Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
File:                     Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft (raw, json)
Hash identifier:          Ycilz/t6JGScNhk7wxnAKWPFjcJG2n3OdT8es/iVL8c=
Subject key identifier:   FF:5C:B6:FB:5A:F0:8E:98:33:55:BB:40:42:A2:70:E0:12:D7:E8:AE
Authority key identifier: 32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4
Certificate issuer:       /CN=321ec194107843848cd36330232b5f6a43791db4
Certificate serial:       019F8F808E08D7C1567258BA17661CD4DFD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
Manifest number:          19D0
Signing time:             Thu 23 Jul 2026 15:03:14 +0000
Manifest this update:     Thu 23 Jul 2026 15:03:14 +0000
Manifest next update:     Fri 24 Jul 2026 15:03:14 +0000
Files and hashes:         1: 82kGAC9wtvGZ6gS4bLlhDSZ1ekc.roa (hash: vPPab/KGHpKzLrTGlISXYHb0sr+wSckNgKD9qG+MfNw=)
                          2: 91Petc5RKlCy-MU2C9Yy6lq65ZE.roa (hash: 7hccwNO3UaWQ0JhtP5+TQ+OksNzm3EM6wDMxIQgrpWs=)
                          3: Ef3KoOE8fR3lwQrxiuPwLc-iq2A.roa (hash: OdcRK/goVMIA15OAEFTVRxq9FJ0mb0HCbom4lfXuy2g=)
                          4: Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl (hash: AzE7dFLCOzkneHKzydWZ5RQvKg3v+xCjvP9gxzwbAtE=)
                          5: eFYkjuueS374d8jpHQ-eRsXYtoI.roa (hash: gwcFI/s7qhCO6ggsOku9CNe7VDcyLuX60cmBFUEOOW0=)
                          6: eMnVSFyA0FcmLp27QsfFm-htCa8.roa (hash: ahn930ULQdRk7bLieW7xo5TzMTWeAfDz6m9yfZyj0gU=)
                          7: fp1sLUeIRXFqhsdIFZLdl0__7pM.roa (hash: zYsrMGDZPKYtnkQ+At/0eP5XyC5n7qFFGT9wnz8DZQg=)
                          8: hgQSUnJubAL4-EZRnXtz-EERDh8.roa (hash: /WEvukiM8zuCEI80FycN6ubUk7Q1iYXiN7WF7p6NooQ=)
                          9: qLbWT3bB3iBT0TukjMBJAvhaDQM.roa (hash: 8q/NtwWEs+6Q/29xk+gdVzq969Ht7BEuC13rSHEA0yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 15:03:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:80:8e:08:d7:c1:56:72:58:ba:17:66:1c:d4:df:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ec194107843848cd36330232b5f6a43791db4
        Validity
            Not Before: Jul 23 15:03:14 2026 GMT
            Not After : Jul 24 15:03:14 2026 GMT
        Subject: CN=ff5cb6fb5af08e983355bb4042a270e012d7e8ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:ce:6b:30:f1:8d:a4:b2:de:74:7c:0b:d8:
                    03:a3:29:dc:ca:95:54:74:f2:5e:f4:1f:93:e4:dc:
                    2b:84:e4:af:bd:7b:5d:5a:65:54:db:b5:71:6c:ca:
                    91:bc:1c:f9:4f:b2:db:c0:17:ff:59:9d:61:88:fb:
                    e1:5c:cb:da:13:da:82:af:c7:5d:a5:63:63:39:cf:
                    20:87:eb:c8:c3:08:bc:77:c6:0e:b5:9b:97:ea:1e:
                    c0:0f:68:f6:31:cf:6f:b3:f7:24:f5:e5:d7:ee:c6:
                    44:d9:c4:61:8f:e5:c4:8d:32:32:88:e3:15:c4:b1:
                    e3:c1:7a:1c:13:e1:b1:4d:02:4c:bd:f9:b8:ee:fd:
                    05:56:29:fa:90:b1:67:f2:2d:92:cc:46:3c:bd:26:
                    be:92:6b:48:14:47:9b:ca:77:1f:8f:81:72:d4:e9:
                    ac:cd:4d:47:b2:7f:03:ff:f5:13:8b:f5:5c:87:9d:
                    21:67:9d:38:2e:1b:b3:54:e6:4d:7d:6c:42:82:12:
                    18:af:e5:05:45:75:77:8b:11:9d:7f:0b:f5:ea:31:
                    d1:27:29:63:74:d5:75:d8:5c:c7:c2:10:0c:6f:32:
                    65:34:0e:cd:5a:b1:9d:32:4f:09:34:8a:3d:0f:c4:
                    38:e8:ad:ac:9d:cb:11:a3:5c:34:56:aa:a8:e8:00:
                    96:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:5C:B6:FB:5A:F0:8E:98:33:55:BB:40:42:A2:70:E0:12:D7:E8:AE
            X509v3 Authority Key Identifier:
                keyid:32:1E:C1:94:10:78:43:84:8C:D3:63:30:23:2B:5F:6A:43:79:1D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh7BlBB4Q4SM02MwIytfakN5HbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f1458f-bdc3-4e4b-9f68-3a611c093a2c/1/Mh7BlBB4Q4SM02MwIytfakN5HbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:53:71:8e:03:48:a0:c5:82:e5:fb:cf:8f:c5:6c:77:fe:eb:
         ec:ae:25:ea:b4:76:3b:53:9d:6d:a0:f0:e1:5e:b8:39:7d:cd:
         ae:15:9a:4d:df:99:52:8c:c0:f9:aa:7e:24:79:8d:d4:a7:28:
         ef:40:57:74:b9:76:ce:ee:48:57:69:f3:b4:10:57:ff:c5:6d:
         77:c5:48:ad:df:af:c5:a0:2c:23:19:1a:46:6c:88:2e:23:b5:
         7a:7f:db:c7:ac:bb:eb:85:62:55:de:54:51:4d:df:35:f3:a3:
         e8:d2:48:46:de:dc:15:a5:12:13:8d:d5:c0:17:0b:26:47:8b:
         07:f1:b1:4a:df:e1:8c:82:bd:95:0b:f8:de:f1:ff:8b:55:60:
         99:13:04:83:ba:60:cd:5c:f3:ab:8d:21:a8:3f:14:51:51:79:
         46:52:07:65:d7:40:1b:af:17:03:ca:69:e3:0e:d0:20:dc:a9:
         b3:43:c1:74:0d:f0:43:43:2f:e3:27:92:6c:a5:41:29:3a:66:
         74:0d:a3:f5:14:f1:a6:1e:21:80:0e:17:e7:8b:5c:81:f8:8e:
         83:02:7d:78:de:1a:f2:27:1b:55:20:0d:ca:4b:a5:e7:75:f2:
         56:8c:a1:42:dd:dc:e9:94:14:a8:e7:7c:33:98:df:71:c8:d6:
         34:c8:b5:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:54 2026 by rpki-client