Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
File:                     RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft (raw, json)
Hash identifier:          Qal7ELazlHVXhdzw+XbOFBH3wghB3CdIFX5tK6FDN28=
Subject key identifier:   E6:69:F7:05:53:BD:DB:0F:4F:65:B9:EA:2B:29:82:6C:8C:99:49:C9
Authority key identifier: 45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2
Certificate issuer:       /CN=458d12f095053c35876b88b47685d6435421fcf2
Certificate serial:       019F90910EE7565F45F7A1C5C296AD03B053
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
Manifest number:          19D4
Signing time:             Thu 23 Jul 2026 20:00:53 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:53 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:53 +0000
Files and hashes:         1: 0PS11i5r6_XriyYDfmzviKAWbi8.roa (hash: BRU05EVEvYBbrW5Q+knCe4k9JjLCUR0KR3nHL/L/63U=)
                          2: BE2mEMqXoD5W-rYoEN42UUzsleE.roa (hash: FSSNupkI6ZKtnmsSmt58MJHjD7OKdKEzjPUgRieAqHM=)
                          3: FzYQ8UfkOoXbLMAefaap0q8s5jo.roa (hash: uu0TxkfB1szooYSk1YRvasc+kONIbxD4r+CRWDgwPzQ=)
                          4: JcLTA0-qn4cquSouPyluInvPpYs.roa (hash: KJNyyHE6CpQFleLIlWbocpdXYFfQUGuvmGs2OkgCYQs=)
                          5: NjoBWFZasR4u5kKYBTzr17mcUXo.roa (hash: 5hFL56Dz1c0tBp4+xkoRBXQC3H4xXKPV9W/AB2fy/u0=)
                          6: Q6tmJsk2LzP8aKKZOFRvTtKlV7Y.roa (hash: 6O+cQ6PMg//nmlkDWEnYP8/rkGuPnhqX1I2FvbDOgXw=)
                          7: RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl (hash: rlybKpAYS2KmqeN1rYHH3qtm+jspQb5+yR0Moy7PmJs=)
                          8: ZhVI6A7yr7ri4GCLLeKZeWj0x0g.roa (hash: RoqCMqDvqASNbsfdIC5YDSePIlxj7YcloZ7cYASt570=)
                          9: aB8YsQajO5vsG_dGMtQzCv70utE.roa (hash: ucgRD6r1Y1kDsBy85mHGSMRU5Fdf30W1uPDxejD/J18=)
                          10: i84_9A8NDIa-TzE1ChHrbwaZBN4.roa (hash: 7m4WiAjdci3msjrn9oh8ACKLzakLr8+uwG8wxrFXysE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:0e:e7:56:5f:45:f7:a1:c5:c2:96:ad:03:b0:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=458d12f095053c35876b88b47685d6435421fcf2
        Validity
            Not Before: Jul 23 20:00:53 2026 GMT
            Not After : Jul 24 20:00:53 2026 GMT
        Subject: CN=e669f70553bddb0f4f65b9ea2b29826c8c9949c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:62:31:7e:e0:8e:55:db:67:f2:64:7a:b1:a8:
                    47:5b:18:24:19:70:ba:f2:30:19:4b:a0:fb:c3:94:
                    60:5f:62:ad:99:56:71:5e:a9:e3:ca:60:b5:07:90:
                    dc:86:71:f6:e6:f3:da:51:49:4e:34:80:35:e1:34:
                    12:1f:ee:29:52:4f:91:6f:90:50:6e:49:7c:06:ac:
                    d6:8d:0d:8f:c6:6f:de:98:74:c8:34:49:75:a9:5e:
                    ee:09:be:94:64:07:bd:37:68:27:49:1d:ba:d5:6c:
                    a5:fb:3d:2d:75:b8:34:ed:1e:13:97:de:8c:94:a9:
                    16:82:7c:fc:51:9c:41:2e:3c:1b:b9:04:b0:64:85:
                    8b:95:44:de:2b:f4:b3:01:52:2c:3f:2a:b7:6a:ef:
                    cb:d3:2a:d6:6e:46:a0:5d:16:7d:42:28:6b:14:7a:
                    d8:0a:a3:ac:79:54:24:28:2c:cc:2b:46:85:12:2f:
                    c9:c4:da:22:ef:e5:ae:d6:98:9c:88:2f:ce:f5:70:
                    e2:b3:ba:da:bd:de:aa:17:53:eb:50:c3:79:67:97:
                    74:fc:35:08:db:dd:86:e7:6e:91:7f:db:ec:1f:8c:
                    18:63:ad:dc:94:00:e8:b7:86:01:b9:36:e6:ef:d6:
                    86:ea:d4:67:ab:15:43:f9:c2:4d:11:54:ae:b7:38:
                    53:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:69:F7:05:53:BD:DB:0F:4F:65:B9:EA:2B:29:82:6C:8C:99:49:C9
            X509v3 Authority Key Identifier:
                keyid:45:8D:12:F0:95:05:3C:35:87:6B:88:B4:76:85:D6:43:54:21:FC:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/7cecc7-f63d-43fc-b219-3955959eaf81/1/RY0S8JUFPDWHa4i0doXWQ1Qh_PI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:5e:24:bb:53:b4:c4:d3:1c:9f:d6:d9:e5:0d:88:79:2a:d9:
         1f:cb:4b:03:07:f2:d1:08:0f:21:ea:f1:32:c4:8c:4f:75:c6:
         81:e4:92:cc:d4:47:49:f2:dc:c7:cf:4c:21:64:30:1b:90:3f:
         b4:8b:1a:32:ab:c1:3a:80:4a:30:07:c5:24:60:4e:95:e4:92:
         72:8e:af:fb:ac:c5:46:cf:3a:0c:ea:c6:7b:c2:ce:7a:35:e1:
         e7:1e:2a:dc:e4:49:73:49:3d:a7:c1:82:52:65:6d:24:bf:3f:
         0b:c9:c0:84:f7:58:70:df:66:da:3a:fc:7a:5d:5f:1e:19:48:
         1d:c4:1c:a9:21:c4:93:b3:32:55:56:60:5c:8d:ea:c1:98:6e:
         ac:ef:ce:5b:28:5f:e1:85:29:6b:1c:e8:b8:b2:73:c0:c7:7b:
         e3:84:54:86:83:3d:1d:4e:73:11:45:e6:6c:ff:14:61:30:a4:
         11:c3:b6:64:73:3f:d1:dc:e9:9a:93:84:09:35:9c:f5:0e:9d:
         6f:ad:af:98:e4:ef:ac:a1:8b:cb:76:43:4d:ec:07:48:19:2e:
         9d:0d:81:8b:02:be:23:4f:9d:c9:a3:43:cd:fe:46:f4:42:45:
         5e:6f:b5:57:a5:29:a7:e0:b4:f4:07:42:b6:48:80:18:e2:1b:
         17:e2:3a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:23 2026 by rpki-client