Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
File:                     dBmPcCK5VgUB20SK9gMB-ihekjY.mft (raw, json)
Hash identifier:          uwu5NWXno53kfpdJRhRslYQ9ZTQA4pGmLRca+G14gXw=
Subject key identifier:   BD:A5:9B:2E:55:B8:68:1F:14:8B:C9:67:33:76:D3:DF:CE:43:61:43
Authority key identifier: 74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36
Certificate issuer:       /CN=74198f7022b9560501db448af60301fa285e9236
Certificate serial:       019F954A5D12C14D130C3CE1FE10C88F01CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 18:01:46 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:46 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:46 +0000
Files and hashes:         1: dBmPcCK5VgUB20SK9gMB-ihekjY.crl (hash: LnKnwviV++E+Im1o9QqtdbCeR89jMmPig92Y8fVn3GA=)
                          2: x-8swSoHWXn2gEZTtgRDy-vs_DM.roa (hash: ylAYgviMfyC3A9eoEgIb+VgNLg1iORRgtmKdI3QPLJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:5d:12:c1:4d:13:0c:3c:e1:fe:10:c8:8f:01:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74198f7022b9560501db448af60301fa285e9236
        Validity
            Not Before: Jul 24 18:01:46 2026 GMT
            Not After : Jul 25 18:01:46 2026 GMT
        Subject: CN=bda59b2e55b8681f148bc9673376d3dfce436143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fc:57:04:fd:3f:a6:0a:ad:49:2d:c8:b0:a2:
                    73:6d:66:8a:48:3f:9f:84:9e:4b:09:e4:bd:bb:c0:
                    56:5a:f8:a4:87:e4:02:6f:d1:1b:53:82:42:ce:0e:
                    28:2b:1d:47:cb:af:44:88:51:20:ef:d0:12:33:92:
                    f5:5c:34:25:94:47:90:01:98:5a:0c:69:37:23:4c:
                    1e:e1:56:98:6a:bb:17:2b:5b:da:9e:3e:2f:2d:54:
                    3d:ed:80:1d:39:8c:6d:06:56:2f:74:32:dd:54:ee:
                    77:4a:20:85:de:16:b7:b1:30:5a:43:df:c7:ed:e3:
                    bc:b6:ac:b5:bb:43:f2:73:d9:28:ba:92:3d:31:74:
                    3b:45:19:1e:10:51:fd:8d:2c:8a:dd:c4:14:c9:46:
                    49:cd:9b:ec:31:6f:66:fb:d3:e8:b1:57:a8:c7:c5:
                    35:69:d9:0e:b4:2a:d4:07:ef:30:a7:b6:c6:47:49:
                    6b:e3:cc:e7:fc:cc:42:74:1a:20:e7:68:8e:a8:48:
                    ee:bd:03:93:c1:a1:7e:dc:44:f9:8a:3a:c9:ff:c3:
                    3b:c0:26:bb:2d:23:6c:97:05:6e:79:59:0d:26:32:
                    12:cb:1c:1f:e1:74:f6:36:ee:c6:00:35:b6:db:d2:
                    b5:d8:a2:ca:ac:46:9b:0e:09:6d:5a:f9:cb:40:70:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A5:9B:2E:55:B8:68:1F:14:8B:C9:67:33:76:D3:DF:CE:43:61:43
            X509v3 Authority Key Identifier:
                keyid:74:19:8F:70:22:B9:56:05:01:DB:44:8A:F6:03:01:FA:28:5E:92:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBmPcCK5VgUB20SK9gMB-ihekjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/1be5e1-56b4-4c66-beab-6f163966af8b/1/dBmPcCK5VgUB20SK9gMB-ihekjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:67:a7:e3:9e:11:63:83:24:78:c8:34:90:7f:01:89:3c:49:
         93:65:b9:b5:3a:c3:8b:f6:6b:71:3d:c6:92:b7:ed:6b:4f:c4:
         2f:e2:3e:9d:96:0c:8a:9f:a2:1b:ea:4e:cb:ec:a6:c0:74:eb:
         95:5e:9f:ca:38:ee:ee:d7:e6:17:33:3d:eb:48:b9:af:9b:e1:
         92:64:f0:2d:e0:49:fc:1a:7e:a3:98:e5:9d:5a:62:c7:b5:fd:
         87:be:00:d2:5a:30:18:2a:5e:2d:0c:f5:60:8e:2c:70:2f:f8:
         71:4d:21:a4:19:05:d0:e3:a7:82:ac:1a:61:71:96:60:d4:83:
         16:3d:ad:cd:64:49:38:c9:62:c1:e4:6f:13:c3:96:4b:d0:76:
         69:45:ea:13:1f:a7:7f:64:d9:37:31:1c:2f:aa:bc:dc:e4:f1:
         5b:db:2b:8c:7b:57:5f:d3:95:9e:ea:79:61:d9:c0:2d:cd:be:
         22:c6:24:79:1b:3b:99:29:eb:e6:5f:24:82:56:f3:32:6d:f9:
         1e:90:e0:78:bd:e2:7f:9c:b3:a7:79:dd:5d:75:d2:6b:7d:1f:
         d0:de:b8:59:42:52:f7:5b:a3:fd:a0:42:84:af:5d:32:8b:b6:
         05:4f:13:a8:ce:c4:f7:cf:6e:fe:db:1c:c0:b3:b1:e6:2c:43:
         47:fe:a0:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:11:23 2026 by rpki-client