Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
File:                     TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json)
Hash identifier:          2qVFtgipGBsiWtUljABNppraSvOkJLccQ1LEbMEKgEQ=
Subject key identifier:   4E:C2:6D:11:3D:12:7D:BE:BA:2B:DE:0E:20:8C:69:48:AD:C1:32:56
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Certificate issuer:       /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial:       019F92110E1ACBFD6C8193D555534CDF2A67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
Manifest number:          19D2
Signing time:             Fri 24 Jul 2026 03:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:18 +0000
Files and hashes:         1: DgOoOQQXCFOOiAboGyt3uJYGrX8.roa (hash: ttv6R+EWnpLDn0WbmgVmCLHJJB9im8Fg+Aestwf1Mxs=)
                          2: GlJSwTi2Fb0SaJjKLlqTY5SYTLI.roa (hash: Vhct9Hz5giaL8GbiD0lTZ+WsxND/eXGjAzq9jIuUyys=)
                          3: K_QMKdjdYGYO_K6jBRKDt9oPc-4.roa (hash: P33wrBWs2yJaqJ2LTURN/ha1UtuTGC+nJ+QNsu/z4d0=)
                          4: MPWMs16X005RVT9AI90Avga642Q.roa (hash: 2eWuFyAXp4gRIWiCS/+RGWaGItW02AaBBH51MmBYwwo=)
                          5: T89jwcM0aDv58J1uGaX_TI1vK9A.roa (hash: sG3D4TH7MLn7FU34onFGq465WOEDiHFkUuDacxXJOgg=)
                          6: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: YIeEFQF/RXv2gK701MVnP8X+epHwQXD+ReBEnmqxpLw=)
                          7: X72Ta738C-LIMFvd1WFhI8hgB0M.roa (hash: v6AOZV930gaDano00ylIK8U0A/h3KnVoUcoteShVPsI=)
                          8: XtIJQiHXMFZdv3to7hzaFPe58CM.roa (hash: 0ywEoOgBomhFv9aUHIMG9mVJhsMccKkONYTnJ5FZ8MI=)
                          9: axYuvA_IMKhkXuc6tRXhlKz3RRY.roa (hash: AwD9qt83+cS+6XicWrhYgc1AHug+bQVZTsrb4VEe+DQ=)
                          10: uPeS0JTvQdvC1wREAs91Vli5Rnw.roa (hash: cPJXBJyczJ2xoLaeFVUtLWLl9YC0lFU4+Af1eOE64/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:0e:1a:cb:fd:6c:81:93:d5:55:53:4c:df:2a:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
        Validity
            Not Before: Jul 24 03:00:18 2026 GMT
            Not After : Jul 25 03:00:18 2026 GMT
        Subject: CN=4ec26d113d127dbeba2bde0e208c6948adc13256
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:37:5b:34:be:3c:ca:f3:13:00:27:b5:e4:bf:
                    3a:ab:57:41:18:73:fd:ef:7d:7e:a0:cb:dd:29:70:
                    cf:98:c5:dd:0b:65:76:b3:b8:db:f4:ef:49:6f:b5:
                    83:b2:92:97:de:d1:90:10:c3:5f:5a:90:49:d7:c1:
                    db:24:3f:bd:c2:50:c9:d4:83:fc:85:27:8b:53:93:
                    9a:d6:8a:84:15:71:bb:6d:02:7b:01:4d:55:1f:f3:
                    b5:d8:37:15:fe:6e:2b:79:6d:5b:66:bc:0d:80:e0:
                    fb:2b:2a:bf:37:30:3a:4b:4f:92:89:43:75:c6:5d:
                    1c:3c:3e:39:9a:43:a3:24:45:cb:0c:60:aa:45:87:
                    58:91:e8:6d:4b:43:fe:0b:7a:2a:f0:fc:88:77:1b:
                    78:75:52:16:c1:36:05:c1:46:81:12:44:5c:d8:cd:
                    75:b7:0e:5a:15:81:d3:53:17:e2:11:c6:07:d0:0e:
                    a3:01:82:a3:e2:93:88:a6:d7:ba:a0:dd:ff:75:ad:
                    6f:fc:18:f5:17:40:fc:7a:94:5a:8f:b9:3e:1f:92:
                    a0:74:ee:9a:3e:f4:b3:b3:bd:bc:2c:6b:da:73:51:
                    c7:47:14:ba:ba:c0:d7:4b:7a:ba:ad:27:9a:6c:a0:
                    35:b8:af:82:33:f9:b4:9c:7c:fb:de:97:0f:81:85:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:C2:6D:11:3D:12:7D:BE:BA:2B:DE:0E:20:8C:69:48:AD:C1:32:56
            X509v3 Authority Key Identifier:
                keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:83:39:86:d3:ef:79:d0:28:be:30:6f:e0:33:db:4a:06:2d:
         a4:07:f9:7b:0a:1b:fe:ce:6a:1b:fd:73:82:6a:72:5f:21:8b:
         12:dd:f8:3a:8f:3b:c4:76:d4:e7:09:c1:1d:07:0c:8c:a8:8b:
         96:ca:90:df:bf:a8:ab:c4:a6:e5:a6:a1:d3:30:ab:8e:6e:16:
         9c:93:0c:a0:8b:c6:60:13:f2:b2:2a:0b:80:0b:1a:90:37:9b:
         22:e6:67:ae:80:98:0f:7e:6f:ca:75:1f:32:92:80:34:77:a8:
         d9:aa:cf:9c:8b:63:1d:34:e6:7b:26:5a:77:f4:0e:ad:dc:36:
         81:23:32:41:19:15:81:1a:02:8a:b3:2e:16:7e:2d:ff:72:39:
         df:7e:82:fc:e9:d7:46:17:67:b4:dd:76:84:b9:6e:c1:8d:ba:
         64:9b:78:58:04:c9:76:23:50:c4:75:29:35:fc:31:20:7e:f2:
         33:41:86:d9:ed:c1:64:42:37:f9:d6:d9:96:e8:0c:a9:d4:01:
         21:9c:ae:65:db:eb:8e:b5:12:9b:6c:c8:8d:10:aa:f1:29:31:
         b3:46:d7:c8:5e:70:7a:1c:b3:d5:e5:d2:8b:c1:03:24:11:e8:
         c9:72:2a:92:45:78:55:4f:ae:24:c1:e8:4c:1c:93:35:cc:92:
         2c:3c:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:35:29 2026 by rpki-client