Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
File:                     ex9VfuJjyzWaGeos1_oOjJE563Y.mft (raw, json)
Hash identifier:          iYfNEXu1/9Tqq/U6ua8TG2fuxOx8S7lItXbDcS/joT4=
Subject key identifier:   0E:F9:CB:7E:18:CD:38:D7:86:C6:48:B5:35:3D:2A:D3:7E:8F:24:88
Authority key identifier: 7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76
Certificate issuer:       /CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
Certificate serial:       019F916CBBCEE12CAFFF4A0817D899D8702A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 00:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:50 +0000
Files and hashes:         1: JF5HZsn7h3hTXeSm3T5gZ-J45no.roa (hash: nH/dD1vhkAFkX+8w5fK7+63eCRhFsEpgDdLpvN3kRkk=)
                          2: XGanTFBQAZ33sQ9Am0M5XIEmOKo.roa (hash: tk+B6re3rpRoBjg7UDNsVYSuSSnejyoxsoqWHW24Ts4=)
                          3: ex9VfuJjyzWaGeos1_oOjJE563Y.crl (hash: 50rJB2Bm5VLUbQFFF/GQT1MLoU5yvAZM5YPbXM5kstE=)
                          4: jUxm_qgfh3IYfHDY4BsRtkkVL0w.roa (hash: JmlPibEqMfscplOPIOSacxthvDnFR9Ge2IhPMvlaWZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:bb:ce:e1:2c:af:ff:4a:08:17:d8:99:d8:70:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b1f557ee263cb359a19ea2cd7fa0e8c9139eb76
        Validity
            Not Before: Jul 24 00:00:50 2026 GMT
            Not After : Jul 25 00:00:50 2026 GMT
        Subject: CN=0ef9cb7e18cd38d786c648b5353d2ad37e8f2488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:67:0b:95:cc:e1:01:c6:53:6a:af:51:89:
                    ab:49:0e:fa:dd:44:1c:48:b6:c1:1a:de:16:96:ef:
                    54:2b:36:e1:33:ad:d5:ae:bc:4f:26:d8:0b:f0:9b:
                    af:51:00:56:63:d1:6d:be:28:6c:95:ed:25:95:bb:
                    41:e6:c2:21:23:c9:cd:8c:12:7d:7d:1b:cb:9d:68:
                    9d:aa:41:5e:50:b0:e8:71:6d:ce:87:d1:c4:b3:47:
                    6d:e8:b5:11:1d:73:f1:92:35:4c:62:24:a2:d5:1c:
                    f1:3a:0e:3d:29:0c:a2:e2:05:15:6d:e5:6d:e7:67:
                    bf:47:e0:d2:1b:12:22:ca:5d:78:cc:6b:84:6b:0d:
                    e2:e2:3e:89:dd:1f:27:c4:da:01:97:95:ed:a8:f2:
                    7e:fd:a1:ec:d1:d2:be:1b:7e:3c:48:04:53:27:f4:
                    fa:27:86:39:15:c7:7b:d5:d3:90:74:95:93:2e:41:
                    d4:c4:d1:10:5e:01:b6:09:28:d8:fd:3b:74:3e:68:
                    85:db:b5:4d:02:f8:b7:fb:a2:7c:8d:e3:d1:9b:32:
                    6b:a2:bf:0a:c8:55:f8:3f:10:5f:a0:b3:30:25:84:
                    0e:fb:58:48:3b:b2:a3:77:20:05:97:1f:bf:36:2d:
                    19:0e:b1:0b:1d:a8:da:8a:5c:33:75:ab:3d:d9:63:
                    66:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F9:CB:7E:18:CD:38:D7:86:C6:48:B5:35:3D:2A:D3:7E:8F:24:88
            X509v3 Authority Key Identifier:
                keyid:7B:1F:55:7E:E2:63:CB:35:9A:19:EA:2C:D7:FA:0E:8C:91:39:EB:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ex9VfuJjyzWaGeos1_oOjJE563Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/936d98-7019-401f-9e2a-3e3660da13a4/1/ex9VfuJjyzWaGeos1_oOjJE563Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:73:b8:73:62:b9:fc:e3:e0:84:43:95:29:d3:09:70:6e:33:
         25:7a:b0:3f:e5:e0:6f:34:93:e2:e1:ee:51:e2:00:e2:63:77:
         bd:7e:f6:18:ad:84:7c:53:c0:5e:55:80:d7:08:f0:48:e3:30:
         aa:ed:7f:b1:3a:6c:8a:8f:da:a3:f4:cc:70:77:01:2c:e6:0a:
         d7:05:75:98:e8:06:d0:f0:0e:47:e8:4a:b4:2d:81:f7:a4:52:
         3a:a1:41:9d:df:bc:68:cb:4d:1d:ec:7d:d8:bd:e1:be:d2:bf:
         12:89:6b:b4:40:37:0c:a7:78:52:bb:e4:18:30:0c:97:ec:e7:
         39:8e:bb:35:e6:10:b0:c1:32:62:47:30:cf:31:e4:95:71:b4:
         10:8a:c8:79:2b:91:7a:2b:39:fe:d4:49:54:16:83:dc:1c:2d:
         5f:b0:f3:48:5f:3a:26:87:f4:30:b3:9b:59:19:53:99:2b:6a:
         e0:1f:0e:54:18:cb:aa:ce:a5:2f:61:33:16:42:42:3d:fc:7a:
         2c:78:e8:34:dd:56:56:23:77:06:18:93:d0:a7:f7:fc:2f:8b:
         07:46:f2:bb:d3:5a:be:5e:f3:3e:30:24:e3:54:2d:28:d1:af:
         aa:17:b9:46:2e:a4:0f:7f:dc:c2:0b:92:c4:a0:b8:c1:e0:18:
         aa:5c:2f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:25 2026 by rpki-client