Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
File:                     28FEzhVO7p27NWLOTNMigzhkEzM.mft (raw, json)
Hash identifier:          dzInsVURI3pLP7lgOU6mS2FQXXAZGsYIqRKl2Jsp9Zg=
Subject key identifier:   66:ED:F5:54:AF:AB:4E:86:58:31:4C:EF:C4:ED:7D:ED:36:67:12:4A
Authority key identifier: DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33
Certificate issuer:       /CN=dbc144ce154eee9dbb3562ce4cd3228338641333
Certificate serial:       019F8F7F9D2E8C687D86FD269A1DF4EEDC13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
Manifest number:          19B1
Signing time:             Thu 23 Jul 2026 15:02:12 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:12 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:12 +0000
Files and hashes:         1: 28FEzhVO7p27NWLOTNMigzhkEzM.crl (hash: Gng0ICLwQzRyq9x6oN3HjCv4z7aPT+8qw1oEao2B/3o=)
                          2: DP7T_q2dH40UAoEeaOyilRTarIc.roa (hash: eI6A0wd8tTUmEmNVJN3J+AgyOo9pOZ6DcargfGd5ggE=)
                          3: sxE81xLDEQT0P-TPsy-WofGvQHg.roa (hash: DGA+4dzkewtJxSyfNRDqxt+xT7jcUam8PPEoRnh0nXE=)
                          4: zkEx11XO93N85vwrTCOs3PDbZd0.roa (hash: Qdd6ijsBLwMFkDU5X4d6hXWxnnXx+SCnTnhqOiOzcAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:9d:2e:8c:68:7d:86:fd:26:9a:1d:f4:ee:dc:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbc144ce154eee9dbb3562ce4cd3228338641333
        Validity
            Not Before: Jul 23 15:02:12 2026 GMT
            Not After : Jul 24 15:02:12 2026 GMT
        Subject: CN=66edf554afab4e8658314cefc4ed7ded3667124a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:36:b0:96:58:0b:1a:25:fa:fc:ee:92:c5:36:
                    31:f5:bb:35:a3:a4:08:ef:77:68:36:8f:02:ea:e4:
                    40:0c:9b:ef:28:14:fb:d7:f0:f7:55:2b:0a:6d:0e:
                    b8:cc:39:c8:86:93:c3:04:99:a4:37:57:ed:69:88:
                    95:7c:a3:06:8d:0e:c0:c5:25:15:72:c0:26:6f:ea:
                    f3:33:00:9c:b1:5a:17:5c:2a:ad:81:0c:4f:0a:14:
                    ee:72:a4:4d:a5:20:6f:d9:2c:eb:80:26:5b:cb:16:
                    78:e3:32:ea:74:8e:5f:3e:57:6f:b6:6c:91:95:38:
                    c5:5c:71:f7:bb:5a:37:2a:86:2e:09:1c:49:8a:1f:
                    9b:b7:33:51:ed:65:fb:7b:5e:c3:63:39:e8:d7:f7:
                    8b:62:12:ee:3f:52:c8:22:7f:f2:4e:69:c0:25:d5:
                    7d:66:9f:a6:78:13:8b:4b:b7:b1:6d:1e:43:7c:85:
                    a0:91:fa:81:4a:ff:0a:78:26:0a:7c:05:28:1b:46:
                    37:81:a0:f2:72:bb:d7:16:c9:32:9a:9f:2b:e8:eb:
                    33:d7:70:66:c7:bf:71:be:45:17:11:cd:49:73:e0:
                    a6:69:92:de:16:10:bb:a0:76:1c:df:5d:aa:d7:e8:
                    31:82:c0:0d:fe:bd:82:39:a5:fe:a9:fc:f7:32:a4:
                    21:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:ED:F5:54:AF:AB:4E:86:58:31:4C:EF:C4:ED:7D:ED:36:67:12:4A
            X509v3 Authority Key Identifier:
                keyid:DB:C1:44:CE:15:4E:EE:9D:BB:35:62:CE:4C:D3:22:83:38:64:13:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/28FEzhVO7p27NWLOTNMigzhkEzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/a22cfa-01f3-4f12-b6fd-4894f88beddc/1/28FEzhVO7p27NWLOTNMigzhkEzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:8a:d1:85:37:a9:a0:b8:08:bc:6a:0d:b7:30:3e:5c:4c:f8:
         73:33:c2:3c:b1:33:f9:51:bb:d7:ad:b3:5a:e0:82:52:e3:ec:
         fb:63:52:bc:a2:a7:44:7c:74:55:ef:26:b6:4a:37:0e:e9:8e:
         3f:df:7d:06:cc:fc:af:50:49:b5:47:c5:c1:b4:98:fd:f7:22:
         dd:17:e8:a9:28:71:b8:59:7d:80:ed:ea:04:18:eb:b4:1c:1f:
         55:03:25:b9:89:81:9c:07:95:20:a1:50:ed:9c:26:ed:62:e2:
         ab:65:77:95:ea:fc:e3:f1:7a:9a:7c:89:32:49:53:94:c1:eb:
         73:cc:51:78:ba:00:bc:ec:ca:20:52:51:3f:d1:14:78:f1:a3:
         e0:63:a7:1f:ea:21:8f:e4:46:07:d3:f0:b7:82:94:4f:56:42:
         86:89:e3:3e:26:02:b6:16:f8:72:94:2b:03:87:db:98:d1:74:
         4c:92:4a:b4:f6:a0:7a:4c:42:a9:9d:14:0b:83:15:09:73:bc:
         64:d6:43:eb:fb:0b:da:4c:cd:a7:48:51:70:77:ca:5d:d1:c4:
         fd:ca:b6:0d:dd:a8:45:55:ab:60:04:39:e6:d3:07:0c:de:0e:
         0f:e7:d5:90:4d:a8:19:04:a2:3a:79:ae:a1:a2:55:3b:8d:17:
         b3:ae:65:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:53:38 2026 by rpki-client