Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          MvxzKUZycobpiJgoK0aUWbZbCsTXdgVh2qSJn8K5Dzs=
Subject key identifier:   E5:81:EB:B8:18:58:15:91:6B:41:BB:97:D4:7F:E6:0D:E3:F3:FF:06
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       019F8F10494C3DDAB371033B910C4F0284B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          19FC
Signing time:             Thu 23 Jul 2026 13:00:36 +0000
Manifest this update:     Thu 23 Jul 2026 13:00:36 +0000
Manifest next update:     Fri 24 Jul 2026 13:00:36 +0000
Files and hashes:         1: 4rHkukJZlmv4as-4xMu4r_3jmNE.roa (hash: +bpTdQ8MOcqEZXfHNxSdTdJOkYSVdHAINcyN0oTieLw=)
                          2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: b+NlBzI+VH46bMRc0XY+j+TYNNrif+HCvCz4ia4g5Ig=)
                          3: Ecc1uLkv62Npv2ZtykPIlz8fvJ4.roa (hash: PlWjmtPxw4OkvYH5bNtiXs3BOmA0kF3dQLpadBG2s+E=)
                          4: GaY0PBVBeo4KpiNFKZ9BeK4puOg.roa (hash: kSV2htK/TB9FGgHOzLvBWeHTLFTLf67Ynu1IuSCMkQQ=)
                          5: cjcmiOtDDlTjyYQyKCJamvURnkg.roa (hash: kI1yDYXFOnMe/2BdFboj81gzmTgi8ptrjeCtHHILCuc=)
                          6: l2FIOzPFvXObRwUNiGKUwkx8yng.roa (hash: U27wT6U0NEvNHvjZg6ZUfLZqVxl9USYItoeoVAzNuao=)
                          7: wdNyk0cj7ZXHBOyRtNKSRHIMVM4.roa (hash: oARchr96uMH1VEdClz/RFIsJnl10GfEYjwsXH9UCt0s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:49:4c:3d:da:b3:71:03:3b:91:0c:4f:02:84:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Jul 23 13:00:36 2026 GMT
            Not After : Jul 24 13:00:36 2026 GMT
        Subject: CN=e581ebb8185815916b41bb97d47fe60de3f3ff06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:15:88:e0:a8:17:ab:c0:65:38:47:4f:54:
                    f4:7c:e8:91:46:71:02:44:eb:59:5c:21:fa:d8:bd:
                    56:04:bb:dc:29:55:d6:12:09:39:78:dd:61:e6:90:
                    63:b3:f2:7b:ee:4b:77:e2:4a:6d:64:6b:20:54:46:
                    65:af:42:8a:a3:24:28:bc:e0:18:34:2f:2e:82:be:
                    35:0a:db:f8:a1:17:97:ff:fa:6a:da:60:cb:1f:1b:
                    bf:b3:37:71:98:5c:20:84:a1:a2:fb:74:4a:cb:9e:
                    42:91:e6:88:bb:72:6e:16:23:08:22:12:52:82:9c:
                    d4:e1:3c:48:be:51:1d:d8:4b:94:87:23:d4:51:13:
                    f1:e4:f3:57:79:9d:bd:09:81:05:c2:d7:86:29:56:
                    73:b2:5a:82:07:dd:25:bd:2d:b2:b4:fe:d1:92:72:
                    cb:cd:48:ea:5f:a8:f2:e9:d7:4f:3a:88:9c:9a:fd:
                    be:59:62:47:71:94:fb:eb:23:3a:01:bd:78:19:60:
                    0e:57:13:7e:bf:88:06:64:29:53:09:aa:3f:65:f1:
                    d2:d2:78:15:74:6a:b9:1c:63:fd:00:2d:1b:98:2d:
                    c8:5b:c3:07:0e:62:cd:13:ba:2e:72:1a:71:05:9d:
                    5a:fd:dc:64:4f:de:26:3e:e5:01:e3:d9:97:81:5a:
                    e0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:81:EB:B8:18:58:15:91:6B:41:BB:97:D4:7F:E6:0D:E3:F3:FF:06
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:9e:db:bf:79:4b:13:27:2d:94:16:e5:8f:83:19:dc:a4:d6:
         00:d9:dc:7d:5a:4e:d2:cc:a2:97:00:6b:c7:75:85:ba:0a:15:
         38:d1:9f:2c:68:bb:72:2c:03:d7:73:f7:89:da:37:a2:72:6e:
         b4:a2:b3:33:ab:09:44:23:be:48:3f:89:38:41:9e:2a:1e:c5:
         2e:64:fa:ab:f7:21:a2:c9:3c:78:10:9b:e3:96:dc:4b:81:79:
         58:9c:e8:3f:96:cc:06:dc:a8:5c:8b:99:7c:bb:c8:07:37:06:
         9a:f4:56:8b:36:98:60:16:1b:d4:3a:6d:0d:4a:c6:c1:25:ae:
         40:e3:0d:c9:38:cf:73:a8:9a:03:1d:d6:c9:6e:4b:02:7a:2d:
         d4:1b:b6:0b:d7:ee:df:57:e3:23:d6:d4:ec:92:f9:d6:fb:c5:
         fa:14:45:da:af:2d:ed:82:6f:78:3c:40:c2:2d:ef:18:dc:1d:
         ce:15:80:8f:24:2c:9c:ff:59:0d:97:0c:03:d3:6f:68:fd:f4:
         19:bb:89:f8:bc:a1:80:79:3e:9c:bd:62:e0:0c:7e:38:91:80:
         69:55:b0:3f:f3:3c:3c:3b:4f:fd:c4:c5:ab:bf:c6:42:f1:23:
         db:22:94:6a:c1:b1:d7:23:23:cc:09:84:20:9e:c4:82:5d:60:
         f9:cc:b5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:20:01 2026 by rpki-client