Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
File:                     l4kxgrFnGJg7wAjI0If43co9hhQ.mft (raw, json)
Hash identifier:          KFdY+3ijr6QIxBD9dv+UGo60WLYbCg+u4jqzrf4V5oY=
Subject key identifier:   08:64:DA:55:FD:50:E6:D5:FA:4E:A1:A2:BC:A3:8B:42:21:26:59:B7
Authority key identifier: 97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14
Certificate issuer:       /CN=97893182b16718983bc008c8d087f8ddca3d8614
Certificate serial:       019F94DBDB9216F8818486AB4B6D6D866D2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 16:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:04 +0000
Files and hashes:         1: 1-AA_Ym6EX8oobe6NeXk7HWy7rN8.roa (hash: 5t3UXfHRI3FdEzMfG7EasqVmyGfPVOTBzPUk3KiG+pQ=)
                          2: 4I6IeKRFTHTfCk6P0VsgUhk8zic.roa (hash: 0XVLTIXxWYyeiCe3iIXGikBSA8t/yImgovN3r1Pbd5A=)
                          3: Br6fq_1p0sOiKlI1DRwR_EbfW2E.roa (hash: WR8ZmHp+6ZanBZA6Ty89Up4dRZVpCdfJ23KhCqCS8TI=)
                          4: PT_eHk2Dy_Wh2XHSZ-ZM2UoqOTc.roa (hash: /7aQ7+RwkclmuJNtVK87g/73oEQXo6yAkx6IMmNGLuU=)
                          5: hjLY93sTfKVGtH04a9-qkylCHmE.roa (hash: /mrPE+eKM9yKGu2TBD1xblJ2DuTRrBr+lNyxB56PAiE=)
                          6: l4kxgrFnGJg7wAjI0If43co9hhQ.crl (hash: v05tqEBOo+MFtmGe3BkDZvp6VWBVTxjGicQDHxoB+QM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:db:92:16:f8:81:84:86:ab:4b:6d:6d:86:6d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97893182b16718983bc008c8d087f8ddca3d8614
        Validity
            Not Before: Jul 24 16:01:04 2026 GMT
            Not After : Jul 25 16:01:04 2026 GMT
        Subject: CN=0864da55fd50e6d5fa4ea1a2bca38b42212659b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:54:04:b3:1e:6b:28:92:9a:c2:81:00:d2:
                    67:20:0b:72:02:29:aa:c3:6d:4e:c1:38:20:79:d8:
                    61:12:f8:4f:50:c9:1b:16:5f:55:46:f0:74:be:80:
                    02:d2:13:af:dc:0d:03:48:cb:e9:35:2a:45:e6:8e:
                    90:05:71:be:3c:21:95:0d:d5:58:fb:37:fb:0c:0d:
                    d4:94:7d:93:51:fd:0d:35:37:ba:ce:b3:3a:16:d3:
                    c0:2e:4c:28:57:76:7e:87:ed:ee:a6:80:af:d7:09:
                    b3:c7:b6:c3:91:be:57:9e:0d:f2:e0:db:52:a6:e9:
                    a0:a1:98:d9:e0:ff:84:43:f0:55:2b:d6:26:68:c7:
                    e7:67:36:7e:f8:99:da:6c:63:5b:7f:58:05:cc:f8:
                    30:11:38:5c:c4:06:23:d3:5e:07:c3:8e:9c:91:d6:
                    88:fc:69:9b:f2:d4:44:c4:ce:95:c6:79:17:86:ee:
                    f9:2b:86:52:8c:c0:01:b4:3e:d1:64:88:2f:e1:b9:
                    99:be:8b:79:28:88:eb:8a:e8:a2:d8:38:8e:09:94:
                    ae:63:36:bb:2a:0f:9f:18:0a:80:1c:c2:3e:8f:53:
                    90:1b:67:74:c2:ff:b8:d7:ec:7c:6e:53:2f:2c:cd:
                    89:40:80:5a:86:b5:64:73:2c:13:a1:45:65:03:d7:
                    2d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:64:DA:55:FD:50:E6:D5:FA:4E:A1:A2:BC:A3:8B:42:21:26:59:B7
            X509v3 Authority Key Identifier:
                keyid:97:89:31:82:B1:67:18:98:3B:C0:08:C8:D0:87:F8:DD:CA:3D:86:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4kxgrFnGJg7wAjI0If43co9hhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/120043-1733-4c72-ad47-bc0e511c20ce/1/l4kxgrFnGJg7wAjI0If43co9hhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:9a:b6:e1:1f:0e:28:40:97:74:5f:23:e2:69:05:a5:ee:69:
         99:fc:bf:51:f8:b9:31:3e:b3:52:e5:a4:54:e7:19:6b:d5:b6:
         cb:ff:14:3e:9a:95:b4:05:12:13:72:f2:e0:5c:45:31:a7:41:
         9e:1e:e4:7f:ab:fc:7a:6b:64:8f:65:46:b7:81:a3:8e:cb:fe:
         7f:07:8a:76:c7:cc:fe:6d:3a:59:e8:3f:7b:04:7f:ba:7b:d4:
         5d:cb:72:7b:46:ca:1a:80:13:9a:d4:06:db:35:a7:a2:b6:b6:
         76:87:2d:06:3a:a3:e6:0f:e8:5d:62:88:97:87:9b:58:c7:b6:
         64:de:cf:16:7e:a6:9d:7d:7d:63:8e:0a:91:37:63:46:86:a4:
         bb:23:4c:37:51:35:4d:ad:6c:8d:3f:d6:5d:9c:6d:aa:69:72:
         f5:fd:89:b4:8e:a2:7b:8e:56:1e:db:06:8e:f8:6c:9c:1b:01:
         1b:1a:3a:4b:52:97:30:d2:04:86:a3:f0:eb:4c:c9:25:53:aa:
         98:cb:22:2a:2c:e2:85:51:1f:b3:26:ed:e4:90:18:31:86:7c:
         3f:60:6d:56:f6:0b:92:9a:ad:e6:0d:2c:5a:90:01:27:b0:85:
         35:27:cf:4c:3c:71:e1:24:92:f9:bf:f2:af:48:31:bc:c8:ad:
         33:fe:5f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:41 2026 by rpki-client