Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
File:                     pdSlpdFMijuMuU0ctGwNbiocSEc.mft (raw, json)
Hash identifier:          p5vD3f5PeFqLn6HaJeT/JtYBgXVYnAJAvrXvA+P28qw=
Subject key identifier:   56:DC:F9:51:A6:E1:A0:76:E9:6D:F8:25:3D:48:0E:98:08:7B:BC:9F
Authority key identifier: A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47
Certificate issuer:       /CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
Certificate serial:       019F93C881B104C979508B192661FC87585F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 11:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:18 +0000
Files and hashes:         1: 9R0cNh7tpRGDeQddrrwgSyExnk4.roa (hash: PqbwlQKDPSasGMUXgw1wOQWlaHSoiKJ6p6YuOnnchI8=)
                          2: Q9Nt9gX8DHi90LT4tMlOZ0m6IJo.roa (hash: UYO/NtK9AfbvXNvm3O/IQCzfg04aFD89bh7YW2P92Vk=)
                          3: pdSlpdFMijuMuU0ctGwNbiocSEc.crl (hash: r+R+TymJeeS7TJnaIQGOREgc8mUi2vv726VnYYYJ+NA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 11:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:81:b1:04:c9:79:50:8b:19:26:61:fc:87:58:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5d4a5a5d14c8a3b8cb94d1cb46c0d6e2a1c4847
        Validity
            Not Before: Jul 24 11:00:18 2026 GMT
            Not After : Jul 25 11:00:18 2026 GMT
        Subject: CN=56dcf951a6e1a076e96df8253d480e98087bbc9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:81:7a:f8:13:f9:1d:95:3a:2f:45:97:fb:84:
                    53:6d:a0:cd:40:f2:27:f8:d0:d3:b3:9b:43:b0:1a:
                    1a:84:e9:ef:4d:e7:76:44:c9:ad:8f:c1:4f:7c:a9:
                    c2:15:a0:c0:bc:91:5c:4e:5c:c3:85:63:8e:e9:36:
                    d2:dd:cd:91:60:7e:54:f8:d8:72:50:02:6d:46:a7:
                    1a:51:1d:c8:60:87:f1:00:07:db:d5:b2:c1:96:13:
                    4f:91:af:fc:a1:ee:f2:4f:8c:17:99:ea:b3:36:92:
                    e3:ee:48:f6:47:e4:bc:83:8b:3e:b1:c4:0a:6b:f7:
                    d9:6a:ae:ed:79:b5:b2:da:4b:44:e8:39:dd:e5:76:
                    27:d5:f0:d3:5d:c6:19:6c:2e:90:44:37:3b:ee:72:
                    32:10:a7:be:10:2b:59:4e:6e:11:7e:d9:f8:aa:95:
                    88:34:7d:e3:5b:9b:3f:a6:ca:f5:86:51:f1:bd:37:
                    16:0e:08:85:1d:cd:ba:e8:9a:1f:8a:26:91:2a:50:
                    26:ef:9f:f1:09:bb:d5:b6:ee:99:c8:c6:0d:00:c2:
                    e2:ef:4a:b2:08:88:13:38:e1:b7:a4:0a:f4:6d:5c:
                    9d:a2:89:f9:1c:8a:89:36:f8:17:da:cf:87:59:d5:
                    cf:4a:04:3f:b7:2d:c0:e0:84:23:b7:79:d8:b7:17:
                    85:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:DC:F9:51:A6:E1:A0:76:E9:6D:F8:25:3D:48:0E:98:08:7B:BC:9F
            X509v3 Authority Key Identifier:
                keyid:A5:D4:A5:A5:D1:4C:8A:3B:8C:B9:4D:1C:B4:6C:0D:6E:2A:1C:48:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pdSlpdFMijuMuU0ctGwNbiocSEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6d85ea-f74a-464b-b4a2-22c08dcbf572/1/pdSlpdFMijuMuU0ctGwNbiocSEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:5b:50:0b:e7:0d:e2:74:73:76:60:e1:31:a7:4d:d7:d6:41:
         6a:d6:a3:0c:19:ff:f2:85:39:de:f0:23:3f:59:4f:ad:e5:b6:
         59:53:69:ae:da:38:d0:11:1a:33:4e:88:a8:96:d9:d0:76:47:
         a0:e1:cb:68:1d:e2:2f:37:8e:22:bc:a7:94:92:62:5c:60:c6:
         0e:5a:24:07:ab:f8:2e:be:51:03:47:28:00:83:be:92:fb:a7:
         e3:d2:93:f5:13:e4:c4:5e:b2:70:fe:d0:c3:ed:bc:d8:a5:ea:
         e6:cf:b3:a8:9a:15:60:4a:76:60:eb:b3:31:c9:a0:fb:a7:ff:
         9a:9d:14:26:7a:82:06:d9:9b:b5:b0:0c:ab:a8:72:5f:e1:a9:
         bc:d6:06:cd:a9:32:06:9e:f4:f4:72:81:82:e7:e2:e6:5c:2b:
         02:ac:ae:e1:e3:cb:e1:ba:a4:ee:fe:55:53:68:b6:65:2d:6c:
         7c:6b:3b:6b:e8:3d:a2:f3:92:3f:54:cf:44:2d:c8:53:f8:07:
         c3:da:fc:21:33:39:18:3d:2d:bf:45:7d:31:d0:55:94:16:e8:
         8e:34:98:e6:a0:ec:a4:5b:fe:0d:23:6c:7f:39:8b:14:61:54:
         4d:a2:27:59:98:04:21:a1:d6:59:0c:99:97:97:75:36:6c:6b:
         0d:ae:95:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:05 2026 by rpki-client