Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
File:                     1ztArr-IwXsbViEopW9CRfLxVDg.mft (raw, json)
Hash identifier:          rPtrlJ3bl/mo8ZZgiyYGaFVmcvm6s6DcHd/CgFLEgYs=
Subject key identifier:   0F:02:BA:15:4F:02:AD:72:45:B2:86:DA:25:D5:05:13:5E:2F:BB:88
Authority key identifier: D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38
Certificate issuer:       /CN=d73b40aebf88c17b1b562128a56f4245f2f15438
Certificate serial:       019F93C892F6AD2A9A80AAC66D1D23DF03D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
Manifest number:          189F
Signing time:             Fri 24 Jul 2026 11:00:23 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:23 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:23 +0000
Files and hashes:         1: 1ztArr-IwXsbViEopW9CRfLxVDg.crl (hash: eEnRN6UKWczz9AzCxqduhEAfHNA0R8Djxkagcu1WtpE=)
                          2: tVllXtsvNqnnGT4ghCbeFVO4eK8.roa (hash: m5YFGULB9rnteTPaC4KcDVufk0CwF1ak5Ttvba2UEXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:92:f6:ad:2a:9a:80:aa:c6:6d:1d:23:df:03:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d73b40aebf88c17b1b562128a56f4245f2f15438
        Validity
            Not Before: Jul 24 11:00:23 2026 GMT
            Not After : Jul 25 11:00:23 2026 GMT
        Subject: CN=0f02ba154f02ad7245b286da25d505135e2fbb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ef:a9:89:2a:36:25:01:5f:09:ed:53:f6:67:
                    f5:ac:e6:3f:78:3d:a1:f8:37:e2:bb:0d:b2:db:4b:
                    3b:c5:ac:5b:e0:67:82:9c:fa:38:7c:58:7e:7f:7e:
                    73:b6:26:0b:78:c2:c4:70:7d:c7:89:0b:33:4a:91:
                    62:58:97:a3:68:b8:5a:93:b8:3e:60:1f:67:30:9c:
                    b4:a8:e9:26:36:ea:39:e2:a6:fb:3b:d2:c5:9d:e8:
                    d0:cf:d6:c6:77:77:da:a8:8a:e9:16:b0:91:6b:22:
                    cf:fb:9f:ed:73:cc:bb:b3:68:03:e9:72:10:a5:3d:
                    75:4a:6b:12:88:f5:9d:76:b1:ed:9b:9c:37:4f:26:
                    f7:87:56:22:3d:07:f9:78:ff:89:15:36:e5:fc:6e:
                    0c:35:fb:84:d1:ca:ae:34:b0:61:02:a4:7a:98:ef:
                    90:7c:69:60:93:47:82:8b:b2:ca:a1:38:98:ad:b0:
                    16:b6:f7:13:a6:39:bd:4a:6d:68:d3:84:d3:d7:25:
                    69:e9:e6:2e:41:d2:82:b5:7b:cd:b3:ab:8c:bd:4a:
                    bc:3b:c6:45:b5:c5:a6:d7:4e:ba:37:6c:85:ab:93:
                    df:c0:dc:45:b6:0c:3e:a8:3c:19:2d:32:9e:a6:6b:
                    7e:70:94:83:99:8a:9f:f0:98:7d:2a:94:6b:fc:b4:
                    b2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:02:BA:15:4F:02:AD:72:45:B2:86:DA:25:D5:05:13:5E:2F:BB:88
            X509v3 Authority Key Identifier:
                keyid:D7:3B:40:AE:BF:88:C1:7B:1B:56:21:28:A5:6F:42:45:F2:F1:54:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ztArr-IwXsbViEopW9CRfLxVDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/afe2b9-f9a5-4c6b-ab5e-b9d7f41fc189/1/1ztArr-IwXsbViEopW9CRfLxVDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:44:b9:68:05:51:85:c3:db:05:87:32:7d:65:83:8d:d1:b0:
         ec:9d:36:3c:a9:ce:82:18:8a:77:ce:cf:25:c4:49:6d:0e:6a:
         79:27:54:d1:f1:70:09:9a:07:e0:9b:38:2d:0d:1b:a0:03:fe:
         01:10:51:e9:0b:2e:25:01:18:82:bf:23:60:1f:a3:8d:cb:cf:
         7e:0c:15:86:c0:be:8a:cb:a0:b8:68:70:37:d2:d6:72:f9:84:
         78:f3:c1:60:e6:6d:73:28:1a:69:76:f4:17:b0:df:64:f5:80:
         8d:e9:fb:0b:5c:b5:2c:fe:9f:fc:4f:7f:f7:ab:9d:73:11:16:
         65:75:84:c3:95:77:9b:d7:8d:0c:d3:65:9a:60:ab:3f:72:42:
         6a:9e:b4:8e:48:30:19:69:fc:69:e1:9f:bf:ce:5e:c4:f5:65:
         4a:e6:e0:7d:1f:e0:6f:84:ed:c0:68:83:dd:cf:0c:11:ec:59:
         6b:41:57:e3:34:d3:22:ac:bf:e1:2f:dd:35:5d:0a:37:6f:f4:
         80:e2:62:cb:51:a4:64:22:bd:ba:9e:82:bd:a8:19:49:3c:35:
         f7:ab:bb:de:eb:24:a8:51:cf:b3:0e:8b:00:1f:19:03:cd:f8:
         52:a1:1a:2e:cd:09:97:f1:d5:74:cc:9a:aa:62:df:98:5a:cc:
         da:2f:aa:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:40:15 2026 by rpki-client