Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
File:                     1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft (raw, json)
Hash identifier:          4j0U+5WKXNH8SCTzwUsISp3lgRSC930Ud0QqkkBBZJ8=
Subject key identifier:   0C:20:D0:D9:5F:2A:FD:19:CE:F6:51:C6:EC:58:73:FF:67:7F:B2:0A
Authority key identifier: D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A
Certificate issuer:       /CN=d703ceac906d07f74ca94c446303d954666b583a
Certificate serial:       019F90233F2C5633E3CEBA4115C012E53D6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 18:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:56 +0000
Files and hashes:         1: 1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl (hash: 5gqShQ8txpq/D6a6ASN/egKmgOIR/qPZJL2UD+Gw+es=)
                          2: 4-k2BQwcooezjDVQqn3GH7FYIyg.roa (hash: u1bK1aC0Jx5hdjBp120tHkvEXpneiYzeiUJqLBrJ+rY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:3f:2c:56:33:e3:ce:ba:41:15:c0:12:e5:3d:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703ceac906d07f74ca94c446303d954666b583a
        Validity
            Not Before: Jul 23 18:00:56 2026 GMT
            Not After : Jul 24 18:00:56 2026 GMT
        Subject: CN=0c20d0d95f2afd19cef651c6ec5873ff677fb20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:bf:aa:2d:21:4c:42:10:f4:46:9e:c7:9f:
                    40:13:23:28:6e:ff:f1:76:db:b0:72:d2:d3:2e:6e:
                    52:2f:fd:5c:f8:77:f7:6b:69:a5:96:e3:d5:b2:92:
                    6f:05:1b:f5:70:8c:6f:8f:3f:ce:b4:ef:8b:81:d7:
                    42:d9:8c:3d:f8:81:73:da:3c:09:58:e5:0c:2c:ff:
                    2e:f1:57:a5:48:31:0f:e1:bf:66:cb:b2:23:76:16:
                    6d:a2:7b:de:8e:53:a5:da:3e:33:2a:37:e4:45:37:
                    be:c5:80:e8:13:33:9f:21:f3:6a:ae:aa:ae:34:c2:
                    73:79:44:d0:e9:cc:3f:1b:4c:2e:85:7e:31:73:8b:
                    63:0d:ee:33:aa:24:7f:f3:79:00:9e:9f:0c:61:ab:
                    93:3b:d4:13:45:b1:df:af:b7:4d:09:b8:6a:68:43:
                    56:48:bc:4f:4f:55:9e:1c:3a:06:1c:01:e7:90:8a:
                    a5:33:02:fd:d8:3f:cb:a3:52:b9:72:e4:36:e6:96:
                    b9:6c:9c:b6:01:68:7d:06:f6:f1:96:3e:2b:fe:94:
                    56:94:ee:b1:7c:c3:12:1f:75:fc:d0:ab:fc:2d:0d:
                    d6:80:88:3e:e0:f4:77:97:f1:29:62:0b:a3:2d:9b:
                    c9:fa:60:34:25:de:1d:4d:f2:0f:c0:80:86:ad:27:
                    68:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:20:D0:D9:5F:2A:FD:19:CE:F6:51:C6:EC:58:73:FF:67:7F:B2:0A
            X509v3 Authority Key Identifier:
                keyid:D7:03:CE:AC:90:6D:07:F7:4C:A9:4C:44:63:03:D9:54:66:6B:58:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wPOrJBtB_dMqUxEYwPZVGZrWDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/06c734-09a1-4da3-8992-bd4d54445a95/1/1wPOrJBtB_dMqUxEYwPZVGZrWDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:51:97:23:9a:4f:bb:34:83:12:23:39:fe:4b:05:39:ae:66:
         21:58:b6:92:dc:fe:b8:fd:48:94:ff:26:56:38:f6:5e:7e:20:
         0b:a1:45:9a:7b:6f:5f:2a:d0:c4:3e:3f:3d:0b:4b:fc:78:f1:
         40:71:15:79:82:80:dd:46:94:7c:85:b1:1a:2a:a5:0f:5d:c2:
         9a:0c:e1:80:57:cf:b9:ae:57:e8:05:4a:01:37:c7:82:6d:e0:
         41:d3:9e:8b:22:40:a3:2d:8d:21:78:02:df:53:82:78:4e:25:
         d0:13:7f:f5:6a:c6:7c:49:0f:36:b3:d7:24:35:b7:46:09:84:
         16:5a:f4:81:dd:62:6d:ed:69:d8:0f:09:a2:35:b5:b4:47:ad:
         b0:a5:66:10:35:5b:0e:6e:8d:95:ed:2e:c6:a1:c0:66:f3:8b:
         ee:59:3c:d1:3f:10:f1:3d:b8:8d:80:77:ff:f7:90:0f:74:d8:
         19:3e:02:0c:d4:7d:6a:30:25:68:70:d7:73:77:c4:99:ab:af:
         a6:b8:a0:ef:1f:44:94:4b:97:b2:e0:dd:f1:ef:f5:06:cc:ee:
         a2:ea:4e:2f:8f:ec:4c:32:95:b4:3c:2d:4b:81:19:c0:52:1e:
         31:0c:70:bd:32:cc:de:4e:90:89:f6:ab:d8:de:2f:82:cc:44:
         01:29:87:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:17 2026 by rpki-client