Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
File:                     1-3nCbzFXU0UVnIQO0nioeKklZhU.mft (raw, json)
Hash identifier:          MZL2maGOWm4nRH2jtsbBz+kmfvIk26QPGV8F7yQ+lMc=
Subject key identifier:   63:22:F7:99:2E:BF:58:06:C6:CA:C8:FF:D4:CE:FE:96:74:9B:5A:C0
Authority key identifier: FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15
Certificate issuer:       /CN=fb79c26f31575345159c840ed278a878a9256615
Certificate serial:       019F90908F85ACE1DE4E907605B92B09B1A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
Manifest number:          19CF
Signing time:             Thu 23 Jul 2026 20:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:20 +0000
Files and hashes:         1: 1-3nCbzFXU0UVnIQO0nioeKklZhU.crl (hash: K/urXjyQfjCH8wmoBfs+vcZyumT9rUq5VVUYxKO+4Yg=)
                          2: 5yW1J3G-SRoAia8ARctoGLWzIYc.roa (hash: X09RAO+Iokxl6DD0+XywUvUr2qss8psh9a8kzzRJ8CA=)
                          3: BuRUOF7mMOX9LaFv1V3QhA-5u7w.roa (hash: Jk587wQ/RfxSBQigyNcTI8jkJxFSiSHzC0v2gfYkHEo=)
                          4: KfwY1j22Ax4UScL4SqchoS6Z8Bo.roa (hash: lfrpyk1o29ncs3GeyAV8veuvMaUhtX2qKzwSKrcBWAo=)
                          5: KnVR_9VrWrMYjNqmZyI3AyOyCfQ.roa (hash: smZSmUpd6ByBf72zK69AbaDDhM3Jk9l+boOyjSHXOmU=)
                          6: RIk8mcO0XUHeY1yE3bLpyK41RDc.roa (hash: 7ot83Q70csEm6+GFN6TqnACE6Bsk3KoPtGK0mmsksq0=)
                          7: UCM287_6vaVTmxRbaeLhFXJu-zI.roa (hash: Dd8R2yXONvmf0J4ib+h5UGhtmlZ7wExXG0YcP5XCyOQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:8f:85:ac:e1:de:4e:90:76:05:b9:2b:09:b1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb79c26f31575345159c840ed278a878a9256615
        Validity
            Not Before: Jul 23 20:00:20 2026 GMT
            Not After : Jul 24 20:00:20 2026 GMT
        Subject: CN=6322f7992ebf5806c6cac8ffd4cefe96749b5ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a5:16:51:f9:72:09:6e:99:81:32:7c:a6:06:
                    6c:4a:39:7c:a1:c7:d7:78:42:fe:c9:64:4a:85:44:
                    6f:21:d2:61:97:8e:6c:32:d5:a2:64:ad:b1:80:a6:
                    28:1c:80:49:d6:2d:b0:98:18:d3:7e:51:8c:3f:59:
                    91:72:ab:0c:04:1a:75:56:ec:ea:69:c9:0e:b6:0c:
                    f2:e3:18:c4:93:3a:7d:01:f9:04:0d:bb:21:c9:34:
                    1f:03:f2:4d:8f:a9:98:3d:07:22:b3:a0:78:ea:7d:
                    3e:56:97:ad:3b:32:be:1e:dd:df:ba:88:f6:dc:1e:
                    08:4e:ee:85:9c:13:72:12:72:ee:a0:46:31:35:f3:
                    c9:61:d9:f1:1c:82:1d:ac:75:84:fd:5b:9e:d3:01:
                    d6:41:d6:79:6b:07:c1:1e:a5:27:16:5e:c6:0f:ee:
                    dc:8f:cb:8a:51:59:9f:15:26:f4:b4:28:98:14:bd:
                    6d:b3:43:74:b5:3a:98:9e:11:cb:2b:ca:26:e6:24:
                    ed:a3:c8:a1:95:83:20:d2:8f:22:f2:ce:e3:22:2b:
                    b3:10:0e:76:d2:ee:c7:cf:0c:8b:ab:0c:46:8e:a0:
                    d3:b0:83:ad:2b:92:38:86:44:10:20:be:40:02:a4:
                    7a:d9:94:ab:e4:1c:55:28:47:8e:a5:44:54:35:b0:
                    e3:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:22:F7:99:2E:BF:58:06:C6:CA:C8:FF:D4:CE:FE:96:74:9B:5A:C0
            X509v3 Authority Key Identifier:
                keyid:FB:79:C2:6F:31:57:53:45:15:9C:84:0E:D2:78:A8:78:A9:25:66:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3nCbzFXU0UVnIQO0nioeKklZhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/12d691-37a4-4b15-a7ea-bd37da0e447c/1/1-3nCbzFXU0UVnIQO0nioeKklZhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:d6:b8:54:c5:b4:47:1f:18:4c:c2:61:04:c3:89:58:e0:e2:
         30:d4:85:f0:7e:2a:4a:12:ee:d6:8f:c9:a5:c2:f6:30:17:ec:
         6e:6e:0d:f4:13:fe:71:7a:2f:8b:27:ae:fa:ca:61:fb:45:ca:
         d4:45:b7:82:c6:a9:e8:d1:11:6b:15:8b:af:25:49:f5:bb:1f:
         89:ea:de:fb:d7:00:0c:e9:92:b6:69:87:61:ea:b6:98:f4:84:
         05:92:dc:b3:9b:32:26:5a:c2:e9:28:91:82:49:11:04:bb:2d:
         59:db:d3:8d:6c:ba:94:b0:c3:86:0b:f7:27:97:67:0b:e9:7c:
         ad:ef:b5:f7:ce:fc:a9:0f:1a:85:c8:2f:10:5e:25:51:35:1b:
         86:8c:a3:11:94:d9:65:19:a2:24:cc:92:32:f3:7c:4c:d1:7a:
         76:67:26:4c:eb:52:d2:12:61:f5:3c:fe:d9:38:e5:f5:68:3d:
         ad:54:25:64:f8:fd:6f:f5:8d:cf:81:27:fe:bc:c0:6f:ea:98:
         0d:3d:c0:0c:81:fd:a1:cc:41:65:4a:7a:fd:ea:40:1f:a1:92:
         af:e4:02:0b:a8:df:32:07:8d:b1:b9:89:a3:70:9a:6a:95:e2:
         34:47:d7:e3:f2:b7:96:1a:fd:6a:fc:0e:cd:46:b5:eb:2f:44:
         c0:5f:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:49:46 2026 by rpki-client