Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
File:                     1-F0E5sULqQb5rBHC51vz9dEEKmI.mft (raw, json)
Hash identifier:          qpwSJtBZmIJjVme8fqQZlwNglgxcstu4RPZTvU3xbuQ=
Subject key identifier:   CF:94:DF:F3:BA:F2:A4:3D:8C:A8:77:C3:B5:47:90:73:6E:7F:A9:6D
Authority key identifier: F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62
Certificate issuer:       /CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
Certificate serial:       019F909173F2EC3F9F4B9D3120DBBD50CDEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 20:01:19 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:19 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:19 +0000
Files and hashes:         1: 1-F0E5sULqQb5rBHC51vz9dEEKmI.crl (hash: NcW23weZmAXhrk4emCStf6OTykCP5CeKa8fIfqdVXmk=)
                          2: BoWpyd3JOZi5Y_vkexanhVBW_Ag.roa (hash: TuPfakwU0uajSPw+NwpFbys7R8R7VeHveufD46rtpys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:73:f2:ec:3f:9f:4b:9d:31:20:db:bd:50:cd:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f85d04e6c50ba906f9ac11c2e75bf3f5d1042a62
        Validity
            Not Before: Jul 23 20:01:19 2026 GMT
            Not After : Jul 24 20:01:19 2026 GMT
        Subject: CN=cf94dff3baf2a43d8ca877c3b54790736e7fa96d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:40:26:75:78:3b:b7:ea:23:ea:24:48:ef:52:
                    f7:bc:05:8c:f1:43:81:e4:c3:ba:89:03:38:12:ad:
                    64:47:f8:1a:5a:9c:2f:d5:56:40:17:d0:74:59:7b:
                    23:f3:26:23:ba:9c:bd:7a:62:97:fe:43:28:94:5a:
                    b3:09:94:df:48:9d:a3:44:ca:b5:99:ae:8c:00:20:
                    79:de:e2:f4:a6:46:7f:02:cd:68:1f:4f:cd:90:ac:
                    f9:18:8c:7a:fa:51:db:91:bd:e3:50:f1:6a:66:7b:
                    db:7d:40:52:1c:81:24:67:89:2d:6d:98:32:48:d8:
                    c0:ec:1f:ca:b3:03:e1:09:18:d3:35:b1:b7:34:a9:
                    3f:61:3c:9d:17:59:6c:0e:85:79:e7:f0:9b:04:22:
                    97:a4:75:ab:af:7f:06:a8:a8:49:11:d8:84:10:c8:
                    b5:77:16:1f:f9:35:de:56:1b:0b:1a:ac:d7:52:7a:
                    e9:2d:dc:e5:b2:57:28:dc:d3:3c:80:72:d1:26:c1:
                    69:73:04:6e:f8:23:7b:db:a5:d1:c1:e5:6c:1d:4d:
                    5e:05:cd:7c:e7:18:e3:a1:c9:df:6c:6d:08:83:55:
                    f5:1d:c1:d2:26:ed:b8:af:a2:0f:d1:d3:56:e7:ac:
                    41:08:59:af:77:64:6d:0e:e3:d2:c8:b2:f4:c1:7d:
                    36:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:94:DF:F3:BA:F2:A4:3D:8C:A8:77:C3:B5:47:90:73:6E:7F:A9:6D
            X509v3 Authority Key Identifier:
                keyid:F8:5D:04:E6:C5:0B:A9:06:F9:AC:11:C2:E7:5B:F3:F5:D1:04:2A:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-F0E5sULqQb5rBHC51vz9dEEKmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e3aa31-964f-4a81-bcee-de8c26202b17/1/1-F0E5sULqQb5rBHC51vz9dEEKmI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:7b:e0:0d:db:f0:a9:14:0d:13:b4:f9:30:23:82:ec:9a:c7:
         a6:36:d8:a2:b8:66:37:d9:87:fc:80:4c:f3:e3:9b:12:d8:80:
         a8:34:2c:35:68:a7:23:ff:e1:f8:19:53:46:42:38:41:90:bb:
         18:a8:1c:7f:9f:67:30:49:c6:ed:db:92:87:bb:af:27:f5:94:
         7b:d6:5a:90:26:88:76:11:44:34:1b:85:99:b7:e0:29:d0:08:
         77:7e:60:2c:1e:45:19:d7:e6:20:58:6e:69:d0:da:32:1a:09:
         d4:ba:78:46:c5:77:dd:84:f3:c1:a9:ef:9a:31:18:f9:0a:97:
         d2:e8:d8:2d:b0:fd:ce:a5:73:26:ce:cf:65:15:b7:77:45:85:
         67:82:e4:f8:79:bd:80:ac:54:25:03:ef:21:ff:57:1f:7f:73:
         b2:b3:e2:85:fe:44:d3:c9:69:a3:d2:3e:2d:0f:08:7e:dc:0c:
         46:cb:db:9b:a0:a4:63:01:ce:bd:53:5a:e9:47:b1:40:0d:89:
         e0:86:0e:26:8f:ad:fe:58:27:b7:63:20:33:2f:0a:ba:e5:2f:
         3e:df:db:e9:11:8e:6e:1e:35:8e:c0:b9:c3:49:8f:71:b6:25:
         06:2e:78:2f:62:66:3c:84:97:43:18:8a:c6:fd:3f:2f:47:f2:
         61:76:03:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:33 2026 by rpki-client