Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
File:                     pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft (raw, json)
Hash identifier:          MnMWHng7fRU95JLtbEWul7fJLl8RvXJ81Mv0gW1e0+c=
Subject key identifier:   9E:BA:7F:4F:93:33:CB:00:7C:39:E3:FB:63:16:A4:9A:F1:0D:8F:E4
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Certificate issuer:       /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial:       019F90C793123201316AC683E3E30D40EDC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
Manifest number:          197F
Signing time:             Thu 23 Jul 2026 21:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:26 +0000
Files and hashes:         1: Ccm4qTaFVoeEBQGq7AdHkms3sbE.roa (hash: sNTPIkd73n/EU/DbG6UaXBNfki1s2gEUwvwhofodNus=)
                          2: O_JWRj5Djic4pjl6umhJDPP7BuI.roa (hash: oXNGdNb1x3OVweYzH4oXuC+MRGHHCd9nwAtXQGgCLxw=)
                          3: pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl (hash: AdUd5rPSsEmYhCLU9KS3c7w8BUTIwqY0zixPdrvvmVc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:93:12:32:01:31:6a:c6:83:e3:e3:0d:40:ed:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
        Validity
            Not Before: Jul 23 21:00:26 2026 GMT
            Not After : Jul 24 21:00:26 2026 GMT
        Subject: CN=9eba7f4f9333cb007c39e3fb6316a49af10d8fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9a:33:80:23:12:4d:27:b8:e9:94:9d:53:d2:
                    e0:14:fb:93:d6:01:fc:9a:31:5f:c9:9f:01:0c:38:
                    ae:e0:bf:3e:41:cf:bc:bc:6b:c0:7c:83:aa:52:52:
                    cc:b4:a2:f1:9c:60:d0:64:12:ed:d3:25:2a:69:65:
                    de:d2:b0:be:93:b4:d0:f7:5c:01:f8:9e:45:94:24:
                    a0:f9:ee:e3:0f:9a:82:17:69:44:27:4e:bc:e2:3e:
                    bc:19:9c:47:42:2b:3e:2b:fc:d3:16:e0:f6:f9:41:
                    61:83:a0:9f:c6:51:42:85:44:68:da:b6:31:f2:2b:
                    ba:be:91:12:3f:04:67:5f:fe:f0:86:1a:5a:de:68:
                    88:73:8e:f0:22:9e:d0:c3:56:5e:91:99:75:29:20:
                    50:94:60:ac:21:19:a0:15:bd:1f:04:2f:bc:55:89:
                    e7:14:47:92:29:9e:62:db:23:0a:06:5f:07:f3:a8:
                    c5:7f:52:93:88:1b:3b:3d:a5:3f:57:a6:12:9a:d7:
                    29:ef:68:ee:5f:8c:75:9d:54:dd:b0:8e:f7:26:59:
                    18:71:d0:6c:3d:9d:0f:91:e1:ba:8d:55:b1:a1:ad:
                    31:f1:6c:b2:46:4d:94:dd:cc:11:b8:55:6d:cd:36:
                    b2:7a:9a:07:cb:aa:0e:e5:ee:f6:90:2e:97:e7:82:
                    43:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:BA:7F:4F:93:33:CB:00:7C:39:E3:FB:63:16:A4:9A:F1:0D:8F:E4
            X509v3 Authority Key Identifier:
                keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:7d:72:14:ca:96:c7:22:fb:8b:2b:dd:81:16:31:eb:47:5d:
         8b:0d:09:57:f8:b7:e7:cd:69:5e:8b:20:8b:01:f9:42:cd:f2:
         6f:57:e6:1d:bf:44:20:37:31:78:a8:5d:54:b1:54:e9:69:d9:
         6f:ae:0b:e8:bf:a2:e4:d9:58:fc:11:dd:0c:e4:e1:b0:50:3a:
         b3:23:ed:eb:75:ed:c0:eb:b0:23:59:29:3a:fb:78:78:31:ed:
         5e:db:0a:ef:77:be:76:de:8f:dd:d4:8f:57:d3:b1:6f:3c:31:
         e9:01:8b:e4:b3:88:d4:c6:10:ac:29:1c:96:8e:48:f7:ef:c1:
         6a:22:79:0b:e7:06:08:0a:e9:c7:cb:6e:a4:af:b3:61:fd:d0:
         f2:fe:67:ec:47:5c:ae:1e:da:97:5b:97:63:f6:e3:ff:00:14:
         5d:cd:71:e1:43:2a:d9:31:d1:81:30:a7:82:ab:88:49:57:b0:
         ad:b9:1f:e6:a5:a1:98:9d:45:5f:e9:1a:91:04:33:d3:d1:a6:
         30:2b:6d:a1:47:87:df:de:1d:28:72:59:e9:0f:18:fe:e2:11:
         a6:06:4a:f9:f6:84:6d:93:4c:89:1e:0b:6c:4b:cb:41:9a:f3:
         c6:9e:dd:91:e4:f4:c0:ee:94:fb:34:eb:7c:2d:f5:c9:60:23:
         3f:47:2a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:58:41 2026 by rpki-client