Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
File:                     tJvYTaF5l8uyhq-QIqsuBboItEI.mft (raw, json)
Hash identifier:          9l9MqTXfXDAq23+wZdTU0iPb5JmZJ54S6Dr6F0DhqFA=
Subject key identifier:   5E:E9:CD:5B:9E:4C:9D:A6:C8:03:AD:67:05:37:3A:06:8D:89:26:FA
Authority key identifier: B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42
Certificate issuer:       /CN=b49bd84da17997cbb286af9022ab2e05ba08b442
Certificate serial:       019F935B1CC1BCEF1D50F8701893DDEE4E04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
Manifest number:          1529
Signing time:             Fri 24 Jul 2026 09:00:49 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:49 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:49 +0000
Files and hashes:         1: CLr2MXWe1_bT6kZgkrjIjMbd7B0.roa (hash: gQEYUEzKFyH2/cM28ksUHG3hbitgcosJBEkltHf/gqA=)
                          2: PTqqtT4_tP0RAOhqpaeaV7qFsoM.roa (hash: gS+7X+RhiaD/Wpkqye3btlKeUsU6cdg4vX6kC9nPKmY=)
                          3: Zx8NV8g2SZTn17r6ny-ihGOw0zg.roa (hash: oDKvuRyprpCre1JRHHQFdko0hYMR6EjsyiF9Shy7Ous=)
                          4: tJvYTaF5l8uyhq-QIqsuBboItEI.crl (hash: Abt7hzl5C94H73S1f0yj2AUyozwlOcOXIadw6KdbLUs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:1c:c1:bc:ef:1d:50:f8:70:18:93:dd:ee:4e:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b49bd84da17997cbb286af9022ab2e05ba08b442
        Validity
            Not Before: Jul 24 09:00:49 2026 GMT
            Not After : Jul 25 09:00:49 2026 GMT
        Subject: CN=5ee9cd5b9e4c9da6c803ad6705373a068d8926fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:56:72:cf:dd:c7:2d:af:49:61:4e:c8:2a:
                    18:67:4d:d6:8d:9f:22:28:a8:34:dd:80:4b:dd:3c:
                    4f:e4:ca:f3:04:b1:c0:37:4b:52:14:20:b1:c3:f7:
                    38:bb:b3:13:25:a2:66:d2:c5:0f:39:8f:4b:8b:72:
                    bb:99:01:86:af:74:0b:f8:d0:4f:8e:29:9e:68:08:
                    a5:8e:f2:4f:30:7a:98:a2:b1:6a:97:02:8e:12:de:
                    6b:f6:b5:ab:5c:2a:d9:4e:a5:36:4f:1b:ad:8b:79:
                    24:4a:a5:25:33:6c:dd:42:89:4e:54:0b:79:92:26:
                    ba:76:8f:19:ca:2c:74:8c:78:31:1f:87:22:4a:bc:
                    0c:72:75:0c:d9:e4:7b:2f:ec:62:98:61:7b:03:a7:
                    8a:e0:36:e0:36:98:b9:15:d2:3d:69:a0:5a:84:3a:
                    03:ec:2a:dc:34:d7:17:4c:4f:9b:e1:79:c8:b8:2b:
                    44:bb:31:8d:8e:ba:b6:57:6a:a7:42:79:ca:8e:b9:
                    41:98:1f:9b:26:31:bd:46:78:2f:06:e4:94:b7:4f:
                    dd:ea:f1:19:75:99:e9:af:9f:90:61:09:bb:fb:43:
                    e0:b3:9e:8c:bf:88:68:2a:7d:0f:52:17:c3:14:bb:
                    4c:9b:30:4c:8a:a7:d0:0f:34:61:1b:16:ad:64:cb:
                    15:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:E9:CD:5B:9E:4C:9D:A6:C8:03:AD:67:05:37:3A:06:8D:89:26:FA
            X509v3 Authority Key Identifier:
                keyid:B4:9B:D8:4D:A1:79:97:CB:B2:86:AF:90:22:AB:2E:05:BA:08:B4:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJvYTaF5l8uyhq-QIqsuBboItEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ee54d1-5b15-4f93-897b-0c909bf5be4d/1/tJvYTaF5l8uyhq-QIqsuBboItEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:bc:5f:99:96:44:e7:00:9b:41:4f:6b:73:45:0a:cb:84:6c:
         cb:75:b2:8f:5b:d1:11:71:1e:f1:ba:59:9e:94:21:55:c8:b2:
         c9:91:15:12:ab:40:a0:26:be:19:6e:02:74:19:bf:20:f0:fd:
         cc:91:58:93:0a:e2:7f:b1:e9:aa:83:e7:48:dd:17:da:25:c5:
         3b:c0:0e:29:c0:21:f8:2a:9b:71:84:a4:8d:0c:8e:1a:42:bf:
         30:b4:0f:89:d8:91:45:e5:0a:f1:ef:45:e4:6d:18:48:31:a8:
         37:db:da:a6:d2:49:43:c8:df:e7:44:dd:72:5f:db:b7:62:22:
         7a:ed:b0:25:2c:b5:2e:db:43:a5:58:0b:71:5f:4d:dc:16:ea:
         45:33:67:d7:89:e4:e7:0c:7e:6d:f5:e7:b3:dc:44:81:6c:cf:
         cb:b3:c7:9e:1f:be:25:d8:03:ee:c6:1f:4f:cb:48:a2:de:b4:
         a8:a6:5c:c6:0b:00:95:d0:a8:2d:dc:f9:53:7a:1f:a2:82:c4:
         0d:2d:30:f3:e6:5f:5d:99:3b:d0:5d:c6:ea:a5:95:4e:bd:4f:
         b9:70:3d:da:42:ff:dd:e8:1b:dd:bb:7a:78:7c:09:2e:68:92:
         79:f6:aa:e5:3c:a2:1d:8f:e7:19:51:d6:e8:54:81:f3:46:1d:
         82:38:27:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:52:15 2026 by rpki-client