Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
File:                     arRJwZjLlmN7rBpbbVHLMfJYuyw.mft (raw, json)
Hash identifier:          yjeaprCZ010lOcRrAgLxFhNgviDVlu596/FVIzgVZ8I=
Subject key identifier:   0B:40:42:01:1A:68:5C:61:63:73:CD:32:DD:46:56:1B:0C:B1:5A:ED
Authority key identifier: 6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C
Certificate issuer:       /CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
Certificate serial:       019F94DB1B7D2D9F70A5593C9EF57784C8CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 16:00:15 +0000
Manifest this update:     Fri 24 Jul 2026 16:00:15 +0000
Manifest next update:     Sat 25 Jul 2026 16:00:15 +0000
Files and hashes:         1: Pc56Ad-jMm2uCkqXWF5y8mn5jWU.roa (hash: 27DbT/Z3cUUe4baBVw7qCM3X7YQ/wmFv1tv5corfTU8=)
                          2: arRJwZjLlmN7rBpbbVHLMfJYuyw.crl (hash: YLVDjafZMTlqgsdoajD0S4MXY/hT05PAtQXJdCJi5sU=)
                          3: lYp-YR5agUeBIpPproziS51g9ek.roa (hash: 9jFyVnGeTg/IMXlqGgWRdiaBnJrjVXxu+HDus3oW3gU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:db:1b:7d:2d:9f:70:a5:59:3c:9e:f5:77:84:c8:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ab449c198cb96637bac1a5b6d51cb31f258bb2c
        Validity
            Not Before: Jul 24 16:00:15 2026 GMT
            Not After : Jul 25 16:00:15 2026 GMT
        Subject: CN=0b4042011a685c616373cd32dd46561b0cb15aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:6a:9e:8e:2a:65:14:ec:ad:89:d2:ab:49:f0:
                    a1:56:1f:d6:d4:6f:63:33:70:ca:fa:09:cc:8f:e7:
                    37:5c:e9:2a:76:a6:94:52:bc:10:da:de:57:27:4e:
                    72:9b:60:3e:9c:5c:a4:34:a3:ba:ef:db:25:a1:72:
                    ef:e6:d8:aa:dd:97:fe:f6:81:7b:47:94:89:75:ff:
                    83:d8:c3:b8:57:b8:be:92:7b:ee:c2:68:2c:7c:b9:
                    bb:ee:31:66:4f:01:b6:12:f9:cb:86:2e:d2:58:96:
                    73:10:3b:d1:08:d4:63:e4:47:92:04:96:0c:2b:a6:
                    8a:10:44:17:22:f5:89:33:10:51:b6:9a:54:51:cc:
                    ca:1f:d6:af:7c:f1:f7:1a:40:42:da:76:28:e9:83:
                    0b:bf:81:87:a5:36:27:bf:32:8a:aa:d0:f7:2d:0a:
                    bb:8f:76:08:65:0d:ad:a8:0d:dd:6c:28:21:f3:ab:
                    82:82:9e:e5:dd:42:27:93:c3:7d:9b:a9:ee:e9:59:
                    d1:cd:22:f0:3d:5d:e3:17:04:b8:70:3c:f9:9b:ac:
                    56:ba:6a:82:36:a9:53:d7:51:64:e4:f4:61:6f:ac:
                    f7:ea:6b:8a:aa:df:e7:d0:af:e4:7d:47:70:b9:6b:
                    c4:19:a9:b6:43:cf:df:b7:65:79:a5:5d:ef:6f:b8:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:40:42:01:1A:68:5C:61:63:73:CD:32:DD:46:56:1B:0C:B1:5A:ED
            X509v3 Authority Key Identifier:
                keyid:6A:B4:49:C1:98:CB:96:63:7B:AC:1A:5B:6D:51:CB:31:F2:58:BB:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/arRJwZjLlmN7rBpbbVHLMfJYuyw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2b187d-edd8-40ee-a17c-d67da3c6969b/1/arRJwZjLlmN7rBpbbVHLMfJYuyw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:ad:70:16:93:7e:d4:04:ba:3e:8a:dd:24:61:7b:20:d7:af:
         12:f1:76:1a:b4:62:1b:5f:24:4a:83:68:bb:6b:83:4e:55:28:
         36:19:3e:92:23:e9:9d:df:46:38:b5:71:f6:89:09:95:9c:75:
         27:34:20:5a:67:55:59:81:6a:14:30:47:08:5a:53:76:00:64:
         1b:f1:24:54:41:bd:65:b9:21:67:c3:f3:ba:8e:aa:31:15:3b:
         cf:04:28:51:e9:74:26:98:b1:ac:50:ee:1e:ce:a9:31:4f:9d:
         06:74:b1:e8:f1:5b:b7:d4:04:6e:4b:91:ca:76:d0:59:64:73:
         75:de:20:70:5f:c0:3a:36:29:4f:de:c7:c7:50:02:95:90:52:
         d4:69:4a:a0:03:b1:f3:20:30:65:57:45:b5:e4:a5:b2:35:7f:
         fe:04:c1:61:70:19:d6:8c:07:3d:1e:ff:1f:79:bd:8e:30:80:
         79:04:13:e3:00:88:0b:68:af:a8:54:10:16:37:ff:9c:10:69:
         a7:1b:a1:92:36:bb:ba:f5:6b:52:d8:a7:75:2c:2a:96:61:5e:
         20:6b:bd:48:99:9e:ed:8b:31:f5:c3:00:e9:56:04:fa:06:50:
         7c:46:95:ed:83:02:82:57:ab:c3:0b:bd:b9:8c:7d:8f:ef:75:
         96:7d:65:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:27 2026 by rpki-client