Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File:                     s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier:          vamaSmU2MpxzFe8E2DFvr2HF2Om+d9qMU7s5H2vSGZU=
Subject key identifier:   E2:F0:53:BE:E5:3B:E1:EC:D1:C7:A5:4C:D2:7F:51:9C:1A:6F:92:D1
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer:       /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial:       019F927EF1DD7F6C5B1C005C792B670BBCF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number:          19D2
Signing time:             Fri 24 Jul 2026 05:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:20 +0000
Files and hashes:         1: KvgeqJVMtBERBgaWeQ7l2q_TyyI.roa (hash: NJUE6bdAubYbnAUIE6s0c5Wi5PY+ros78NmtfNQmGAk=)
                          2: Of_F0nZx4uUMsyu_MFlv9vqYM6A.roa (hash: V1xfi16Y3WhXqWRGet3YcxqXtnKz/3AWs7HoDzA48YM=)
                          3: bnU5Q0FeKCXPHTgsxSNx9kV93d4.roa (hash: jfuS4WANPOwG9IyimGe8aZrpP9Pv78GN//1LDqZ2n2k=)
                          4: ck22982XPjtgcPjy954uVGCKcK0.roa (hash: xSnMILKaL4KrwNXzralU8vyZN836vuMs+IKmeHjf9vw=)
                          5: kSkniVRVZqjXlp9BCZT6zQWlnDU.roa (hash: FfDKz/98X7m6YKQq0UNqzZ0ctHS3WQFyRiYlyLAtxCw=)
                          6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: 4P7TYJAcetqKxKLdo95k6oEZeh1JNbqjv23zMzqPg8I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:f1:dd:7f:6c:5b:1c:00:5c:79:2b:67:0b:bc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
        Validity
            Not Before: Jul 24 05:00:20 2026 GMT
            Not After : Jul 25 05:00:20 2026 GMT
        Subject: CN=e2f053bee53be1ecd1c7a54cd27f519c1a6f92d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:70:90:51:c2:20:94:b3:2d:c3:bb:d1:48:84:
                    e5:5b:3c:d1:73:15:80:c6:af:85:c2:8b:3a:9d:d7:
                    b4:96:35:2e:24:b2:1e:26:12:cc:fe:75:ee:61:9f:
                    9c:86:a3:63:03:3a:27:b2:15:b0:66:d7:40:1b:b5:
                    9b:73:1d:6d:35:6f:82:87:ce:7c:05:11:08:c0:87:
                    50:25:00:0c:2b:5a:f7:46:5c:78:cb:a5:b5:82:6a:
                    df:02:83:3a:db:53:a6:db:28:4d:1d:87:ea:1e:df:
                    34:b2:13:cf:c0:44:c5:ae:0b:e2:15:4c:45:5f:b8:
                    97:af:ee:d6:33:04:fa:0e:50:3d:bf:dc:f2:64:6f:
                    62:81:2a:77:76:ea:f6:31:16:2e:2c:f6:9e:7e:78:
                    2c:da:0a:0f:ee:32:7b:18:68:1a:e5:8c:5c:03:a4:
                    75:29:12:ba:61:e1:b8:7d:d7:0c:80:78:8f:ae:39:
                    eb:2f:ae:be:1b:a6:fd:57:9c:28:a4:67:a4:92:6b:
                    7e:bd:ee:9b:16:a4:59:fd:ee:46:9f:4e:43:61:cb:
                    9a:5b:af:93:4a:88:8b:37:b8:ee:c9:5e:89:ed:aa:
                    68:18:de:6c:b4:84:1a:1b:29:d9:ae:c2:d9:b3:b4:
                    44:64:40:de:28:7d:ec:28:41:b1:97:54:82:e5:ef:
                    96:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F0:53:BE:E5:3B:E1:EC:D1:C7:A5:4C:D2:7F:51:9C:1A:6F:92:D1
            X509v3 Authority Key Identifier:
                keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:92:c1:07:40:16:55:1c:49:22:05:97:9a:87:65:23:18:d5:
         43:ad:8e:69:72:23:b5:59:a8:17:af:09:ad:e2:40:26:45:1b:
         8a:f8:e2:cc:0e:fe:e6:0c:47:7d:4e:e0:75:ec:49:b1:6c:50:
         eb:15:86:b4:3f:78:b3:a7:ab:5c:c0:e7:4d:e9:6e:6f:75:b7:
         0a:82:73:e6:63:36:8c:d8:26:c4:39:ba:d7:3e:49:ae:7f:d2:
         e7:e3:56:4d:60:80:47:e7:a6:39:04:28:00:e0:bc:7a:04:4a:
         42:31:63:bb:37:c2:74:47:4f:7f:0e:07:6a:66:5c:f3:3b:f5:
         43:bd:e5:2b:24:b2:b7:47:ce:2e:b1:14:0b:64:05:7c:f2:77:
         86:84:61:8f:93:b9:fb:13:69:45:48:28:3a:fd:53:80:6d:1c:
         49:3a:78:10:54:a2:83:d9:b5:a2:e2:04:56:7f:43:a5:5a:65:
         7c:d0:a9:26:76:ce:58:1b:f4:1a:a9:3e:25:67:3b:19:2d:a3:
         cb:cf:7c:52:53:e4:1c:e1:cf:a3:5b:c0:bd:8a:cc:38:40:fc:
         8b:6b:ea:5d:9c:1c:40:dc:86:e0:66:87:db:fa:4c:9b:82:7f:
         22:22:c1:90:f5:24:d4:f4:21:49:43:c6:9b:ee:39:24:90:13:
         cd:69:7b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:53 2026 by rpki-client