Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File:                     2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier:          Up5MCZdSewJpZ+WhW2QxEBMlMPrkHUs55wuZtCFD5+k=
Subject key identifier:   1A:9D:5C:98:D8:58:A5:C9:F1:25:A9:D1:06:A8:53:EB:54:86:B5:8A
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer:       /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial:       019F91A3BF6F1FF2C60A75F1CF2D6E89FA6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number:          19C5
Signing time:             Fri 24 Jul 2026 01:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:55 +0000
Files and hashes:         1: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: jiukfrKOWk/Gtj6JgrbXwa5XnrNEn9/CNQA9fK+XCO4=)
                          2: hI0YBFSKH8Olt8lGh7kRCo2X6M0.roa (hash: 2CgQbDd8qWcK8hWLJTqgozocLXVX3fbBa3yKdD8bUVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:bf:6f:1f:f2:c6:0a:75:f1:cf:2d:6e:89:fa:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
        Validity
            Not Before: Jul 24 01:00:55 2026 GMT
            Not After : Jul 25 01:00:55 2026 GMT
        Subject: CN=1a9d5c98d858a5c9f125a9d106a853eb5486b58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e1:2b:93:9d:91:1b:b8:2b:df:1e:1a:b3:88:
                    e5:95:d0:b5:0d:3f:12:e3:ea:b2:8f:43:ae:e7:44:
                    ca:9e:7d:b8:60:55:e2:03:13:5c:2a:5f:66:57:77:
                    ac:ae:d9:aa:36:73:b5:41:76:8f:fb:a2:b4:ed:87:
                    85:a6:67:87:de:f0:c5:74:c0:ce:f7:70:ab:85:de:
                    51:74:97:54:e1:ea:77:11:47:64:1d:42:d6:43:b7:
                    39:c0:ba:25:29:b7:f3:66:2d:a1:d8:75:9c:1a:f8:
                    39:b9:25:84:ae:c3:e4:8d:26:2d:56:2c:2a:52:fa:
                    09:8d:c4:48:7e:98:fb:18:fa:e6:bf:8a:70:60:d2:
                    b2:a2:a0:23:b2:eb:e4:f6:8d:74:a8:c8:a4:f6:fe:
                    1c:8d:cf:a4:80:70:ec:83:ae:2d:30:32:bb:eb:ba:
                    1d:b8:39:e3:2c:eb:fb:56:6b:6d:b5:19:0f:69:ab:
                    20:66:b1:41:53:0c:09:c1:7f:78:29:2b:ed:e9:6b:
                    f2:6d:2a:96:5d:c7:e8:2c:67:7b:be:8a:10:a2:c5:
                    ce:06:24:90:db:e1:df:90:a0:33:ed:84:5d:3a:17:
                    38:6c:b9:13:70:9e:bf:a3:bd:35:f4:3e:66:1b:d9:
                    c1:db:f1:db:ce:7e:7a:45:32:f9:cd:81:ee:89:e1:
                    3d:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:9D:5C:98:D8:58:A5:C9:F1:25:A9:D1:06:A8:53:EB:54:86:B5:8A
            X509v3 Authority Key Identifier:
                keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:ca:6d:85:40:96:d2:cb:16:22:7a:a0:13:90:ea:99:0a:19:
         ca:93:cb:a3:6a:83:65:71:f8:4d:d7:a8:a5:8a:5e:a4:8c:93:
         4d:86:12:3e:f3:2f:86:75:49:04:f3:f0:57:48:0b:2a:83:9b:
         83:52:7c:6f:ac:a7:58:88:e6:9e:1e:c4:24:4d:be:6c:72:5b:
         ee:10:70:99:2e:c3:72:c8:bb:cc:0a:79:5c:36:c6:2f:bb:e6:
         eb:7b:bf:73:22:b8:b6:c6:71:af:2e:db:7f:10:05:18:5d:a8:
         da:32:5f:68:75:a2:81:b1:67:2d:ea:e3:c9:5a:38:ab:f8:b6:
         72:6d:10:f1:c1:6a:e7:32:7e:d2:76:02:45:3f:5b:f7:24:82:
         42:4c:b5:75:ff:fa:b3:4c:1a:3c:0c:22:cd:aa:09:c8:60:ab:
         36:32:50:cb:cf:9b:ae:65:fd:1d:14:6a:27:e5:7d:44:ed:c7:
         a1:5f:c1:e9:62:47:f6:8c:85:17:91:2c:d9:ba:2d:83:94:0f:
         27:bc:a3:24:c6:5a:4c:2a:2a:1f:cc:e4:c1:ef:42:4f:51:33:
         de:53:a4:e8:f8:44:00:9b:3f:d0:b6:e1:c9:b3:91:fe:3c:6b:
         d8:70:2f:21:80:70:6b:f2:74:e0:70:0f:ae:15:74:74:4e:fa:
         47:87:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:19:58 2026 by rpki-client