Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          9EgrxY0kJ1v+WU4dKdEcucf/bhuW/wuLXoxKdPIEO6I=
Subject key identifier:   83:4C:E8:7E:00:16:FC:E0:C1:11:DC:4B:2D:33:7D:49:4F:DB:28:08
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       019F9022DFADE184D8EE86BD86CE2892B0B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          19CC
Signing time:             Thu 23 Jul 2026 18:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:32 +0000
Files and hashes:         1: ExGpRunqaEGx1C87iYbOQskR5uw.roa (hash: RiaEfvnW4XKOfGx9ToOnBoSA9Vrw+toQDu46/ctYlAQ=)
                          2: SH-0mJS__xq0Nrwordyx2eNpy6E.roa (hash: MFyq3HcX0V4paZzyvO44VehUzFoDp8T3DaYSoMIBwAg=)
                          3: eUXXUdsIFWgmK4QDPBj079S1krA.roa (hash: tLqc3PNhBtm/slptj0WlzHoHZqeLEYUFaZxJp22uQOY=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: ujuSlvh7hDLtOhm72ue++ipp685h8p2WOTFBpFxQoJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:df:ad:e1:84:d8:ee:86:bd:86:ce:28:92:b0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Jul 23 18:00:32 2026 GMT
            Not After : Jul 24 18:00:32 2026 GMT
        Subject: CN=834ce87e0016fce0c111dc4b2d337d494fdb2808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:5c:16:35:aa:35:b9:79:a7:0e:c4:1b:de:5b:
                    08:e6:9c:b7:4c:1c:e0:51:45:d3:ae:8f:94:c4:42:
                    cc:95:d1:80:e9:72:5f:12:b7:fc:6f:50:38:3e:38:
                    6b:fe:4b:ac:9a:57:c3:19:b6:f5:03:e7:c0:e3:7e:
                    7a:02:af:a7:d0:bf:fb:3e:08:8d:09:02:a9:ce:bc:
                    31:f3:f6:8c:51:83:66:3b:7a:de:a7:d5:81:d3:8d:
                    f0:70:14:8e:a1:51:21:93:c9:a0:aa:0c:ef:fb:a1:
                    a3:4d:d3:eb:47:6e:50:57:16:85:2f:02:19:25:5c:
                    c3:10:db:6b:1a:93:03:79:4b:58:a5:13:4a:ee:76:
                    14:d8:91:f3:b3:67:c7:67:ce:b4:52:f0:f2:1a:02:
                    f2:41:58:a1:46:ea:82:58:64:9b:f8:d9:f5:63:a4:
                    c4:8b:4e:ac:03:2d:8b:7d:e1:7e:d3:3c:5b:a4:06:
                    88:80:a8:bc:e2:e6:20:14:35:98:0e:47:b7:e4:cb:
                    cf:e1:6a:4b:65:ef:13:78:5d:1f:5e:b4:93:e1:be:
                    23:02:0a:82:89:3f:93:00:fe:26:9e:df:b1:62:12:
                    ab:44:7d:2c:01:09:9f:9f:07:0d:b6:26:db:55:cc:
                    f4:29:45:5f:d5:11:0c:0d:ac:b5:02:56:f5:f1:d1:
                    4b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:4C:E8:7E:00:16:FC:E0:C1:11:DC:4B:2D:33:7D:49:4F:DB:28:08
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:7c:b8:1e:eb:a3:3a:19:e6:fd:b8:e9:dd:e1:e3:46:28:0b:
         da:ff:df:ac:71:32:6d:49:4d:72:84:01:b6:f0:02:77:87:04:
         18:b1:6d:61:d3:61:45:1e:74:9f:1f:ac:22:d9:e3:2f:7a:d1:
         88:9c:c6:04:8a:61:73:d4:59:e6:b0:c7:e8:85:cc:87:8a:91:
         a3:dd:f4:85:5e:ef:03:78:4d:45:0e:6f:82:c4:34:6d:9b:27:
         0e:55:d1:5d:95:f6:e1:f1:04:72:29:35:f0:78:b7:9c:a5:e5:
         03:49:68:45:6d:1d:8f:23:cd:d0:89:ea:a5:c4:fa:d9:c7:38:
         f5:e3:94:ad:0b:7d:8b:89:ef:90:4f:6c:f1:7a:f8:8e:00:54:
         57:8c:74:bd:13:1f:84:17:02:8e:22:e4:80:c7:15:2e:63:69:
         48:da:5c:a2:d8:00:91:ce:41:dc:d0:1a:7d:b6:07:14:fd:46:
         c7:db:78:71:e2:69:f7:b8:53:83:ee:a3:ef:1a:b0:e1:38:d7:
         db:bf:c3:8e:53:84:7d:ff:f3:0c:de:9f:b0:80:67:80:4a:1b:
         d3:f0:e6:c6:61:29:41:b6:fa:60:7b:99:da:95:34:44:92:7a:
         86:cb:e0:dd:c7:9c:1d:0b:5c:44:89:72:48:dc:9b:ef:9c:4e:
         99:4d:82:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:08 2026 by rpki-client