Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
File:                     A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft (raw, json)
Hash identifier:          MBQasf7XmBxuXFTLPA2FDfuKSZPu4gXqVxfA81XnpxE=
Subject key identifier:   95:51:5A:B8:45:0A:98:E6:9E:75:FA:2B:FE:E1:9F:C6:58:E0:CD:6C
Authority key identifier: 03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61
Certificate issuer:       /CN=03f3f8259b30ec03722f942035a94e209f882861
Certificate serial:       019F91A3D65075221D0098ED4B948C55F4CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 01:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:01 +0000
Files and hashes:         1: A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl (hash: L2AdY7JgTeUZ0kD8umXgzKop+JC+18AIuRYS1SmVC9U=)
                          2: DNy-Ywo37F1s94DzRvRfvjndiAw.roa (hash: kJUUhnZY4jdclwXVHJF/NcqyyZenLqwhpoq2KYT5Bxk=)
                          3: GtRmGH4bGG6oOP8kzT17gVxixR0.roa (hash: vabTUX5Qd4MvYjPie5N9mfB497dNe6aI2rUnS9Qyx28=)
                          4: nehss--I5fmpoVCvb0Oo4Ab0mGQ.roa (hash: QL6FWPRVEjAfMv/oZtTE230B/5xMRz1J6W0IaVZGkq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:d6:50:75:22:1d:00:98:ed:4b:94:8c:55:f4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03f3f8259b30ec03722f942035a94e209f882861
        Validity
            Not Before: Jul 24 01:01:01 2026 GMT
            Not After : Jul 25 01:01:01 2026 GMT
        Subject: CN=95515ab8450a98e69e75fa2bfee19fc658e0cd6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2e:ea:51:aa:3f:c0:81:e9:94:15:a3:20:05:
                    7c:3b:ed:1a:ca:f3:46:e0:b8:26:e6:cb:17:f8:99:
                    a8:b1:ec:8d:79:fa:f6:b9:13:88:79:9d:bb:5b:e1:
                    8b:c7:a5:14:bf:64:92:a9:97:18:74:6b:0d:74:99:
                    3c:76:86:07:a2:4f:35:5a:38:f2:b0:e3:e7:2b:da:
                    52:47:b0:8c:cd:3a:85:a5:91:56:a8:f5:3f:52:99:
                    3a:ba:08:d7:8e:36:ea:e8:b4:9b:b3:f7:d2:b1:91:
                    7e:75:0b:e6:64:d1:25:be:e9:9f:f9:77:ab:5e:9f:
                    3d:6e:61:de:27:e7:b0:04:97:80:f3:b3:cd:ba:77:
                    43:1e:26:b4:43:63:2c:bc:30:8e:74:7c:e6:eb:fc:
                    60:1e:14:5a:84:06:86:30:cf:6e:79:1a:96:3b:38:
                    3e:83:51:3f:aa:df:b0:6b:dd:aa:20:c8:1c:ba:90:
                    82:f2:e4:5f:6a:5e:21:f5:c4:f6:82:bc:96:3e:db:
                    35:79:fb:14:4f:39:4c:05:15:46:9f:1d:b9:14:45:
                    91:dd:61:14:54:a2:78:a7:0f:c8:80:a6:64:7a:06:
                    05:ae:fd:88:21:0f:c5:b4:ba:7f:f5:49:9b:72:b4:
                    17:cd:af:60:26:37:b5:4f:7c:30:83:31:ab:23:32:
                    07:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:51:5A:B8:45:0A:98:E6:9E:75:FA:2B:FE:E1:9F:C6:58:E0:CD:6C
            X509v3 Authority Key Identifier:
                keyid:03:F3:F8:25:9B:30:EC:03:72:2F:94:20:35:A9:4E:20:9F:88:28:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P4JZsw7ANyL5QgNalOIJ-IKGE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/a4582e-1a4d-4d4a-a5f4-ab13356e5fec/1/A_P4JZsw7ANyL5QgNalOIJ-IKGE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:8e:d3:b0:44:73:aa:6a:cc:41:1c:c7:6b:4d:8c:af:a3:2f:
         62:be:4d:92:0e:e7:89:25:50:f6:b4:1a:51:34:36:50:22:e4:
         44:35:2f:f3:e7:a3:82:c8:a8:ab:8a:5d:d3:f9:a4:a7:1e:6d:
         75:eb:cc:d0:44:6c:d5:c6:f2:67:14:b1:67:5b:10:db:f7:a1:
         56:48:53:bf:10:c5:53:10:13:d3:95:11:5e:c3:ac:ca:66:47:
         d8:99:10:f9:ea:48:0b:72:06:7b:37:38:8e:14:fe:c2:25:bd:
         8c:52:35:49:95:8f:c4:ff:bb:71:69:10:56:f7:67:bb:ec:36:
         cc:6d:aa:b9:f3:f7:ab:92:17:8e:d3:83:43:ff:21:d2:23:b0:
         1f:4c:a4:6e:65:e7:f1:3b:b3:0a:b0:24:69:2e:e1:60:c4:1b:
         1f:8d:89:e5:d6:97:30:e8:24:4c:b4:f0:a2:fb:9f:58:b9:d1:
         15:b1:5e:10:c0:1d:a6:59:0d:4f:fe:92:ac:3a:dc:fd:9f:0b:
         f2:45:c5:60:be:90:2b:e8:1a:ac:d7:55:ad:b7:71:46:b5:a8:
         b9:71:59:0b:58:aa:b1:72:75:1c:2f:25:aa:bb:6a:f2:de:4d:
         5b:f2:b1:c0:ce:d0:ca:96:e2:b2:f0:75:a9:a8:23:60:10:e6:
         67:f9:f0:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:15:25 2026 by rpki-client