Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File:                     sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier:          xDBs+5mu+YhpqOd1CR0LGuSzbjvTobK0as05bygFlyc=
Subject key identifier:   C4:6C:CA:E4:40:A0:A1:E1:B0:60:28:55:2D:10:A7:D1:42:D7:07:DB
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer:       /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial:       019F9391F776C5ECB50E80C39F7B6B4241A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number:          19D1
Signing time:             Fri 24 Jul 2026 10:00:44 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:44 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:44 +0000
Files and hashes:         1: 23A1M_7D38Nasymq2osByPDI5cA.roa (hash: wp6SoUXMRZMv8bCbA5J4Lo7L/L66QrTkl3U2sJg5Tss=)
                          2: 7tRxzOjQ9HlU-8n_YoQ9S2kmRLc.roa (hash: VZLOnCAersGhWtsmb7R0s5AlGZFScIm4sdJlK/A7tN8=)
                          3: eAGo7tcphLVCScj4mWyqTWB40DE.roa (hash: vUYrbB3y1Fed1n+d3yU4y69AsjIYo8MsiwphvcU79ek=)
                          4: kORyH1zk4kpVVZcN-RFEOaPpCYQ.roa (hash: eM3a4CHDiPxCoPRiTlT4LzKEhGGZUAXh/d8bAjKFKxA=)
                          5: sP8B78WvrO-I9FMOKnP4eLOTxh8.roa (hash: j0/QkDqzGm9cKi69XdtrTTNVhk9moQxAiYICzefknS8=)
                          6: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: V86VVGvid8j+V8HtT55B3C+k2rODt/4tpE2MFPcizqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:f7:76:c5:ec:b5:0e:80:c3:9f:7b:6b:42:41:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
        Validity
            Not Before: Jul 24 10:00:44 2026 GMT
            Not After : Jul 25 10:00:44 2026 GMT
        Subject: CN=c46ccae440a0a1e1b06028552d10a7d142d707db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7e:b3:a2:6e:e1:f9:38:ae:04:13:5e:23:2c:
                    8a:7e:40:b8:53:34:20:c2:20:12:86:83:bb:43:65:
                    55:9d:92:9e:09:db:2e:67:2f:c9:d0:2a:fb:ed:d5:
                    1b:f2:26:a0:a0:e7:71:1c:46:c4:9d:07:f1:37:1a:
                    0f:c6:89:07:9c:04:0f:11:fc:6d:0e:44:d5:0c:1d:
                    37:d5:9a:67:4e:93:ad:e6:30:79:01:bc:84:77:69:
                    5d:d0:b9:f7:f5:77:fd:9c:a2:aa:18:e7:87:5f:91:
                    2f:3b:a8:b7:b4:a2:09:41:c9:1d:04:cb:94:c0:c7:
                    20:05:b0:eb:55:97:be:c9:46:bd:8c:a1:b9:39:c9:
                    0f:78:65:ae:bb:ac:a3:f2:2e:0c:ae:f6:a8:1f:63:
                    b1:a1:6a:90:ae:ed:0d:9e:d8:47:0c:bb:42:00:22:
                    6c:f5:9b:33:9d:d5:8c:ce:fa:62:25:af:54:04:6f:
                    1c:e8:dd:19:57:82:60:a6:79:61:42:c2:77:9e:e6:
                    41:7d:d5:20:ac:08:7c:01:2c:9b:80:65:dc:92:68:
                    f1:94:27:a1:c0:52:e8:c0:6c:e4:d3:8e:ce:22:55:
                    25:f3:83:ef:60:68:3c:0a:70:4b:04:43:e0:30:9f:
                    6c:7f:3a:52:08:c7:da:47:db:8a:5f:90:e1:41:ca:
                    6f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:6C:CA:E4:40:A0:A1:E1:B0:60:28:55:2D:10:A7:D1:42:D7:07:DB
            X509v3 Authority Key Identifier:
                keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:90:c0:db:ce:a9:e3:ad:bf:d2:de:d8:24:7c:20:e5:3c:16:
         bf:cd:c9:24:e0:fd:bb:d9:56:0e:b0:78:f7:67:95:73:99:73:
         f4:e8:91:40:59:d1:d1:32:18:e3:e4:e0:e8:19:2a:4b:12:73:
         d9:4e:98:66:85:9b:66:50:ee:d2:5c:a9:04:f8:da:08:63:54:
         8f:fe:bc:95:e0:bf:c9:26:d5:0b:20:a3:81:dd:6b:5a:4a:c3:
         64:a4:03:11:8f:d3:87:20:66:69:91:aa:b3:bb:22:79:b7:5d:
         e0:f3:a2:e2:a3:c0:91:35:a9:dc:a3:c9:d6:38:5f:6b:fe:49:
         19:c2:77:b1:44:0c:f0:b5:6d:96:ce:a3:46:61:ec:ad:ca:cc:
         81:a4:db:39:3f:5f:51:33:5c:e7:23:fc:1e:bf:d8:2f:31:02:
         52:a7:be:7a:91:86:e9:f6:a1:2d:67:7d:89:a9:f5:99:2e:78:
         52:3c:00:fc:41:cb:eb:30:ec:d6:1a:81:09:47:16:08:39:c3:
         21:ea:8f:50:4d:f1:d0:c4:54:c3:d8:9d:c2:ba:43:1c:11:ba:
         51:bd:cd:0e:e9:90:36:22:b1:b3:6e:2d:30:68:c7:39:6e:28:
         25:e6:9a:b0:17:81:24:d3:11:65:92:6e:61:a7:c4:0c:98:5f:
         c5:aa:5c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:14:57 2026 by rpki-client