Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          Stvi9gIpHvxwsgEZALLzRVXDme+KPHdeeWcf47mwWwM=
Subject key identifier:   7A:80:25:28:85:9D:9E:58:82:B5:E4:86:BB:B9:F6:89:66:70:46:49
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       019F9022DDFAE822353C8A298FBBFF593D21
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          1366
Signing time:             Thu 23 Jul 2026 18:00:31 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:31 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:31 +0000
Files and hashes:         1: 19tUXmIBT0CwaN98RnLNUR2PP9s.roa (hash: K1yjil8isj1R9gQDHvpPQ5Ql3IVQQMLuQAYFOktzDis=)
                          2: 5eboZEmHhXz6o0PStVWCZPbL7rc.roa (hash: MeF/gO1mMkaKIeIHm4Kk6Ux2q6cjHQDMqps6ZDdVRPA=)
                          3: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: BecrtNB4q4kuDbmAl3M/4rRtGhVL/kdl78ovCXaSOOY=)
                          4: uJnEIKPWJw-326x5IBBMzolFrLM.roa (hash: moDOTpNm3tFCIAX5WqMAOpWVKX58N/OLMiWutEeF9mo=)
                          5: vy3qd6walzhl7tZubGmW08QmYpw.roa (hash: GjD8b7Cc0LKnz1abLpNBhT8sfyli2VNmhuoKhcV1ueM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:dd:fa:e8:22:35:3c:8a:29:8f:bb:ff:59:3d:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Jul 23 18:00:31 2026 GMT
            Not After : Jul 24 18:00:31 2026 GMT
        Subject: CN=7a802528859d9e5882b5e486bbb9f68966704649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:54:f2:50:65:93:4c:17:9a:6e:f3:04:7d:
                    9d:44:63:e4:9e:4d:d5:f1:e3:73:b3:1f:b1:24:9d:
                    91:80:0a:fc:3f:51:5f:02:4a:a7:8e:c5:c4:45:32:
                    ee:7b:ea:7c:8f:83:20:54:ec:a5:e8:2e:3b:31:a3:
                    57:cf:03:a5:c3:c7:7b:b2:e4:ae:d6:a9:09:95:f3:
                    dd:79:2e:8f:c9:06:a8:6c:7c:90:30:02:e4:b4:6f:
                    b1:e5:41:30:ae:eb:bc:99:a3:f7:d0:e2:66:f1:ed:
                    7e:29:8b:d0:28:fd:0f:e4:dd:af:e7:f2:24:8a:b7:
                    56:ff:13:59:cc:c1:c1:9e:d6:70:17:07:d0:1f:f4:
                    19:d0:91:3e:bf:3e:13:8f:e5:ea:a5:99:ad:c8:73:
                    4b:03:a6:94:39:dd:b8:e1:9d:1c:18:7d:bd:d9:3b:
                    bc:10:f9:85:a1:b4:fd:5e:5a:d9:3c:d0:ae:04:64:
                    5b:9e:27:fa:86:78:47:60:e3:b1:12:7f:b1:39:48:
                    e0:86:8a:3d:e6:f0:1d:ae:82:ca:f7:f5:00:d9:04:
                    6b:f1:4d:80:a2:9d:18:f1:4d:3d:4c:dd:2a:91:14:
                    a8:0e:9e:8e:69:9c:7f:b5:8b:6a:06:ba:85:20:5f:
                    5e:f7:f0:36:04:87:ff:aa:d4:ea:91:77:35:28:0f:
                    d2:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:80:25:28:85:9D:9E:58:82:B5:E4:86:BB:B9:F6:89:66:70:46:49
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:c8:6e:2d:a7:ff:63:40:16:91:d9:42:1d:60:8a:81:85:
         28:8c:29:2f:65:e8:e9:5d:ce:a3:60:12:e5:ca:08:1d:da:12:
         c4:ef:6e:b0:8e:c2:a8:74:57:25:15:85:ff:ca:f3:c4:0a:9a:
         52:ff:4a:23:d3:8e:1b:3c:1a:fd:48:c8:31:46:f6:e9:a6:68:
         04:03:a8:38:1d:70:0b:f0:bb:a8:d7:83:5b:20:91:a7:0b:59:
         00:ee:15:12:97:00:10:c8:f8:da:1a:e5:1a:60:3b:b2:8a:eb:
         89:fa:81:27:10:81:4c:e4:c1:dd:de:c3:f0:e1:6d:a8:9a:99:
         60:a2:96:04:cf:42:ac:06:20:d1:bc:fa:60:52:d7:2d:a6:eb:
         44:b6:ec:8e:5f:02:43:15:a0:0e:5b:6d:ac:ce:49:bb:d6:d4:
         c6:26:bc:3e:9b:f1:6b:3c:68:e6:4f:80:e8:23:ae:01:07:c6:
         a9:ff:f5:45:17:92:06:50:1a:92:9c:4b:a6:1f:8f:5c:a2:42:
         95:eb:81:df:50:30:f8:19:27:d3:91:fc:c5:f8:fe:b1:d2:f2:
         3e:fb:d5:be:5b:08:07:b3:14:7a:0e:94:0b:06:c8:f0:a8:d2:
         17:44:85:ba:91:e3:b7:13:f2:39:81:d2:86:3e:58:dd:68:fb:
         1f:b9:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:28:09 2026 by rpki-client