Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
File:                     1Tm4aC89XOqjlcvPet7a2RFPqfk.mft (raw, json)
Hash identifier:          u4vgtwZ7BLQHTj5PneJjCIjp8VTNsyoyQYm9g25/K3U=
Subject key identifier:   EA:78:CE:3A:F5:FD:03:D7:37:0A:5C:68:57:26:4E:10:BC:D4:A4:50
Authority key identifier: D5:39:B8:68:2F:3D:5C:EA:A3:95:CB:CF:7A:DE:DA:D9:11:4F:A9:F9
Certificate issuer:       /CN=d539b8682f3d5ceaa395cbcf7adedad9114fa9f9
Certificate serial:       019F9059B10F115EAA95D38135994A71C5AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
Manifest number:          50
Signing time:             Thu 23 Jul 2026 19:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:24 +0000
Files and hashes:         1: 1Tm4aC89XOqjlcvPet7a2RFPqfk.crl (hash: q/B6ZwfMfxDzJ8DmKaoHmymB2uOUFc8wlOttLxtqTp0=)
                          2: AWbOy_liNGdmx811xpn2huXogl0.roa (hash: s8PFr9TztoBDWe3VrYxnh1Hk1tgm8rWogms1QJku0RY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:b1:0f:11:5e:aa:95:d3:81:35:99:4a:71:c5:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d539b8682f3d5ceaa395cbcf7adedad9114fa9f9
        Validity
            Not Before: Jul 23 19:00:24 2026 GMT
            Not After : Jul 24 19:00:24 2026 GMT
        Subject: CN=ea78ce3af5fd03d7370a5c6857264e10bcd4a450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4a:c0:92:57:39:dc:4c:c9:62:08:87:45:0c:
                    1a:85:18:7b:60:aa:1d:8e:0b:a4:5c:27:aa:9d:e3:
                    43:cb:62:3a:34:3b:53:a4:c7:1d:0a:a2:2a:5c:01:
                    e0:38:6e:29:70:b9:28:89:57:4b:c1:78:93:f8:12:
                    0e:51:88:c7:e3:89:b5:bc:ef:f4:a5:ea:77:22:d6:
                    47:39:1c:61:8c:49:0b:40:c6:c9:aa:be:c7:38:42:
                    a3:fc:d6:e1:a2:cd:b8:50:1a:0d:5c:84:cf:3b:c9:
                    43:88:3f:56:e0:c9:f9:f6:50:43:17:b1:93:3e:a7:
                    51:f8:3f:63:d8:1f:fb:57:bf:4e:3c:d5:e1:e9:73:
                    44:e1:93:ca:6a:69:c8:eb:9e:c0:07:eb:ab:76:f7:
                    2d:51:47:40:49:ec:49:75:da:ad:2f:9a:0d:74:b1:
                    5e:46:51:3c:df:b3:0d:72:dd:9c:30:c1:b1:9d:84:
                    7f:ed:79:17:76:89:fb:1e:e5:8a:b3:ce:47:b1:86:
                    cf:57:89:50:b8:9a:ee:34:85:98:fb:25:01:a5:06:
                    cf:2d:34:9e:eb:dc:8d:cf:27:62:64:90:cf:0e:a3:
                    37:a2:a8:e6:74:32:56:6d:e7:75:b7:bc:d1:6e:bd:
                    72:63:8b:45:b0:86:f4:9c:c9:1b:40:e7:06:15:6f:
                    5f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:78:CE:3A:F5:FD:03:D7:37:0A:5C:68:57:26:4E:10:BC:D4:A4:50
            X509v3 Authority Key Identifier:
                keyid:D5:39:B8:68:2F:3D:5C:EA:A3:95:CB:CF:7A:DE:DA:D9:11:4F:A9:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Tm4aC89XOqjlcvPet7a2RFPqfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/acd8ba-a653-4739-bc60-f72fa56addda/1/1Tm4aC89XOqjlcvPet7a2RFPqfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a2:9a:da:01:7f:22:de:b7:f1:6f:47:16:8b:6b:b1:3d:71:
         26:1b:1e:7f:0e:60:d3:bd:84:b3:3e:86:c1:29:aa:18:be:59:
         e7:33:9a:18:74:5b:df:44:e1:97:2d:fa:35:ac:18:f3:64:fc:
         c1:bc:cc:6b:67:e4:2e:09:e8:85:05:fb:82:5c:48:f6:0a:f2:
         12:5f:32:43:fc:47:12:c6:56:d5:41:e0:3e:ff:8a:79:46:27:
         fc:fb:74:78:a1:93:97:eb:4e:90:ff:b7:28:a4:79:1b:44:5b:
         ce:a8:24:e9:37:4a:38:01:19:cf:25:be:bc:8c:83:1c:53:bd:
         fa:f5:36:86:2f:14:2a:84:bc:05:c2:1b:7e:3f:bf:37:1e:0d:
         6f:27:24:f0:c2:f0:1d:3b:12:ee:58:fd:5c:90:8f:ea:71:96:
         73:98:38:16:03:68:16:2c:9e:d3:f7:87:97:14:61:0a:0e:13:
         17:53:f7:2f:ec:a6:be:35:f7:23:7d:07:43:0b:4c:e5:0e:17:
         c5:9d:3b:e7:42:7c:66:9e:c7:4e:1f:1c:48:a5:5a:59:18:26:
         71:06:39:6d:27:8c:45:a1:65:33:a5:49:df:9c:8b:4c:ba:c4:
         58:74:79:2e:8b:e6:d0:04:5d:03:8e:87:1d:ec:28:8d:26:41:
         b5:91:c9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:34:35 2026 by rpki-client