Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File:                     tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier:          a3BQipg2fIYFMTBX962Ww1MYV7UTVBqKf5iukm4Cwog=
Subject key identifier:   A1:A6:D2:72:25:FB:14:31:37:23:6F:14:18:14:80:A2:27:8F:42:CD
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer:       /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial:       019F8EA2BD70FA5C2F9720B92D5B39287488
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number:          19D6
Signing time:             Thu 23 Jul 2026 11:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:57 +0000
Files and hashes:         1: FhIJYPne7gPWVQQPlSNOQDYojyw.roa (hash: K6YwsovdJ/O0GUapO1LURNQtSxCoIhGALa7CIvhy8bI=)
                          2: Qqt98OgHdyagvtzakVb3zNMmwKs.roa (hash: BpO8bWnBPYn/bYjQyXDccWI2949LL94WM+S3q4wZu/4=)
                          3: VKzW31jeaMdmyxMzR7AUw7WIDUA.asa (hash: pk6lHC6s+JJLCaiknEGPfBAKyURwygceJXu/R2chfr0=)
                          4: VvqzmjNZq8EAn7upk3HKESnO2Sg.roa (hash: zi8li6T/eNUQAuUi6F1iTu5taSL1qMtfO51QFh76N4Q=)
                          5: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: 80CaBr5HcNcqp4XBTxEuNExYVwovmlHP1fzJx8gg+/A=)
                          6: xA8I-Ycp1q2fcI8xsU1jW8I19hg.asa (hash: EBMdaG4QdyhLtZe7WkvdRNMZTr2xN3HzQQNtxbfhCyM=)
                          7: zfs1n8rEspCcwaljPO1LWoriK7A.roa (hash: Cw4La7Iv+J3S/kv3dOrnyO46Wye0r7XGdA/N85GgLG8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:bd:70:fa:5c:2f:97:20:b9:2d:5b:39:28:74:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
        Validity
            Not Before: Jul 23 11:00:57 2026 GMT
            Not After : Jul 24 11:00:57 2026 GMT
        Subject: CN=a1a6d27225fb143137236f14181480a2278f42cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:20:3e:20:05:35:1a:45:11:0f:a7:92:15:
                    98:14:9b:91:6e:11:89:76:54:67:52:75:86:2f:20:
                    ef:50:be:10:45:91:66:fc:ec:98:1c:79:10:28:f6:
                    de:20:72:27:5c:5a:cc:db:fc:a0:a9:2e:00:d0:55:
                    83:00:13:a0:67:51:8e:f9:c0:3c:ab:a8:4b:73:6c:
                    e2:4d:cf:19:e2:c1:4e:3c:11:ae:a0:71:85:4f:da:
                    8c:45:42:b8:20:13:23:d9:3d:c6:97:68:8b:2a:66:
                    75:db:e7:cd:23:dc:05:82:fe:0f:b2:a0:23:d2:7c:
                    70:d5:45:05:a0:84:12:d9:d7:b5:58:94:6f:6c:9f:
                    ab:b4:28:cc:d4:a8:34:dd:7a:08:ce:f1:1d:99:fd:
                    4f:bc:f3:c2:59:82:dd:cc:ac:9f:be:46:cb:af:94:
                    13:e3:7b:d6:8f:a8:36:2e:02:27:0e:c7:16:ab:7e:
                    11:9b:a9:69:9c:02:79:56:5e:f7:7d:93:75:8c:e1:
                    67:29:82:9f:c0:9f:1f:ae:a6:58:87:5d:24:18:b0:
                    04:76:e4:bf:2d:cf:e2:25:3b:6b:08:a4:82:a5:9e:
                    b6:6b:9e:37:d5:77:58:57:f4:e9:ef:9e:9f:a1:eb:
                    56:9e:0c:48:58:88:3a:25:de:94:3a:92:27:68:24:
                    55:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:A6:D2:72:25:FB:14:31:37:23:6F:14:18:14:80:A2:27:8F:42:CD
            X509v3 Authority Key Identifier:
                keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2b:55:76:5e:b0:a4:f6:c8:87:5f:44:e9:a1:3c:8e:7f:b1:
         f2:b9:ac:a7:95:a1:27:24:cb:ca:4b:82:8d:a4:e8:d0:99:22:
         45:74:02:cf:77:5c:04:07:b7:47:1b:1f:35:59:ed:64:ab:a0:
         e0:49:31:77:be:6f:e5:76:35:11:4a:44:09:0c:35:fe:b2:69:
         43:8b:14:72:fd:a1:52:36:bf:05:7d:e7:c6:db:59:e9:c8:5f:
         05:6c:76:e3:7f:f7:1c:7f:cd:e3:f4:a1:ec:29:db:44:b6:93:
         e9:c0:16:55:bf:26:50:16:53:7f:87:5e:e4:b0:74:f6:1b:0a:
         d0:d0:f7:21:68:e1:b4:9c:ef:35:ec:00:4b:c6:59:ea:15:e1:
         93:83:3a:10:04:af:b0:29:f8:01:e0:ef:7a:e1:cf:d0:9d:78:
         e0:22:f3:c9:b1:43:ca:8b:62:3e:96:03:ce:67:59:82:c2:06:
         34:9b:0d:a2:fc:3e:2f:94:0b:17:cb:6c:e8:fa:69:f5:45:98:
         4c:a7:51:1a:85:60:e1:25:ac:53:ec:40:57:6c:18:df:85:77:
         e6:09:cf:e9:e1:8f:d3:74:ae:1f:74:da:b8:9c:61:4b:93:bd:
         d4:0b:cd:c7:7e:7c:90:e8:c7:dd:01:a7:87:12:1d:8a:ac:63:
         48:e1:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:30 2026 by rpki-client