Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
File:                     1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft (raw, json)
Hash identifier:          AUTEtOZtW/JHVn3+u1tpkMBWCG2ZgYezQJqtcqL1tno=
Subject key identifier:   AF:C2:CC:C0:F9:4E:B7:2B:8B:82:8C:D6:CC:06:87:6C:7E:A3:A0:56
Authority key identifier: FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00
Certificate issuer:       /CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
Certificate serial:       019F9090C814A15A2701A645A2D3664E54A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 20:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:35 +0000
Files and hashes:         1: 1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl (hash: jXoozzzm8S+ic/SEuE/JH/YOQPolk8f5RF9Mclt/NDs=)
                          2: Vci5kME3AljCGz_yFCPscOsBEvk.roa (hash: RhWoKLpLIYFAD2z8ObOTfaD48EPKpoKAawbysrngrjU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:c8:14:a1:5a:27:01:a6:45:a2:d3:66:4e:54:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa23aeb6a5d9a34b83607777776fb8764fb76f00
        Validity
            Not Before: Jul 23 20:00:35 2026 GMT
            Not After : Jul 24 20:00:35 2026 GMT
        Subject: CN=afc2ccc0f94eb72b8b828cd6cc06876c7ea3a056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:65:04:31:29:06:f7:c3:95:1c:11:82:8e:76:
                    bf:95:ac:0e:5e:27:22:e3:f5:10:b3:7c:f6:dd:20:
                    4e:80:80:e6:fb:8e:50:f1:99:61:4f:5a:53:f3:0e:
                    38:10:ed:1a:08:83:82:44:bc:af:55:b0:9f:99:7a:
                    97:50:62:52:d0:5c:e6:fd:33:46:a8:3b:f3:b7:4e:
                    05:7d:a1:31:dc:f1:aa:74:18:8d:49:50:57:eb:e9:
                    18:0b:68:f7:3a:83:3a:04:94:99:47:2b:ca:8d:db:
                    27:17:83:8b:18:e6:69:78:35:ec:c0:42:fa:e6:9b:
                    fb:5a:75:ab:18:12:31:13:d0:d5:94:5f:f0:43:c3:
                    7a:b4:a5:90:24:c5:64:93:61:54:39:6d:53:2c:c9:
                    1c:a3:4f:25:34:a8:ab:7a:2c:61:ea:e4:7d:7b:d6:
                    a4:94:65:1e:5d:b5:04:ad:12:e2:5c:7a:17:b8:d8:
                    77:9d:11:a4:1d:1a:5d:ff:2f:c6:0e:40:81:c6:36:
                    b8:dd:db:9f:29:ff:25:63:42:44:56:e9:7c:96:99:
                    77:99:ef:c9:21:75:dc:05:bc:2c:21:00:8f:fe:0b:
                    eb:b0:5d:a2:10:dc:ff:bb:d1:6e:4c:44:f5:cc:4d:
                    0b:6a:d5:37:92:34:4b:72:48:c2:68:58:6f:73:00:
                    7f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C2:CC:C0:F9:4E:B7:2B:8B:82:8C:D6:CC:06:87:6C:7E:A3:A0:56
            X509v3 Authority Key Identifier:
                keyid:FA:23:AE:B6:A5:D9:A3:4B:83:60:77:77:77:6F:B8:76:4F:B7:6F:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-iOutqXZo0uDYHd3d2-4dk-3bwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/36e6f0-eb2c-4cf8-8565-b363bb6caa02/1/1-iOutqXZo0uDYHd3d2-4dk-3bwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:c4:b9:d0:27:16:30:f4:05:a1:9e:15:3a:64:0e:f6:e7:5e:
         f4:24:53:ff:cf:6e:86:c7:15:b2:98:b5:34:51:c8:01:af:62:
         54:72:a5:5b:02:ee:d9:a6:34:66:da:b6:72:4b:de:d8:4d:75:
         e3:ac:6a:c7:8a:b7:97:07:a4:15:4e:8a:b7:86:3a:ec:e4:11:
         b7:99:b1:21:04:08:90:49:f2:a6:78:4d:fd:89:8f:ad:a0:f9:
         90:33:8b:b9:a0:d5:4f:13:89:01:00:bb:e3:33:6d:03:bb:99:
         69:ba:8b:da:73:6b:51:64:2a:19:66:22:10:c8:85:85:50:2e:
         39:6f:8b:13:7c:45:79:4d:7d:d2:3d:a5:70:f8:e8:50:62:71:
         1e:e6:06:b7:a5:ee:a6:d6:ca:4b:8a:88:dc:9e:df:60:3a:a6:
         2b:c8:df:8b:de:02:54:73:44:3d:13:7e:12:ae:21:39:6d:a6:
         97:6d:6f:4e:3f:83:07:70:c3:e1:f8:23:8a:65:de:05:73:ca:
         82:4d:55:83:fa:36:9d:d4:85:d4:cb:58:8e:50:69:9f:a3:42:
         8a:1a:7e:d6:c3:db:f5:40:00:36:03:f7:7b:8b:4d:8a:43:46:
         5b:30:ff:db:8f:1a:e1:a3:53:4f:89:54:34:74:62:85:81:3c:
         1b:f9:6f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:38 2026 by rpki-client