Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
File:                     A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft (raw, json)
Hash identifier:          AT/RzU0/3uHAeQJttxR6IdQnyfPr67AYpMNMUzrd1wI=
Subject key identifier:   D0:36:1F:BE:11:51:9B:74:41:A6:4F:98:03:CF:B9:2F:B2:63:BA:BF
Authority key identifier: 03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44
Certificate issuer:       /CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
Certificate serial:       019F9437169D9106DC3E78631886C4CEE426
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 13:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:05 +0000
Files and hashes:         1: A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl (hash: fWRo6yTzkGIY8uKA6xxy3ryIAAaPCYgF3PGV4N7bdjE=)
                          2: NUvHrFA2BWaljLnMJQIXISBCOCw.roa (hash: A18alchxY/YsI5uTxh8zdJwNGymtxbxWl+jED+FQCqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:16:9d:91:06:dc:3e:78:63:18:86:c4:ce:e4:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f8388372dc332c7cc6f7766ad78d58a23b2544
        Validity
            Not Before: Jul 24 13:01:05 2026 GMT
            Not After : Jul 25 13:01:05 2026 GMT
        Subject: CN=d0361fbe11519b7441a64f9803cfb92fb263babf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:07:01:ff:b0:06:6d:9b:0a:31:02:96:ce:99:
                    cd:ad:2c:b6:56:30:f6:60:1b:8d:e9:66:f6:be:91:
                    ac:35:29:e6:ae:e3:c7:b9:ed:9f:aa:59:64:74:ea:
                    07:46:3a:b5:09:75:36:72:af:63:7d:c6:02:9a:a8:
                    50:87:41:9e:60:af:85:06:89:bd:fe:48:e2:c1:d7:
                    37:fc:e7:3d:ee:41:10:c5:5a:f8:1e:cf:6f:98:db:
                    34:a8:0e:cf:06:93:fc:4c:01:58:0e:3c:80:91:89:
                    cc:14:f8:1a:18:a5:da:0e:b8:00:2b:4b:56:3e:7f:
                    78:7e:90:cf:8d:c6:03:27:8a:b8:68:50:6f:8c:4a:
                    56:a5:f8:4e:ae:6c:ec:be:d1:2c:0c:a5:51:7e:82:
                    49:d7:34:91:7d:33:eb:56:cd:c1:f7:d5:c7:eb:6b:
                    08:52:f6:60:3c:82:a0:cb:fc:26:d4:ab:8f:f0:50:
                    0d:a4:56:99:98:f6:87:05:c8:98:95:9d:17:9a:35:
                    4b:de:ad:67:e5:c7:25:77:67:8e:92:fa:88:44:48:
                    63:3f:bc:f4:0e:7e:c4:09:a8:01:6c:e2:90:a2:87:
                    da:ee:13:66:a3:aa:20:92:28:52:04:bf:aa:4f:8d:
                    31:5b:e9:10:e7:00:56:67:80:0f:49:21:76:e3:76:
                    98:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:36:1F:BE:11:51:9B:74:41:A6:4F:98:03:CF:B9:2F:B2:63:BA:BF
            X509v3 Authority Key Identifier:
                keyid:03:F8:38:83:72:DC:33:2C:7C:C6:F7:76:6A:D7:8D:58:A2:3B:25:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_g4g3LcMyx8xvd2ateNWKI7JUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9e1165-c610-4988-a49d-9455858e9c06/1/A_g4g3LcMyx8xvd2ateNWKI7JUQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ae:ae:b7:e7:32:6a:2a:62:a5:b1:5e:66:00:0d:72:90:17:
         c1:2a:06:c0:85:31:87:66:9e:d2:f9:8d:c6:71:ad:92:25:0f:
         d9:fe:08:57:b2:22:09:32:90:37:a1:e1:c3:7c:a2:95:3e:0a:
         f2:ba:2e:5c:12:ff:e1:dd:5a:8d:b0:e4:72:97:fb:8f:c8:50:
         df:1d:e5:c9:69:6c:0f:b3:4e:39:15:03:86:87:bc:fb:f0:f9:
         60:a0:25:0d:77:b3:d6:f5:a1:d2:58:52:9c:d0:72:43:c1:ba:
         35:a5:64:b5:cf:cf:22:2f:c0:b0:6a:e5:ae:49:32:12:b4:73:
         e7:af:7f:53:a4:39:f2:ee:83:7f:77:6e:bf:9a:e8:a2:81:ec:
         33:f5:f1:37:57:77:e8:5e:bc:dc:ab:72:ff:1b:96:01:40:88:
         a9:74:e1:42:a7:35:22:d2:27:5d:ef:8c:13:8e:23:cd:89:25:
         76:d8:d5:c1:55:08:b3:4d:ce:31:17:94:32:82:97:39:14:8f:
         bd:0f:6d:62:b2:41:72:78:be:9b:b6:20:70:32:1b:2f:20:14:
         ee:41:ae:57:16:84:f8:08:be:ae:4e:aa:b4:17:62:c5:21:c7:
         27:e8:3a:50:0c:e2:94:17:76:42:30:98:c0:7c:97:56:3d:51:
         b7:c5:26:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:03:19 2026 by rpki-client