Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
File:                     mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft (raw, json)
Hash identifier:          l0yvd6Ioj1/9e1N1xDs2b6p6fS9YUo4NYrsZbgavLfQ=
Subject key identifier:   CD:13:0E:51:31:CA:27:51:A2:81:88:B6:04:50:2A:A5:71:78:93:95
Authority key identifier: 9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66
Certificate issuer:       /CN=9a62e26a1cafff5530a70190c8d000c10f24b966
Certificate serial:       019F93C8AAAF0716A5C1942BBFF499067D81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 11:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:29 +0000
Files and hashes:         1: PzE7Xo74WSE5IepeAcF3qHZnsjo.roa (hash: DmGaRaKHvP4r6YlqDGNyrpBgSveCtDMrds7C4QXYmAE=)
                          2: mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl (hash: EmytLsD5Hw3KDH5pVr5R5PmKeruL72BTCoCxLge//d0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:aa:af:07:16:a5:c1:94:2b:bf:f4:99:06:7d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a62e26a1cafff5530a70190c8d000c10f24b966
        Validity
            Not Before: Jul 24 11:00:29 2026 GMT
            Not After : Jul 25 11:00:29 2026 GMT
        Subject: CN=cd130e5131ca2751a28188b604502aa571789395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:a0:e6:05:b1:c5:3a:79:c2:26:3d:53:8f:98:
                    db:d6:5c:1e:e3:3b:80:09:91:09:9e:b1:15:dd:5a:
                    c6:01:21:f1:39:74:80:b8:b8:e3:47:fe:f3:43:b0:
                    4e:cb:22:ad:90:3b:ae:40:05:f7:02:ff:cf:62:c0:
                    49:73:1b:af:9c:89:f2:d7:e5:29:60:8a:6e:73:1e:
                    eb:97:df:a1:e9:45:3c:d4:01:12:c3:d3:b6:0c:a4:
                    36:ec:df:22:88:42:23:c3:c2:45:57:7f:09:03:dd:
                    a1:38:a8:ed:ce:c9:63:0e:1d:5e:73:bb:40:38:11:
                    99:4f:83:ce:d1:a3:51:27:e9:dc:fd:35:15:cd:ee:
                    e8:70:90:d8:f4:7d:7d:2f:94:d4:b6:13:f6:4c:15:
                    a2:a9:44:f1:2c:15:b5:b2:3a:8f:07:6c:aa:91:79:
                    f7:88:e5:88:8e:ae:d5:5f:f3:f4:90:73:2c:f7:40:
                    c8:8c:10:c2:38:c2:b8:fe:ae:82:b7:1e:c8:0a:2b:
                    fc:13:c6:8c:b3:62:a6:18:64:a3:8f:99:50:0b:81:
                    89:b4:0b:47:a1:03:b8:ef:51:e5:58:ac:11:a1:0b:
                    2b:3a:2c:3a:6b:4b:7d:ba:96:0f:27:73:88:8b:35:
                    05:dc:a4:1b:95:dd:56:f4:9e:bd:61:80:68:07:8c:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:13:0E:51:31:CA:27:51:A2:81:88:B6:04:50:2A:A5:71:78:93:95
            X509v3 Authority Key Identifier:
                keyid:9A:62:E2:6A:1C:AF:FF:55:30:A7:01:90:C8:D0:00:C1:0F:24:B9:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmLiahyv_1UwpwGQyNAAwQ8kuWY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8450a1-66db-48c6-93b8-947859c0ecc4/1/mmLiahyv_1UwpwGQyNAAwQ8kuWY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:ec:da:3a:31:34:0c:ff:b8:19:73:12:f2:19:d5:8a:99:d2:
         a8:8b:20:e8:0b:cb:06:a5:e5:b0:92:d2:a0:d6:56:cd:c1:45:
         34:ae:4e:49:78:bc:d1:c8:c5:75:b6:5a:57:54:09:35:e1:9e:
         4d:5e:7a:be:16:37:80:23:36:24:a2:8d:3b:3c:35:c9:31:e1:
         6f:c0:11:4e:1c:15:a8:42:de:1b:fd:c9:62:35:a1:e4:a2:d1:
         67:05:fa:ca:d8:43:31:0b:e2:1b:71:fb:30:2c:d9:39:e7:ea:
         18:5b:0e:87:c6:19:94:5c:98:52:d4:19:fe:60:4f:ca:89:8b:
         46:c8:46:1c:01:7e:39:8a:26:73:09:85:ee:22:50:06:f6:df:
         32:d4:0b:d3:bc:a2:bc:76:7d:26:db:1e:41:9a:c8:23:90:3a:
         af:d5:0a:56:50:bc:31:24:d0:05:da:dc:62:27:a3:f8:2a:5b:
         67:49:f5:fe:e6:2b:24:cf:e2:62:58:45:c1:8e:48:46:b8:38:
         0d:e4:f8:8e:b0:02:3c:d7:c5:31:ce:71:07:bc:fe:0c:01:f8:
         7a:56:cc:cf:53:d6:47:f4:8f:49:1b:a7:57:2d:b0:32:cf:6b:
         65:8c:b2:0e:e5:cc:91:48:37:16:62:81:95:cf:ac:63:34:ba:
         42:8d:7a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:03:04 2026 by rpki-client