Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
File:                     ddzHdrK_WVv0s-YLukJF8BIKIXY.mft (raw, json)
Hash identifier:          nyRgj+Uf05iFPzg25pY54cQVUdzxk8Ewgk7oxFWQuV4=
Subject key identifier:   05:ED:69:00:C5:EE:60:54:13:26:26:AB:79:EC:74:35:34:AD:6E:13
Authority key identifier: 75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76
Certificate issuer:       /CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
Certificate serial:       019F91A44B0796DE3C8498B0BF082ACFF115
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 01:01:31 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:31 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:31 +0000
Files and hashes:         1: DfzOkC0iJ7Qwf9F4vLGZxn-I0RY.roa (hash: m/N6mjMCk7nSF0Y4fLJbCwhmN916abHZ0dz7Xt3/9gg=)
                          2: NdDg9bagdgyCl8mG_SUnqsEW6Vw.roa (hash: PApZIvzVaGfq5eHyj2rfc7owhBy5ykOlU6D4yLhF2+Y=)
                          3: ddzHdrK_WVv0s-YLukJF8BIKIXY.crl (hash: B+/eyZjmzAxCIEDTMWUBQfqhZ6HWsph4//Q54ba84to=)
                          4: xKcBipuMvKp84RN5Ey0HBKtsVPo.roa (hash: /eh2S8GsbWcqnju6ljXJ0HQ5aHuof6/dHBl/9C9TCw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:4b:07:96:de:3c:84:98:b0:bf:08:2a:cf:f1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75dcc776b2bf595bf4b3e60bba4245f0120a2176
        Validity
            Not Before: Jul 24 01:01:31 2026 GMT
            Not After : Jul 25 01:01:31 2026 GMT
        Subject: CN=05ed6900c5ee6054132626ab79ec743534ad6e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3a:11:4d:ea:ef:83:57:81:3e:75:89:68:95:
                    ab:f0:65:ed:99:ef:6c:27:81:6a:17:af:c6:26:3e:
                    03:5e:50:74:a1:a6:9e:0d:d1:07:5c:bb:07:c2:54:
                    8b:9e:ca:aa:07:cb:91:aa:e2:67:50:db:c9:69:bd:
                    a0:54:bd:9a:b2:66:07:82:c6:57:00:3b:82:ea:bc:
                    db:96:1d:d1:9a:c6:e6:74:51:f9:7e:f4:ba:24:56:
                    41:36:dd:20:70:db:e0:88:72:d7:e3:15:86:03:38:
                    b0:79:9b:a0:a7:69:23:2c:c0:38:bf:b7:70:9a:a6:
                    be:5f:c3:c1:ef:67:09:09:de:45:1c:b8:37:32:18:
                    5e:b7:8a:04:cf:03:36:06:f0:59:f3:47:71:8f:c6:
                    f5:d2:04:ce:a1:1c:56:7c:07:6d:38:db:3e:57:5b:
                    fc:67:24:e3:72:52:58:b7:3f:21:cf:e7:05:c0:ca:
                    da:b6:5b:55:ca:db:6b:d7:77:3c:90:08:06:02:61:
                    b1:68:fc:2e:6a:19:62:63:11:d1:1c:87:7c:73:6e:
                    a8:d4:49:c8:b4:ef:85:6d:e1:67:04:ac:4f:db:af:
                    6d:8b:99:42:db:58:34:b6:ca:9f:cd:b9:81:8c:1e:
                    a7:6a:2e:fb:8d:52:4c:b6:be:be:e3:9f:71:82:0d:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:ED:69:00:C5:EE:60:54:13:26:26:AB:79:EC:74:35:34:AD:6E:13
            X509v3 Authority Key Identifier:
                keyid:75:DC:C7:76:B2:BF:59:5B:F4:B3:E6:0B:BA:42:45:F0:12:0A:21:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ddzHdrK_WVv0s-YLukJF8BIKIXY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/581c5d-bc9b-40a6-a5a4-64540205ecf4/1/ddzHdrK_WVv0s-YLukJF8BIKIXY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:20:f0:c8:a8:c4:c9:f0:c5:93:80:d1:01:40:b2:ee:34:be:
         4c:ef:f4:8f:b4:77:48:11:10:fc:91:b3:7a:ef:4f:a8:27:43:
         31:b3:d9:78:8f:62:eb:d3:2b:ad:89:64:1a:75:eb:bf:88:da:
         97:65:bf:0c:ec:b7:1a:1c:b2:84:07:06:b2:59:55:e1:4e:e4:
         f8:56:d5:2d:8a:45:96:ef:4f:2b:84:8c:61:12:4f:4f:37:1c:
         9a:ff:bc:33:34:d5:a1:1f:d5:80:d1:17:46:e6:9a:10:b0:c0:
         20:aa:98:60:46:c7:c5:ec:e8:1a:13:12:a9:2d:7c:39:9a:12:
         6d:e5:d7:44:e6:f4:44:1c:17:66:fe:5b:64:1e:f6:9a:b2:11:
         af:c2:61:e7:0c:d9:84:0b:df:d3:9e:fa:c9:7f:b9:4f:ca:c9:
         e3:28:7f:b4:94:af:92:51:56:c2:c4:2c:b8:3c:9e:ff:d3:91:
         3e:a7:4d:c6:dc:8e:b9:c3:bf:04:01:e1:be:e6:10:2c:49:b8:
         00:2a:ec:d9:36:66:c5:31:d0:69:bf:73:dc:c8:45:80:93:2a:
         3a:c5:3e:13:d9:61:26:ed:98:3e:77:db:c1:1d:5f:83:a6:a8:
         52:57:23:f7:83:65:90:fa:2e:19:2b:1c:9c:06:b2:54:72:4a:
         b9:ee:58:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:26:12 2026 by rpki-client