Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
File:                     1-K1UNiT40ygeyXBFjudS8QpCRSk.mft (raw, json)
Hash identifier:          8733H1of7oABCxvABt14BOeCEvhoNEJ1gQaYN15n8oo=
Subject key identifier:   B2:FF:3A:BD:83:72:41:1F:77:DA:93:C3:42:3A:E8:D5:58:3B:F3:F8
Authority key identifier: F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29
Certificate issuer:       /CN=f8ad543624f8d3281ec970458ee752f10a424529
Certificate serial:       019F905A45B272A57E29EC665780913E2ACC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
Manifest number:          19CF
Signing time:             Thu 23 Jul 2026 19:01:02 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:02 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:02 +0000
Files and hashes:         1: 1-K1UNiT40ygeyXBFjudS8QpCRSk.crl (hash: UJw16dfu+Dbo3FIspYkPkwxDD3aPi5JdjR6QAXDBI/U=)
                          2: 8l0SWe3b28HgD7mm-CfnmnFy7uE.roa (hash: /HXGsu05kBaXf36m4kHjfdsrMe8Gwl63OVzSaOcPq2E=)
                          3: Lz9R6m5SK-yqZEob6cadmxCThHs.roa (hash: jc9B6VAewdJSUcgfHIRXwP2EIxv1ywTev7YQ165P/Qg=)
                          4: TlJFBm5D9j5YuMmzp85IiQTh8co.roa (hash: i++B3U0x1IS6mONz4BFbN/RmzEvmNewnucDBcHMUTt8=)
                          5: wil6FkxZYkrOZGc5qcrYgtNzbBQ.roa (hash: wp6PV3mdjd5yDzGVuaZQJ4OXj/z8YAFEvDtk3UkLrvk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:45:b2:72:a5:7e:29:ec:66:57:80:91:3e:2a:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8ad543624f8d3281ec970458ee752f10a424529
        Validity
            Not Before: Jul 23 19:01:02 2026 GMT
            Not After : Jul 24 19:01:02 2026 GMT
        Subject: CN=b2ff3abd8372411f77da93c3423ae8d5583bf3f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:60:0b:7b:70:eb:4a:5b:b4:30:3b:48:30:
                    c1:6e:e8:42:dc:f8:66:31:06:94:3c:08:44:94:f5:
                    99:3a:ce:d8:39:19:48:a7:11:93:75:58:d5:88:88:
                    0f:89:d7:86:75:c7:57:a2:1b:7b:f6:88:c1:04:fb:
                    df:3d:e4:cc:f5:60:27:8c:9b:4d:81:36:e6:f5:3e:
                    97:d7:bc:95:d8:e5:0c:0e:e3:9d:8c:aa:6d:59:ae:
                    b6:4c:47:52:ec:48:79:d3:65:7f:ca:c2:02:02:69:
                    60:ec:24:92:a2:87:71:c1:86:fd:7f:ab:6b:62:4d:
                    05:4a:59:ad:77:65:d3:79:ca:d6:fe:0b:73:d0:92:
                    3e:4d:93:c0:7a:6d:0c:c6:b3:22:8d:6d:29:e1:60:
                    12:92:7d:aa:d4:43:88:6e:72:20:01:f0:11:43:42:
                    4c:e8:9e:3e:25:0b:31:19:df:ce:74:40:84:5e:7e:
                    bf:ba:9b:93:91:ae:d3:7f:2a:11:05:70:5d:c7:bd:
                    e8:98:a2:3d:80:26:95:1f:ea:51:58:7f:07:c1:61:
                    d3:dc:2b:0b:0b:73:78:32:ce:8d:2d:f2:ef:c5:8a:
                    f2:53:42:8b:66:d3:27:71:61:77:69:52:7a:7b:47:
                    a1:54:31:04:91:19:52:25:bb:4b:9a:c7:6a:ae:e3:
                    40:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FF:3A:BD:83:72:41:1F:77:DA:93:C3:42:3A:E8:D5:58:3B:F3:F8
            X509v3 Authority Key Identifier:
                keyid:F8:AD:54:36:24:F8:D3:28:1E:C9:70:45:8E:E7:52:F1:0A:42:45:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-K1UNiT40ygeyXBFjudS8QpCRSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/af1f64-c35f-47e8-87c9-8a11b4719d82/1/1-K1UNiT40ygeyXBFjudS8QpCRSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:f2:4f:1d:e5:c6:a9:c5:18:f5:f7:3b:a0:ad:b8:db:12:37:
         29:29:ef:7f:d6:de:68:79:92:f6:f7:d0:f0:73:3c:3a:4b:d3:
         bc:a7:7b:73:d9:8a:9f:c7:04:f0:07:f6:c2:f1:02:b9:10:4d:
         37:8f:ea:f5:c8:6f:21:d7:25:81:a9:8d:f9:ac:8b:64:c2:c9:
         7f:6d:70:ad:2e:b5:a6:7a:2d:97:dd:dd:2a:2c:21:63:50:85:
         f8:5d:ca:b4:e8:85:15:27:69:65:26:a7:2d:2a:70:2b:c7:da:
         02:d9:4c:a7:31:80:4e:46:0f:66:00:68:59:85:9a:c0:1c:bc:
         ea:69:9c:f2:7c:5b:df:40:d8:e3:d0:de:e0:7e:15:fb:28:83:
         3e:ee:a8:b1:8a:05:cb:83:d5:8f:cc:4d:c3:06:e2:0a:64:0e:
         83:02:cc:14:77:ff:c9:33:5c:bc:21:f7:8a:14:90:17:38:75:
         fb:b0:07:05:99:31:c7:7e:48:91:78:91:3d:6f:62:23:0d:c1:
         e4:3f:85:e7:7c:08:9d:3a:73:e0:5d:40:df:83:7c:16:01:56:
         c0:e1:24:39:d5:07:b2:58:8a:dc:93:39:4b:16:a0:78:d3:0b:
         30:e7:fe:b0:62:06:7f:5c:00:d6:2b:6b:47:f4:f7:b4:9a:8e:
         2b:0c:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:39:40 2026 by rpki-client