Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          zXcDCrSDYIi1N/jUEVqTjMYSsMajHy+liHQZDfVsk4A=
Subject key identifier:   42:FE:22:70:47:88:07:E5:E4:8D:47:76:F2:B7:AF:6A:9B:88:61:92
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       019F9090FB8ABF086AC1C08699C8E4F1057D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          19D2
Signing time:             Thu 23 Jul 2026 20:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:48 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: Bw0/Za5H0nl0iLhyJpR5RCgOUfYnw7tMlUYqsITOeXY=)
                          2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
                          3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
                          4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
                          5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
                          6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:fb:8a:bf:08:6a:c1:c0:86:99:c8:e4:f1:05:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Jul 23 20:00:48 2026 GMT
            Not After : Jul 24 20:00:48 2026 GMT
        Subject: CN=42fe2270478807e5e48d4776f2b7af6a9b886192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f3:45:60:8b:d2:58:2c:d5:d6:a5:55:ab:cf:
                    2c:57:17:a7:35:5e:28:56:e3:24:d3:64:ed:5b:c5:
                    68:6f:a7:4c:2f:ef:f7:cb:65:5d:f0:a3:f9:ae:ab:
                    2b:6e:dc:9c:c8:29:87:e2:ff:5b:9b:40:e6:1c:f1:
                    a8:7a:39:9e:33:f1:42:c5:80:5a:fa:d8:b1:20:e3:
                    0c:0e:27:92:6c:18:1d:df:b2:b6:10:0f:c8:50:3f:
                    51:b3:e3:5c:8f:0f:24:61:d1:30:a6:60:78:42:58:
                    fe:a9:0b:8a:f2:6d:90:77:93:7e:b1:33:13:90:a4:
                    03:c2:79:34:ff:88:18:b2:88:c2:4e:3e:c8:58:36:
                    64:a2:24:01:5c:7b:a4:79:a6:5c:5d:17:bb:8e:d7:
                    f4:1a:2f:c2:db:02:b6:99:59:f0:c2:06:22:a8:5e:
                    c5:2c:8b:1f:27:18:52:1f:ff:1e:9c:56:8f:09:17:
                    c1:b2:48:c7:7b:fb:02:8f:7a:80:36:50:52:26:17:
                    c4:cd:cb:06:fb:80:5e:e9:4e:35:4f:a4:b1:89:10:
                    d4:68:40:fc:8d:79:4c:02:3c:fd:03:08:19:38:44:
                    6c:09:89:6f:27:1d:21:3c:c5:11:00:74:4e:25:93:
                    39:eb:94:fa:b6:c8:31:b9:c2:de:93:0a:bf:05:96:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FE:22:70:47:88:07:E5:E4:8D:47:76:F2:B7:AF:6A:9B:88:61:92
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:dc:15:5b:98:35:71:df:24:0a:b8:39:67:a4:12:3b:45:a0:
         ea:98:6b:24:f9:bc:f0:8f:ce:02:4d:6a:75:27:a3:0b:0e:56:
         ec:0f:14:7f:16:58:cd:fb:36:87:d9:b2:9d:42:80:70:49:fa:
         8c:d0:6c:1f:1e:c9:15:bd:a5:1b:7d:40:a6:2e:3f:e3:af:73:
         49:76:46:67:0c:70:92:2c:3f:67:ff:da:4f:e3:dd:a8:b7:00:
         fa:1c:a0:b0:16:f5:f1:cb:60:e9:9e:e5:60:73:8a:99:a7:99:
         5f:4f:1b:9e:d8:56:58:09:e1:e6:a3:07:71:d6:14:fe:0a:e4:
         a2:81:eb:17:73:c6:65:c8:1f:91:12:bb:d2:86:b4:68:53:60:
         bd:4c:cd:26:2d:89:0f:97:e3:3d:11:10:a7:5c:19:97:dd:f0:
         68:26:47:b6:4b:1f:45:84:ee:e5:6a:ad:48:95:3e:33:c8:1b:
         a0:01:41:b8:5d:22:8b:54:e5:4e:ce:78:a2:c9:bd:3a:ed:20:
         25:8c:8d:44:6d:82:99:2e:cf:17:2e:82:9e:8e:79:23:18:d0:
         b6:e9:1b:59:de:c7:6c:50:f9:b0:06:ba:5a:fb:7e:73:b2:ca:
         e2:3d:bc:2b:d0:39:ca:a1:33:93:f6:90:d9:b8:74:a2:fa:41:
         62:7b:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:50:05 2026 by rpki-client