Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
File:                     es4XamnMycmW4WEJJcC2vfdrIHw.mft (raw, json)
Hash identifier:          mq1wStATYTX01BXj+w/0JXzkPAMg7lpAlrOjPZtR78s=
Subject key identifier:   AA:75:81:DC:59:2A:DC:E7:C7:DF:9E:D2:4E:A2:1C:58:EE:5A:E8:06
Authority key identifier: 7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C
Certificate issuer:       /CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
Certificate serial:       019F954A7833E04161DEFF0B5FCE5F7B0D25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 18:01:53 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:53 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:53 +0000
Files and hashes:         1: es4XamnMycmW4WEJJcC2vfdrIHw.crl (hash: DiX1YDqMZqqA9KrPnRAt9tFHiTE/k6pILgayfl7/l3U=)
                          2: m22Y1De-nkPO9R3DafQN5L9RCOU.roa (hash: CsiGy9UFamAf9ICsV6hbl4LryS8JIVMr9rlKyNfLKBQ=)
                          3: vdBF4D6B4y0Ni8JRFy3wrlKFdow.roa (hash: V5Qj+2qVfjThhkfwRXhTo9kpUUm1HojCtg/JdAzbU9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:78:33:e0:41:61:de:ff:0b:5f:ce:5f:7b:0d:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ace176a69ccc9c996e1610925c0b6bdf76b207c
        Validity
            Not Before: Jul 24 18:01:53 2026 GMT
            Not After : Jul 25 18:01:53 2026 GMT
        Subject: CN=aa7581dc592adce7c7df9ed24ea21c58ee5ae806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:08:fe:41:2d:b5:3a:d2:80:45:e8:a2:a8:08:
                    1e:34:f5:fe:11:8f:b9:34:e7:9d:1b:76:28:6b:d3:
                    25:a4:57:e4:27:73:f9:fc:2c:fe:f2:32:61:01:39:
                    c6:2c:18:28:c4:eb:50:c4:f0:9f:34:34:63:76:1d:
                    c1:01:8a:a5:e4:44:28:1a:9e:22:3d:37:bd:70:94:
                    ec:4a:73:f8:4d:43:cf:9f:ca:5f:a6:9c:f7:b2:a7:
                    d1:22:e5:3d:d1:1e:c0:18:a9:14:3f:14:b2:8b:cf:
                    1c:72:b2:1e:9d:dc:30:e4:49:8e:f6:7b:b2:6d:ce:
                    46:a6:a3:93:e0:7a:db:22:0b:3f:51:c0:22:71:d9:
                    7c:97:02:47:9e:40:be:a8:bc:1c:18:44:0a:12:1f:
                    0d:b2:af:e3:87:51:fa:31:5b:c2:a5:72:56:4f:99:
                    0a:2a:18:b3:63:80:63:ec:02:42:f0:15:e1:b4:67:
                    75:83:d2:f6:57:b1:91:6c:5d:48:39:33:a9:e0:2a:
                    fb:e7:d7:5d:ee:9b:cc:b8:67:e1:35:ef:6c:35:4a:
                    f6:49:a6:2d:c9:94:c3:3d:11:96:d7:af:38:26:84:
                    d7:6a:f2:32:92:80:7c:c6:93:26:de:32:a8:54:1a:
                    46:88:e5:1a:ab:1f:e6:d3:92:89:43:8f:d1:72:94:
                    17:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:75:81:DC:59:2A:DC:E7:C7:DF:9E:D2:4E:A2:1C:58:EE:5A:E8:06
            X509v3 Authority Key Identifier:
                keyid:7A:CE:17:6A:69:CC:C9:C9:96:E1:61:09:25:C0:B6:BD:F7:6B:20:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/es4XamnMycmW4WEJJcC2vfdrIHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/6afcbe-6df0-4f77-af34-c61803c34657/1/es4XamnMycmW4WEJJcC2vfdrIHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:71:df:00:b7:98:79:1d:a9:31:ff:6d:20:49:f7:e9:d4:27:
         ab:04:97:c3:2b:20:72:04:6d:c7:d6:21:a1:cf:ef:e1:05:25:
         d9:d0:2c:65:32:da:69:68:f8:9d:37:81:78:97:c9:3c:66:b1:
         af:8d:05:4d:6a:06:31:d5:52:07:2f:c4:7a:0d:25:b2:83:e0:
         0b:a0:3e:1d:ae:a8:e9:d1:bd:07:44:7b:db:21:a3:18:94:52:
         bf:54:c6:f8:8d:38:42:13:03:e8:aa:ae:b3:15:fa:89:71:85:
         9d:07:73:19:eb:c9:ae:a1:fb:90:3f:a6:43:a2:e4:9b:a4:99:
         3e:38:7d:50:31:35:a7:10:64:a7:15:c6:28:0a:d4:4e:0e:70:
         b0:fe:5e:46:4a:2d:5f:ac:34:8a:96:0a:4a:ee:ed:9e:9f:d1:
         07:9e:7a:24:c5:74:d0:65:b9:7c:dd:fe:52:19:35:34:d3:cb:
         87:92:54:ff:27:0b:2b:32:db:85:7a:6e:9e:f9:0c:74:23:46:
         8e:65:e1:34:58:32:48:2c:40:44:30:70:d1:4b:d3:f2:bb:79:
         8c:33:8e:0a:2c:46:4d:4b:d4:e9:b7:73:7d:c0:6a:ea:74:13:
         76:ca:71:6f:e1:5e:73:b8:82:f9:f9:f2:52:8f:53:b9:82:52:
         8b:a3:5b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:15:55 2026 by rpki-client