Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
File:                     Mw5kD51jupQ6l7PcENTGhEpdPcE.mft (raw, json)
Hash identifier:          tGpMKbrJB1crrgttePrR0/pr5akhVe+OPjaIHCGJ1rA=
Subject key identifier:   33:35:E6:CA:8C:94:71:1F:17:B4:A8:9C:64:0A:93:28:E6:C5:8E:3A
Authority key identifier: 33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1
Certificate issuer:       /CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
Certificate serial:       019F90FF71E40280205D26C23EB89A17B972
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
Manifest number:          19D4
Signing time:             Thu 23 Jul 2026 22:01:27 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:27 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:27 +0000
Files and hashes:         1: 4OOnw9_jHGgqLY_psG6GZezPHtM.roa (hash: +U00qFyQxJuR5jHOa7i18wqaZcM160zgJxPC72SDiBo=)
                          2: Mw5kD51jupQ6l7PcENTGhEpdPcE.crl (hash: 5BCUf7G/ACB+5j8ioT9ksyb1vZScaQpxkKLUNqXUxjM=)
                          3: Z4u2ZuPRjtoJ1T7Bu7YaM-zHnb8.roa (hash: buF5g5hLeGHRRo3x/BwwzJhPSsDj5JSRKGK8mj4wcYU=)
                          4: cMli-vLDtEWVXqBnbPb2AmIMArw.roa (hash: yaXUPoTmaKSP0dIBZd+WqyCpfByX0KSPwLkW7J++kbI=)
                          5: dUzsM6a19GkdNIFlIA4P-4ydvho.roa (hash: uiC0tqNUZz32Kx4oM8PGGqs16V38TxlgadgXl3+nxY8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:71:e4:02:80:20:5d:26:c2:3e:b8:9a:17:b9:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=330e640f9d63ba943a97b3dc10d4c6844a5d3dc1
        Validity
            Not Before: Jul 23 22:01:27 2026 GMT
            Not After : Jul 24 22:01:27 2026 GMT
        Subject: CN=3335e6ca8c94711f17b4a89c640a9328e6c58e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b7:d6:80:6b:fc:82:01:9a:78:c1:58:50:6b:
                    67:67:b4:4b:39:cb:21:6c:3b:8c:0d:20:79:0b:e5:
                    bd:b7:89:e2:16:a9:e1:27:79:37:32:c9:3e:25:66:
                    39:e1:54:a9:fe:63:57:8b:8c:17:c6:ff:6d:da:97:
                    bf:2f:92:b1:90:61:d6:04:66:f3:6d:19:88:d9:dc:
                    0b:0b:20:c0:95:7c:48:f6:e0:e4:b5:cc:09:9c:e8:
                    f9:c2:e4:e8:79:9f:65:5a:19:d9:e6:7c:41:db:6f:
                    f2:f6:de:6b:bf:4a:48:99:28:33:96:b7:a6:8c:e0:
                    93:4c:e2:23:f3:24:46:6e:ab:b4:d4:c4:87:e3:52:
                    5c:a4:8b:17:b9:74:b1:58:60:6e:f9:a5:70:90:89:
                    2d:0a:f3:b4:02:c6:15:19:e5:42:e7:ef:90:c8:3c:
                    b2:be:dd:15:d7:89:bc:e3:e5:c0:4e:fd:37:5d:92:
                    ff:87:07:db:36:ae:8a:9b:7b:89:7c:d3:a5:5d:cc:
                    78:6a:cc:49:d5:33:dd:81:78:9b:12:fb:2a:bc:c7:
                    f0:d3:c4:f3:b7:a0:cf:bc:fb:63:11:97:6a:fa:c5:
                    d8:9b:a3:5e:5b:9d:ab:b3:00:0f:4f:de:01:bd:99:
                    ce:9d:e2:c4:2f:ad:fe:8b:7d:83:b6:66:aa:10:b2:
                    a7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:35:E6:CA:8C:94:71:1F:17:B4:A8:9C:64:0A:93:28:E6:C5:8E:3A
            X509v3 Authority Key Identifier:
                keyid:33:0E:64:0F:9D:63:BA:94:3A:97:B3:DC:10:D4:C6:84:4A:5D:3D:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw5kD51jupQ6l7PcENTGhEpdPcE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/e718e4-53b7-47bb-a336-5a17719d449e/1/Mw5kD51jupQ6l7PcENTGhEpdPcE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:62:1b:f7:44:e9:29:50:a2:44:88:d6:ba:dc:ec:e1:49:c6:
         f2:4d:88:e0:a4:8a:f0:1e:54:d2:6a:9a:f5:1c:28:06:ac:eb:
         2c:a6:f5:09:5e:ee:aa:6a:38:46:d5:82:a3:f3:34:4d:24:07:
         79:0e:e0:6f:a1:5b:8c:db:ca:a0:82:a4:f1:5a:ac:ed:7a:75:
         49:1f:8e:c7:8d:47:58:dd:2f:14:5d:0c:18:d3:29:42:8b:03:
         1d:3e:71:06:71:33:b5:4b:2f:f0:0f:c0:da:d1:a0:ac:68:34:
         17:84:4e:d3:4a:18:4f:1b:f6:4f:57:17:c1:07:02:b0:97:58:
         5b:80:26:4f:19:5c:81:53:8d:fe:07:2d:c0:8e:96:e3:fc:30:
         f1:c4:ad:c6:37:54:11:4f:e2:7b:68:55:6c:2f:64:43:11:1c:
         20:8d:54:2b:60:5d:be:32:55:46:4e:48:39:b0:b5:b6:d9:b0:
         ba:fc:b5:63:80:42:bc:be:b2:84:58:ba:77:c9:cc:58:51:87:
         a6:91:9a:72:91:90:0a:3a:13:7c:20:66:21:fb:c8:dd:5c:1c:
         74:a0:28:e2:43:c6:a8:61:51:ea:e5:66:4c:2a:3d:80:dd:fa:
         a5:8a:f5:6e:a3:20:f1:90:f3:ec:84:6a:63:26:2a:7e:45:6b:
         22:29:71:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:22 2026 by rpki-client