Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File:                     tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier:          FSCv6c5mDzYPEsoo4V0qfN/DmVJ8JzplJw9FUS227Xo=
Subject key identifier:   64:C5:FA:99:56:32:77:C2:B4:BD:C6:73:EC:E8:80:06:12:20:DF:C5
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer:       /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial:       019F8EA262406D2412DB8362792934B46416
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 11:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:34 +0000
Files and hashes:         1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
                          2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: TrGMEOIhpbnuuk5FKmYRRQ38cGwzTlGy2xe9Dbxcn3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:62:40:6d:24:12:db:83:62:79:29:34:b4:64:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
        Validity
            Not Before: Jul 23 11:00:34 2026 GMT
            Not After : Jul 24 11:00:34 2026 GMT
        Subject: CN=64c5fa99563277c2b4bdc673ece880061220dfc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9f:a3:43:66:68:61:a1:6e:37:64:0b:c7:90:
                    be:1c:88:c2:f1:6b:7c:b7:55:ea:a2:8e:c1:aa:1c:
                    ea:37:f2:53:12:fa:93:38:f2:fb:56:32:a8:e8:38:
                    c0:19:e9:9f:e5:1d:d8:18:0f:11:b0:2f:3b:a4:b3:
                    ec:fa:19:bb:f3:35:71:d9:7d:d0:d1:5c:37:bc:e7:
                    16:d3:58:a6:01:5f:98:47:a2:e4:8e:55:0d:f3:07:
                    69:85:23:83:34:5b:f5:1b:74:54:5d:6d:ee:80:f0:
                    f3:28:5a:56:5d:44:dd:78:e5:25:79:db:b4:34:e7:
                    c2:2f:68:aa:05:06:f2:59:f9:25:41:85:cd:22:58:
                    ca:cf:81:36:af:63:a5:fa:2c:7d:ec:e4:78:40:8d:
                    71:f4:6e:2a:5d:87:e1:6f:fe:76:47:29:8b:c1:c0:
                    1b:27:03:2f:31:34:7d:09:06:b9:1c:ce:ca:8a:a9:
                    90:56:ab:3a:d2:aa:5b:c2:24:67:d5:58:9b:7c:d2:
                    9f:48:68:47:1e:95:9d:1f:82:17:9b:39:d4:3d:62:
                    ea:db:d3:e0:7c:b8:6e:d0:4c:45:79:62:f9:e4:aa:
                    dc:c0:5d:75:38:72:6d:58:8f:da:50:d5:39:8e:88:
                    df:c3:ed:95:02:f6:cc:a1:39:f2:ea:f1:a9:db:f3:
                    82:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C5:FA:99:56:32:77:C2:B4:BD:C6:73:EC:E8:80:06:12:20:DF:C5
            X509v3 Authority Key Identifier:
                keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:4e:40:f8:37:d8:f9:6d:d4:da:e2:57:5c:86:a2:e1:66:d1:
         53:66:80:0e:75:41:07:7e:88:ac:28:a6:d3:80:ad:6c:52:31:
         e9:ba:ad:80:75:9f:53:5c:76:9d:e5:75:d6:4e:fb:9c:90:dd:
         88:c0:38:2a:d1:60:f5:4b:b3:4c:70:b6:d0:22:fb:ed:67:03:
         66:d5:aa:90:40:ce:9f:65:ea:c1:66:8a:de:5a:03:72:84:83:
         f8:c8:58:92:07:39:31:64:52:bb:4c:e7:62:3b:02:19:dc:20:
         6e:85:6c:ff:e9:d4:6b:51:f8:c9:a2:59:5a:76:9d:74:f0:66:
         fb:d7:ad:fd:51:a0:08:77:ed:01:6e:d5:44:6e:2e:75:f0:a7:
         28:5f:55:2d:ed:e7:4a:3d:04:1e:2e:74:bb:85:a2:fa:e2:8d:
         6c:86:67:39:d6:9a:18:7a:99:f0:7d:6b:ce:69:07:98:25:f4:
         a8:35:77:d5:51:c5:02:4d:f6:15:85:fd:94:14:6f:6e:51:12:
         71:d2:23:b5:d1:34:39:58:d1:67:d5:69:78:29:5c:ed:38:21:
         81:56:56:ae:26:e8:3e:8e:fb:5c:59:8f:2e:77:8e:3b:b0:85:
         57:f3:b8:67:22:8e:1d:c0:57:ae:38:da:0c:37:9e:dd:21:46:
         06:fb:8f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:19 2026 by rpki-client