Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
File:                     MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json)
Hash identifier:          0tK5X2rodyqVaPERQqVJt/QbubFVy0VYxBpIRVZdHFc=
Subject key identifier:   77:CC:94:38:C9:29:D4:A5:7F:0B:EE:88:DA:5C:BA:73:08:82:9B:F0
Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2
Certificate issuer:       /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
Certificate serial:       019F91DA494D7BDCE53A80E82308B099A83C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 02:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:29 +0000
Files and hashes:         1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=)
                          2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: /yY/3YAtuGMBYBgp2HhMLtG0poTXK2aqXnk0MQJDR+s=)
                          3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=)
                          4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=)
                          5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=)
                          6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=)
                          7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=)
                          8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=)
                          9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=)
                          10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=)
                          11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=)
                          12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=)
                          13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:49:4d:7b:dc:e5:3a:80:e8:23:08:b0:99:a8:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2
        Validity
            Not Before: Jul 24 02:00:29 2026 GMT
            Not After : Jul 25 02:00:29 2026 GMT
        Subject: CN=77cc9438c929d4a57f0bee88da5cba7308829bf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:75:0d:c5:9b:73:62:4e:02:8e:90:5d:97:83:
                    ab:83:74:13:a9:d1:3a:62:d4:f9:e0:c5:7e:cd:ed:
                    5b:c1:5b:18:38:f0:d2:8f:c4:77:a0:31:e0:ad:26:
                    33:18:24:c8:5c:07:f1:46:f6:b3:76:b8:f8:4d:18:
                    70:3a:e9:e2:ca:dc:6a:09:fe:2f:3c:c6:0c:bd:90:
                    70:56:3e:e9:99:06:b1:fd:cc:d1:1a:c2:58:1f:0b:
                    0e:db:48:5b:7a:78:26:9e:48:aa:e8:c0:08:e3:9b:
                    0e:21:be:3b:11:54:86:e8:a8:b9:6b:d7:82:ec:b1:
                    a9:fe:0a:0a:c6:b4:13:09:5b:18:0a:b2:f9:7a:89:
                    8b:84:d9:1c:c0:f8:18:2c:f0:a1:f4:c4:11:2b:af:
                    fa:e5:7c:8d:de:96:47:c5:cd:a0:3c:d4:c3:af:14:
                    b8:6f:b9:95:c8:87:34:0b:04:33:b5:ed:48:40:80:
                    5f:27:60:5b:1d:4f:95:56:d8:17:6d:8e:8e:bd:2c:
                    2c:d5:01:7b:95:3f:ac:41:f7:66:ca:62:04:df:46:
                    71:77:fb:bd:8a:64:aa:f5:e2:69:a4:32:10:30:b3:
                    f7:9d:c0:62:12:35:e0:22:5e:bb:83:93:ff:20:24:
                    6a:03:a0:57:84:c2:65:21:0b:29:41:52:0f:cb:8d:
                    04:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:CC:94:38:C9:29:D4:A5:7F:0B:EE:88:DA:5C:BA:73:08:82:9B:F0
            X509v3 Authority Key Identifier:
                keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:7a:3c:89:e0:d0:4d:8a:b7:0f:35:73:60:81:25:48:aa:41:
         17:a5:93:4d:46:cf:bb:43:fd:3c:fa:11:4c:64:75:76:3b:3c:
         50:cb:0d:87:ee:57:45:6c:eb:d6:33:6b:c7:32:19:fc:d5:39:
         a5:8a:7e:fe:8a:08:22:27:0c:24:26:89:ee:bb:52:07:94:b8:
         98:bd:0c:85:a9:d3:c1:7d:75:53:68:52:be:0b:49:aa:7a:35:
         5e:4a:e5:ce:ac:49:64:7d:70:71:b1:bb:07:0f:77:a4:26:70:
         f6:ed:29:4f:c7:59:57:b1:43:75:9b:0f:53:db:03:ce:f6:b2:
         86:4c:ca:36:2f:75:69:ed:bc:f9:4b:9e:25:40:34:7f:3e:d2:
         45:89:41:01:70:b7:67:31:2c:59:8c:6f:09:b1:c9:68:4e:f2:
         57:93:c4:56:14:ac:0a:4c:6a:8e:4c:ad:40:a1:a0:0b:0d:8e:
         a5:93:43:1a:bf:cc:bb:a2:05:f8:70:c1:a1:5c:b1:94:bb:d8:
         ca:71:53:d2:65:aa:e4:99:6e:ad:a8:fc:f6:86:38:0f:91:bb:
         49:c0:8a:9d:13:36:c6:4d:7b:69:45:e7:79:35:90:f7:9d:2e:
         65:ca:76:ac:36:ea:a8:32:b1:54:03:75:9f:9e:c3:2b:69:42:
         7a:f3:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:35 2026 by rpki-client