Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
File:                     T5rG_iAxrd4DZoJA48XZHsZxHh4.mft (raw, json)
Hash identifier:          nojTd85f/ZLEuTvIMAfFiXcElHI5zcUL8IrppSu8svU=
Subject key identifier:   16:55:E8:C9:BA:94:CC:48:5B:98:9B:50:FC:7B:58:16:57:5F:5A:C6
Authority key identifier: 4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E
Certificate issuer:       /CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
Certificate serial:       019F92B6819406648B027B093025F5EB5D62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
Manifest number:          19D1
Signing time:             Fri 24 Jul 2026 06:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:01 +0000
Files and hashes:         1: 0dAC8_MIFapVxgRzs4TlZHVEeEY.roa (hash: 49clzQhW1ftGGWowSAxsNPEboDX4Z+TOAbVsOQgEQas=)
                          2: P1u4eEpMlt9VP1A_Q7ba9uco-DE.roa (hash: FS9C2EZkw3xynye9bdmDp7IY0lMQ/RYNxAFxC1rEr8A=)
                          3: T5rG_iAxrd4DZoJA48XZHsZxHh4.crl (hash: WZHw2FxY5izqN+JJZ3OnDQTMy5C+EonaPvyN8FojhQ0=)
                          4: jx00a_pu7cUe7ylsCN_mAD4NHH0.roa (hash: qbhokNXhBId7yUMzZ5kksb51Uw6RLNqqZ85yZyQ9F7g=)
                          5: ug2lwdEDypbroUTh-MUKjX7xHxM.roa (hash: tzIgDVhwzntyEbgry33zKLqLx6I3KowYd/8dZ4T/e/0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:81:94:06:64:8b:02:7b:09:30:25:f5:eb:5d:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f9ac6fe2031adde03668240e3c5d91ec6711e1e
        Validity
            Not Before: Jul 24 06:01:01 2026 GMT
            Not After : Jul 25 06:01:01 2026 GMT
        Subject: CN=1655e8c9ba94cc485b989b50fc7b5816575f5ac6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:aa:45:64:b7:db:97:a4:6e:af:f9:e5:32:80:
                    79:57:e0:ee:ae:fc:9d:f9:9f:2c:03:8d:ff:94:da:
                    16:6b:20:cf:8a:df:4a:5d:0f:9f:46:2a:f2:7d:05:
                    8a:e1:2c:b0:0f:19:72:dd:b8:78:b5:f0:1d:fe:a2:
                    13:b4:2d:1b:02:3a:9d:ec:ab:cb:ee:a5:b6:e4:65:
                    51:1f:7c:6f:bf:d9:1d:51:23:19:db:57:5a:a7:48:
                    02:51:33:78:5c:51:8c:7f:3d:54:ed:63:7a:e5:aa:
                    06:43:ea:ab:ae:34:85:f5:0e:73:33:6a:9e:75:6c:
                    5b:20:fd:78:a7:4a:a2:10:8f:99:2b:2c:66:66:4b:
                    58:b1:05:4d:e0:73:db:61:5b:99:ea:3a:5e:34:ef:
                    f0:54:d9:18:41:a6:c5:c2:bb:49:70:85:c0:52:3e:
                    ea:e9:fb:6b:c6:fb:a5:83:df:9a:29:89:ed:96:e0:
                    ea:95:fd:8e:2c:b6:53:c6:1c:a7:cd:da:5e:37:1a:
                    2c:63:69:59:7f:61:fd:77:b8:52:ea:14:7c:ff:98:
                    cf:70:01:bf:f3:53:8e:9c:5e:1e:b8:2c:63:6f:a3:
                    85:d4:a6:d8:c6:d2:0a:7e:36:24:0d:d7:0c:e1:74:
                    66:57:4d:67:c3:35:69:52:1f:3a:f2:e5:65:79:79:
                    63:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:55:E8:C9:BA:94:CC:48:5B:98:9B:50:FC:7B:58:16:57:5F:5A:C6
            X509v3 Authority Key Identifier:
                keyid:4F:9A:C6:FE:20:31:AD:DE:03:66:82:40:E3:C5:D9:1E:C6:71:1E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5rG_iAxrd4DZoJA48XZHsZxHh4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/847ffa-9f38-4610-98e7-528a63be4c87/1/T5rG_iAxrd4DZoJA48XZHsZxHh4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:70:1a:a5:80:85:89:aa:11:78:2a:64:5c:0b:8b:ac:65:
         2f:8c:48:4a:cb:ef:03:95:53:8c:6a:1a:c3:03:27:59:d7:ea:
         6d:31:bd:cb:ad:8a:44:c7:be:3b:d0:d8:3d:79:c1:55:80:e6:
         e8:2c:45:97:54:01:3f:f8:88:3f:8b:c6:ef:fb:7b:e2:f4:87:
         ba:92:6f:a5:57:4d:30:e9:12:0d:ce:a2:b1:e2:58:84:53:bf:
         c6:31:47:bb:5e:98:91:7c:9d:ef:45:b0:80:36:81:c0:55:00:
         c6:33:84:17:a4:81:b6:64:a0:d2:b1:5d:11:7e:60:f0:5c:7e:
         a8:02:98:18:5c:3b:ce:f4:50:17:6d:e6:5f:47:57:93:27:f4:
         77:33:08:ef:dc:be:da:1e:1c:b2:c4:50:74:35:83:0f:ec:28:
         6e:df:73:5e:7c:cb:3b:95:11:b5:ab:71:8f:16:70:35:79:d7:
         12:3c:a5:e6:43:d2:ce:90:4d:7d:4a:76:d4:e1:57:46:47:24:
         be:98:f5:b0:a1:56:9f:c1:59:fa:70:fe:1f:e5:dd:07:9c:d0:
         df:e4:95:77:2d:67:79:33:c6:c9:97:dc:83:29:18:22:95:3a:
         6a:40:ee:38:3d:d3:f5:3f:4f:3d:d0:07:70:1d:e6:ee:13:0b:
         03:26:21:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:02:19 2026 by rpki-client