Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
File:                     H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft (raw, json)
Hash identifier:          doFeMIwqUzS1GJN8slrtlRJZ0JXcCHtWTg4xAAoQ9wM=
Subject key identifier:   70:84:FC:7D:95:68:26:80:CB:90:5B:F0:5F:8D:C9:34:DC:20:18:C1
Authority key identifier: 1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04
Certificate issuer:       /CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
Certificate serial:       019F91A3A6931EBAC399ECF3438AB08DB47B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
Manifest number:          19DA
Signing time:             Fri 24 Jul 2026 01:00:48 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:48 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:48 +0000
Files and hashes:         1: 1LwTV0768J6dRk8qC5hDLpAsU28.roa (hash: Tt7Jvp1n+IhGVJo847shEW7XeQAdzKOGRJPvl8SARHA=)
                          2: 4o---97gZVBtyrkd7DCOKVWHe3s.roa (hash: nuFNjtSMOLZpbag0RuWQmdke4RS8v2vbpcLzGcpI1hA=)
                          3: GzoYbPuA6zt92uMBOAiHk0i8fMs.roa (hash: BhU8n2AYRLl+UcY3HBoFElDvFC16XHDPo9Q/sW3CcM0=)
                          4: H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl (hash: xqGxBrHMwcIh1u8IzUEGQ3HBCh8yo/H2uzoxKyasvno=)
                          5: WlWWJjt9Bx1oCkJxTpZbHaU11Q8.roa (hash: 7iCn7aA9/98SqHuf3K5vlRI49Df9JrqkSps0IfUPR0c=)
                          6: eYckRRAAYmoN3pcOogHxes-vOrw.roa (hash: sEdE6YfuDwcouFcKiDjVDbeso/Z6HkL2HDH+Kt655HM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:a6:93:1e:ba:c3:99:ec:f3:43:8a:b0:8d:b4:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f46f57735a4e63dbef848ee0d9d199e215f8304
        Validity
            Not Before: Jul 24 01:00:48 2026 GMT
            Not After : Jul 25 01:00:48 2026 GMT
        Subject: CN=7084fc7d95682680cb905bf05f8dc934dc2018c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:fa:a3:cd:aa:9e:66:88:64:d4:0d:bd:32:dc:
                    64:e6:e5:51:64:5c:99:b0:bc:da:0d:eb:6d:e3:01:
                    61:4e:c2:e9:d9:62:6d:3e:8a:11:8d:48:f9:37:3b:
                    06:c6:8d:2a:c2:ba:95:35:6a:9c:e4:91:4f:1c:db:
                    7d:70:dc:e7:04:29:a6:5d:fb:51:63:84:98:cc:1a:
                    57:ab:b4:af:be:e4:20:34:b3:86:b8:46:a6:0e:94:
                    31:b3:86:2c:94:b2:6c:ef:58:f0:61:e0:82:8f:53:
                    1c:58:e7:a6:cb:cd:a0:fe:69:42:07:94:a0:fc:6f:
                    d7:19:cc:7f:ac:a7:be:45:14:fb:75:61:fc:ad:07:
                    e5:6b:9e:d5:7a:cc:ff:2e:a9:b5:24:9f:12:21:95:
                    75:22:c5:03:2f:e8:fe:42:fb:62:b5:85:71:bd:11:
                    44:26:e3:a2:72:18:81:e2:5a:73:07:e2:f8:c5:a7:
                    56:15:48:3e:e2:aa:df:8a:33:cd:45:fc:bc:8b:a6:
                    b3:80:bf:34:6a:4d:38:fa:b7:29:3a:2a:f4:bd:8b:
                    c2:2c:79:82:eb:d2:30:be:36:22:32:ee:ff:74:7a:
                    cc:dd:a7:4f:e9:a3:8f:1b:7e:01:58:9d:51:89:85:
                    d8:18:c3:0e:38:bf:f2:7f:a7:dc:a3:24:cd:c6:73:
                    2b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:84:FC:7D:95:68:26:80:CB:90:5B:F0:5F:8D:C9:34:DC:20:18:C1
            X509v3 Authority Key Identifier:
                keyid:1F:46:F5:77:35:A4:E6:3D:BE:F8:48:EE:0D:9D:19:9E:21:5F:83:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/107266-ab51-462b-9fc2-a7c9898eecbc/1/H0b1dzWk5j2--EjuDZ0ZniFfgwQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f8:fb:d3:c0:4c:50:8d:90:0d:e4:b6:67:28:30:90:6f:1c:
         77:c8:fb:5d:dc:66:1d:22:2f:76:52:f6:13:e4:c8:eb:1d:28:
         e1:89:14:2d:f8:ba:08:32:ea:a8:3a:b8:0c:7c:67:06:cf:cb:
         cc:b4:97:b1:a9:78:84:3f:8d:01:d3:50:0a:f4:79:2a:61:ef:
         8f:3f:2a:a3:fd:71:eb:f3:26:d2:cf:bd:02:7a:6e:f6:a1:bc:
         73:24:dd:c6:63:81:28:44:08:d5:bc:7a:e2:c8:b9:52:3d:9a:
         ec:c3:ee:d2:9f:46:66:b5:7e:51:1c:e6:93:07:90:52:a9:28:
         fd:16:00:19:34:01:5a:90:eb:fb:35:56:a7:85:40:e8:47:88:
         e5:b9:f6:41:12:71:ae:7c:a4:25:86:d9:c8:9e:fb:18:19:3d:
         2c:86:d2:0d:af:7e:db:fb:cf:86:2d:c4:4c:ab:cd:a1:ac:3d:
         c1:9a:fa:a6:51:b7:c3:96:bb:2a:fd:2b:80:fb:17:a6:0c:3a:
         18:23:8c:a9:6d:12:dc:8c:84:68:26:d1:75:a1:4e:88:da:a1:
         51:58:ca:4a:45:be:df:08:6f:75:e6:b5:30:33:e5:36:73:51:
         f3:d9:ca:79:34:4f:d7:4b:a8:88:90:f4:4f:98:42:a2:45:ab:
         9f:a9:15:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:39:49 2026 by rpki-client