Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
File:                     RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft (raw, json)
Hash identifier:          57PccXWn5UsDrpryb0wiNEmhSDgw+gauyg2Elr4/C6I=
Subject key identifier:   B9:33:D5:77:3D:CA:5B:D0:71:51:F4:9D:F7:7B:D7:AC:27:36:41:34
Authority key identifier: 46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66
Certificate issuer:       /CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
Certificate serial:       019F90FEEF099DE976D3AEA28E962751B438
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
Manifest number:          190E
Signing time:             Thu 23 Jul 2026 22:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:53 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:53 +0000
Files and hashes:         1: RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl (hash: 0kH8L62v45IF26Pe1qpu0e4SXb3GmkMhoxNY4UE4t3k=)
                          2: cyldzaN5uMb66fkP-hiffFjw-IE.roa (hash: Gj1kHwBLzSGp/dgWtzh7IJONH/VWApAr2xjaYZ7+1iY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:ef:09:9d:e9:76:d3:ae:a2:8e:96:27:51:b4:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=461258f5e3b6b94e3916dd2b5d16e342fd605966
        Validity
            Not Before: Jul 23 22:00:53 2026 GMT
            Not After : Jul 24 22:00:53 2026 GMT
        Subject: CN=b933d5773dca5bd07151f49df77bd7ac27364134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ee:8a:47:48:7e:02:28:2e:0d:1e:9f:c0:88:
                    73:43:70:a9:93:9c:ee:25:c5:54:f0:ad:db:5a:db:
                    0d:cc:47:30:0b:ba:17:57:9c:dd:b4:87:45:ff:41:
                    b9:45:ee:46:3f:ec:69:f9:24:69:9f:04:a5:24:50:
                    4e:11:05:26:70:aa:6e:30:e7:32:a5:c2:52:ad:81:
                    de:fe:fc:12:17:af:76:44:da:5f:03:e5:24:45:9f:
                    a9:97:e3:b2:47:87:d5:c1:95:16:5a:67:98:d4:49:
                    5d:99:30:08:e5:36:13:65:7d:cb:4c:2b:98:91:22:
                    37:c5:54:22:cd:72:76:92:1f:1d:a1:ee:07:aa:20:
                    68:d9:d6:0a:b5:1d:1d:01:34:37:39:ca:25:e3:6b:
                    06:9a:7e:11:11:19:b7:52:48:aa:26:a0:45:d7:64:
                    44:bf:d8:aa:b4:65:56:8f:91:72:4e:ad:e6:7f:eb:
                    11:06:7b:6f:e3:9b:54:f8:59:f3:11:6c:34:25:0b:
                    78:e2:78:4a:c6:32:1a:44:f0:26:21:8b:87:ee:17:
                    b2:a5:36:a7:45:68:fd:bb:18:19:95:c0:40:6a:45:
                    f8:23:14:18:53:64:99:85:b5:90:a4:6d:50:f1:49:
                    08:61:00:54:51:78:bd:cb:36:03:30:5a:5d:98:7c:
                    07:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:33:D5:77:3D:CA:5B:D0:71:51:F4:9D:F7:7B:D7:AC:27:36:41:34
            X509v3 Authority Key Identifier:
                keyid:46:12:58:F5:E3:B6:B9:4E:39:16:DD:2B:5D:16:E3:42:FD:60:59:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RhJY9eO2uU45Ft0rXRbjQv1gWWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e80575-8c8b-49a4-85de-583bce6fb567/1/RhJY9eO2uU45Ft0rXRbjQv1gWWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:92:2a:3d:80:45:60:45:f9:e3:29:6a:30:55:b6:25:94:64:
         b8:f2:79:b1:ef:f6:7a:26:1f:db:27:6b:4d:90:35:77:2f:c9:
         a4:f1:d7:16:fe:fb:d7:77:ff:11:79:25:88:15:e7:4c:b4:74:
         ff:f3:17:a3:0f:68:fd:96:3d:d7:3a:d7:4e:49:dd:9b:e7:5b:
         8a:76:8d:63:09:ae:59:87:09:2e:2f:db:1e:25:c3:c0:49:62:
         72:ab:2f:f6:a7:60:25:f0:92:73:2f:3b:54:20:14:c9:b2:f6:
         65:32:a6:eb:dc:45:b6:da:37:6a:51:ee:42:15:a8:48:3d:7d:
         a2:ea:31:9a:fc:3a:73:f1:d4:fc:fb:e0:1d:a7:9d:1c:d4:06:
         54:34:f6:18:4c:ca:a1:d1:52:cd:75:e8:91:16:8f:50:d6:ff:
         af:1f:2d:91:53:85:05:51:33:62:4a:9f:37:43:7a:e5:92:6a:
         35:e1:be:4a:ab:0f:04:4c:ca:62:3b:35:0b:42:21:43:cb:13:
         f7:a9:05:a6:dd:5e:c6:84:5d:cd:b2:ba:9a:da:a0:7e:f6:09:
         1f:ac:e9:b8:67:a6:a5:82:b5:c8:1e:36:61:03:c6:48:33:ec:
         3f:12:fd:22:85:a2:f0:93:29:0b:de:7b:fa:ee:08:b7:72:71:
         68:0c:61:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:31 2026 by rpki-client