Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File:                     evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier:          PZ1ZCYzXac9fMSrN2mCK/wS7ngoeaMTIZnA6rfnDPbc=
Subject key identifier:   DC:AC:0E:D0:1C:E8:0D:6A:40:E4:18:56:9C:9C:1F:45:5D:F4:F0:4C
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer:       /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial:       019F9248A3B0A5B14688D8FF8FF588E35447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 04:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 04:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 04:01:01 +0000
Files and hashes:         1: SSZdn02qDEwwqUSfTnOV3zXUcLo.roa (hash: y3a3/hKTKamWecmVmVYjV0+wFS3yke4xPMfZhOZPAII=)
                          2: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (hash: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ=)
                          3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: 8E02h23uTnBeQsH9fUlJIxFDMs5EB/MWp06igHZ/3IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:a3:b0:a5:b1:46:88:d8:ff:8f:f5:88:e3:54:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
        Validity
            Not Before: Jul 24 04:01:01 2026 GMT
            Not After : Jul 25 04:01:01 2026 GMT
        Subject: CN=dcac0ed01ce80d6a40e418569c9c1f455df4f04c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:e0:80:ab:16:f0:89:07:5f:3f:a4:2a:d1:
                    54:5d:29:61:19:8b:bb:f0:fe:25:ca:db:4f:dd:ad:
                    4c:f7:cf:b6:33:e0:20:fd:e2:68:df:68:da:c1:b4:
                    ab:27:f0:85:4a:dc:da:a1:e0:ea:1c:df:30:5f:aa:
                    54:b8:3a:18:da:9a:70:27:6f:d6:16:d3:08:6d:80:
                    22:30:79:33:8a:0a:e5:e1:d2:e6:a0:ab:c5:c6:00:
                    a4:99:20:af:d0:2e:5d:a1:c9:5f:60:67:a8:45:84:
                    dc:3c:93:a7:62:21:d3:51:f2:7c:6a:df:dc:fb:03:
                    c7:aa:0a:41:ea:63:0e:b0:fd:01:77:99:5a:a8:db:
                    ab:55:91:69:98:20:01:5f:1c:43:a6:2f:a6:e1:ce:
                    1f:3b:9c:f8:85:48:ba:b7:19:99:7f:32:5c:16:02:
                    95:f2:b6:c2:7e:84:ca:2c:78:80:3c:05:25:fb:76:
                    d3:f1:f0:8b:e6:a1:79:be:d5:78:11:25:bc:52:0d:
                    b4:0c:0d:8e:d6:f8:e1:e5:97:ed:1a:8b:95:e7:ca:
                    06:5c:2c:75:aa:45:f5:b3:36:ca:3f:35:77:59:5f:
                    a0:f7:48:70:73:51:67:45:67:bc:2e:8b:7b:37:b0:
                    11:1b:54:b3:d0:3f:45:9d:c7:29:74:52:4a:d5:e2:
                    a4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:AC:0E:D0:1C:E8:0D:6A:40:E4:18:56:9C:9C:1F:45:5D:F4:F0:4C
            X509v3 Authority Key Identifier:
                keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:75:66:e1:1e:1b:71:0e:31:46:13:2b:3b:1d:69:5f:51:fd:
         5c:c9:e9:ec:be:b2:a2:03:fd:6a:c3:ad:88:e6:17:89:8a:fd:
         8b:12:31:e3:c1:ec:a1:63:9d:91:d9:00:a8:f9:06:16:7c:5e:
         b5:5d:5e:5f:4b:a1:27:11:72:a1:b9:a5:1b:4a:d8:e2:40:77:
         f0:39:e9:20:03:79:df:39:02:5d:4c:d9:9d:f7:37:80:ea:bc:
         c9:7c:02:de:61:05:7d:0a:fe:e6:e1:86:7b:d3:d4:2f:e5:82:
         95:95:cd:fe:c5:03:39:fd:95:98:ce:5a:90:05:64:6a:11:f1:
         b1:08:f2:71:d7:88:dc:c6:20:61:ef:0a:e5:3d:43:14:a9:8b:
         5e:39:e7:41:72:f3:4d:2e:42:cb:28:4c:70:3b:05:46:0e:12:
         53:44:d2:5e:20:83:92:f6:33:d8:98:aa:b3:a0:5d:28:8e:90:
         39:6f:e9:f0:83:8a:4c:55:45:2d:0a:34:19:78:42:75:14:3e:
         d1:86:8a:e3:36:0c:75:14:48:26:35:b6:26:cd:eb:f7:c1:5b:
         fa:58:51:e4:0e:96:b9:2a:09:0e:99:cc:b3:e3:30:ad:58:13:
         e2:8c:73:5b:36:52:93:d9:f7:32:ff:a7:e6:45:30:79:97:cc:
         aa:22:e4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:02 2026 by rpki-client