Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
File:                     TdGyWHSQrQYcsgcXa97sgaUxWIw.mft (raw, json)
Hash identifier:          JljOCyIjjMRY94k3Ee6Lx0YZFztnIX871ckRqwR6PcY=
Subject key identifier:   BA:62:0C:74:E0:2F:35:BA:C5:50:5C:80:57:2F:E3:C1:C5:5B:56:5C
Authority key identifier: 4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C
Certificate issuer:       /CN=4dd1b2587490ad061cb207176bdeec81a531588c
Certificate serial:       019F924845010B92BFAFC6B7BCCFA5DAB0E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
Manifest number:          19DF
Signing time:             Fri 24 Jul 2026 04:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:37 +0000
Files and hashes:         1: 02kOZkpvmw6H06A_7TJUg4SFXaQ.roa (hash: TpRuYePLiA4791T1EEAGr2x5CqL+fTtzRjsvGFbZMFE=)
                          2: 2uonQk8lw16FeBIvKKSSmhsYIS0.roa (hash: 2dNCmgQW6KMhs3bZJLn40BJuFp8E7ETzKi/EDLa0p5s=)
                          3: 5ziyZMsm-eF8rQKEiPIRLUjKrJc.roa (hash: ST0tOCj/lVMKy70YCsjUG8APQaOubaCeSEbJbdk4mkA=)
                          4: 8EjBwuh_9in2Z1YECnIBdQ9VNrg.roa (hash: PZyLvuJ766MtPxGWe7ycqZ9uJ2ybPMELzypr1ODKQyU=)
                          5: FwWBUFukI5sYaoIJXPQl_VpBKGw.roa (hash: 1A5Wlz49N8I7V2ONwfh6sYJRe2syIOSrNYZlIXmZWdY=)
                          6: Gy-LFbASJWTVYACt4LtWc2cmLuw.roa (hash: ujJsb5LhZ8X8O1ISoHR/MP5k+2QVAPis3/2ApXdZZ3g=)
                          7: MO6J3ImYDWqYVzymL0l4FvP1thU.roa (hash: e0dvPY/H6He44W+ZncCzFUHFzRAKvhD4nFOOCJSgnhw=)
                          8: NjCxVetchGZ0XWn7taqHcdtexeY.roa (hash: luZWHi8jfVZ+lGh40HXz9Aj5QcdjwpUbYNovF4whMXA=)
                          9: TdGyWHSQrQYcsgcXa97sgaUxWIw.crl (hash: W5wNPVcc7tocnX3/qVsQT8BNzFLZMSVf95fLJxsjaCo=)
                          10: YtD0hgbunNZVqmVM-mTLvyyQEfg.roa (hash: bXNfm9p7iVN39qRXUc3z+rEBdxvoCN2D2p6tjPh77Uk=)
                          11: aXSOc-PVHMUBKt_487iYToOm7qo.roa (hash: TgcrpfHL47vgaiMhXn3iuqbilgXgoWpFYf29PAeU7PQ=)
                          12: esYBbdHlmzNrFPaZHG9t4u-VPHc.roa (hash: lkNqbXeTq7xSvC4HTyeLweRSSMj+JVz2/1P8Io014A8=)
                          13: fk1NDywalDt7uylAx-JbeK2KndA.roa (hash: GjjjXn/c5RKterLew0goE2oPgtQT51gR0GQhu+Gw67E=)
                          14: gH8loGqHuQUgS7s-27j8UFtooRI.roa (hash: 3c/uPZsoFkC/+vu1WnVFt+9jcD0vxFLrQc/tSOZVhig=)
                          15: irMc3rrBTtXnxu6Y6x7SlrREl3k.roa (hash: odarHoY4Wy3X+9/gV/9gi100gxxZ4b3sXjkX8UmBWCw=)
                          16: jSXCL2nU6ig_-VGukqzzbg83BZk.roa (hash: Az+cF5wKpW/d6F9stZPF4IUccQjeYz6jWseSjP0L2T0=)
                          17: kYEWFQU5-czKs7zv1vGT343BJ-g.roa (hash: xWtvvMN7qcqpohmug6+MXQLfldtO5B6k2u+O9bf+VTA=)
                          18: oitUYkAPeYiroXJK68BhqiN_Xek.roa (hash: zYA61o9aLXKLXeSg2vp84zehihqtVq61hd+jWJCYfGg=)
                          19: rbrxUA36Uj_W2cv5ysZhTVIwxp4.roa (hash: OT7C6O/C6TgYrrzLBRPYDZUiybzraaRPGIJN5wW++Ak=)
                          20: u0RIuGfpHnx-Tn2Xp-wlaIQU95A.roa (hash: VuT5SalQp4yYIzm6lgKxTmu1Rlv5TD85uBnxUVTY7eo=)
                          21: yLMV5lCxmugxTcjR0kvs8qTvDQs.roa (hash: VAFUfjT6/8ZbId3UHCjjJDfpK2X5rUeLGtPsXPOBDAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:45:01:0b:92:bf:af:c6:b7:bc:cf:a5:da:b0:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd1b2587490ad061cb207176bdeec81a531588c
        Validity
            Not Before: Jul 24 04:00:37 2026 GMT
            Not After : Jul 25 04:00:37 2026 GMT
        Subject: CN=ba620c74e02f35bac5505c80572fe3c1c55b565c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:53:72:5f:5c:08:f1:9d:d3:ad:b3:28:44:61:
                    c1:64:65:44:85:f9:57:6a:53:da:96:85:aa:88:a2:
                    c2:54:84:3e:b7:9a:40:1c:91:95:43:93:9a:5c:6b:
                    80:25:3e:c7:c1:86:ea:fe:ea:c1:74:fd:8e:b0:43:
                    8c:b0:3a:ba:da:41:54:d1:e9:55:6b:39:20:af:86:
                    db:a5:70:2c:a9:e2:d4:cc:de:7e:f3:f6:8e:36:3a:
                    5b:b6:40:0d:68:24:71:ac:47:17:f1:85:38:86:49:
                    e8:d1:04:4c:ee:68:5e:be:30:71:55:7b:2f:c8:c5:
                    c2:c1:06:04:0c:e8:47:65:5f:e1:d6:0c:2f:d4:38:
                    e0:48:1a:d9:73:63:be:63:c7:a9:27:0a:95:c8:fd:
                    0f:3f:84:86:80:11:a9:f6:99:af:48:94:b9:5b:70:
                    85:45:96:73:42:24:92:df:65:f1:45:0d:fd:60:ac:
                    c3:99:09:54:ab:34:18:2d:c3:12:5f:e5:8f:e6:69:
                    a1:e5:b4:b0:82:39:69:b8:96:50:ee:30:86:fa:96:
                    0a:08:d8:7d:1d:ca:16:a9:ff:fc:88:b1:ee:51:40:
                    7b:64:0a:4b:be:34:4a:6e:bc:db:59:22:98:f4:bf:
                    94:d7:ca:fa:f0:91:d9:83:9b:fa:9c:65:7e:43:63:
                    24:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:62:0C:74:E0:2F:35:BA:C5:50:5C:80:57:2F:E3:C1:C5:5B:56:5C
            X509v3 Authority Key Identifier:
                keyid:4D:D1:B2:58:74:90:AD:06:1C:B2:07:17:6B:DE:EC:81:A5:31:58:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdGyWHSQrQYcsgcXa97sgaUxWIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/01d2af-1f21-4b80-b665-db463c5fb0b4/1/TdGyWHSQrQYcsgcXa97sgaUxWIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e2:52:0c:e0:e3:3f:c9:93:91:67:c5:e3:4c:1e:b1:76:dc:
         21:96:24:c1:74:c9:87:ad:1d:e7:c8:b5:03:24:4d:67:06:53:
         dd:7b:84:60:d9:47:8c:12:3a:64:54:92:0b:3a:bd:5c:5b:f2:
         b0:42:e1:61:d3:17:23:46:5a:f8:74:09:f6:6a:33:6a:bb:af:
         93:a9:e7:1e:07:b5:88:70:b1:5b:67:ec:62:2f:8b:58:a1:1d:
         d5:b7:1c:00:d2:6d:16:c9:08:8b:bd:53:99:f8:2d:a1:cd:82:
         8d:62:4d:ab:54:94:8b:17:31:80:fe:0b:75:68:c1:78:7b:22:
         01:d6:cc:b1:df:fb:93:10:09:c8:83:87:fd:4c:da:f6:02:22:
         cf:13:1f:16:f0:f2:ff:29:54:73:60:c5:dc:fa:34:b5:ad:2c:
         1d:12:ca:d0:e5:17:5a:ad:bf:85:b6:db:0c:dc:64:52:86:fc:
         a0:04:f0:f7:e4:fc:0c:97:3b:f8:de:24:27:9d:39:ce:13:4c:
         14:23:b6:3d:6b:54:12:db:05:c9:b2:18:96:59:a4:24:41:85:
         3a:4b:90:cc:b3:d1:9f:9e:ec:93:3f:24:3c:a6:50:1f:13:c4:
         53:fb:2e:df:65:6c:4b:89:84:5f:fe:c5:e2:a9:d7:f6:78:83:
         fb:43:be:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:47 2026 by rpki-client