Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
File:                     0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft (raw, json)
Hash identifier:          WahB14TPXZQ9N6recca6RlV5Wd8A/jhB6E7TyXT5SN8=
Subject key identifier:   00:3A:D4:B9:AE:C2:0B:65:A2:1E:7A:F4:BF:92:9B:E2:49:51:DB:20
Authority key identifier: D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D
Certificate issuer:       /CN=d03046d16cfc391b028b88743773ce005cf97b1d
Certificate serial:       019F8FB55AD5C881A37ED5CDC25C5F448C45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 16:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:54 +0000
Files and hashes:         1: 0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl (hash: sxhQcq+48ilVJXaKpRvlbNNd/mCCZ57C0IOpLhlsHOc=)
                          2: 6sIpurMyf7U7cVjfDtGf65yWDwA.roa (hash: cZnmgrrB6eUg5rHF2CdbgLHSyI5RnOe61koYU+5dDnA=)
                          3: NZSg7hN5dj36ijrS0iZ916AKsoM.roa (hash: VS2r3z5DpXErRLlghndtWldrsOM22Uv0cqCOqDvPp5M=)
                          4: _EXzGZ6mIohQTkOQklm2HctGpf0.roa (hash: d5WVsZmAqKJyYsnjGKZS29R+h6TCBV39mM8GYttnuxM=)
                          5: aTt1lDOQ__4_BOzrJWRmWq2_g_I.roa (hash: v57HfwpPj2JAqIcZD1AamnQQx8/Wn9ebUoCosyKqGs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:5a:d5:c8:81:a3:7e:d5:cd:c2:5c:5f:44:8c:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d03046d16cfc391b028b88743773ce005cf97b1d
        Validity
            Not Before: Jul 23 16:00:54 2026 GMT
            Not After : Jul 24 16:00:54 2026 GMT
        Subject: CN=003ad4b9aec20b65a21e7af4bf929be24951db20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:05:ea:17:63:fd:22:b7:18:16:5f:aa:03:18:
                    c3:1f:a9:a5:25:9a:80:88:32:77:fe:ea:6e:4b:dd:
                    98:96:1a:78:9d:21:c1:5f:b0:fc:cb:99:ff:5b:c2:
                    cd:dd:ed:a1:2f:b5:fa:80:b0:29:56:a3:f2:16:68:
                    7e:4a:47:c6:42:81:48:bd:99:e4:4b:c5:5e:0c:7f:
                    2a:6f:94:d1:47:70:49:34:fa:0a:70:b6:46:ef:38:
                    c5:6b:ba:84:a6:c1:85:25:42:77:75:b7:5c:40:35:
                    5b:e0:e2:1e:99:d6:80:73:80:e4:f9:7a:6c:bf:af:
                    70:cd:ae:15:da:81:a0:12:62:c9:d0:7c:b8:8d:dc:
                    a2:81:9e:d2:20:f7:2d:49:f4:1a:a4:5a:f8:60:b1:
                    a5:a3:16:d9:9a:a7:d0:1f:08:44:4f:8d:7b:34:87:
                    10:1d:a1:28:70:f5:b8:a4:73:23:a4:37:3a:41:29:
                    f7:df:f6:3d:c1:40:d0:34:39:75:ed:93:34:0d:f4:
                    10:3c:50:18:33:ed:1c:c7:dd:92:42:5c:f6:a6:6c:
                    61:4b:4d:b8:3f:30:29:95:60:06:12:0e:27:75:44:
                    03:e8:17:ac:b9:15:07:c1:f0:91:22:f6:a1:0d:ef:
                    9b:e9:1e:d3:7b:39:db:8e:8f:be:1b:c6:7b:a5:70:
                    5e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:3A:D4:B9:AE:C2:0B:65:A2:1E:7A:F4:BF:92:9B:E2:49:51:DB:20
            X509v3 Authority Key Identifier:
                keyid:D0:30:46:D1:6C:FC:39:1B:02:8B:88:74:37:73:CE:00:5C:F9:7B:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0DBG0Wz8ORsCi4h0N3POAFz5ex0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/18d132-9951-4055-b5a6-dc0e1a725221/1/0DBG0Wz8ORsCi4h0N3POAFz5ex0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:96:6a:9d:98:4f:b8:e5:db:b8:4f:f4:58:06:0f:4a:8c:11:
         29:f7:18:9d:44:dc:c8:80:26:d5:00:7d:d8:fd:15:97:8e:fa:
         44:d8:00:23:14:27:33:12:ba:82:2d:2f:4e:7a:32:05:f3:05:
         a7:04:b9:74:1f:64:54:b3:c5:de:d8:e6:44:31:86:a5:e4:5f:
         69:55:98:56:a3:0d:c6:26:11:85:1b:85:4c:ba:36:4f:d7:fd:
         ee:35:0d:90:cb:f5:d9:6d:63:9c:4f:2d:b2:7b:90:cf:58:88:
         fc:25:f4:28:df:e1:1b:0a:b0:10:8c:ce:b8:dd:b1:55:9e:f8:
         d5:b2:18:dd:98:d5:95:85:5b:29:06:de:f1:61:c7:5e:93:80:
         c2:8a:54:42:c6:74:b9:b6:ca:0f:49:7f:b0:59:15:48:f3:8f:
         2b:23:b5:f4:ee:33:4f:69:d1:d3:7d:e8:0a:5e:5e:aa:60:70:
         18:68:d2:53:0f:b1:d7:11:43:3c:8d:7e:3e:c0:0b:93:1e:e4:
         35:6f:b1:b7:2a:37:6e:51:51:9e:be:be:06:c0:8d:7a:99:56:
         a5:c4:9e:54:9b:dc:f3:42:7b:36:d6:49:74:1f:20:36:7f:32:
         1a:23:a8:44:fc:7d:fd:4a:d7:bf:12:3e:22:70:4a:d5:0e:53:
         36:7c:6f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:05 2026 by rpki-client