Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
File:                     DyFSGnEnFX99rwrQkTlK1aHM53k.mft (raw, json)
Hash identifier:          Aerrge8t1NrgAoGVPTjZEiFpLRLmJ3kq1xfxsy9FnFY=
Subject key identifier:   DB:30:D2:21:59:99:98:90:8E:DC:AC:CD:72:6C:BE:23:5F:64:25:C4
Authority key identifier: 0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79
Certificate issuer:       /CN=0f21521a7127157f7daf0ad091394ad5a1cce779
Certificate serial:       019F93FFC3742229897AC592F796A99F8311
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
Manifest number:          19D4
Signing time:             Fri 24 Jul 2026 12:00:40 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:40 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:40 +0000
Files and hashes:         1: 0IWvtKpWz8nwzfyztFPG-10e-ec.roa (hash: M3DL2KpstDY4RX5irHxTIoQ7SYVzPk7eR23DZZrDMbo=)
                          2: DyFSGnEnFX99rwrQkTlK1aHM53k.crl (hash: mf3qAdgNqPnLK9DOiUYiwhELioxBw4jjwswNcgLNNmE=)
                          3: pYVSN2AB9mwBr8yDS1zYwXrTuMQ.roa (hash: xWYPQfiNQqIYcOLgwTTjRZ9fSTqKYlkmjs7r1ngIGF4=)
                          4: uXN7_MtPKMwhSTIFKpLUwo-V5P8.roa (hash: 8z/tTyMqQq524Fl02SLcRSjti3sQ0AEo40zN2vpCYes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:c3:74:22:29:89:7a:c5:92:f7:96:a9:9f:83:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f21521a7127157f7daf0ad091394ad5a1cce779
        Validity
            Not Before: Jul 24 12:00:40 2026 GMT
            Not After : Jul 25 12:00:40 2026 GMT
        Subject: CN=db30d221599998908edcaccd726cbe235f6425c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:c1:9e:af:58:0a:09:fb:5d:eb:fe:a7:e9:
                    61:7b:ed:21:37:fa:46:05:dd:94:1d:66:a2:9d:d8:
                    cd:0a:ae:ec:3b:14:f0:85:0c:e7:5c:ff:99:a4:fc:
                    61:58:fe:bf:71:cc:5d:31:d5:9e:5c:11:65:99:84:
                    16:1c:1b:3c:37:d2:d8:ed:52:89:fb:14:76:62:6a:
                    47:b9:04:ec:08:9c:4e:fd:db:4a:10:59:26:2e:0c:
                    b6:7f:39:1f:f3:3b:d0:fd:c1:09:42:6f:31:16:4c:
                    6f:bc:72:ec:25:fe:33:0d:3e:74:82:3e:c3:1a:cc:
                    6a:2b:34:d0:aa:a1:b5:42:71:dc:1f:d6:28:12:56:
                    d4:3e:25:c3:8b:36:33:48:81:58:38:96:35:9e:f5:
                    d7:43:7d:db:27:5e:2e:95:bf:31:ab:33:e6:a9:c3:
                    64:b9:30:5b:52:76:49:30:34:9d:54:30:b6:84:a3:
                    18:81:08:52:5a:82:6c:48:31:42:69:16:c6:9f:b9:
                    9c:ab:37:aa:12:d5:10:ff:f8:bb:50:24:53:99:ab:
                    38:b5:6d:3b:6e:58:33:72:dc:76:74:68:48:2e:06:
                    38:e7:76:c4:71:1b:78:33:36:a3:9a:3c:4f:cd:11:
                    a9:2b:b3:33:db:4b:1e:99:17:9e:fa:c7:05:69:f6:
                    40:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:30:D2:21:59:99:98:90:8E:DC:AC:CD:72:6C:BE:23:5F:64:25:C4
            X509v3 Authority Key Identifier:
                keyid:0F:21:52:1A:71:27:15:7F:7D:AF:0A:D0:91:39:4A:D5:A1:CC:E7:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DyFSGnEnFX99rwrQkTlK1aHM53k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e831b1-9ec0-46f2-860d-fad5fd7970ba/1/DyFSGnEnFX99rwrQkTlK1aHM53k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:6b:01:41:35:dd:80:4e:0d:3a:df:16:f5:c9:79:2c:00:53:
         ee:58:2c:36:90:f7:76:04:d5:b9:25:fa:03:b2:8f:d6:64:eb:
         1f:b4:a9:22:cc:b4:cc:71:9f:4b:fc:17:3c:a4:f3:4a:74:08:
         ec:d3:c9:bb:3c:32:cb:b5:3d:24:18:f3:16:fd:cb:ee:97:23:
         67:81:49:42:c8:6b:d7:41:8a:b1:ec:83:8b:49:28:1d:f5:34:
         70:e7:52:d6:2a:1b:b6:98:cf:e2:2b:02:ae:09:64:ad:c6:d7:
         64:d3:7a:3c:db:54:c8:08:3d:11:5a:fd:90:68:97:2f:c5:65:
         92:d1:1d:d0:41:92:83:8d:32:4f:39:b2:b7:53:ad:30:07:6a:
         38:57:6f:8e:49:ed:34:e1:6a:11:bb:dc:43:ff:e9:d9:88:57:
         ba:e2:5c:b1:e0:23:54:e3:32:23:91:fd:75:7e:50:a9:55:61:
         0a:5b:ec:7c:30:1f:2f:92:cc:5a:31:39:1f:e9:71:3f:5d:97:
         82:4a:02:d9:6c:df:b4:8b:8a:dd:e3:0a:90:9d:cb:1a:04:79:
         78:e1:fe:f1:3a:0e:9e:d9:67:88:46:ec:7b:1b:c9:de:af:75:
         30:3e:21:9e:77:dc:b6:96:07:76:ab:70:8b:fb:54:85:43:82:
         02:b6:b2:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:28:52 2026 by rpki-client