Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File:                     tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier:          PuP09IIoCtcZAMB6J8r/AaRcSr5PxIPi/0aYfj5UPnc=
Subject key identifier:   29:34:F7:8C:77:71:64:EB:4F:1B:AB:76:B3:9B:5E:C2:8F:F6:85:26
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer:       /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial:       019F9323CA5F1ADD3FE79940BAC4E142187B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 08:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:23 +0000
Files and hashes:         1: b7WIoLNUFyReyBs5srL2P-7kWBY.roa (hash: KaUmjHHJdwqwRidv+DylDRGHxrEDsHhrz5N8o1v6ikI=)
                          2: qA1FSgo8W2WfbgMfxgehUTGINhY.roa (hash: QlYJVn46F259ZKkX99iXU3ryDNDtJ4SF3Ih4Ss1i1sM=)
                          3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: /vSQa0B7ilukOcpcLzB9mcEF7KJXjdt/XyUE8M/ugRQ=)
                          4: w1rSq9HiUPdlBfnJQU20TUnkDtc.roa (hash: e/N9+4KOJLWpyk5b2EmLTnk1UrTHENrYm4rgBBrmxPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:ca:5f:1a:dd:3f:e7:99:40:ba:c4:e1:42:18:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
        Validity
            Not Before: Jul 24 08:00:23 2026 GMT
            Not After : Jul 25 08:00:23 2026 GMT
        Subject: CN=2934f78c777164eb4f1bab76b39b5ec28ff68526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:25:77:50:77:4f:7e:ae:62:56:77:a8:d7:
                    90:0d:5b:b5:cc:b3:49:bc:1b:39:c2:e0:60:f2:54:
                    58:2e:2f:8a:db:a0:05:7a:d0:8c:e7:dc:b4:eb:e3:
                    34:d4:9c:80:ac:35:8e:cc:4b:ef:39:92:fe:2f:b7:
                    cb:d5:26:0b:4a:bd:f9:f6:70:0e:9e:db:dc:43:c2:
                    28:d3:5f:b6:57:cf:f3:80:fb:3d:23:00:50:64:27:
                    92:dd:94:46:83:16:71:13:e7:0d:29:70:85:32:7e:
                    15:d0:0b:88:34:ff:bf:1d:95:15:4e:7f:6f:b9:e0:
                    d6:c5:ad:8c:6d:c7:92:b0:ec:9b:48:0a:f6:87:9a:
                    c3:9e:af:3a:c4:f6:d6:82:7b:64:d5:e6:31:ab:0d:
                    bc:ac:ed:72:cd:5e:3f:92:f2:0a:1f:cb:7c:a9:70:
                    3b:25:5c:0c:55:0b:de:c4:6b:bd:fb:d8:33:ca:c0:
                    b1:7b:ab:a6:04:90:94:ce:95:42:cd:b2:73:86:d6:
                    5e:1e:7a:40:f0:8d:b4:0e:ed:e6:3e:9d:17:f7:7a:
                    ce:21:6c:43:4d:16:f4:1f:06:36:c3:98:b3:25:d0:
                    89:e3:59:7d:39:94:b2:b1:8a:36:42:92:1e:98:f5:
                    10:ea:da:6b:28:63:ad:e0:d6:8e:dc:2f:13:44:b0:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:34:F7:8C:77:71:64:EB:4F:1B:AB:76:B3:9B:5E:C2:8F:F6:85:26
            X509v3 Authority Key Identifier:
                keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:17:d1:75:cd:9f:19:f8:98:40:e6:d3:98:1f:39:0b:2e:
         60:aa:47:1b:6f:70:6e:7b:5e:46:b0:60:59:48:5c:db:5e:a4:
         3a:e4:2a:e1:6c:be:6b:d2:59:c8:a9:4d:3b:47:bd:48:91:79:
         8d:ff:77:75:4e:85:5f:20:23:1d:20:b5:ba:54:b1:78:26:18:
         98:50:1a:da:ba:fa:6a:e1:d8:e1:92:47:67:16:b0:7f:96:11:
         65:fa:70:28:0c:2f:77:cb:14:20:1d:fc:da:9d:22:f5:a9:f7:
         7c:1f:fd:0b:90:9d:f1:48:22:2f:d9:e3:94:f2:2b:ae:92:8e:
         a3:d8:06:78:18:4d:33:9c:24:fb:10:92:c1:4a:65:26:82:fc:
         b1:48:42:15:2f:b8:7a:f3:35:ce:97:c0:42:78:ee:33:d4:d6:
         6b:41:a1:19:2c:5f:40:1b:5c:52:4c:ec:92:dd:a4:4c:42:c0:
         23:c6:2e:59:af:f1:3d:49:99:58:04:dd:d6:21:87:20:3d:ec:
         4c:da:74:a4:33:c3:0e:de:be:8b:94:6a:31:6e:84:df:52:55:
         0e:8b:a5:8f:c7:6d:7a:f7:09:25:1f:7d:48:6f:4a:25:2a:56:
         56:a0:fb:8c:26:39:7c:1a:d3:7f:ad:46:a4:d7:4d:09:41:53:
         8b:98:99:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:19:46 2026 by rpki-client