6:b3:
                    9e:41:b9:45:2d:20:cb:12:94:c0:c6:68:a4:0a:34:
                    63:58:75:7c:50:e8:d3:ad:37:e7:f0:a6:18:11:85:
                    03:93:61:8c:e4:2a:8b:ac:4d:5b:fe:eb:61:74:f9:
                    55:d6:04:30:d1:5d:28:08:ce:6a:a0:9a:d2:44:0b:
                    c4:89:01:88:ff:f3:6a:dd:2f:9a:50:92:ef:85:af:
                    aa:e0:13:d4:6d:73:b9:6e:71:35:59:9c:bd:8d:f3:
                    28:dc:a1:fc:86:4e:35:46:bb:01:36:1a:c2:64:72:
                    9b:42:a7:ee:22:46:97:d9:a6:ae:0e:2c:ad:da:e4:
                    6a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:5D:B2:99:E3:9B:8D:3C:36:BD:86:92:10:20:A3:28:BD:9A:42
            X509v3 Authority Key Identifier:
                keyid:7B:BD:51:27:20:64:B6:3B:2C:66:3C:02:96:BA:11:DB:5E:A2:38:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e71RJyBktjssZjwClroR216iOMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/b82a06-ab0d-4adf-8a85-97c9aab828f2/1/e71RJyBktjssZjwClroR216iOMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:86:a7:92:58:17:ee:83:e0:b2:19:53:30:b8:2a:55:66:40:
         82:b5:61:a4:5c:f9:82:6c:c5:4d:48:f3:43:65:74:10:75:c1:
         7d:50:84:a4:55:cc:2b:bb:69:7f:2d:1c:a3:67:03:df:a4:0f:
         d1:6b:51:05:b0:7a:2c:bc:6b:e8:2c:89:38:cf:5d:e5:ac:ea:
         d3:e7:3d:eb:31:0a:70:0e:9a:18:a8:e9:8f:d5:4d:2f:0a:87:
         26:3c:1c:ce:00:9d:86:ca:48:f1:dc:3f:13:0e:bf:cf:5d:b4:
         02:f4:e3:18:9d:1a:b8:6a:b0:86:f6:89:42:75:64:4d:9c:ac:
         80:4d:d0:6e:c8:80:8c:24:fb:52:5e:d1:a7:69:16:4d:e2:b0:
         b1:ea:90:9a:9d:d6:b6:01:40:5c:76:fa:0c:4d:29:d1:9d:d1:
         79:f7:6f:07:46:03:d9:a0:e2:32:07:23:4b:86:26:a5:23:ef:
         5d:e9:42:99:21:22:0f:6c:ab:9d:bc:48:ff:d4:e9:40:2b:8a:
         d4:2d:d0:65:0f:55:35:7f:e6:d6:89:17:4c:35:e7:49:9c:d6:
         01:38:0b:05:07:2b:0c:27:fd:6f:a7:71:02:4e:04:68:38:35:
         6a:19:4a:3d:58:c9:f5:74:32:d4:ac:ff:9d:5a:e7:cc:89:0f:
         b5:98:0a:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:38:31 2026 by rpki-client