Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
File:                     hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft (raw, json)
Hash identifier:          Ix48pWKUT5dx8sRV2TEYDxzly2Bq+byhUxNQDaThJao=
Subject key identifier:   AD:D1:4C:E5:9A:CE:CC:77:A5:28:6E:A6:6B:40:69:EB:9B:F8:34:E8
Authority key identifier: 86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7
Certificate issuer:       /CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
Certificate serial:       019F95127545713955C3F322C3F25B286D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 17:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:42 +0000
Files and hashes:         1: SHJi1Hg3BYSDVLWuUF3dUC_y5Qc.roa (hash: hbtSVIptoXiMe4xO8q5DDqQ1ZQZBnOOJmENfX4ZeP2E=)
                          2: hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl (hash: 4yEM6ziPUW948ZouwddIKQoNawOtyE7PAc5V60vbhh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:75:45:71:39:55:c3:f3:22:c3:f2:5b:28:6d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=863589feecbe4c4ab444d93864454dbcd7cd0de7
        Validity
            Not Before: Jul 24 17:00:42 2026 GMT
            Not After : Jul 25 17:00:42 2026 GMT
        Subject: CN=add14ce59acecc77a5286ea66b4069eb9bf834e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:11:ca:bb:c4:c9:9f:20:7c:42:08:bd:75:d8:
                    c4:22:2c:c0:6b:97:a6:a2:a0:3a:b5:b1:3b:c3:cf:
                    7a:d5:a1:e6:3c:7e:ba:4b:99:59:cc:ef:86:01:21:
                    68:5a:74:56:bb:95:9d:76:0c:f0:79:1e:f2:a8:eb:
                    a7:3f:1d:e1:7f:80:6f:fc:8b:68:5f:7f:ee:d6:94:
                    ea:2e:ce:39:ea:8c:33:aa:83:bf:e3:8f:48:34:77:
                    02:2b:91:06:8e:8b:32:fa:ff:b6:ff:f0:b1:a5:7e:
                    7f:a6:53:3d:a3:7f:9b:36:ba:5e:97:ae:e4:39:75:
                    4d:8f:4f:ad:a8:9a:c6:c6:bf:d2:ee:a2:96:47:41:
                    ec:8a:71:79:72:df:24:dc:42:32:b5:7e:eb:98:67:
                    1a:86:e7:22:30:01:96:1b:49:93:a9:9b:85:24:06:
                    77:62:67:84:b6:06:69:47:ab:3e:fb:6f:ae:eb:3c:
                    64:e0:ce:0a:54:d6:02:5d:9f:1b:dd:1d:77:a3:de:
                    8a:e4:45:a3:8a:28:e7:81:0f:36:5e:a2:e8:ee:c6:
                    7d:85:81:3d:61:12:1a:37:2c:c6:77:35:24:e3:c0:
                    c2:c4:9a:0b:4d:bf:28:4c:a2:46:cd:68:de:5a:7f:
                    51:b7:41:84:01:76:e2:e8:bb:83:b8:ae:a5:d1:a1:
                    ab:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D1:4C:E5:9A:CE:CC:77:A5:28:6E:A6:6B:40:69:EB:9B:F8:34:E8
            X509v3 Authority Key Identifier:
                keyid:86:35:89:FE:EC:BE:4C:4A:B4:44:D9:38:64:45:4D:BC:D7:CD:0D:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/5140ff-090e-43da-b7c8-59e818c6b71b/1/hjWJ_uy-TEq0RNk4ZEVNvNfNDec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7b:b5:17:75:fc:a1:b1:4c:c3:b2:97:8d:05:03:cf:97:f7:
         e3:67:0f:1b:e1:6a:89:4e:51:ad:56:9e:04:ad:68:37:6f:29:
         dd:f6:7e:36:da:1f:3c:2a:46:96:b8:4b:bf:52:cf:81:e8:ee:
         41:ac:10:df:16:b2:e1:9a:71:77:1d:f0:14:2d:2f:ca:28:11:
         55:b8:1f:f9:f9:13:35:e8:d6:2b:38:a2:8e:2f:df:31:5d:5a:
         7a:8c:15:ec:bd:49:bb:54:3b:c5:4a:72:b3:13:ca:37:05:35:
         99:18:50:a2:87:f5:08:23:41:8f:3f:a1:51:20:e3:f1:34:2e:
         9f:a8:c2:13:9b:7a:f6:96:76:a8:4b:af:86:10:b0:8b:4a:5c:
         f4:df:ae:42:87:67:97:9c:3e:93:93:3e:62:86:e7:37:2b:9d:
         a6:5c:94:b1:32:8f:99:ed:b1:82:b8:7a:fa:da:d1:af:61:17:
         fb:40:0a:75:da:90:0b:a0:e9:e0:0a:40:92:57:74:f8:a5:65:
         20:f0:fa:36:ac:d2:eb:24:08:24:09:0e:47:52:9f:7d:ca:e2:
         1a:2e:8e:3d:7e:87:02:77:e6:56:90:a2:cc:b1:95:ae:46:5f:
         fa:b6:48:2a:4c:60:3b:2e:88:35:85:30:06:58:32:93:7e:77:
         b8:54:f1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:37 2026 by rpki-client