Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
File:                     TdbneabA8LCSFmIjgEZ9zi0Roxg.mft (raw, json)
Hash identifier:          hqqMfdcVNdxbh277LYhwfaWvxwpzLqLmmqskxrG1sEU=
Subject key identifier:   51:CE:06:50:26:F9:1D:96:0D:8E:DA:A2:09:C2:83:8F:1A:BE:BE:9D
Authority key identifier: 4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18
Certificate issuer:       /CN=4dd6e779a6c0f0b09216622380467dce2d11a318
Certificate serial:       019F91356B607397527C442431583DD0B26D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
Manifest number:          195A
Signing time:             Thu 23 Jul 2026 23:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:24 +0000
Files and hashes:         1: 7X15JsRrJkgKCJLXjiSs1bdhruU.roa (hash: sAi/yGgK+33Ivc6uDbrNPu1QsJF/QnGJyKyHF3jLCvU=)
                          2: TdbneabA8LCSFmIjgEZ9zi0Roxg.crl (hash: swmAfB+THYZkIFYzpjngRcDa9S8vb9NKl5TeBfPyEbQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:6b:60:73:97:52:7c:44:24:31:58:3d:d0:b2:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd6e779a6c0f0b09216622380467dce2d11a318
        Validity
            Not Before: Jul 23 23:00:24 2026 GMT
            Not After : Jul 24 23:00:24 2026 GMT
        Subject: CN=51ce065026f91d960d8edaa209c2838f1abebe9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fd:e5:d0:d4:a1:e0:72:22:98:9b:7c:04:f7:
                    9f:25:37:c7:da:ae:bf:81:81:57:22:63:eb:29:48:
                    d5:3b:79:71:56:7e:b2:3b:7d:1e:34:2f:1c:1f:7a:
                    ac:69:0c:93:10:3e:db:c6:3f:a9:4e:0a:a7:b3:29:
                    b1:62:53:14:03:75:30:a5:6c:97:62:ad:01:33:df:
                    18:83:5a:02:9f:d1:b8:e9:61:84:70:04:a0:1d:76:
                    a8:5b:d1:39:58:47:56:65:cc:3a:6a:e7:6d:00:e1:
                    2e:83:87:ba:ea:a4:c2:84:a2:8f:13:ff:d6:1c:bd:
                    fc:de:69:93:37:a9:54:04:e8:78:fd:c1:62:af:9b:
                    72:dd:47:b2:61:9f:90:d1:1e:6b:24:e5:ea:91:dc:
                    f8:f7:eb:5f:7c:4e:0f:ed:bd:0f:00:fa:7c:3d:4a:
                    4b:15:df:91:77:e0:ba:4c:36:d8:0e:3d:65:e3:28:
                    65:23:41:12:18:cb:1f:40:14:88:74:69:b6:31:a5:
                    4a:e5:24:99:43:a5:de:a8:a9:a7:d3:53:a7:eb:94:
                    71:5d:b5:21:26:8c:59:c8:77:a9:86:2d:f3:70:e9:
                    a3:a2:00:ee:e2:50:4c:1d:d6:e0:35:84:57:6e:3c:
                    23:dc:b0:33:11:9d:21:fd:82:d6:96:90:20:db:af:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CE:06:50:26:F9:1D:96:0D:8E:DA:A2:09:C2:83:8F:1A:BE:BE:9D
            X509v3 Authority Key Identifier:
                keyid:4D:D6:E7:79:A6:C0:F0:B0:92:16:62:23:80:46:7D:CE:2D:11:A3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdbneabA8LCSFmIjgEZ9zi0Roxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f0b285-d038-4de6-9374-c472e62ebea8/1/TdbneabA8LCSFmIjgEZ9zi0Roxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:bb:7b:d8:8f:11:73:d4:54:e5:ce:8b:e1:76:8c:40:28:94:
         28:10:b9:c8:95:70:be:01:43:28:b0:16:ce:cf:05:db:91:70:
         5f:b4:14:2e:6f:1b:41:30:01:c5:29:21:6f:2d:5b:a9:50:e8:
         dd:57:f3:84:85:44:be:e0:2b:b2:17:4c:70:d9:ef:cd:8e:8f:
         65:43:1e:49:35:2e:0b:da:4a:77:c3:7d:5f:81:d1:93:63:d6:
         f7:33:9f:25:db:b1:e6:90:41:4f:a2:74:af:26:69:ff:3c:42:
         43:cf:fc:67:cd:c3:46:5a:eb:f2:cb:6b:eb:8e:f9:ec:c7:7a:
         ed:f6:49:9f:2c:33:ce:11:1e:be:0a:67:9e:19:09:ca:a2:cf:
         d4:69:25:91:b3:0c:0e:9d:0e:8c:de:4a:d0:7a:4a:8d:5d:9b:
         50:d1:76:63:62:1c:e9:00:cf:dd:9e:4e:63:6b:a4:17:a3:66:
         94:a1:40:b3:92:8f:4b:a0:78:fe:a9:ff:af:a3:b0:78:4e:f4:
         74:ca:bf:01:67:25:8c:ee:1f:69:d1:0e:a4:45:f3:5b:1f:12:
         bc:3f:da:5c:9d:83:6d:cf:a0:1f:6f:44:dc:6c:45:6a:43:cc:
         a4:d7:2c:7c:a8:75:32:4b:cc:48:57:c3:35:c7:09:7e:18:79:
         55:8b:5f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:03:40 2026 by rpki-client