Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
File:                     g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft (raw, json)
Hash identifier:          Ob/pLfp6b3qxLOQCxN+CCsbIpMvoLslTDTxwtbFG4QA=
Subject key identifier:   A7:61:2F:0C:A1:90:98:09:AD:12:D2:B4:36:51:1B:9C:FB:2F:6F:34
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Certificate issuer:       /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial:       019F8EA25AFF05137D0F4203907EA5EBE197
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
Manifest number:          19E7
Signing time:             Thu 23 Jul 2026 11:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:32 +0000
Files and hashes:         1: 1--JUDppRbu7T0stV0TMFX_JdJqk.roa (hash: 7ElxaU2FrJVBWuFjmaI5WPADPHQpzQarn/tOamW8ol4=)
                          2: 2a_uy4DA086BpyZucBJ1RKLvGB0.asa (hash: WXt1+GiMi8yguUv71CdSXteV8ij1KFQD4MWVZRlVGGo=)
                          3: F6V95NvKIPnP0tmYoAEtHc-x5Bc.asa (hash: 5EJJJJTtBq0BMEfKnD57LEly92Ux1IDLT80gLRVXa+s=)
                          4: GvIMpzg1BrWyJZnNUgc-c9Cv_wE.roa (hash: QqPKk6SddSUzOWwAEp4MtmTKN+FX4BL1RGH8TdopCcU=)
                          5: Hxy4OYK276xESCf3Anb_fwGbVFA.roa (hash: OEZqLe2GA3/g06uklHFF+Qr+gAumMT+wNuHWtE1vS0I=)
                          6: MywVTrCitZ0jjbFx7Ww-pldZ2-E.roa (hash: 3AQWbOwtzZshqM3V2nv18YVl7dRi4sEO32WjYpoQrG8=)
                          7: P5DeZi-NZPhI3zAbu6P2URQXDh0.roa (hash: 3xwHLPA2O8drb+zjl4yg8vS/CGvVdoGiWmy4gUvfoNs=)
                          8: PvOMcu6kkYu1VaD3XwX_1ePatyY.roa (hash: FOWoO0sh/7LnR+o/5+ENcU9IVroksYKfAOK89ZHzs8M=)
                          9: XUgse1SVG2LYV88Lp4UVNGgo6_8.roa (hash: g7ViDtzqv8KPcw50VAZhPz4xcsCIQITUrXQJTHZp81Q=)
                          10: _XRghfMhYMaDoIUQgdxTV1nl8Zg.roa (hash: 3r32wTlW0UwBU+wmGMDkMPZxoYROHjLHE8xLGZOKfig=)
                          11: dID3LhBrOI7h-JjxBCDXGS6Ka90.roa (hash: Rx7lZVpO1Kcn3Rd9uI0ZIiOCJf4fpdx1CaamZMAapoY=)
                          12: g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl (hash: Lm7uM8+vWSKdFkZqIDonm3t979xUqGFYEaSh3e8XvyQ=)
                          13: h4qnmgZvvV6hazj9Xn7cghOv6uI.roa (hash: vjv4+ammuobmFm2l5IQ69DMODD0qU4CxTRycj23fFCA=)
                          14: jPosKpC4jbWbnigp_N_xbEGwtdU.roa (hash: PKivQvn7H0k9WsK5zKGzhI4jllClxyjJNOUB8aA/6s0=)
                          15: kf0P2-AnYaTszs2aiMhuhhwchGk.asa (hash: m/fVQ+ofl+sZc0iZJrqsqrXJcBhW2JOlf+vQTsGSo/E=)
                          16: nfSZBgblqY4hDbV-RAcbJ9qyUpc.roa (hash: 8ijpB21chkCGF/aduPmL2pt7xjwG/XOf0XxCs4lLVxo=)
                          17: o5BKntmZ9JtZu-kMInHB78iso3o.roa (hash: y3nwxUjTAtP6jlMnZQwlOLiitgv+xb6KltP0aX7WOCQ=)
                          18: uCNLYkMpygNunXFvH6vpKE2NN28.roa (hash: jZxZzuY2jmV8G4KIhZiQuYNw9N0R/IOj9mu4mI2n1s4=)
                          19: vc3_2HwZU1b1IDix6yqY246HGsI.roa (hash: C2RwLxlNEFwKzGr5sfPtGfDi2mMkvqCKZMvxOHJKA+M=)
                          20: yhnCcvMGfFoTZMf1oJ6P5sYzLfg.roa (hash: mwt4irHC6GhVnuZ5Xr0w1wBWRdsXBhU6yRY/gWgSeJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:5a:ff:05:13:7d:0f:42:03:90:7e:a5:eb:e1:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
        Validity
            Not Before: Jul 23 11:00:32 2026 GMT
            Not After : Jul 24 11:00:32 2026 GMT
        Subject: CN=a7612f0ca1909809ad12d2b436511b9cfb2f6f34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:e5:00:78:b2:e3:a6:8b:9f:4a:02:94:26:
                    73:de:13:de:bf:36:ad:76:76:3d:51:7c:13:7e:28:
                    be:e3:30:b2:f1:84:18:fb:72:c5:0c:13:a7:c1:2e:
                    69:b2:10:72:78:d3:b3:97:39:06:5f:58:df:1f:69:
                    0e:74:92:e5:2d:9b:44:28:af:bb:10:60:d4:12:4f:
                    7b:bc:ad:f4:9d:55:c0:a1:a4:f7:a4:ed:63:3a:f1:
                    a8:a5:6f:44:c0:59:46:29:9c:9c:55:31:7c:e0:27:
                    cc:22:a5:79:44:a5:d0:4e:3c:b2:be:80:0f:2a:3f:
                    04:17:c1:16:5c:1d:b5:3a:b9:69:a1:db:1b:e3:a0:
                    77:59:48:94:43:c2:3a:f1:d7:b4:90:ce:6d:4f:59:
                    3d:2e:4d:fa:7f:f2:9c:0f:68:2c:8b:82:d4:96:d2:
                    71:be:aa:b8:0d:ee:39:74:f4:cd:d1:5d:b2:67:da:
                    be:68:33:69:4f:e5:ed:ea:33:d7:0a:b5:df:7a:a9:
                    d1:f9:a2:f7:75:b4:46:8d:b1:c1:91:34:e5:86:ca:
                    51:ee:51:8f:19:18:ef:46:7f:40:9a:cd:0a:57:39:
                    79:52:f5:01:b7:1b:f3:c0:1d:53:5f:b2:23:00:85:
                    0c:2e:17:c6:77:db:14:5e:dd:ab:17:ff:30:51:e9:
                    bf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:61:2F:0C:A1:90:98:09:AD:12:D2:B4:36:51:1B:9C:FB:2F:6F:34
            X509v3 Authority Key Identifier:
                keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:2a:8d:70:a6:16:ff:1e:61:a9:a3:ee:6a:2b:fc:65:af:
         d9:ae:4c:ab:7c:0e:2d:49:d3:3b:0f:be:f5:f4:31:d3:b0:b7:
         e7:42:80:9d:af:60:96:a1:81:88:94:f9:e5:ea:b3:8c:30:ed:
         2f:fb:5c:f7:43:22:07:a9:9e:41:df:a5:8f:25:a5:27:f6:b0:
         d2:51:92:ec:70:5b:30:6e:b1:e1:ea:c8:b7:fb:02:b7:03:55:
         86:6f:cd:16:d2:06:69:f7:67:96:c1:4b:e3:d5:72:0c:6f:c2:
         f8:2b:03:4b:5a:ed:b0:ef:e5:9f:f5:68:a8:0b:dd:25:bc:01:
         87:ac:c4:cc:63:7a:3a:32:cc:32:c6:4e:bd:2b:e5:21:a5:a8:
         96:03:98:18:ee:66:c7:c1:77:82:1a:19:1b:bb:9d:99:de:23:
         63:52:88:fa:6c:cf:b7:15:7e:2d:a5:95:9a:c0:e1:d5:41:f4:
         c9:20:b9:10:6e:fa:d4:1e:a1:ce:df:9d:13:42:d9:66:dd:8c:
         b0:71:15:fd:75:c5:78:23:0c:bf:e9:ae:83:32:f0:e1:42:ae:
         7a:a3:25:81:bc:ce:68:79:6a:2f:db:99:f9:57:13:66:f0:fb:
         82:32:fe:26:33:23:b2:09:fe:b3:5c:3f:43:a7:34:b8:03:a4:
         1c:b8:94:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:10:32 2026 by rpki-client