Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
File:                     9a2pAdQIv39blDWSHkgAqPgtvas.mft (raw, json)
Hash identifier:          63KWVNoCs/wknzXL/rwU41ddJnG+GQN5c8R1icfVLEM=
Subject key identifier:   92:C6:F6:F0:56:30:7B:A1:4E:B2:F3:82:ED:E5:F0:12:8A:E5:A2:D9
Authority key identifier: F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB
Certificate issuer:       /CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
Certificate serial:       019F905A2D119A27B68CA556A3DF380F1C26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 19:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:56 +0000
Files and hashes:         1: 9a2pAdQIv39blDWSHkgAqPgtvas.crl (hash: 5QFu82a9ezP/Cxb3UpsW6ZRwTduNRlq3V9GmaOaCVzg=)
                          2: J6H8JSFuxVzFOSwqeVn8vTsfdVE.roa (hash: vYs9Iafl6ODvzqSPTNj74leQVCe3/0UGQl7TxkQZF/8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:2d:11:9a:27:b6:8c:a5:56:a3:df:38:0f:1c:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ada901d408bf7f5b9435921e4800a8f82dbdab
        Validity
            Not Before: Jul 23 19:00:56 2026 GMT
            Not After : Jul 24 19:00:56 2026 GMT
        Subject: CN=92c6f6f056307ba14eb2f382ede5f0128ae5a2d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:c0:96:e1:6b:b6:a3:16:30:31:4f:b0:26:
                    ac:a7:d4:b9:70:17:fd:78:cc:cd:62:00:67:f6:94:
                    7c:e3:e1:fc:ab:3d:10:d2:87:40:4e:c5:3f:b2:37:
                    1f:3f:93:8d:10:d9:8a:9d:7b:3c:e6:80:8e:08:c6:
                    65:a4:fe:4d:31:fb:74:d4:33:05:e1:7d:05:92:d0:
                    a6:58:8e:6d:07:09:52:1d:a9:59:d7:68:7c:83:d6:
                    44:f3:04:b9:c5:ce:a8:67:6b:88:36:c0:0a:35:c1:
                    11:d7:ae:71:d8:e2:76:14:1e:73:b9:c4:9a:4e:13:
                    66:9c:73:b9:f4:87:19:d6:35:0e:48:c4:8b:52:14:
                    58:28:ea:1e:a6:37:8e:11:0e:1d:ec:bc:c2:cb:20:
                    9f:23:78:10:0f:c2:7e:5c:0d:32:27:04:94:e6:00:
                    e5:de:8a:5b:43:1e:eb:a9:3b:a9:27:90:7d:f1:a3:
                    07:7c:98:95:b2:cd:5c:06:7f:f4:f4:d3:07:16:bf:
                    37:90:d7:cd:5e:3f:0b:7c:de:03:24:cb:28:fe:d5:
                    e8:6e:27:d2:76:ef:33:e3:9f:86:d0:66:6d:71:91:
                    1f:68:40:37:47:70:38:a1:fe:3a:db:bb:1a:1d:b0:
                    9a:1a:04:83:52:f7:9c:7f:0d:ff:95:70:90:17:a0:
                    2f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:C6:F6:F0:56:30:7B:A1:4E:B2:F3:82:ED:E5:F0:12:8A:E5:A2:D9
            X509v3 Authority Key Identifier:
                keyid:F5:AD:A9:01:D4:08:BF:7F:5B:94:35:92:1E:48:00:A8:F8:2D:BD:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a2pAdQIv39blDWSHkgAqPgtvas.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/afa6d6-50f9-41d4-b7cf-a33649e3e2c5/1/9a2pAdQIv39blDWSHkgAqPgtvas.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:8a:3f:bb:ab:71:8a:a2:bf:29:d2:73:ff:e7:e2:58:11:4f:
         a3:aa:a4:34:71:c5:1c:37:71:8b:c2:ce:53:a7:4e:f1:27:30:
         6d:9a:9f:4a:d1:56:c7:d2:87:30:f2:42:ac:37:bc:d9:17:61:
         6c:41:94:82:21:ed:d7:ac:c6:17:33:bb:1e:34:6f:43:fb:d0:
         25:63:12:62:33:be:a0:2a:94:6b:e8:89:93:4d:56:e6:b3:57:
         ce:89:92:26:07:85:a9:d5:43:12:86:ec:a6:80:64:3b:79:3e:
         31:b3:65:5a:d7:24:df:a8:ca:b2:91:82:d2:ba:c5:50:9b:ed:
         a6:7f:00:96:fa:7d:76:2c:e0:bd:d6:d5:68:3a:ea:e6:a2:b3:
         15:bc:cb:c2:a0:7b:13:fd:1a:0b:a3:6c:e8:b2:12:66:98:44:
         0c:31:48:7c:21:e8:26:0b:50:23:ca:66:95:aa:2a:f9:6a:7d:
         6c:38:1d:b7:2f:3e:8a:75:cb:32:44:e0:f0:b9:89:5d:05:b7:
         68:5e:21:fd:2e:26:27:f4:85:e8:25:a9:92:15:1c:e0:54:57:
         33:dc:fd:0d:f4:84:79:ef:a8:4b:ce:b7:ff:6c:8b:c5:35:50:
         ab:e3:57:f9:eb:09:6c:d3:5c:5e:ea:12:9f:b5:e8:5e:7f:54:
         1c:4c:65:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:02:16 2026 by rpki-client