Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          7nnvqeolOrLB4VeayNJZcg6R6FsGZ0q7smLnlcOjfXQ=
Subject key identifier:   EC:B7:CD:B8:9D:A6:C2:A9:86:67:FD:DE:65:C5:6C:AB:42:31:BA:C2
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       019F93FFB61C6B37ADC0525EE0D719A10385
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 12:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:36 +0000
Files and hashes:         1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
                          2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
                          3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: MBex7lSfYX6ydu7wHdC/NoEwP+8Ec3KKneX0B7oZ1Cc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:b6:1c:6b:37:ad:c0:52:5e:e0:d7:19:a1:03:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: Jul 24 12:00:36 2026 GMT
            Not After : Jul 25 12:00:36 2026 GMT
        Subject: CN=ecb7cdb89da6c2a98667fdde65c56cab4231bac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:35:70:00:a1:0a:2e:c2:a1:b8:de:92:41:73:
                    f9:2a:48:c3:3e:27:24:a2:70:bb:8c:d3:95:dd:14:
                    38:ff:eb:7c:9f:ab:be:2a:bb:c3:80:5c:c0:24:e7:
                    45:2e:ca:2e:54:0c:2c:46:f6:c9:97:1b:4a:17:0f:
                    d1:6b:08:e5:ae:02:a0:a5:df:da:78:e0:9e:3b:bf:
                    ae:04:e8:db:8c:90:8b:d4:4b:da:82:3c:b3:16:08:
                    e6:08:6f:8a:13:7d:60:58:63:14:f4:48:dc:45:65:
                    99:51:ee:e8:df:c2:87:05:12:3f:a2:6c:ed:61:a2:
                    7b:8a:1f:a7:d6:65:a2:eb:78:f8:f7:49:30:55:b1:
                    37:1a:a9:e3:ac:b7:1e:e8:2f:4c:4e:35:2e:19:e4:
                    6d:74:db:f9:3c:76:87:d5:74:86:b4:28:8e:6a:90:
                    3f:94:90:12:37:1c:78:d5:54:70:1d:c2:87:6e:03:
                    91:ff:d7:57:d1:65:81:ac:e6:68:fb:d7:01:e9:d3:
                    c2:90:2d:bf:76:bf:0e:37:e5:97:90:51:f9:c0:83:
                    29:a0:e7:86:8f:0f:5e:6a:79:a7:bf:c7:41:bd:d6:
                    b1:96:ba:0d:00:85:15:a7:34:96:23:f2:96:1c:6e:
                    d1:87:f9:95:3a:74:d7:a8:67:3d:2c:02:bf:2e:8b:
                    8a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B7:CD:B8:9D:A6:C2:A9:86:67:FD:DE:65:C5:6C:AB:42:31:BA:C2
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:64:f3:62:66:0a:02:41:1e:74:03:d3:78:35:2c:4d:cb:ec:
         70:7e:60:25:87:33:ce:38:aa:84:13:63:17:e5:04:db:1b:a5:
         80:08:f7:c8:25:ed:c1:8a:17:ff:52:0e:f4:2e:de:b3:56:81:
         dd:5a:92:94:5d:d9:eb:0f:b5:04:66:ba:f0:8b:59:8a:4d:04:
         97:8c:82:c7:e7:39:99:d1:52:00:da:1c:77:96:bc:b1:9a:90:
         5f:a4:1b:ae:f4:e4:09:a2:f2:7d:a3:22:35:a5:7c:18:19:87:
         ee:5b:12:c0:af:31:ac:57:14:71:ab:60:9b:13:e0:cd:0b:04:
         13:e9:2f:93:a6:88:17:02:c7:18:2f:cd:6a:da:7a:80:73:11:
         81:3e:07:f4:91:52:58:44:c7:34:9b:c5:a6:70:b3:9e:14:87:
         b5:06:0e:78:5f:c1:1c:39:5c:3d:2f:92:a3:06:6f:75:89:40:
         9b:36:c7:d9:4d:b6:c5:9c:e0:04:f2:78:b5:c0:3c:75:02:b2:
         2d:9a:f0:55:97:d8:dd:31:ee:f1:78:fc:f2:17:40:a3:fa:58:
         e9:80:b9:93:5d:16:97:65:1d:0c:32:bb:ee:c3:8e:cb:25:e6:
         16:c5:58:02:b8:a8:79:aa:8a:af:0f:b4:a0:db:93:04:c6:63:
         e7:3c:24:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:14:27 2026 by rpki-client