Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
File:                     DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft (raw, json)
Hash identifier:          jt+DBq/aMVVa0JaQg6bqXw6od9alDEFK3/O7WviNfTA=
Subject key identifier:   D7:C6:C7:4D:BC:C7:C9:47:10:E2:C6:30:D1:42:42:E1:98:60:1F:69
Authority key identifier: 0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C
Certificate issuer:       /CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
Certificate serial:       019F916D6F5FFB8DAB843069B71D868A4F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 00:01:35 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:35 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:35 +0000
Files and hashes:         1: D32i6_dCWTSsyvln6Op_fVc7ifQ.roa (hash: Al7b3A0tyoRmZ6j5Fdgg5aD1e2Ddf8niF7ufLQSci6A=)
                          2: DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl (hash: jKCBbeoJUWnG04WEC0RtD2twTwBRkHBjV7wgSc2qUEE=)
                          3: cRdmmZiNILryID4MaoZH-egP0Pc.roa (hash: Tc3P5pw52D848VbuoEwG61qEEaFgbEGdqefrzUmOWZA=)
                          4: dO_oeTKff3dNZT_GL6N0iMSDLeA.roa (hash: U9kjCpU+QQfnTA2jCeD/iAdC4QIXldj/AsRqVA98Jco=)
                          5: hKslTlGWTrYnNFRq7nm02w7iSks.roa (hash: hx/Lg8Qct01wevwfLicpLCIZWwNva1xX/icDKHDKOOo=)
                          6: qsPJeU-C_65tmjEWpGQYQUIEajo.roa (hash: 1cn7hAG7OagxW4P/nzGgq4cV1HKNDko3iBj1s+1Q88U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:6f:5f:fb:8d:ab:84:30:69:b7:1d:86:8a:4f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e0b0dcb6ad0ca816d2bd204e13f1eaf1104274c
        Validity
            Not Before: Jul 24 00:01:35 2026 GMT
            Not After : Jul 25 00:01:35 2026 GMT
        Subject: CN=d7c6c74dbcc7c94710e2c630d14242e198601f69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:4c:b6:cf:ab:97:20:8f:42:16:24:25:43:
                    20:0f:70:a2:58:20:d8:ce:95:f6:26:a4:01:2a:45:
                    b9:4f:34:c8:c2:2f:dc:07:01:28:a1:ff:3d:b6:85:
                    09:f3:5e:fc:ca:7a:ed:5a:f0:97:b1:82:92:c7:db:
                    36:2b:44:1c:25:03:6f:98:de:4d:92:ca:cb:b5:06:
                    3a:dc:be:23:af:5d:0f:02:c3:2f:31:7b:8a:8a:b7:
                    a7:63:83:c4:b0:ee:bf:37:55:de:10:e7:05:ba:aa:
                    c9:10:4f:e9:67:48:7d:1a:45:61:35:6a:46:12:d0:
                    c6:cf:d9:89:5c:53:a0:cc:31:15:06:65:49:ef:4e:
                    da:90:9c:f9:f9:64:5d:c0:9f:ff:8c:dc:20:eb:19:
                    21:f6:d0:67:1e:d5:9a:f0:3f:99:36:73:2f:58:3d:
                    aa:c1:77:b1:95:d2:93:44:05:21:25:1f:74:97:c9:
                    a8:6f:84:a8:bd:e7:a1:f0:8f:f5:63:83:a6:cf:f1:
                    ab:12:a1:b8:a1:ad:2e:af:2d:6b:32:8c:6a:b0:f2:
                    61:79:ce:ad:36:6b:9d:f0:30:a7:5b:a2:13:98:21:
                    34:fa:9e:8a:7d:84:2b:95:2e:dc:35:56:50:9f:e9:
                    b3:f2:c7:b7:c5:4e:c2:6e:be:9d:ae:be:af:ed:29:
                    0c:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:C6:C7:4D:BC:C7:C9:47:10:E2:C6:30:D1:42:42:E1:98:60:1F:69
            X509v3 Authority Key Identifier:
                keyid:0E:0B:0D:CB:6A:D0:CA:81:6D:2B:D2:04:E1:3F:1E:AF:11:04:27:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DgsNy2rQyoFtK9IE4T8erxEEJ0w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f19d06-c7fa-40e5-b813-7fe3951a735b/1/DgsNy2rQyoFtK9IE4T8erxEEJ0w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:eb:e6:a7:f3:5f:c6:01:8a:ca:f0:28:fe:62:9f:66:e4:
         14:d2:69:4c:b6:1c:1d:5c:11:dc:c3:6b:0d:d5:a0:21:6b:54:
         22:61:f4:a0:6c:9c:cd:ce:1c:40:5e:dc:b1:8c:bb:11:a4:97:
         c4:70:db:e3:ef:ca:22:97:b2:d5:ca:5e:78:58:39:a5:a0:92:
         3b:8f:bc:13:53:b5:36:36:d7:0c:b4:c2:7b:f9:6a:11:14:3b:
         cb:0c:fa:24:59:ce:56:88:10:f4:50:17:78:65:ae:fe:c8:05:
         6a:98:5f:66:9b:34:8e:60:8b:c7:78:1a:07:9a:3e:9f:b9:4e:
         dd:b7:5e:fb:9c:34:5c:07:e2:97:4f:ec:98:d6:f6:01:82:3d:
         4a:55:83:db:bf:a5:44:2d:7e:ff:80:52:bb:c4:d0:eb:e8:65:
         8c:92:e6:c3:1b:d8:4e:cc:22:e1:85:9b:c3:6c:cd:de:09:49:
         eb:1d:c9:5a:5e:62:ca:f3:0a:a1:ed:d0:26:f0:40:47:99:7a:
         1b:d3:0c:32:49:c0:b3:c2:f5:97:01:b0:33:82:54:92:97:f5:
         76:5c:0b:20:ca:ae:57:cc:cf:27:a7:e7:6e:8e:cb:94:8b:b8:
         07:fa:76:65:9a:a4:12:af:22:2a:f5:98:c8:e4:9f:ff:6c:fb:
         c6:47:51:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:27 2026 by rpki-client