Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
File:                     deqJTuBXdeDvBh0IbKJSFH9ckd4.mft (raw, json)
Hash identifier:          oCJlfq1Lb6alC6EcN2drLIyCgjRuqHoZ9IOhugoPLZQ=
Subject key identifier:   4D:F3:AA:1B:5B:43:A2:E5:69:A0:CD:A3:15:D8:B9:5B:64:5C:20:1C
Authority key identifier: 75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE
Certificate issuer:       /CN=75ea894ee05775e0ef061d086ca252147f5c91de
Certificate serial:       019F92119F4D995E4D2273283CB6989E8BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
Manifest number:          19CE
Signing time:             Fri 24 Jul 2026 03:00:56 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:56 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:56 +0000
Files and hashes:         1: 2_ip97ddlj1cQ2mlpG8VnnAhSa4.roa (hash: 6R1vvhI30TeNiE30+I3zfpPJroDLNETGICaQVhgLg/w=)
                          2: KoVt6Xy7gkv7j_38ctTdwANrLe0.roa (hash: f72VqLp88rf5xfXfyl+PJYk0ViN53QtQMBfU74Y077U=)
                          3: LMl6QCFGZ6NTfYGlowyafW63Beg.roa (hash: BhySL2ahxdsB2rFdsSzbUlZCzHf0m4FchHvGZ6v2dx8=)
                          4: deqJTuBXdeDvBh0IbKJSFH9ckd4.crl (hash: sA/taqtQrpBYdLij7+Ccl/snCuLJxlcsTTT6eWLepCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:9f:4d:99:5e:4d:22:73:28:3c:b6:98:9e:8b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75ea894ee05775e0ef061d086ca252147f5c91de
        Validity
            Not Before: Jul 24 03:00:56 2026 GMT
            Not After : Jul 25 03:00:56 2026 GMT
        Subject: CN=4df3aa1b5b43a2e569a0cda315d8b95b645c201c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:8b:58:70:6a:d8:3c:c7:28:ff:42:18:4c:a0:
                    e6:c8:fd:32:a9:ad:01:9b:03:d7:04:e8:a7:4a:7e:
                    a6:fb:2b:bc:9b:36:39:9b:96:35:56:bb:fb:ef:8c:
                    80:9e:50:18:41:6b:ea:0e:73:af:96:46:5a:3f:0c:
                    9b:0c:e2:9f:75:6d:58:ea:e3:60:bc:76:b3:14:5a:
                    67:43:df:c9:67:c7:80:6c:b1:da:a7:07:eb:ac:67:
                    8b:4a:4f:bd:19:0f:5f:4a:b4:bc:09:ae:3e:cb:90:
                    99:f8:54:7a:b5:f5:cb:24:f5:dc:ec:c4:f2:1a:e5:
                    3f:14:51:b4:5c:54:26:fa:19:12:bd:95:78:cb:5c:
                    56:a8:64:d7:ce:e2:0f:27:c5:a2:19:ed:a5:ac:69:
                    87:c4:6f:ec:b4:84:0c:01:17:30:ca:7b:40:20:3b:
                    94:a6:9a:ae:00:ae:25:70:42:f9:0c:f0:1a:f4:5a:
                    9d:e1:5c:b0:59:91:5a:c8:91:e8:66:a0:ce:29:c0:
                    36:5a:3e:42:7e:39:e7:eb:39:01:5c:a1:64:24:7d:
                    8c:03:18:e6:66:d7:5a:44:b7:e9:49:57:b5:bb:9f:
                    a6:cd:5f:fe:a6:6f:30:71:9d:f9:bb:8d:6c:55:db:
                    20:ec:4a:29:d6:92:c6:d0:7b:c6:0a:3c:ab:6d:18:
                    e0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F3:AA:1B:5B:43:A2:E5:69:A0:CD:A3:15:D8:B9:5B:64:5C:20:1C
            X509v3 Authority Key Identifier:
                keyid:75:EA:89:4E:E0:57:75:E0:EF:06:1D:08:6C:A2:52:14:7F:5C:91:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deqJTuBXdeDvBh0IbKJSFH9ckd4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1cdce2-a3f8-44b6-b5e1-b7f2984eb653/1/deqJTuBXdeDvBh0IbKJSFH9ckd4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:16:08:e7:a9:57:39:a1:26:41:b4:13:98:76:60:92:05:87:
         a7:8c:a3:b8:42:7e:ba:b9:56:eb:83:2a:fa:bd:27:14:c5:a3:
         8e:20:0a:67:59:c3:93:9f:63:3f:86:3b:52:47:62:10:35:09:
         08:ed:6e:4d:a7:c9:69:83:44:2f:b6:9c:e5:19:0d:de:c2:11:
         33:ee:05:be:b2:73:7a:e3:a9:e6:f0:9c:44:36:d1:67:68:88:
         ba:fa:bb:31:b3:ba:a9:dc:af:9a:4d:b1:32:48:66:29:b9:a0:
         1e:98:0e:e0:e2:af:e3:74:73:ed:a9:85:42:2e:61:9a:1c:f7:
         44:bb:17:ba:98:ef:bd:cc:e1:3b:54:12:79:45:a2:2c:f6:da:
         31:d9:b7:a6:fc:7b:5d:5d:de:0e:b9:86:5c:39:11:75:60:d9:
         a8:dd:49:57:c9:1b:94:d7:2b:9c:2f:1c:d1:ad:e9:53:74:27:
         dd:d7:d9:41:d5:d0:d6:ce:95:ba:42:20:4f:97:33:42:c2:cd:
         0f:7b:79:59:f1:ca:c8:55:e9:aa:e0:fa:9b:dc:17:f2:83:4b:
         57:8b:79:ca:02:7e:89:eb:b5:63:c0:1c:1d:ec:c3:77:b0:90:
         46:f0:f8:26:81:82:af:24:32:e9:60:31:48:1c:26:4e:c9:67:
         23:fd:3a:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:32:47 2026 by rpki-client