Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
File:                     su0dYGb05GVO9fPMcKXZBamvgpA.mft (raw, json)
Hash identifier:          AdBH6m1UNettckJEXuwyVZxhX6U/KCP1YKB+0ehD89E=
Subject key identifier:   F5:F0:E2:E8:64:64:7E:0B:A2:11:B6:24:55:51:D5:23:8A:D9:9D:75
Authority key identifier: B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90
Certificate issuer:       /CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
Certificate serial:       019F9022C156346682416039EDF4DB4D3F93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 18:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:24 +0000
Files and hashes:         1: 600lLjQN8NaUtu9vwfIFMpqTNQc.roa (hash: MUp+FLIccBAFPNwMS4Gw63hQ+b8ZEvvsOZeWkDj1pdQ=)
                          2: UFBqlqbDbCJdY4yyGZXAZPEHhZ0.roa (hash: NYR75LT8EcYVp5wWj3tYR34PO47ZPDQS52OiuEfA/iM=)
                          3: mh-GYVdTRd_42s-4vmsQOV1tY40.roa (hash: pgFeIkHEDR3yEGlYLLu69s0r5w/mu9jqvo+vTtixs6s=)
                          4: ndFKEl0wI8WgAsJHTynnR8s626U.roa (hash: iToJm74Xq6g6h01i3TJnsDzizJuEXJ+pOugGZB7SEMU=)
                          5: su0dYGb05GVO9fPMcKXZBamvgpA.crl (hash: jNR5YgScwgcVS5JkP6eyJaLCu5n8Ca32MbxUlOkxmHg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:c1:56:34:66:82:41:60:39:ed:f4:db:4d:3f:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2ed1d6066f4e4654ef5f3cc70a5d905a9af8290
        Validity
            Not Before: Jul 23 18:00:24 2026 GMT
            Not After : Jul 24 18:00:24 2026 GMT
        Subject: CN=f5f0e2e864647e0ba211b6245551d5238ad99d75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ce:1d:8f:67:c6:17:fb:7e:fd:b8:a3:78:b8:
                    1d:ac:d7:8a:e4:09:e8:e1:bb:d5:b8:22:7d:16:d2:
                    7a:1d:17:4b:e2:15:c1:a1:2b:90:b1:a6:4b:62:4b:
                    58:95:97:a1:27:68:7a:29:18:b7:8f:fd:7d:0e:af:
                    f3:da:86:4d:d2:82:10:f5:86:a7:0f:84:9e:88:61:
                    9c:76:1c:35:a7:2f:b1:63:fd:e9:01:8f:e8:38:04:
                    d8:89:6c:7c:4b:13:b8:fa:a2:31:c0:61:57:8d:95:
                    30:3e:57:e2:02:62:0d:73:36:de:cf:c1:1a:5b:d5:
                    4e:3c:fe:18:46:ab:25:16:38:2a:9b:e3:10:5e:1f:
                    9a:17:20:25:b9:98:9c:64:9c:09:98:2c:96:10:36:
                    c0:6e:98:eb:e3:7f:bb:ce:c5:d7:3c:32:35:45:5d:
                    e8:7b:7e:8c:18:34:ca:a9:41:23:97:78:d1:4e:a2:
                    89:5f:8d:aa:ba:23:5e:48:df:c5:01:ad:ff:d2:da:
                    33:ee:76:02:a7:11:99:14:f1:ab:8c:6b:2a:a3:7f:
                    51:0c:04:38:36:3a:d5:93:0d:d1:27:19:d0:43:6f:
                    6c:15:a1:ec:5f:52:4a:01:e8:c5:dc:d4:0a:56:ed:
                    73:9b:9d:0d:29:ef:0e:a3:fc:ff:23:96:35:b9:04:
                    75:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:F0:E2:E8:64:64:7E:0B:A2:11:B6:24:55:51:D5:23:8A:D9:9D:75
            X509v3 Authority Key Identifier:
                keyid:B2:ED:1D:60:66:F4:E4:65:4E:F5:F3:CC:70:A5:D9:05:A9:AF:82:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/su0dYGb05GVO9fPMcKXZBamvgpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/1182cb-5f95-4cd4-b72f-46b46fc0e496/1/su0dYGb05GVO9fPMcKXZBamvgpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:57:06:42:cf:33:48:2b:70:c1:49:51:f7:2f:0b:8f:1b:18:
         7d:d5:9f:17:00:5e:7d:9e:3b:4d:75:f4:75:44:5f:04:6c:06:
         6f:af:8b:8b:56:3d:28:2c:db:2f:12:95:7b:5d:e4:4f:6e:4c:
         21:c2:69:4e:93:3e:0e:74:3e:72:2e:a7:ce:12:24:9b:5a:dc:
         8f:f4:d9:51:9b:2f:a9:e3:10:33:77:0a:e9:87:c0:7c:bc:12:
         b6:f6:29:a4:c8:7b:65:83:f4:73:f0:be:5c:0b:71:3b:a2:30:
         8d:c0:db:cb:f0:aa:60:6e:0c:dd:a1:04:f1:34:0f:90:7d:8b:
         c7:69:79:49:ea:34:ca:d8:d2:6f:ed:2d:35:f2:8b:32:b4:d9:
         4f:f0:c5:e6:96:c0:34:94:84:ef:3b:eb:45:fc:a2:65:25:dc:
         b7:a3:02:41:5e:e9:24:35:8d:45:68:15:97:3a:db:f2:fe:81:
         64:ca:a9:4b:b7:78:19:f8:f2:5b:5a:a0:10:4d:a1:d7:f9:35:
         7d:ea:ff:1b:c9:c8:69:4f:14:e3:aa:0e:ba:e6:a1:af:10:2a:
         4b:b6:11:25:ba:fa:f9:ef:e3:be:29:08:da:01:32:1c:0d:2b:
         52:2e:00:dc:6a:c5:a4:55:2d:d5:67:4b:a1:34:ff:69:ed:71:
         e9:48:7d:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:06:55 2026 by rpki-client