Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File:                     rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier:          HZj7RxtertfHa0Wak8ZDFc4yDcjIweGIfeDM319ae/w=
Subject key identifier:   6F:8D:EB:8E:C3:E9:20:1B:D9:E4:D5:0D:44:46:46:13:DF:D9:7F:FB
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer:       /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial:       019F93927BB2B2676440035151348CA53068
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 10:01:18 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:18 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:18 +0000
Files and hashes:         1: r9eaNKOzK8PPUei6RdKb9LkqhTI.roa (hash: +R7LC8z04wYSjkyWe1Pk5HhKfodwp2zyyiW39xvrzog=)
                          2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: b2CQ5JMZuyBC1aUR41MmWgJgiFp7rimvAlnP6st2y1E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:7b:b2:b2:67:64:40:03:51:51:34:8c:a5:30:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
        Validity
            Not Before: Jul 24 10:01:18 2026 GMT
            Not After : Jul 25 10:01:18 2026 GMT
        Subject: CN=6f8deb8ec3e9201bd9e4d50d44464613dfd97ffb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:04:fb:ad:b2:ea:a6:a0:47:a6:17:97:20:f6:
                    3d:d3:76:81:70:32:07:f2:b9:6c:8e:10:88:2b:c3:
                    74:54:f0:62:55:69:22:12:48:c5:d4:72:51:66:20:
                    98:40:63:32:d6:45:93:fa:04:28:d5:72:ce:8d:3a:
                    10:4a:89:fd:ca:1f:ae:c1:26:a6:ca:2f:e2:99:57:
                    2b:ca:05:d7:85:6e:f9:f6:1a:2d:73:d4:16:fd:e6:
                    3f:47:ac:77:e5:ee:dc:74:4e:4d:be:6e:60:19:32:
                    d4:e2:19:fb:d2:47:3d:4e:e9:76:5a:a8:c0:93:b6:
                    65:82:5c:d9:d7:e3:8a:88:65:21:d6:42:37:2c:b7:
                    8a:83:60:9e:65:84:a0:b9:c5:14:55:7e:9d:b4:00:
                    44:73:24:b4:e1:9e:b6:6f:a6:7f:40:47:d0:64:b3:
                    f5:64:d0:50:13:ee:6a:70:71:db:eb:22:00:3b:fd:
                    c6:1c:34:a2:c1:8b:0f:76:2d:48:3a:be:3a:5d:14:
                    a2:2e:7d:d7:5c:fc:e2:21:cc:60:4c:84:dc:e3:28:
                    7e:84:0f:44:c0:7a:e9:17:e5:ef:1a:d4:90:ce:53:
                    8b:c0:05:7b:49:b7:d0:14:b1:d3:99:43:e9:3f:3c:
                    96:09:bf:d5:51:1d:18:ab:fa:99:a9:1b:fd:07:cf:
                    a9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:8D:EB:8E:C3:E9:20:1B:D9:E4:D5:0D:44:46:46:13:DF:D9:7F:FB
            X509v3 Authority Key Identifier:
                keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:5b:65:31:ff:12:66:b0:c6:8d:d1:60:f2:19:44:df:56:4c:
         23:12:20:e2:c2:b2:4b:a7:19:9b:a8:46:24:ca:f4:f9:aa:2b:
         b3:07:83:6d:17:79:28:4a:bd:0a:c0:86:ec:7f:3b:4c:01:73:
         10:d9:55:28:89:d7:58:44:e5:4e:a1:a8:98:8d:cc:49:4b:15:
         b6:2f:96:eb:b5:77:30:58:c5:5b:46:34:85:63:92:f8:6a:42:
         2d:de:ef:fa:38:5c:54:b2:5d:19:a0:73:a9:89:06:5f:95:a6:
         30:f1:00:ff:c2:7f:0f:e2:0e:2a:94:4f:f0:fd:7c:86:9c:cb:
         6d:cd:42:b0:ac:60:18:5e:1f:2b:35:ba:50:02:5f:12:6d:86:
         85:1a:3c:5b:53:85:82:52:69:86:3d:66:88:4b:1d:4b:ff:51:
         33:63:8e:37:58:33:2e:3f:54:29:10:47:8a:3e:26:aa:8e:3c:
         54:41:8f:91:ec:73:5b:77:5c:b9:9d:c4:58:e6:43:8b:dd:45:
         32:3b:c3:3f:42:c1:e0:ac:f3:1d:9d:70:61:1d:65:95:ac:cf:
         da:e6:8e:c4:91:71:36:db:7c:f4:e2:95:00:db:72:6c:4d:ff:
         a6:9a:52:53:a0:4d:22:d3:d1:de:34:66:a1:52:1a:08:ae:1e:
         83:b6:c7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:13 2026 by rpki-client