Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
File:                     gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft (raw, json)
Hash identifier:          HJ90YkdDDpm7ns6D5s7LIWDWh/RhIfRfkm2N9r1pm5o=
Subject key identifier:   4E:1C:63:71:E5:87:A8:FF:BB:9B:C8:93:A1:8D:F4:65:9D:A6:BC:CE
Authority key identifier: 80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19
Certificate issuer:       /CN=80ebaf2cba8359438e434123dda7a5a396f5f519
Certificate serial:       019F9135FC566CBD106A6B2FEE8BB4ABCBB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 23:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:01 +0000
Files and hashes:         1: MKFoAsHr3TV5czrMUEU2-S68gz8.roa (hash: FPj6ArHpiHkc92dGxOot02CZWnIJlaTAizHiHvHtZg8=)
                          2: gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl (hash: NB0tim51nzdqnLHWtgMosoEW3IgVl2ssWZKw6E6Txlg=)
                          3: ySQQLXcCioQUrT-vVLYr88NDd8k.roa (hash: 99wAMGqb6hUgck+9nOjEElLH944hixWosFh2OOImxmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:fc:56:6c:bd:10:6a:6b:2f:ee:8b:b4:ab:cb:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80ebaf2cba8359438e434123dda7a5a396f5f519
        Validity
            Not Before: Jul 23 23:01:01 2026 GMT
            Not After : Jul 24 23:01:01 2026 GMT
        Subject: CN=4e1c6371e587a8ffbb9bc893a18df4659da6bcce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:24:35:93:cd:1e:66:3d:c4:e3:9a:9f:62:
                    ba:6f:44:09:9a:ac:07:c8:66:e1:8f:4b:cc:0f:ed:
                    ba:1a:46:a1:a4:c2:31:a6:b3:2c:e2:4f:f0:61:eb:
                    50:8a:cb:ba:38:4b:13:3f:fc:c2:a4:c7:3e:b1:af:
                    9a:20:e9:ce:2a:e5:26:6e:cb:e9:8c:71:0c:ca:92:
                    41:a1:4d:b8:00:95:fa:d8:b9:ad:45:41:7d:1e:66:
                    a1:bc:a9:3f:9a:bb:d6:12:63:e0:4e:3f:99:e1:b2:
                    74:cd:2b:00:66:b2:ce:ec:c5:a6:9e:ee:99:bb:c8:
                    09:29:a7:20:dd:aa:67:37:53:25:9a:3a:89:45:8f:
                    be:3e:af:24:60:39:0c:4e:cc:6d:69:01:5b:5c:6a:
                    d0:a4:1a:ff:17:53:e6:4a:b7:e8:36:c7:ec:5f:7c:
                    d1:db:11:31:67:54:f6:16:c7:a8:12:ab:ca:96:b8:
                    dc:14:f2:24:f2:2d:cc:91:3d:50:1b:2d:33:d8:47:
                    85:50:09:a0:3e:f2:95:fd:8b:97:73:c7:91:e6:7f:
                    1f:ed:1c:33:44:fa:99:a7:0c:a0:d3:7b:43:86:41:
                    a9:6b:1d:25:a6:a9:85:eb:02:ac:8e:2c:95:f5:cd:
                    08:24:f5:e8:98:25:52:2f:d5:ce:9d:34:78:ef:35:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:1C:63:71:E5:87:A8:FF:BB:9B:C8:93:A1:8D:F4:65:9D:A6:BC:CE
            X509v3 Authority Key Identifier:
                keyid:80:EB:AF:2C:BA:83:59:43:8E:43:41:23:DD:A7:A5:A3:96:F5:F5:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/31f8a0-7e95-4fe2-8809-f78bdb6f60c2/1/gOuvLLqDWUOOQ0Ej3aelo5b19Rk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f8:ec:84:5b:af:7d:71:4a:0c:d3:d6:82:80:d7:55:79:19:
         f6:e3:74:da:32:82:d9:77:84:a3:d6:e6:8e:8a:4f:bb:a5:76:
         a7:58:32:7d:04:20:d2:a0:80:03:80:08:2d:a0:5e:f2:82:ab:
         93:69:e9:54:00:56:14:4e:29:e8:4b:b5:01:fc:6f:8d:29:86:
         ee:f6:20:24:4b:33:e2:21:fb:3b:b4:d4:27:2e:b0:f5:98:82:
         a8:29:b1:a8:0b:47:32:7e:fe:8a:96:b3:a7:bc:00:84:57:30:
         57:6b:88:c8:dd:53:6e:fb:ca:f7:f0:25:a3:09:d5:5e:5b:b2:
         97:92:95:8f:cb:6d:66:82:d1:1a:59:7e:ca:a9:24:7f:db:2e:
         5c:6e:3d:50:df:15:f8:d0:fe:20:d2:a1:0f:13:c2:d2:2b:64:
         5e:07:68:b1:c5:93:1d:35:d1:73:46:4a:bb:57:8e:ba:78:5a:
         c9:64:56:f8:19:b2:55:c7:50:fe:15:cc:8c:4c:cb:0f:a5:a3:
         37:46:a3:58:ba:19:0c:27:3d:10:55:b5:e1:c9:fa:4e:0b:15:
         65:11:38:a0:b7:92:95:ab:7f:8c:35:ca:f8:29:16:4e:7c:d9:
         dd:9e:36:7d:68:44:70:06:5a:4e:d2:13:c8:c8:c8:a7:20:fe:
         92:f6:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:29 2026 by rpki-client