Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
File:                     RsmLLko-Bg3vRavGLA40X6qAtew.mft (raw, json)
Hash identifier:          hnTixBSxSKbw5B8ExBhfXtoDJpyxm+iy3+SJyizuLAI=
Subject key identifier:   FF:ED:C9:2B:2C:2E:96:27:C1:1C:70:57:A9:50:67:B5:54:87:A6:62
Authority key identifier: 46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC
Certificate issuer:       /CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
Certificate serial:       019F9090EA5024278FF3A952B00EDE9B0F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 20:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:43 +0000
Files and hashes:         1: Ip7p_hL1VXdeRgj8FVGhTum4zB0.roa (hash: agYqlxFFSnuNhJD9cHkZJfqIOemy4XNVrJfaav2GJL4=)
                          2: MGqAhkKHBACRFaiNXYcP9SHiMFE.roa (hash: GZRYXJdlMwxnrdhoW6/XDsnMjgU/H78VBDuIRDqDxI0=)
                          3: RsmLLko-Bg3vRavGLA40X6qAtew.crl (hash: 5tqlaF3/2U/9st6PX6gbEKyz1qDZLuoUxDK2DcwyM84=)
                          4: WjHsZr2LYotu7UixbhUPmyhufyM.roa (hash: UbFC6dvqvKaXgJmhKzkqauNjGk31aKocZ5d+hid0GEk=)
                          5: hL4nAbMjDcB0I8HfTfp0aJOETu4.roa (hash: HMgiqPXACPgRgXB4fWWx/eVqV6zK3UzAgCuz5lAzZEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:ea:50:24:27:8f:f3:a9:52:b0:0e:de:9b:0f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46c98b2e4a3e060def45abc62c0e345faa80b5ec
        Validity
            Not Before: Jul 23 20:00:43 2026 GMT
            Not After : Jul 24 20:00:43 2026 GMT
        Subject: CN=ffedc92b2c2e9627c11c7057a95067b55487a662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:90:f4:26:77:36:90:42:1d:7e:15:c4:e2:fa:
                    b4:05:7c:73:9a:0f:13:ba:73:1b:00:3e:5d:3c:6b:
                    11:af:78:e6:1e:9e:5b:cd:ca:6c:1c:8e:70:55:ae:
                    bc:56:2f:f1:0b:d4:73:a0:c2:b3:d6:00:c3:08:de:
                    d4:05:92:60:e0:9c:29:80:38:6a:76:be:57:4e:e7:
                    08:3a:e1:cc:19:ed:f5:f4:8d:70:5b:5f:31:19:dc:
                    b0:eb:21:6d:4f:cf:1e:22:15:a7:0a:80:18:8b:c3:
                    30:74:30:85:4d:7a:54:38:eb:95:76:1e:ba:85:c9:
                    b9:de:eb:33:e8:03:58:2d:87:fa:e8:25:81:a6:5a:
                    12:c7:5b:f5:f5:8d:0d:a5:2f:91:93:6f:13:ec:52:
                    2a:b2:63:cc:a4:45:28:ca:c7:cc:55:3f:9f:72:23:
                    05:fd:af:7d:18:0b:eb:67:d8:83:79:02:13:80:43:
                    7f:7b:a6:d5:a8:61:da:0e:04:f2:4b:c2:6d:dc:a1:
                    98:0a:69:10:ec:aa:15:37:a3:c1:c2:b3:6f:a9:da:
                    0f:b8:50:ff:7d:9c:b9:a1:6a:ff:40:8c:14:f1:64:
                    f1:db:a1:1c:c8:c0:d5:f7:a3:41:f1:07:97:a3:83:
                    bb:5a:a3:1c:fa:54:dd:40:09:32:8e:88:5c:43:87:
                    45:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:ED:C9:2B:2C:2E:96:27:C1:1C:70:57:A9:50:67:B5:54:87:A6:62
            X509v3 Authority Key Identifier:
                keyid:46:C9:8B:2E:4A:3E:06:0D:EF:45:AB:C6:2C:0E:34:5F:AA:80:B5:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsmLLko-Bg3vRavGLA40X6qAtew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/2aa8d1-cb71-4904-a591-3449522710e7/1/RsmLLko-Bg3vRavGLA40X6qAtew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:da:7b:c8:3f:30:c0:55:2e:54:0d:45:9a:53:89:b7:25:58:
         c1:5d:94:71:e9:4e:52:8a:93:61:99:79:ef:f8:81:9a:41:02:
         78:8f:0d:65:70:87:eb:24:c9:1d:67:e7:e9:45:70:83:eb:1d:
         84:81:d7:96:b0:3e:48:40:fc:2d:f1:9f:84:66:b3:3b:48:3a:
         cf:91:6c:45:fc:f8:26:ec:1c:86:78:b9:9b:a8:06:a3:08:5a:
         14:8a:3c:3b:d6:d1:41:50:a9:ba:a4:18:00:50:ee:a6:b5:fc:
         7d:33:d0:97:ec:9e:c7:da:6a:e5:3e:69:44:2f:c6:5f:71:56:
         31:be:d7:02:a7:1a:f6:f1:1d:d3:af:b8:9e:12:f6:42:47:5e:
         a5:88:2d:00:55:cc:b3:98:2b:be:84:b7:69:b4:15:2f:6c:ff:
         ab:c2:08:51:65:be:1e:36:e8:65:89:da:06:8a:1b:d5:6a:82:
         ac:58:e3:6c:a8:4d:7a:b5:52:b8:d7:75:66:fd:26:37:41:01:
         31:04:b5:dd:b6:27:8d:34:1c:9d:2b:49:39:a0:c7:85:be:7e:
         d8:0e:2e:e0:42:38:eb:7b:41:95:b5:92:50:dd:ab:fe:2c:e7:
         5f:d4:75:cb:d9:99:14:5c:bb:b9:9b:16:63:a5:c3:06:47:84:
         3a:2e:1e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:26 2026 by rpki-client