Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File:                     TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier:          L6pudJPR9oF5pCeiehK4DdFu9X7u3powN7b0uHYQ2YI=
Subject key identifier:   A9:4B:AA:E0:C6:4E:ED:B5:21:B0:A7:DF:F2:78:D4:D7:E8:B4:31:9A
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer:       /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial:       019F92B5F1F47DCFB820AD3EC0B831402EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 06:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:25 +0000
Files and hashes:         1: 7f9mWNQ21808rBtQKs150YeYGdQ.roa (hash: K2kDNGbgaaoiVLGCQASew4TmUVDveF6R8yGfvf0iat0=)
                          2: BpTEWFuaVAmDD0gS8GtzltOvrDc.roa (hash: x9sMNPsZhw4zuQc28bgkmq0CPdL7ikw7lR8SsfIXz9c=)
                          3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: XGblQ3NkNizjT8U9MYWDMR71XOKCv4wNluYUJPrbZEE=)
                          4: g2R1TiS3jxFeB9U54WChv60i8Dc.roa (hash: Fmq9gKwDLBwoIVihbRm78ylA/Jays/PNcsKOWbH91nY=)
                          5: pbffqVIcAirnQONXIVnNslpP08U.roa (hash: 5VbKEPwbiJ5zZD1DvoWLqE1iDiZFdWOMUbRQcOz5CGg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:f1:f4:7d:cf:b8:20:ad:3e:c0:b8:31:40:2e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
        Validity
            Not Before: Jul 24 06:00:25 2026 GMT
            Not After : Jul 25 06:00:25 2026 GMT
        Subject: CN=a94baae0c64eedb521b0a7dff278d4d7e8b4319a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bd:4e:49:98:2a:65:7e:c2:90:bb:94:1d:18:
                    f9:95:be:12:eb:3d:ad:b6:eb:4a:5b:6e:a9:63:64:
                    14:db:01:a9:19:ee:e8:08:ea:8a:b1:c9:7b:8a:8b:
                    45:74:b8:e4:a8:f8:c0:d6:0d:0d:37:a5:3c:d3:23:
                    9a:02:76:75:c7:9b:aa:43:f6:6b:21:0e:d7:72:b0:
                    72:55:b9:3a:8a:5e:b9:ef:db:d6:c4:71:fa:4a:e7:
                    59:df:d5:8e:7b:f9:e8:48:d0:44:7e:83:8d:3c:5d:
                    46:05:26:e7:f8:2d:4c:a6:fe:c4:93:db:5f:9a:82:
                    a0:ce:07:97:b4:d2:80:f2:35:5c:4b:ca:d1:18:2b:
                    a0:54:d1:63:ca:c9:a7:03:a7:8d:f7:ae:84:99:d8:
                    ff:89:02:5d:a5:7a:25:10:28:32:93:a7:a9:20:32:
                    75:cc:66:ea:a7:5c:be:67:63:33:5c:72:a8:78:9f:
                    8f:d8:17:36:48:39:56:f2:e7:ec:b4:9f:0d:f3:d0:
                    be:a8:bc:c1:c8:dd:90:e0:8a:d4:66:55:d5:03:39:
                    15:5c:95:34:2c:73:66:c3:f9:46:b6:50:36:5b:fa:
                    fe:64:9f:75:45:56:01:98:15:6f:82:2f:e9:76:27:
                    47:a5:f4:f1:5a:79:7e:f8:26:85:b8:85:75:3c:42:
                    7d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4B:AA:E0:C6:4E:ED:B5:21:B0:A7:DF:F2:78:D4:D7:E8:B4:31:9A
            X509v3 Authority Key Identifier:
                keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:95:73:5d:86:8c:28:fa:00:07:38:33:a0:ee:4d:4a:67:6a:
         02:a8:a0:ae:1a:93:85:a8:42:2d:a6:48:b2:f7:dc:ee:db:de:
         f5:c1:97:ab:df:a5:f7:d3:90:bf:37:11:4d:2a:95:cf:35:81:
         86:c0:07:9e:93:69:fa:a2:c7:a7:ed:3b:b1:b4:58:d6:32:40:
         0d:42:55:08:54:ed:c5:f0:e7:95:47:2c:5a:58:30:76:28:14:
         48:30:db:eb:f6:da:b8:7f:4e:99:ba:3b:ad:2b:13:eb:09:82:
         f7:3e:a0:4c:72:08:e0:3b:97:cb:7c:71:23:1f:47:42:67:87:
         b0:84:08:23:74:83:c6:65:42:af:0e:09:fe:f2:be:01:de:28:
         86:c8:18:2f:85:6b:2c:cb:10:c8:ce:d8:a8:4d:9d:cd:35:40:
         49:fd:2a:4f:9c:78:21:3c:d4:0a:a5:2e:7e:b9:a5:c3:86:ec:
         9b:be:f5:bf:55:44:08:7a:90:09:4e:86:ba:9c:33:cb:dd:17:
         9f:ae:47:54:d8:11:46:0f:45:bd:89:26:72:29:7f:b3:00:d3:
         7b:0c:95:33:e0:dd:89:5a:e0:20:8c:98:53:b8:11:34:6b:2c:
         db:4a:8d:aa:f8:96:6b:b2:97:dd:d2:e2:57:1a:16:ec:86:1a:
         da:90:17:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:58:07 2026 by rpki-client