Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
File:                     A39TL6Ji9ca9lhW8151u3UPy4HU.mft (raw, json)
Hash identifier:          CwS84CLbrlo5WMjwoQat78mgUlRlRf2/Epmp7cQLlw8=
Subject key identifier:   56:52:96:C3:CA:DA:3E:70:DD:53:39:01:83:95:16:F3:9A:05:ED:8F
Authority key identifier: 03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75
Certificate issuer:       /CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
Certificate serial:       019F90C7B2FE877EDE5C2184801F1FB57E18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 21:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:34 +0000
Files and hashes:         1: 0kDLFicUYCSnk5qezsAnlqD_YsQ.roa (hash: nPUI+tPRgC8/2WDdTR0OhIepUfEAFxE9m9YTijKjEm8=)
                          2: 5S_7thf2DaNAtWCpIaM3S8JGyIw.roa (hash: gFO7mmA7nFE7H8OIcfxRMIamOyG5pl0gNHLu/ghYBzU=)
                          3: A39TL6Ji9ca9lhW8151u3UPy4HU.crl (hash: hUzEf8qQ/wvB/K2/ZhMn0rJC/PjkRyMTWJM47NDrpjQ=)
                          4: okyJ_dyqGcdnFwHJe7BtYHyXka8.roa (hash: 4dVv/6YLlqIKpJZjxm1+2Z9rbJ0osG+l17eURfhyO4s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:b2:fe:87:7e:de:5c:21:84:80:1f:1f:b5:7e:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=037f532fa262f5c6bd9615bcd79d6edd43f2e075
        Validity
            Not Before: Jul 23 21:00:34 2026 GMT
            Not After : Jul 24 21:00:34 2026 GMT
        Subject: CN=565296c3cada3e70dd533901839516f39a05ed8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:5f:07:8f:c1:24:cd:5e:53:02:6b:56:dd:bc:
                    ca:a9:2a:c0:03:8f:18:95:20:f4:c6:36:43:b3:f4:
                    16:30:b1:21:04:68:14:30:31:87:ec:1d:cf:3b:a3:
                    dc:91:28:d4:9a:a5:43:04:d1:27:9d:af:34:1a:26:
                    da:fd:fa:1c:69:c6:39:a8:48:a6:45:bf:6d:2e:10:
                    82:39:a3:a2:0f:18:0c:8a:f0:b4:5a:92:6b:6e:1a:
                    6c:39:79:a9:2d:0d:af:c1:89:53:6e:b6:57:e2:00:
                    3a:47:4d:f4:ff:c2:f1:ed:9e:d0:29:d7:f9:b8:af:
                    17:6d:4a:d3:49:79:19:0b:a0:b0:a0:f1:36:f9:8a:
                    31:cd:c3:81:94:43:44:bd:34:4e:da:ae:9f:13:b3:
                    18:c2:23:d1:7e:aa:9c:5d:68:7e:86:31:d6:c1:60:
                    57:54:10:32:32:a5:5e:00:6d:56:a6:d8:54:ac:51:
                    e4:09:34:84:5d:f3:79:0a:64:26:dc:3f:e5:d1:b5:
                    cd:fb:e1:b2:b5:8c:65:8d:93:d3:27:e9:a3:9d:1b:
                    f7:89:4d:d4:fd:5a:79:06:b8:06:e7:5e:1c:32:ae:
                    6e:99:19:41:6c:9d:cb:d7:92:c8:83:34:d5:3c:17:
                    f6:1f:56:51:af:30:11:c3:1e:4f:4c:09:6d:98:c8:
                    7c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:52:96:C3:CA:DA:3E:70:DD:53:39:01:83:95:16:F3:9A:05:ED:8F
            X509v3 Authority Key Identifier:
                keyid:03:7F:53:2F:A2:62:F5:C6:BD:96:15:BC:D7:9D:6E:DD:43:F2:E0:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A39TL6Ji9ca9lhW8151u3UPy4HU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/08e57c-d716-4705-9561-03adfbc68c91/1/A39TL6Ji9ca9lhW8151u3UPy4HU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:89:a2:89:e1:dd:1b:ed:f6:56:71:df:1d:65:60:39:70:8d:
         c1:4d:de:e4:08:6b:0f:21:20:fa:28:cc:1b:90:9b:6e:eb:f8:
         d1:b6:2d:94:be:c0:3f:12:c7:70:a8:ff:85:22:c4:94:41:ea:
         b0:a0:d4:73:ac:65:41:80:cf:10:ba:1e:8e:4d:36:23:36:9c:
         6d:a3:a4:ea:b1:be:49:6b:e4:2b:7d:c1:1c:3f:35:e5:f7:90:
         5e:e0:e3:f8:a9:dc:c9:82:a8:7e:e5:a3:ab:1b:9b:73:8e:af:
         10:07:a0:91:a7:b2:86:14:73:98:85:13:ec:99:e4:8e:c9:a2:
         33:dd:6f:01:3a:ff:70:f1:ce:3b:3a:01:5c:9b:1f:ad:cb:40:
         c6:82:89:ec:26:2c:c2:60:e3:c6:e7:b6:aa:f1:4f:91:5c:80:
         92:40:0b:4d:b4:f6:7e:a3:09:e2:94:e9:df:e0:49:4e:68:d2:
         3e:e8:b8:f6:78:1f:cd:8c:a9:38:9c:85:03:a5:d8:88:55:59:
         92:7e:74:08:91:b2:6c:12:b5:a3:4a:40:cc:41:55:b4:a9:80:
         07:ea:2e:eb:df:81:08:61:b6:22:d2:32:eb:f8:c3:d2:7d:91:
         ff:d2:5e:ef:82:06:93:18:ac:5b:4f:45:72:1e:f8:6e:98:f9:
         0c:bb:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:42:07 2026 by rpki-client