Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
File:                     1-DzK75yREg7G-xT_TExXRaAjm3c.mft (raw, json)
Hash identifier:          9eHcsYwlpf4SaFvGEmH+CzLpjkWKpqh05VG0PYRMYlU=
Subject key identifier:   18:09:96:17:1F:08:7A:23:BC:74:24:83:AD:1B:FF:C0:73:EA:A7:2B
Authority key identifier: F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77
Certificate issuer:       /CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
Certificate serial:       019F8FEC10769A218C49A94E6B1A4CDB6480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
Manifest number:          190A
Signing time:             Thu 23 Jul 2026 17:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:40 +0000
Files and hashes:         1: 1-DzK75yREg7G-xT_TExXRaAjm3c.crl (hash: XBhdcP6Iyi1prra4nifafXhVuYHBYuiZnQRox2MDO1E=)
                          2: W8PXcMyrmfRSqYOFlpTyQQni5Fg.roa (hash: dRzn2uxU587w+8HTL/6mVCqJFuzClYuZ55vRVG+mWEQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:10:76:9a:21:8c:49:a9:4e:6b:1a:4c:db:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f83ccaef9c91120ec6fb14ff4c4c5745a0239b77
        Validity
            Not Before: Jul 23 17:00:40 2026 GMT
            Not After : Jul 24 17:00:40 2026 GMT
        Subject: CN=180996171f087a23bc742483ad1bffc073eaa72b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6c:4c:d0:a9:9a:1f:a7:7f:ce:e3:72:dc:2c:
                    3f:c0:99:b3:3c:e8:9f:66:58:bd:7f:4f:43:a3:78:
                    c4:d4:10:a8:02:c6:be:ab:14:73:4c:f8:8a:ed:fe:
                    43:74:25:6c:c2:02:7d:f4:fe:e3:37:6a:5c:8a:45:
                    bd:fd:0d:ab:cf:ea:70:fb:ab:1f:7b:9e:8a:72:d2:
                    d5:aa:bb:7d:c4:22:d9:b7:27:b1:21:3f:2f:de:22:
                    90:5c:57:13:f8:6f:ca:86:bb:bc:69:97:19:17:99:
                    97:2a:4c:a8:1f:ba:85:34:57:be:33:2f:8a:2a:e5:
                    54:34:54:9c:96:a9:5a:2e:33:e0:b8:35:c9:67:e8:
                    d2:59:6f:67:3b:4f:ed:0f:50:60:2a:c7:2f:04:a0:
                    de:36:db:f5:d0:c6:f5:1f:5a:d5:45:a7:b2:c9:61:
                    06:70:3e:30:80:b9:6a:d7:39:a6:26:90:23:32:cb:
                    40:de:bb:dd:05:b0:aa:3d:13:9f:1e:7f:7a:26:55:
                    9e:f3:19:f8:73:1a:a5:d4:a0:a8:2d:06:1a:77:e3:
                    2d:f5:c9:e8:61:8c:a5:41:a2:66:9c:e4:4a:87:17:
                    4b:c4:a1:e8:40:40:77:22:a2:f3:88:93:72:0e:5a:
                    62:af:9d:21:7c:21:0a:52:ec:21:24:ca:ff:e5:3c:
                    b6:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:09:96:17:1F:08:7A:23:BC:74:24:83:AD:1B:FF:C0:73:EA:A7:2B
            X509v3 Authority Key Identifier:
                keyid:F8:3C:CA:EF:9C:91:12:0E:C6:FB:14:FF:4C:4C:57:45:A0:23:9B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-DzK75yREg7G-xT_TExXRaAjm3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/45fcd5-8812-432d-b537-76982f03ea0c/1/1-DzK75yREg7G-xT_TExXRaAjm3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:59:6a:3d:0b:d5:64:b9:b5:25:7b:eb:1f:fc:e8:80:de:0c:
         9e:25:ed:23:28:a3:a7:16:8c:0d:13:c0:e1:fa:57:31:38:b9:
         ff:3d:4e:90:af:0c:c6:0d:80:f4:e5:5f:08:a1:d8:96:fc:9f:
         c4:1a:68:2e:6d:32:28:28:aa:b1:ae:6b:29:69:ab:08:f3:54:
         8e:00:fd:0b:3b:1c:4f:1a:36:25:2f:32:c5:2d:82:82:63:4b:
         d5:a5:5c:b2:e9:b4:45:f4:d1:87:9d:31:38:76:22:37:3f:33:
         d6:86:5c:af:e5:7f:1c:e3:f7:ef:3d:b1:62:5a:00:43:0f:29:
         24:9d:f5:6b:d2:46:d1:49:7e:18:84:9c:7b:12:71:2b:61:17:
         78:34:6a:91:27:13:14:36:c1:2d:94:b1:f5:f3:ac:06:c1:16:
         45:d3:0e:03:0d:f4:d0:c2:52:cf:b6:47:c2:1f:d5:c8:ff:8e:
         99:16:a7:93:9a:e9:2b:97:d3:3c:b2:d6:bf:a0:4a:69:2a:af:
         1e:4a:a4:0a:db:13:69:66:71:ff:53:a0:97:e0:e0:14:c8:3a:
         f4:aa:cc:ca:08:85:79:6a:e5:68:a5:7d:96:96:e4:ed:07:ed:
         b9:da:87:dd:d6:41:67:26:2e:5c:b1:f3:00:d7:f5:f1:79:35:
         ed:e0:51:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:42 2026 by rpki-client