Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
File:                     33jsawuWmqIijxJe2qQZus278ls.mft (raw, json)
Hash identifier:          WOsQlCjqyoqA6M1FxlfTCRD225W2D3Zy/yp5lg4UtGk=
Subject key identifier:   14:9F:9D:AD:64:DC:E3:77:1E:02:A6:EC:B8:BC:30:9D:97:BD:33:CD
Authority key identifier: DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B
Certificate issuer:       /CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
Certificate serial:       019F90C7D1D17A9EAA25F0BC17B4112D8B75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 21:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:42 +0000
Files and hashes:         1: 33jsawuWmqIijxJe2qQZus278ls.crl (hash: 76WmiuoVByta3zjnrxgzBRi3SxW1DCtUvAmy5xxZHkk=)
                          2: VtZiDTehXWbLuvByNpvV6poX8NU.roa (hash: qzmhlPWDE6wNQJNL/swjxQrHyVqxNbrefZdH2uAfmPk=)
                          3: fK4x-x6caLzjBJ6h7UqJVWU9HNs.roa (hash: TEAA5N2BX6e88dGktvlV8qoZNHbrtanHoBnJrUnnrxo=)
                          4: g_q3_hFJu6HXUUHSAWggSZhKtYc.roa (hash: CYiIktGrTnexqrcegKNOYzL4d50/QWocPqLENQVDSYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:d1:d1:7a:9e:aa:25:f0:bc:17:b4:11:2d:8b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df78ec6b0b969aa2228f125edaa419bacdbbf25b
        Validity
            Not Before: Jul 23 21:00:42 2026 GMT
            Not After : Jul 24 21:00:42 2026 GMT
        Subject: CN=149f9dad64dce3771e02a6ecb8bc309d97bd33cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:0e:df:30:cf:72:9d:50:6f:5e:07:76:ca:d8:
                    32:d1:d2:0c:1a:26:61:b7:0e:2c:a8:ad:0a:d5:a4:
                    45:9e:48:61:b7:5b:95:88:58:5d:27:6a:40:9f:19:
                    df:7b:48:ff:c0:2b:91:bc:6e:1c:2a:ad:5c:dc:aa:
                    82:34:8c:61:30:d6:2e:d8:50:6b:e6:ff:d9:d7:17:
                    33:66:c2:92:52:99:54:db:67:c1:f3:40:02:0b:49:
                    da:b2:4c:8d:3b:67:2a:6f:06:15:80:35:a4:c7:93:
                    a8:fa:cd:1a:a3:cd:94:ae:8b:00:da:c9:c2:38:65:
                    72:72:b4:95:ea:a2:20:79:4a:b8:54:91:11:e0:67:
                    cd:72:4c:8c:18:d1:09:95:2e:32:62:4d:d8:f2:89:
                    ec:3e:cc:21:a2:fa:c3:b3:4e:36:81:b1:ae:83:3f:
                    d2:d6:e1:7c:9f:04:bf:2c:f5:01:66:ad:ec:c5:b5:
                    07:64:9f:87:1d:eb:4d:e3:31:3d:4c:e8:af:96:eb:
                    a4:04:31:0f:ed:f8:1f:87:8b:20:bd:d9:15:79:c1:
                    bb:12:9a:fc:d0:2a:6e:2b:9e:c0:b9:0e:08:a9:7b:
                    c7:f6:eb:be:d7:d6:ee:cc:9f:5a:ac:1f:74:49:66:
                    47:64:53:ca:44:ba:2e:b9:3b:84:7a:f1:22:fc:3a:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9F:9D:AD:64:DC:E3:77:1E:02:A6:EC:B8:BC:30:9D:97:BD:33:CD
            X509v3 Authority Key Identifier:
                keyid:DF:78:EC:6B:0B:96:9A:A2:22:8F:12:5E:DA:A4:19:BA:CD:BB:F2:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33jsawuWmqIijxJe2qQZus278ls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/dbb043-377b-4c4b-a0a2-7e8c5526de7e/1/33jsawuWmqIijxJe2qQZus278ls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:51:43:ab:d3:00:4c:06:c9:a9:90:de:8a:11:33:73:f8:ad:
         fc:69:5e:0e:ca:11:ed:5a:ac:39:02:a7:38:57:95:20:80:87:
         b1:10:d2:ff:1e:18:1d:0c:fc:4d:87:a2:94:22:c8:87:81:6f:
         1e:1a:6e:cf:48:32:88:72:ba:85:82:26:d2:cf:ca:28:02:ad:
         e2:11:90:d6:be:39:b2:4c:82:59:21:52:21:5e:d1:7a:b3:d0:
         29:2a:df:f2:52:f4:f0:10:17:8a:2b:b2:9f:08:6d:c5:63:11:
         f1:5a:e7:cc:63:64:aa:33:c4:ca:0b:86:91:e4:7c:3a:77:ee:
         4e:37:cf:f7:cc:95:2e:68:af:e7:ca:f8:b6:36:03:9d:8a:c6:
         12:55:e4:8f:bc:3a:4d:45:08:19:a4:c3:9e:8b:26:9f:51:f9:
         04:1f:4d:da:07:eb:95:b2:2a:3b:a6:74:b1:26:0e:23:f6:01:
         ac:a8:a1:2e:02:74:13:d9:20:90:5d:8b:b9:a5:0e:d8:69:2d:
         71:80:cb:11:e8:98:a8:ef:f3:7d:aa:ea:f2:35:2a:1f:f2:ac:
         ef:fe:7f:88:0b:a5:db:68:98:2e:4a:6c:8c:4a:0f:bf:03:84:
         45:b8:1b:d2:a8:2c:8b:e9:20:28:ab:97:48:23:37:93:43:12:
         ef:2f:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:39:42 2026 by rpki-client