Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
File:                     c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json)
Hash identifier:          kO281QDjYutVdl0qsTwBv5Wa5QC2hYTFS7sIkNQbe/c=
Subject key identifier:   99:35:23:8E:13:18:F7:EA:7A:05:DA:B6:EB:61:DA:26:D5:5A:FF:45
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Certificate issuer:       /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial:       019F92B633C8756F1B2F85DAF607ECCAED3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
Manifest number:          19F0
Signing time:             Fri 24 Jul 2026 06:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:41 +0000
Files and hashes:         1: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=)
                          2: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=)
                          3: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=)
                          4: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=)
                          5: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: fsNKR44n8/9mEvpEcspW7WrHzL0FF1LPCRuiggICmgQ=)
                          6: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=)
                          7: gDzhjRCZK_FApJYIWCYUq-55Q2U.roa (hash: cqVkcQFspksV97CWkorGKdmXrskou3R0TD9pkV2DUcA=)
                          8: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=)
                          9: rguuKu0JocggKCL3qQF5U1vu6P0.roa (hash: 6Ae1aACirOJ8duoAp8UtLd/ooRChADVPUXnqoj0mDb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:33:c8:75:6f:1b:2f:85:da:f6:07:ec:ca:ed:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
        Validity
            Not Before: Jul 24 06:00:41 2026 GMT
            Not After : Jul 25 06:00:41 2026 GMT
        Subject: CN=9935238e1318f7ea7a05dab6eb61da26d55aff45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8c:32:64:c3:3d:35:7c:a4:12:d6:b9:fc:c2:
                    71:53:9a:c7:b6:39:83:2d:63:fc:18:7c:e0:15:5c:
                    3d:06:2a:9f:9a:d3:11:95:ab:c6:5f:2a:64:20:99:
                    71:7c:c0:bb:4c:69:ab:29:d5:d2:1b:8c:06:f5:6d:
                    45:36:b1:a3:38:1f:ab:84:80:f2:0a:3b:e5:ec:a5:
                    ee:2e:a9:1c:c9:a8:c7:cd:15:85:c3:9c:1c:38:e5:
                    63:e5:ac:be:9e:ba:e2:a8:ea:33:cb:1c:e9:e9:f9:
                    f5:87:0f:ff:ec:c5:32:c0:c8:e4:89:5e:24:7f:23:
                    c9:d2:27:37:f4:58:a6:ea:c7:fd:7b:a4:7d:52:57:
                    c6:f1:52:ff:02:f7:7b:29:8c:7e:cc:94:a1:36:51:
                    dc:5b:ed:3e:17:dd:48:81:ed:7a:42:bb:49:b2:dc:
                    0c:03:9e:eb:a4:2c:b4:07:97:f8:46:5e:8e:e4:99:
                    53:ab:36:7a:04:46:c6:a3:70:ba:30:d0:31:02:85:
                    67:d9:f0:8f:5b:31:d3:f2:75:74:9c:e0:9e:de:49:
                    5f:db:7d:f3:8e:94:7d:52:c2:36:50:a4:3b:9e:05:
                    4c:e8:cf:de:67:63:e4:2a:8f:6c:72:68:3a:99:78:
                    c0:a1:f5:d9:dc:00:bc:08:d3:aa:dd:f4:16:70:68:
                    96:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:35:23:8E:13:18:F7:EA:7A:05:DA:B6:EB:61:DA:26:D5:5A:FF:45
            X509v3 Authority Key Identifier:
                keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:77:28:70:a7:06:ed:85:1a:4d:2c:6f:ca:6c:b6:b0:61:87:
         cd:31:09:29:4c:f1:64:b4:f9:6f:53:96:38:78:6c:ff:e0:61:
         2f:50:86:92:84:1a:55:2b:d6:76:45:1b:7d:57:74:75:b8:74:
         c1:0c:11:2c:b1:27:5f:d0:7b:5f:bb:28:fe:d6:ce:24:9e:c6:
         b9:04:b1:93:1c:94:60:7e:ee:34:9f:06:c5:17:4a:4d:ec:50:
         60:3b:53:79:87:8c:4d:c2:3b:da:1c:88:8e:f8:b7:2e:3d:85:
         14:42:78:60:2d:36:ee:6e:53:63:3a:40:ab:6e:55:13:25:ae:
         ae:57:1a:b4:70:a7:61:25:95:ad:6c:75:40:da:9f:b8:ad:42:
         8c:eb:5b:3b:37:ce:81:34:15:6b:23:51:19:0c:6e:ad:33:1d:
         ab:63:87:8a:b0:51:01:9c:91:aa:ce:3d:96:77:fd:d9:a9:b7:
         96:17:b2:39:5e:95:ba:11:db:3c:24:5b:18:f2:e1:08:09:93:
         d7:80:ca:70:c2:79:5f:8c:93:e4:2f:c3:cb:92:12:52:6f:2d:
         f2:b0:1b:70:ed:d6:ae:75:31:8e:b9:8b:8d:64:02:d2:74:d1:
         b0:e5:2e:e9:63:4f:52:63:61:8b:94:8f:ea:9f:bd:f7:1c:a5:
         8f:76:73:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:41 2026 by rpki-client