Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          IqoMJ2N8VvXwOMbfEWgtFUP21c//H7r7A3JtcGLk2mw=
Subject key identifier:   4A:05:65:54:D7:A5:19:AF:5E:65:4B:A4:73:EB:E3:38:4F:FD:D8:21
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       019F8FB54CBDDB94B331CDC3A7950B21823D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          14E4
Signing time:             Thu 23 Jul 2026 16:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:51 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: xqC9xiyB4o8hsRXCLakNw/TjuLLHmOAFy8S5PTNME5w=)
                          2: NuJEHjDX6DrNz16mjk8EVqK6rfk.roa (hash: Ys6DWelm4t8OA8iEU1qUmznaHoT0ZkwCkm2E4AX00hk=)
                          3: SZX71ph8QaHTDKUZ_awWsJ3Rop8.roa (hash: Ezxrik8lWqt6m7GXayjzec/qOLlnThrVGFvxsgwlbj0=)
                          4: fcB7v88dNhWSMeT9xkM_6tDlgB4.roa (hash: YUROPGa3vWTnRdc4QLIk9Iod/RP5OfyerhymP88IP4Q=)
                          5: gwoEbA-s4PqsDQjmI3X53FaRSJ0.roa (hash: avXcM/pU53LLvoxo3B9yOyXnFdyqGLBv2h2RqdKqi6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:4c:bd:db:94:b3:31:cd:c3:a7:95:0b:21:82:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Jul 23 16:00:51 2026 GMT
            Not After : Jul 24 16:00:51 2026 GMT
        Subject: CN=4a056554d7a519af5e654ba473ebe3384ffdd821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:56:ac:81:1d:54:85:4d:db:68:82:24:fe:7e:
                    dd:ce:a4:19:63:46:3f:f6:33:85:e5:f7:a3:32:34:
                    9c:2c:83:49:20:51:15:79:79:a7:8c:7a:3e:38:bd:
                    2f:68:9d:ff:e4:14:1b:da:23:19:cc:a7:14:7c:52:
                    89:7d:b8:ff:94:ed:9a:81:aa:54:8b:5b:57:e5:6b:
                    d8:ee:a1:a2:33:41:8f:d0:7e:ca:dd:11:18:a2:89:
                    53:d2:7c:39:db:c8:9d:f6:58:e2:a5:91:1c:7a:49:
                    cc:5d:cf:c4:ae:41:9b:f0:c5:55:0e:c1:7a:93:ee:
                    11:fc:bd:69:c8:67:9b:f9:ce:eb:15:00:f8:9f:3b:
                    29:ad:ec:53:23:ee:12:f0:b8:10:67:eb:f2:b2:1b:
                    0a:af:92:b2:4b:d7:f6:99:07:f3:43:6c:b7:94:20:
                    1a:95:77:82:89:33:80:ee:40:4c:25:a2:fb:12:c1:
                    73:1c:df:da:4b:44:6f:d7:08:01:ea:7f:a7:e3:00:
                    a1:e3:54:60:9f:2d:fc:9d:c8:c4:42:7b:c4:06:b8:
                    e7:2f:bc:fa:1d:e8:5c:27:fb:b9:87:9f:d1:2f:73:
                    ac:68:3a:1f:77:d8:d0:4f:d0:51:36:79:59:93:0d:
                    13:ac:22:f0:5a:47:be:e2:cd:66:2f:c7:0a:d5:7e:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:05:65:54:D7:A5:19:AF:5E:65:4B:A4:73:EB:E3:38:4F:FD:D8:21
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:3a:da:e0:42:16:9a:5e:04:6c:8e:69:af:1c:ec:fe:26:
         9c:8b:be:dd:85:3a:2b:ad:1f:1f:45:94:c3:cd:aa:e0:92:d8:
         1e:46:7e:39:a7:fa:f0:06:71:ad:44:d0:a6:21:2f:e0:78:74:
         fc:f9:e1:b9:2b:68:94:92:e1:27:34:6b:58:00:e1:67:59:0a:
         e5:c3:97:50:89:64:63:74:2d:ba:79:86:b0:71:f4:15:01:8b:
         bf:75:d4:48:05:4e:59:b3:49:03:13:1f:79:72:d2:7c:c5:f1:
         ac:67:95:41:d2:e5:30:79:8e:81:ef:57:7c:b1:50:04:91:7b:
         a0:02:dd:77:63:5f:da:45:6e:c7:54:80:b7:3c:bf:fc:b4:a4:
         a8:bf:de:7e:37:61:cc:b9:db:27:1b:16:1e:5b:11:f7:05:6b:
         08:08:18:e6:05:b9:86:bf:b4:f0:8d:e6:66:4b:72:ca:76:5d:
         2e:a2:2d:e2:14:d7:a9:41:a7:d5:3c:40:81:ef:80:b9:e9:40:
         f3:64:d1:e6:c2:a4:5b:95:36:c3:c2:80:fa:da:e6:0f:16:de:
         e5:6e:35:8a:1f:68:a6:34:69:a6:fc:4b:fb:f5:6c:9b:9f:77:
         b1:10:b1:83:69:b5:5a:52:ce:a9:bf:10:15:7d:0f:43:03:fe:
         0b:52:80:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:10:08 2026 by rpki-client