Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File:                     T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier:          EB5RY0rQgUTKX9jxhvqXXw9PH2Rnoxav7qZTdkAMPvY=
Subject key identifier:   63:06:34:5E:A4:99:8A:A6:E8:7E:F3:FD:35:48:FF:8D:F9:7E:71:61
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer:       /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial:       019F9391EDF4793E8B41B6FA4B6AA85D44C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 10:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:42 +0000
Files and hashes:         1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: 4oF17YQlEYceq8jojw19CEDqILoLFXv2VPmoN6asP1w=)
                          2: o8tO8stgvhxVUDIUNSKHy-JW2fo.roa (hash: Z08VgX0ivNPtY5zzCzl8jQ6u6U/EFae5aPOCebjGd+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:ed:f4:79:3e:8b:41:b6:fa:4b:6a:a8:5d:44:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
        Validity
            Not Before: Jul 24 10:00:42 2026 GMT
            Not After : Jul 25 10:00:42 2026 GMT
        Subject: CN=6306345ea4998aa6e87ef3fd3548ff8df97e7161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9c:eb:c6:1f:44:16:05:63:80:0a:77:c3:39:
                    02:b8:0e:99:7d:bb:8c:7e:12:01:77:cd:1d:9c:9a:
                    e6:1f:0f:b3:27:da:ec:5c:e4:12:b1:74:0d:a7:d3:
                    87:d4:b5:9b:b4:ac:95:77:21:43:c9:7d:9f:90:a7:
                    1a:95:41:16:14:5a:dc:63:e7:f6:9d:35:4e:25:3a:
                    45:1e:bd:53:4f:7b:92:02:b6:90:19:0f:b3:5a:4c:
                    02:e8:e7:dd:f7:3b:de:23:56:24:02:75:ad:b8:0c:
                    ef:31:8f:f7:05:1f:fa:27:6b:e2:b5:5b:ba:ed:15:
                    26:e6:07:f1:81:fd:c3:00:23:e9:5d:fd:90:82:bd:
                    11:0d:bf:97:2e:d9:68:ba:b7:a1:04:2c:53:3a:fb:
                    dd:7f:13:f5:6f:5d:cf:5b:88:db:69:da:ed:83:d3:
                    3d:3d:c7:cb:ee:2c:97:d0:4e:8f:0b:8d:57:bd:27:
                    29:66:5f:18:6b:0e:8a:a3:73:f5:a9:55:d9:4f:f3:
                    35:3c:10:66:3e:50:b1:d0:8d:58:f1:7b:15:5e:38:
                    f0:12:86:40:1e:75:75:e0:98:42:c2:26:7f:d4:bb:
                    11:a7:1a:03:36:b9:e6:c8:2b:57:8c:bc:87:34:27:
                    99:64:aa:2a:f9:1d:be:48:17:e1:21:4b:c4:16:60:
                    bf:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:06:34:5E:A4:99:8A:A6:E8:7E:F3:FD:35:48:FF:8D:F9:7E:71:61
            X509v3 Authority Key Identifier:
                keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:da:9a:bc:fd:77:c0:7a:81:e3:f7:5b:cc:48:35:65:8e:8c:
         a2:c2:ff:21:51:73:ec:39:0d:01:0e:0d:6b:7d:c3:e9:df:63:
         d7:92:9d:b0:ba:26:79:75:c3:bc:e0:00:ef:8c:6f:3b:5f:98:
         72:1c:97:91:32:1f:3a:53:38:ea:cf:e8:04:e0:18:03:72:40:
         0a:27:f0:20:44:0d:5e:8e:7c:99:43:60:8d:73:96:03:6a:9b:
         38:a8:02:9b:cd:4a:17:8a:a2:7d:12:6b:35:f3:9a:3b:9c:15:
         04:aa:1f:81:2a:ba:c1:4c:a1:9d:11:38:9c:d7:1d:83:5e:35:
         9d:d9:c1:50:65:8a:e4:9a:5a:3d:0d:7b:b7:a1:99:37:b7:f4:
         a8:75:04:42:77:f0:ca:19:44:67:65:30:df:fb:2c:82:58:94:
         21:4d:89:24:72:77:1c:12:91:ad:55:83:24:b8:08:b8:91:cf:
         0b:82:17:c1:84:25:cb:e3:44:90:92:cd:88:fb:d8:ab:4a:7b:
         50:cc:34:9c:6c:42:a9:fe:d7:50:32:03:8d:b1:75:8f:8a:51:
         a3:1f:63:13:54:98:35:2b:63:72:49:b0:44:5b:e7:f8:c8:d2:
         b0:d7:45:07:69:10:c9:dd:f1:67:15:c0:b7:2c:25:b9:3b:52:
         13:61:65:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:10 2026 by rpki-client