Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File:                     p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier:          WoijKfzdTDh+AV3MizQ/25bmbr/FfG+dPlBdkZu2HrQ=
Subject key identifier:   1C:AF:06:EF:34:C1:E9:B3:45:DC:0E:C5:4C:33:AC:EB:5F:45:CB:5C
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer:       /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial:       019F92B699D4049DB39974D612AFDFB22AE1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 06:01:08 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:08 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:08 +0000
Files and hashes:         1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
                          2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
                          3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
                          4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: ZozGVtEw6+psTuLeAyJ0KYhH4IYTGoQIjOwppVF4FtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:99:d4:04:9d:b3:99:74:d6:12:af:df:b2:2a:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
        Validity
            Not Before: Jul 24 06:01:08 2026 GMT
            Not After : Jul 25 06:01:08 2026 GMT
        Subject: CN=1caf06ef34c1e9b345dc0ec54c33aceb5f45cb5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:bb:4a:eb:e6:27:c4:9b:e1:54:09:8f:7d:19:
                    25:73:ad:28:86:e9:84:49:86:fb:69:c6:1c:8f:f6:
                    c2:78:b2:15:13:c9:60:81:64:d3:7d:1c:f8:17:45:
                    3e:49:ec:dd:36:38:9c:95:3d:37:11:09:01:40:0c:
                    14:51:0e:76:82:4c:57:97:c8:7f:a6:12:9c:8b:68:
                    ef:3f:87:10:3a:6a:52:dc:6c:2c:cf:93:f0:06:52:
                    bb:61:69:f9:17:11:af:1c:e1:93:01:41:8c:56:d6:
                    a2:3c:95:7c:f9:c2:b8:4a:23:77:57:02:20:c4:9e:
                    2f:ec:59:12:c9:0a:db:b9:9e:13:25:97:f4:cb:cd:
                    69:e1:8c:21:84:3c:58:74:90:9e:73:f3:01:7f:62:
                    d6:2d:ae:a0:f9:64:71:35:5a:19:b7:ea:ae:62:1a:
                    26:56:59:f0:95:90:08:13:9f:b1:06:ab:49:fa:df:
                    74:f9:ba:fc:d1:d2:ed:27:c1:d8:f1:f9:dd:39:46:
                    08:07:a8:93:de:87:ee:db:d0:5f:37:fd:d2:f3:83:
                    1b:54:f6:12:aa:a7:13:63:23:c7:8f:d5:b6:d0:a0:
                    ac:4e:09:d7:44:89:2c:92:58:25:0c:db:4c:4c:73:
                    0e:91:e0:3a:1d:9d:5c:c9:f5:40:02:1d:61:dd:1b:
                    82:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:AF:06:EF:34:C1:E9:B3:45:DC:0E:C5:4C:33:AC:EB:5F:45:CB:5C
            X509v3 Authority Key Identifier:
                keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ab:ca:79:21:49:b0:27:02:81:be:9d:72:4e:be:8a:27:a2:
         56:89:56:d7:74:76:68:83:94:4b:42:ed:e2:d5:ee:f9:08:1d:
         aa:09:b0:a5:f2:b8:a3:23:1a:d5:02:ca:f4:3c:b1:22:6a:fb:
         68:b1:46:36:42:30:25:2f:9a:1b:20:9c:95:44:9c:ed:ee:59:
         52:51:64:c6:e8:ae:5e:60:13:9b:3d:d6:36:1f:96:79:88:6c:
         cc:e1:02:c1:e6:c1:b0:16:d2:7f:8b:58:a0:c6:90:2d:18:bc:
         13:19:46:aa:1d:a0:21:31:6a:af:11:2c:91:2d:d6:9a:66:21:
         e2:23:f4:0d:59:2f:a8:b7:1b:d6:b4:1f:65:cb:fb:52:2d:67:
         b7:a4:94:97:8e:10:57:48:f4:5e:ae:d6:db:cc:0d:3a:9b:4e:
         c2:b2:37:26:3b:d1:df:46:4f:34:97:3b:78:8f:f5:58:6e:88:
         7f:11:f2:f0:6f:d9:a7:b5:ec:40:5e:e2:87:6b:8e:8c:c3:3b:
         fa:0c:e9:cb:ac:f7:0b:c4:51:80:04:58:38:f7:d8:ca:5a:b4:
         d4:96:af:c9:c6:f0:21:ac:82:8b:24:62:5f:b2:9e:44:6b:c8:
         0e:d8:8d:1c:ad:5b:67:c5:84:31:34:a0:97:40:a1:5b:5b:96:
         e3:22:a1:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:31 2026 by rpki-client