Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
File:                     s901zP9sK4ah-tjxA7wgBw0J5Q0.mft (raw, json)
Hash identifier:          ugQMaV9tOmqs+WDLFBOwV7df5Ui3J61meu6ddbF/Zvs=
Subject key identifier:   47:5C:1C:01:33:95:3D:08:78:45:3A:8B:45:58:5A:65:6A:95:72:71
Authority key identifier: B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D
Certificate issuer:       /CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
Certificate serial:       019F9580C8C081F5566137ED544DF2B79C24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
Manifest number:          19DD
Signing time:             Fri 24 Jul 2026 19:01:12 +0000
Manifest this update:     Fri 24 Jul 2026 19:01:12 +0000
Manifest next update:     Sat 25 Jul 2026 19:01:12 +0000
Files and hashes:         1: _Hegz1VVkQxT8dMR4TPbzXidnGo.roa (hash: wCUCX/ENynsQM4yWKSMGJBVSMGdPMxR8qubJ5kFNMNc=)
                          2: rBaBGD3me64LECmMKa6dKRV8Yy0.roa (hash: K+BptzFvZJeOeMKzMOMTcV3487VC0j+Wsdpi6o13OCY=)
                          3: s901zP9sK4ah-tjxA7wgBw0J5Q0.crl (hash: Soo7amXqd5GuGf7SS691LBwfuDtK1qLYtOrPnUk2vkY=)
                          4: vvTAvxdhx3NqRY7Mg6sIRjTavUM.asa (hash: B0okjC7PiUjc05N96TAWbJ82kV+SDnSQSBLWFMRkR/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:c8:c0:81:f5:56:61:37:ed:54:4d:f2:b7:9c:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3dd35ccff6c2b86a1fad8f103bc20070d09e50d
        Validity
            Not Before: Jul 24 19:01:12 2026 GMT
            Not After : Jul 25 19:01:12 2026 GMT
        Subject: CN=475c1c0133953d0878453a8b45585a656a957271
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:46:83:a3:68:86:ed:67:a0:ca:e3:4a:3e:b7:
                    56:03:7f:b5:aa:a2:10:0a:b8:85:0d:d5:60:b5:72:
                    01:a7:00:57:62:a1:57:01:8f:8b:70:f7:d5:8d:39:
                    e2:71:79:ea:5e:86:47:5b:4e:5f:e6:8e:ec:f0:1c:
                    b1:9d:57:ce:39:d5:e0:a1:b0:cf:a3:75:fc:45:e5:
                    46:98:d3:d8:41:a4:f3:56:38:c7:7b:8c:5a:a4:c0:
                    6a:5c:d5:e9:a8:48:8b:5d:c8:4e:dd:3a:42:77:fd:
                    bd:93:18:24:3a:5f:b0:48:c3:66:35:f9:c4:80:ca:
                    a5:9c:50:61:fa:a9:7f:2c:b4:aa:21:35:a5:c9:18:
                    da:fa:75:09:ad:52:da:c9:f8:94:e5:83:f4:d6:0a:
                    f6:1d:74:6a:dd:de:5d:4a:80:ac:8f:26:4f:a4:14:
                    e0:b9:db:84:6d:ab:7b:cb:6a:68:5a:94:fe:36:03:
                    2e:0c:e8:b7:b3:99:f8:0c:95:7e:4f:41:a6:4e:80:
                    ec:fb:ff:f6:eb:61:b8:9b:a3:41:ab:0b:44:ad:24:
                    68:62:48:ba:7b:45:69:de:dd:0b:f7:6b:23:ad:0b:
                    86:b6:c6:5e:e7:20:c5:88:3f:ac:dc:a6:64:95:2c:
                    04:ba:60:6f:ad:d3:b0:6e:eb:16:f7:af:a8:e4:18:
                    bd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5C:1C:01:33:95:3D:08:78:45:3A:8B:45:58:5A:65:6A:95:72:71
            X509v3 Authority Key Identifier:
                keyid:B3:DD:35:CC:FF:6C:2B:86:A1:FA:D8:F1:03:BC:20:07:0D:09:E5:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s901zP9sK4ah-tjxA7wgBw0J5Q0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/44d4a3-7a84-4499-8b71-2b105051ba59/1/s901zP9sK4ah-tjxA7wgBw0J5Q0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:11:bc:44:ec:a3:2f:34:7f:4b:08:7a:5d:d5:54:03:fc:74:
         0a:45:0c:f7:32:a1:43:6a:7c:dc:8a:fa:84:18:ec:15:b8:4e:
         a3:fc:25:96:7b:dc:bc:de:14:29:40:14:da:e8:fd:0a:44:dc:
         08:b5:25:0e:40:20:05:ac:41:7a:cd:c2:d2:6c:85:17:bc:69:
         48:9d:57:37:8d:e2:42:5d:f8:02:dd:10:c4:32:5b:c8:af:15:
         40:5c:05:50:dc:25:d6:60:0a:11:14:60:cc:21:1c:73:77:af:
         3a:09:65:87:7e:4b:b4:18:f8:99:4c:03:85:5d:ec:d0:87:be:
         3b:8a:a4:b3:55:be:18:f8:90:14:d3:ba:4b:c2:eb:91:fc:9c:
         a1:87:9f:97:d6:d6:62:9a:f8:1c:39:58:f1:d4:d2:23:f1:53:
         8b:09:3d:01:65:a7:57:b7:73:53:2f:ed:f3:a3:cc:16:b4:d9:
         e3:e3:78:b5:86:ff:5a:c4:eb:2c:44:1b:66:5b:7e:e5:bd:a0:
         96:7b:ea:ca:58:fb:9a:81:78:d4:e7:bf:b1:c3:f1:a9:d9:e2:
         7d:48:e7:08:fb:bf:a2:6d:11:ad:3e:be:18:58:55:91:97:09:
         d5:07:0a:24:fb:d9:34:19:e4:02:8d:cb:51:6e:85:2a:ca:2c:
         4b:fd:e0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:51:44 2026 by rpki-client