Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
File:                     x9qC6HeTPZwslSyzdsk6qjN919I.mft (raw, json)
Hash identifier:          LKfJx5SJeWBWswIjBx6PdZ5uzCsrVx2rBuAWh8cwdh0=
Subject key identifier:   EF:77:BB:4D:9A:C9:A9:CF:E2:EA:22:B6:AC:19:8D:5F:1C:6F:55:08
Authority key identifier: C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2
Certificate issuer:       /CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
Certificate serial:       019F8FEC846D76EDAA017AD3EB06A4C5B6D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 17:01:09 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:09 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:09 +0000
Files and hashes:         1: iLa7f2S3_d-gftGTw6gty0-Uiak.roa (hash: rM0PahqNF2zfpsbMJjY2LhMIvSX7eg/hz/KEUHOLLAA=)
                          2: x9qC6HeTPZwslSyzdsk6qjN919I.crl (hash: n41MHLwFdduHGJdSQak41FcvwnpRr47FI+cLpojOdUU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:84:6d:76:ed:aa:01:7a:d3:eb:06:a4:c5:b6:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7da82e877933d9c2c952cb376c93aaa337dd7d2
        Validity
            Not Before: Jul 23 17:01:09 2026 GMT
            Not After : Jul 24 17:01:09 2026 GMT
        Subject: CN=ef77bb4d9ac9a9cfe2ea22b6ac198d5f1c6f5508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7d:15:87:48:9d:86:aa:5c:f1:c8:6e:1d:9a:
                    d2:56:90:61:42:96:94:5f:a3:07:0d:a1:a3:d9:48:
                    6e:70:f7:b1:da:c7:19:93:1c:c5:50:fd:8f:54:f2:
                    0b:97:1a:db:b1:9f:92:16:d8:a2:3b:6a:a4:c2:5e:
                    86:64:b2:2e:bc:93:fb:e9:be:58:8b:bd:1b:52:e7:
                    80:00:29:19:8a:cc:39:4d:90:de:41:18:6f:74:47:
                    e3:bc:fd:14:07:91:ac:cc:0e:c9:99:7b:4a:0b:14:
                    0c:2f:62:7e:f2:ff:63:fc:3a:81:83:7e:0e:a7:9c:
                    a6:7c:37:af:e6:9b:79:58:3e:fe:a2:e4:62:35:8e:
                    09:89:54:f9:d7:0f:f7:52:ab:08:c8:f3:94:70:a3:
                    73:e4:93:79:f8:7f:a2:d6:51:fa:5c:8d:c8:e7:42:
                    65:00:a6:e9:86:da:7a:a7:b8:7c:ff:d2:9f:40:b8:
                    a7:17:ad:0a:ce:bf:ee:7b:5c:7b:15:63:e9:d1:73:
                    1f:30:c4:fd:7b:97:8d:af:82:fd:82:00:7e:5e:87:
                    c8:c9:ab:9b:a0:b4:c8:7d:9e:4a:d6:ed:9d:35:ee:
                    ab:ac:f6:37:62:72:e9:ec:0e:c2:8d:4b:04:48:6b:
                    85:7e:b7:48:e5:d4:1f:72:b8:f3:95:66:6e:8c:db:
                    10:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:77:BB:4D:9A:C9:A9:CF:E2:EA:22:B6:AC:19:8D:5F:1C:6F:55:08
            X509v3 Authority Key Identifier:
                keyid:C7:DA:82:E8:77:93:3D:9C:2C:95:2C:B3:76:C9:3A:AA:33:7D:D7:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9qC6HeTPZwslSyzdsk6qjN919I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cb537d-d7ef-409c-823c-eae4f6d33ca6/1/x9qC6HeTPZwslSyzdsk6qjN919I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:1c:82:17:f7:50:3c:11:c2:95:65:94:2a:96:c3:10:be:
         a1:e7:04:de:be:70:1a:98:df:61:6d:34:51:bd:e4:56:0f:bf:
         37:6f:c3:a6:5f:82:25:7c:82:d8:c2:a4:34:14:94:20:14:95:
         70:e5:05:c2:01:ec:57:23:22:9d:ea:e8:29:0e:6d:cd:9a:00:
         b7:ee:4e:a8:1c:60:f2:2d:5d:c5:b7:00:7c:f2:55:5b:7d:cd:
         4c:97:5d:5f:1c:7b:74:74:c1:30:12:e7:f1:e5:00:a1:dc:d7:
         11:05:a5:74:a2:5e:66:e5:b3:cb:19:76:06:29:ed:c7:8c:44:
         01:1f:2c:d7:36:ac:27:58:ea:aa:b9:27:10:cb:88:e2:7d:20:
         8f:6e:ff:0d:2c:b7:d3:89:60:e9:01:52:4a:a1:f5:92:5d:02:
         71:31:da:3e:57:68:92:a0:df:49:53:e5:aa:13:92:3b:e4:ef:
         9d:8d:c9:4d:07:73:45:78:d5:63:5d:c7:dd:a1:4c:e2:84:5d:
         92:a0:70:24:c1:05:60:b1:48:42:2b:ea:60:78:c4:6f:73:e0:
         7e:da:b1:a3:7d:41:05:cf:5f:0d:9f:4d:87:02:a4:41:16:93:
         82:2d:7f:84:e0:9d:d2:cf:14:5c:34:9a:75:05:b4:05:c3:1d:
         7f:c9:b6:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:45 2026 by rpki-client