Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
File:                     pJxODPXI27tqZ88dovMfQWJ0n90.mft (raw, json)
Hash identifier:          Hlc3/h5hokv1wHMlVGSqby/GLwNM2oQdLmxD7sFfHOs=
Subject key identifier:   A5:1D:61:D8:DC:A6:BB:0D:3F:58:65:56:1F:A0:20:4D:40:BD:D8:78
Authority key identifier: A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD
Certificate issuer:       /CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
Certificate serial:       019F9248FAD36465E96DA445C546757849D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
Manifest number:          19DF
Signing time:             Fri 24 Jul 2026 04:01:24 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:24 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:24 +0000
Files and hashes:         1: pJxODPXI27tqZ88dovMfQWJ0n90.crl (hash: N3nVHQvIfnrh38oCzHtkiPpq6ZlDb35lqjKH2HNOaG8=)
                          2: r1BhnEtrGRHSnduVeLfXI1g7D8E.roa (hash: rXhnnWAjarg7mZ42xlNMXXH5o5Am7aLxQUdcs4vzEJg=)
                          3: zS0wzQLKSW80VXv0ZOoMSI3tvJ0.roa (hash: 2I/sSelw5VmBQuf5YaJq9EbH4rTmj1lcBC5rreXqiWE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:fa:d3:64:65:e9:6d:a4:45:c5:46:75:78:49:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a49c4e0cf5c8dbbb6a67cf1da2f31f4162749fdd
        Validity
            Not Before: Jul 24 04:01:24 2026 GMT
            Not After : Jul 25 04:01:24 2026 GMT
        Subject: CN=a51d61d8dca6bb0d3f5865561fa0204d40bdd878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:32:8c:66:84:ae:7a:75:9e:f1:01:71:b9:38:
                    19:c4:18:bf:a6:7c:3f:15:c4:17:a0:cd:f7:ea:32:
                    94:f8:df:fe:ee:ba:8a:96:b1:c3:fc:05:30:c8:77:
                    6d:69:4e:59:e0:7d:b8:90:c2:dd:82:56:1f:a0:3f:
                    03:0b:02:d2:03:4f:21:1e:25:76:ee:85:d1:4b:d2:
                    ed:87:47:46:f4:fb:8b:23:4e:2b:0e:4e:00:4e:c2:
                    ae:fd:fe:53:51:67:35:7a:8c:5d:e1:64:e1:80:06:
                    c6:b0:51:f2:aa:76:2e:b3:ba:2d:31:99:01:fe:f8:
                    cc:ed:1a:17:8f:ed:c0:fb:bf:62:c2:b8:21:92:62:
                    f4:29:a7:42:ad:2f:90:b9:16:79:92:b3:ce:e5:ae:
                    af:e3:7b:45:20:80:c4:d0:bd:d6:e3:09:cd:95:a4:
                    6f:01:0c:ec:0b:80:38:0c:c9:eb:bb:1f:06:0e:01:
                    f7:6a:a8:a8:c2:d7:98:93:35:ce:44:b4:99:dd:a4:
                    f8:a1:3d:16:f9:99:6d:b6:2d:72:3a:f3:29:ba:a3:
                    28:e7:38:35:29:56:df:3a:2a:ad:81:81:27:e5:c2:
                    82:28:c2:dc:25:78:25:28:81:42:5a:b9:00:a8:f6:
                    79:18:f4:6a:92:34:47:80:9f:3b:22:5c:ce:b5:7c:
                    ee:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1D:61:D8:DC:A6:BB:0D:3F:58:65:56:1F:A0:20:4D:40:BD:D8:78
            X509v3 Authority Key Identifier:
                keyid:A4:9C:4E:0C:F5:C8:DB:BB:6A:67:CF:1D:A2:F3:1F:41:62:74:9F:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJxODPXI27tqZ88dovMfQWJ0n90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e19c6-defd-455f-90a3-88ed8d7717a4/1/pJxODPXI27tqZ88dovMfQWJ0n90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:4b:d4:67:7a:eb:d3:04:19:50:e0:2d:e9:d6:a2:27:84:10:
         db:56:50:98:bc:37:bc:10:ff:f0:0d:20:c7:63:17:a4:45:89:
         64:86:1e:99:63:9f:c5:59:3a:b0:35:87:89:17:9c:18:e7:20:
         78:be:12:92:30:27:87:5d:9e:13:73:36:6b:f2:bd:2f:15:76:
         93:5f:e4:99:fe:3e:ff:4d:86:d7:cf:e7:72:a6:e2:84:7a:d1:
         c1:6c:16:0e:7b:9c:9d:cf:8c:04:0b:2c:4c:c9:ce:0f:7a:c8:
         c0:4a:3e:61:81:8e:44:11:4b:46:8a:85:af:2c:d3:64:8d:8d:
         ea:e6:25:4f:05:10:d1:a4:ca:f6:e4:c6:11:95:2c:8c:23:cf:
         6f:0a:20:4f:a7:a5:f1:0e:a0:25:94:cd:13:71:18:5b:fa:be:
         86:39:29:91:11:d2:b1:6a:c4:de:63:08:fc:63:e4:11:77:a0:
         ce:9a:66:c0:59:a7:0c:bf:8b:75:09:8d:25:7b:5c:56:d7:85:
         53:a4:98:02:fd:af:45:5b:0b:a4:46:a5:54:3b:d3:51:27:d1:
         c0:3c:a7:96:b1:6b:d1:f1:6b:ea:2f:88:b0:d2:4b:74:20:71:
         8d:78:4d:62:56:91:72:83:68:4c:ae:ea:8e:67:91:51:d6:25:
         cd:fe:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:57:52 2026 by rpki-client