Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
File:                     dADVATwShSJCNDCTy_UUjU6uqvk.mft (raw, json)
Hash identifier:          1PZx1/XU0ORavIp1sW+nwgBIBeIcxvtHZrGU0fo7ouM=
Subject key identifier:   83:7B:A1:BB:CD:42:50:66:4F:33:4E:ED:3A:27:31:66:A3:46:ED:F6
Authority key identifier: 74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9
Certificate issuer:       /CN=7400d5013c12852242343093cbf5148d4eaeaaf9
Certificate serial:       019F90FF0898295E9468C1B5A9DC3529E67B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
Manifest number:          19D0
Signing time:             Thu 23 Jul 2026 22:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:00 +0000
Files and hashes:         1: BJ7HazHaGccfvxTQc_w6SKWhZEA.roa (hash: Pl+4ZXeFDCtsyZiimkR12UecWLcE8XYpnlEtA132eQ4=)
                          2: OkIPJfQ3ucjtNqmllyrXBPtOzcY.roa (hash: +8DQv1DEa2PzagZPd8ytxiVCfNd5z5SM1U3gJ24YFyI=)
                          3: ZadCjVxR3AIOm7k0nj6w8KvV6h0.roa (hash: RXuAVNn7DereOcaWIChil7CPM5HE7+AP2XZkUq1hg+s=)
                          4: dADVATwShSJCNDCTy_UUjU6uqvk.crl (hash: wT4fd6EV4fg8zoTpm7x6n76aR7vEaCL0UOU7c9W4ZeA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:08:98:29:5e:94:68:c1:b5:a9:dc:35:29:e6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7400d5013c12852242343093cbf5148d4eaeaaf9
        Validity
            Not Before: Jul 23 22:01:00 2026 GMT
            Not After : Jul 24 22:01:00 2026 GMT
        Subject: CN=837ba1bbcd4250664f334eed3a273166a346edf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:84:5e:78:41:14:dd:85:64:99:98:85:6e:
                    6d:16:c8:a8:cc:3d:bb:06:19:92:c7:28:76:d7:0a:
                    4f:10:23:bc:8f:48:6e:0e:db:ab:23:b8:c8:89:ae:
                    1d:0f:7d:9d:b5:05:37:c3:00:cc:ec:77:dd:09:95:
                    15:90:0f:8d:4b:2d:fa:fd:dc:0c:ab:7a:17:30:f9:
                    87:89:ce:7d:53:a8:71:64:c9:5c:82:05:c2:9b:40:
                    e7:68:e9:cf:74:cc:cf:d3:a8:dc:47:40:cc:3f:db:
                    f3:2e:bb:30:e8:df:60:67:58:d9:86:95:4a:9f:53:
                    d1:c0:88:7c:93:5e:9b:af:6a:65:5c:1b:b2:96:c1:
                    c3:d7:70:69:06:be:97:de:cf:85:35:af:9b:d4:33:
                    60:7c:bb:10:ed:a7:7a:3a:89:57:88:26:d0:8f:a0:
                    2f:06:c0:8f:9e:83:08:b4:85:bf:5b:46:a4:e6:a6:
                    86:3e:cc:d5:2c:08:e3:e1:84:5d:f3:fa:4c:5c:70:
                    54:42:2c:e3:dc:8d:77:ac:bb:ac:25:8a:15:9a:1e:
                    1c:e5:c1:58:d9:01:80:4a:09:8d:b7:bf:74:86:74:
                    0d:e0:79:2d:57:37:0a:2c:cb:f6:55:6b:3c:42:33:
                    d1:ff:9e:72:02:92:03:36:fe:9d:f4:29:c4:aa:55:
                    16:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7B:A1:BB:CD:42:50:66:4F:33:4E:ED:3A:27:31:66:A3:46:ED:F6
            X509v3 Authority Key Identifier:
                keyid:74:00:D5:01:3C:12:85:22:42:34:30:93:CB:F5:14:8D:4E:AE:AA:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dADVATwShSJCNDCTy_UUjU6uqvk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/95d71d-f41b-4171-8350-e0892a28aac9/1/dADVATwShSJCNDCTy_UUjU6uqvk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:12:3f:c9:e7:55:15:90:2e:df:f2:4f:88:fe:91:59:80:52:
         b2:c2:b7:8f:44:d3:4b:c3:cd:c6:2f:ec:81:28:15:d7:8c:94:
         15:32:fb:65:49:a3:64:5c:2e:9b:11:64:81:b5:32:6d:d0:e9:
         9b:95:2e:eb:9f:52:70:9d:46:1d:a4:05:fa:90:9e:9d:1f:31:
         69:70:7e:63:1a:84:ca:84:1d:fc:af:06:b2:9d:7d:fc:b0:a0:
         a2:49:41:d7:70:82:b9:d7:85:cd:96:3a:e4:7a:c0:9b:f7:7c:
         31:e8:fb:d6:95:38:fe:54:9f:30:54:1b:a0:37:dc:d7:50:60:
         7c:86:74:5d:2d:5c:b1:08:57:7e:6c:d5:56:33:e9:e3:1a:e2:
         ec:da:eb:9d:fd:25:3d:26:5a:05:f7:5f:65:02:a9:ec:52:18:
         5d:09:82:b1:1a:47:1c:78:32:ef:b4:22:2a:3c:71:61:c3:da:
         f2:b9:20:60:21:f6:f7:17:b9:4c:6c:d9:87:18:a0:81:77:10:
         36:14:17:80:ae:80:3d:41:c2:24:9f:e7:2d:e3:98:38:d6:87:
         69:3e:61:2a:4b:d1:60:5d:bd:4f:38:0b:b6:40:45:d7:d4:9c:
         76:11:19:69:7c:b5:3c:75:ed:4e:7a:ba:b6:cc:1a:b4:a7:60:
         02:f0:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:43:31 2026 by rpki-client