Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
File:                     mUqt73Cb43uczULMK4xzLDlxUPo.mft (raw, json)
Hash identifier:          LqFxibBumLuZqTcYszIfHgRmchAe5knoktjHpatwShU=
Subject key identifier:   AA:29:D3:29:92:B1:8C:E3:BC:5F:FD:71:0C:EF:C8:CD:95:40:0D:CC
Authority key identifier: 99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA
Certificate issuer:       /CN=994aadef709be37b9ccd42cc2b8c732c397150fa
Certificate serial:       019F94DC18468ADA86C3A0F3AC5B24DA7697
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
Manifest number:          19AC
Signing time:             Fri 24 Jul 2026 16:01:19 +0000
Manifest this update:     Fri 24 Jul 2026 16:01:19 +0000
Manifest next update:     Sat 25 Jul 2026 16:01:19 +0000
Files and hashes:         1: alIVB3DRNeac3-KBgtiTOAlVqYg.roa (hash: 5rWQXWfQK4PnnDUyWE3w/iefHP9zcHf0QTSdTcrqmsE=)
                          2: mUqt73Cb43uczULMK4xzLDlxUPo.crl (hash: gFaXYWPKkpSO8W6eRjq6e44q4x7lwzuV+KUTZUzwIOg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:dc:18:46:8a:da:86:c3:a0:f3:ac:5b:24:da:76:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994aadef709be37b9ccd42cc2b8c732c397150fa
        Validity
            Not Before: Jul 24 16:01:19 2026 GMT
            Not After : Jul 25 16:01:19 2026 GMT
        Subject: CN=aa29d32992b18ce3bc5ffd710cefc8cd95400dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0f:d9:d1:1e:28:6d:b1:e0:2d:48:76:83:73:
                    88:2a:e2:f3:70:0d:fb:80:e4:3d:59:0f:36:b2:0d:
                    96:46:ed:c7:b8:56:9f:6e:ea:75:50:49:8c:63:8d:
                    18:05:31:ff:e7:6f:19:23:54:4d:50:38:02:f9:2f:
                    7e:80:3e:6b:d4:e1:2d:42:13:a7:c8:3e:c0:44:ed:
                    d6:9d:60:70:e3:16:04:c7:24:61:b2:11:0d:40:38:
                    5e:1f:8e:f2:c3:57:9f:98:13:50:e7:c3:62:2f:36:
                    37:0f:49:99:9e:44:65:08:ab:17:0f:b8:76:06:d4:
                    c9:2f:d0:0e:06:de:ba:ac:d6:08:e6:66:68:44:00:
                    04:c7:0a:81:28:a8:63:82:6c:c5:a4:77:d8:93:c7:
                    8b:bd:3c:71:af:91:6c:0d:bd:07:6f:2c:fa:94:c7:
                    5f:71:86:37:45:50:51:fb:f7:ac:c7:55:dd:18:42:
                    23:7f:29:5d:f5:2c:a3:fa:dd:45:be:0f:e4:11:16:
                    d8:40:14:7a:1f:46:a4:92:48:24:af:5c:a4:f2:65:
                    6a:94:20:48:71:08:fa:e5:0b:40:d7:4a:15:20:2f:
                    a1:8a:1d:13:e9:28:74:ef:2b:bb:8d:47:77:8c:86:
                    7d:2b:d9:2d:b4:24:67:fc:9c:46:0d:75:f6:a4:c7:
                    2b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:29:D3:29:92:B1:8C:E3:BC:5F:FD:71:0C:EF:C8:CD:95:40:0D:CC
            X509v3 Authority Key Identifier:
                keyid:99:4A:AD:EF:70:9B:E3:7B:9C:CD:42:CC:2B:8C:73:2C:39:71:50:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUqt73Cb43uczULMK4xzLDlxUPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/f08716-4d2a-46ed-bded-af3e7d42968d/1/mUqt73Cb43uczULMK4xzLDlxUPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:94:50:f8:b0:02:e0:a3:55:c9:d1:46:8a:92:a5:a6:32:29:
         2e:3e:5c:4b:08:25:e2:62:bb:40:fd:0d:50:19:db:00:61:8e:
         f0:60:33:81:ae:6a:13:6d:f8:4f:6f:11:cd:48:1b:7a:15:c7:
         c4:9e:1a:31:de:9d:10:a7:68:f4:84:a2:37:b6:89:3c:d5:0e:
         a9:f6:02:57:15:68:37:cc:d3:96:8b:af:33:41:96:08:35:9c:
         1d:a4:fe:39:e2:49:25:aa:12:ce:5d:2a:b2:5d:8c:89:2b:e8:
         2d:bd:ab:12:e1:78:36:ea:c8:6d:2e:e9:51:a9:85:f7:1d:cb:
         89:fa:33:54:87:e7:63:ab:d3:bf:9a:74:b3:a7:52:62:95:c9:
         80:31:ef:9d:3b:26:d4:3a:12:15:6d:5f:e8:48:d2:53:1c:54:
         53:a8:a4:1c:13:79:4c:0f:4c:ad:37:b7:db:02:e3:c6:29:e5:
         e2:01:ec:92:42:de:63:2f:56:bd:0f:03:28:32:f3:66:da:14:
         63:f2:51:e0:83:b3:d6:60:4e:a1:24:71:88:be:7f:11:cc:5b:
         8b:b0:66:55:a7:b4:ba:ce:c2:c8:9f:c6:93:87:1d:14:4d:9c:
         ba:38:7c:9a:1d:3f:fc:fe:84:d1:1a:4b:df:0b:77:0b:f1:24:
         de:7b:5f:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:30 2026 by rpki-client