Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          hDRqEucld+NkieRz9UDu8Ircc9iVDJK2zfzqswPPf1c=
Subject key identifier:   59:1F:DA:C5:CB:5F:33:B3:BC:CF:9E:34:0C:E2:AE:1C:38:EE:9C:A3
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       019F95EE157721110C073B9BEA870013674B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 21:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 21:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 21:00:35 +0000
Files and hashes:         1: 5G9NBhPDFJnBpV_ODJ-yxnU8F0U.roa (hash: xl4h6DuoEnDQif85q6/N4TbdIRiCv01AKSy0anUCZ3k=)
                          2: RkiRAFcrZu-Lo8gYHeUyPspBx44.roa (hash: oGKuW1KVMpw7V7M8/Yknn9ZA7Ros9J6QJpSzewOzRZI=)
                          3: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: l6baMqasRtq3cfXX9euUyBIWy1f8uf0O0I7zSvvr83o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:ee:15:77:21:11:0c:07:3b:9b:ea:87:00:13:67:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: Jul 24 21:00:35 2026 GMT
            Not After : Jul 25 21:00:35 2026 GMT
        Subject: CN=591fdac5cb5f33b3bccf9e340ce2ae1c38ee9ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:99:37:13:b6:90:6e:85:7e:05:b2:e8:ed:
                    19:10:6b:39:86:8f:3c:fc:4a:f6:6a:97:c4:c4:fd:
                    f3:44:ac:d5:8e:2b:5a:7a:0e:36:f0:04:70:f3:66:
                    fe:c1:f9:04:1e:6a:aa:0d:68:f9:3f:e6:04:bc:98:
                    2a:28:32:9f:15:e1:8d:1c:7c:e4:b2:b8:cd:98:b0:
                    af:f5:ca:b6:94:db:83:cd:c4:9f:a1:57:b2:74:4e:
                    e3:4c:2e:df:b3:6e:ed:31:78:d2:75:be:61:d2:1f:
                    e4:d4:22:6d:30:8f:ce:28:8e:42:83:fd:c7:74:00:
                    b2:c2:a3:c9:a5:77:73:bf:61:4a:7e:74:da:02:a2:
                    53:80:55:62:15:01:a5:53:e3:c5:ed:39:50:c0:b0:
                    9b:12:99:75:1b:f8:6e:b3:03:76:5a:ae:9e:20:c1:
                    49:94:c4:5d:55:7e:da:5f:4c:25:ca:8a:44:e5:52:
                    8a:23:1f:c3:a2:fe:a3:bc:e9:13:97:9f:62:58:2d:
                    48:2a:7f:a8:04:b3:9e:ea:39:fb:f3:fe:20:fb:a1:
                    92:9d:cb:05:80:9f:e8:52:29:bc:f8:7c:d4:68:16:
                    e6:f2:3e:20:94:6b:14:b1:64:e8:4d:62:f3:c8:65:
                    99:56:3d:e5:fb:96:0a:6a:0b:e1:ad:b6:77:b7:e5:
                    ed:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1F:DA:C5:CB:5F:33:B3:BC:CF:9E:34:0C:E2:AE:1C:38:EE:9C:A3
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:87:60:a4:a7:cb:db:d9:97:02:39:92:77:67:96:33:40:52:
         54:d2:80:f2:f0:f9:7f:c4:e0:53:09:0e:b5:5c:94:f8:7d:0e:
         58:dd:89:01:f9:db:ae:8f:ac:fe:fa:9b:b7:ff:9f:ec:2f:2a:
         51:08:49:21:75:97:50:ce:0e:4b:0e:5e:aa:e4:eb:e4:eb:84:
         8a:65:e3:d2:70:cd:d1:2f:95:15:a6:93:b0:93:bd:31:0d:e1:
         1b:0e:9e:13:75:03:21:cf:9f:15:80:b9:28:e4:e4:bb:a1:47:
         12:67:9f:6a:66:ec:9d:ab:93:2d:60:d6:ac:59:ed:cb:cb:61:
         3e:5e:ad:5f:3b:77:77:fd:69:3b:53:53:a1:d5:d4:5f:db:e5:
         39:55:cc:4f:79:13:30:f7:39:5c:bd:74:03:0e:b2:0a:db:f7:
         b5:cf:98:0a:0e:e3:35:5b:c6:6d:64:7d:0c:06:5a:19:3c:12:
         46:84:60:35:c3:24:3f:0e:5b:30:a6:cc:c2:41:9b:a0:66:d0:
         91:29:80:ed:14:f0:a2:35:4f:60:74:2d:6a:15:a8:1f:db:53:
         5f:2c:05:7d:57:04:4d:e8:78:71:a3:11:68:04:02:3c:a0:97:
         c6:3d:5e:ec:c1:e4:05:ea:3c:4c:65:47:96:1f:3c:19:f0:3a:
         74:28:f5:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:32 2026 by rpki-client