Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File:                     rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier:          BIelf44swObje3pjNckYP+8IZA16HX/6lZuoDkH81Ro=
Subject key identifier:   DA:FD:84:27:A5:DB:FF:50:E4:60:DB:B0:B4:AD:A1:AE:0F:FE:44:33
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       019F9091553AC97D91226410D0F3E35C1CD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 20:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:11 +0000
Files and hashes:         1: 1cRlTVeHuriEMSuZag34rfiSKZQ.roa (hash: OlYfnvQCajHgPtwJVq37KeK/wVE1TX6e1PHAiHTVPas=)
                          2: 2pok9xJkRmV7G5KjO3Ssd6tFcqw.roa (hash: KoLqQThDszC4VMDHG0N47iFOrNC8BwC1qVShpNw7N6s=)
                          3: JyOMnJgKMoFcNN43M_f5LI8XErA.roa (hash: SNoMZNzmCYdIoiwDjZbbibJBXJA6CdM7GlaPizZt3KQ=)
                          4: aa2Z_aSbNPyZ2UsmfSQtTJhHn_4.roa (hash: FtDK49Ysh1r9A0NZdb70mTg5pImu9NrACPcmS/OHayk=)
                          5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: QP4e/PqpffjkPa38RPifF4xyRHlc19PnznP4aZ8wD6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:55:3a:c9:7d:91:22:64:10:d0:f3:e3:5c:1c:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Jul 23 20:01:11 2026 GMT
            Not After : Jul 24 20:01:11 2026 GMT
        Subject: CN=dafd8427a5dbff50e460dbb0b4ada1ae0ffe4433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:26:65:fc:19:2c:b8:94:b7:62:b6:82:53:9b:
                    f1:f9:72:93:4d:21:d2:a2:77:a2:e1:2d:b0:e8:cf:
                    16:81:0d:2c:4d:86:29:29:4c:f6:06:d7:82:d4:05:
                    5a:57:ee:27:b0:bc:90:09:71:45:55:89:f5:5a:48:
                    8b:92:a0:a4:d4:78:a2:d1:74:d7:6f:98:f5:61:4f:
                    6f:b0:d1:68:c3:ef:9b:f9:8c:9f:bf:49:fa:dd:2d:
                    79:e2:fb:2d:45:95:1d:c6:0e:01:c5:96:53:4d:c5:
                    e3:c8:49:5d:a0:a4:c3:f4:22:57:cc:41:46:91:0e:
                    f2:85:ac:5e:c3:6f:05:a9:50:bc:3c:dd:89:77:e3:
                    9a:76:c2:5c:0d:ce:a5:34:d2:94:b0:c7:6f:3d:05:
                    91:bc:7d:78:12:41:f2:84:7b:c6:e6:71:cf:ce:82:
                    ff:c2:9a:1b:2e:25:ac:56:0a:e8:4f:66:a4:41:8d:
                    7b:ad:31:d0:ed:81:d3:da:5e:3b:ac:7f:5d:9c:d9:
                    a4:11:a0:d8:3b:9b:49:f6:6e:dd:84:55:bc:d6:74:
                    c3:be:d5:9a:ca:ae:e0:41:dd:b3:cd:b1:b8:17:85:
                    84:ba:ff:79:b9:34:09:50:55:3e:f8:e9:21:c5:af:
                    b6:11:bc:5b:5e:82:85:c8:01:15:b1:23:69:30:8f:
                    94:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FD:84:27:A5:DB:FF:50:E4:60:DB:B0:B4:AD:A1:AE:0F:FE:44:33
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:95:99:ee:1d:53:7b:f4:e1:3a:41:e3:28:9f:83:a6:ba:
         0c:43:2a:9f:c1:77:65:58:db:72:33:70:5d:ce:62:47:52:04:
         91:69:0d:00:eb:01:13:b5:49:c5:c8:9c:2e:1a:ae:1b:22:b5:
         4d:12:cc:8a:df:ce:30:bd:9f:a4:e6:b4:81:37:e4:d0:f6:23:
         35:12:8f:85:68:73:de:74:3c:67:13:09:45:53:97:69:af:a0:
         33:57:3d:d0:f4:62:80:36:a3:57:c8:a7:cd:2e:7b:76:e6:50:
         44:c6:95:82:ed:7c:32:24:bb:b7:c3:4c:92:1f:f8:30:8a:5f:
         e6:a2:bc:b9:2b:92:89:66:fc:e3:98:0e:a3:68:ea:62:26:b8:
         97:b2:89:2d:3a:c8:8b:fa:be:69:a4:a4:e0:b4:8e:13:61:0a:
         1d:6c:f6:c4:bb:de:f5:7e:b7:77:2c:ab:7b:fe:5c:5a:cd:ca:
         8f:2f:7d:6c:43:b6:a8:0a:59:39:cb:89:bc:78:b8:cc:69:32:
         de:e5:41:b4:de:75:17:80:be:59:ea:ac:04:05:c9:e1:b9:ab:
         f5:97:0b:4f:36:b7:1e:bd:7f:8c:3a:75:9f:fb:82:cb:14:12:
         ed:d4:83:15:96:1b:1f:f7:db:ad:2f:5d:41:9a:95:71:f8:d5:
         78:77:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:53 2026 by rpki-client