Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
File:                     1V0PiIjtySCGjGYWIvZDdE5uVsg.mft (raw, json)
Hash identifier:          gJ3lx4iy4MFNon3c+RXE8Yt7OHgjWi9puu7+QUnZDyo=
Subject key identifier:   29:83:15:FA:22:E2:FC:87:F8:04:61:1B:70:29:51:4E:54:5B:F5:42
Authority key identifier: D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8
Certificate issuer:       /CN=d55d0f8888edc920868c661622f643744e6e56c8
Certificate serial:       019F8FB53806C7A21AB2EA3163ABAA9FCE4B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
Manifest number:          0A2D
Signing time:             Thu 23 Jul 2026 16:00:45 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:45 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:45 +0000
Files and hashes:         1: 1TrO_2QXOs4ws94dhqYyKBz0bHM.roa (hash: Ey59AA0KuyADSpp05wiPpigWt7/yZ3FbbIAOHS5yrug=)
                          2: 1V0PiIjtySCGjGYWIvZDdE5uVsg.crl (hash: iKD5myaCV0LaSarY+DfVALuZygVqxYXnk2DyTcKBweA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:38:06:c7:a2:1a:b2:ea:31:63:ab:aa:9f:ce:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d55d0f8888edc920868c661622f643744e6e56c8
        Validity
            Not Before: Jul 23 16:00:45 2026 GMT
            Not After : Jul 24 16:00:45 2026 GMT
        Subject: CN=298315fa22e2fc87f804611b7029514e545bf542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cd:ea:57:33:10:f5:a0:04:d1:39:c6:22:4b:
                    76:22:35:4f:e0:e5:bc:8d:44:91:88:bc:6f:cb:bd:
                    f9:fc:93:72:08:67:ed:f4:b3:15:ce:ad:b8:5e:35:
                    23:00:7b:7d:2a:aa:bf:83:ad:8a:87:25:4e:8d:89:
                    dd:ed:38:80:d5:12:69:4a:d6:ac:96:5a:66:66:01:
                    fd:bd:f6:29:48:8a:48:b1:a8:2b:8a:98:46:51:8f:
                    81:43:ec:a2:92:a6:53:fe:ce:fb:14:b3:a6:db:67:
                    f3:ca:06:58:ad:24:56:7c:8f:89:b7:37:6f:36:4f:
                    e0:f5:7e:25:d6:30:cb:ef:cb:58:c5:03:96:0f:d6:
                    14:4b:7e:8b:a2:40:f6:6f:20:58:40:f6:bf:8e:99:
                    23:b4:34:ac:84:02:36:4c:2d:a6:ae:c3:8c:f6:14:
                    b1:ed:43:d5:c6:d7:93:0a:ea:6e:5d:35:4d:aa:24:
                    a7:5a:bb:b2:4c:6e:e4:9c:d4:24:01:6e:9f:16:16:
                    f3:11:c4:ae:f8:b6:f2:d1:c3:05:0c:64:62:4f:ba:
                    c3:ef:19:ee:32:b0:b4:74:68:4d:fe:e6:4e:ef:b1:
                    e3:90:64:87:42:9b:8f:fd:c4:cd:6a:ab:21:fa:70:
                    02:0f:af:b3:dc:f7:9b:20:36:c1:85:6d:a3:c4:64:
                    5d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:83:15:FA:22:E2:FC:87:F8:04:61:1B:70:29:51:4E:54:5B:F5:42
            X509v3 Authority Key Identifier:
                keyid:D5:5D:0F:88:88:ED:C9:20:86:8C:66:16:22:F6:43:74:4E:6E:56:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1V0PiIjtySCGjGYWIvZDdE5uVsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/193988-9572-455c-a268-de40daa2684d/1/1V0PiIjtySCGjGYWIvZDdE5uVsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:8b:df:e0:e6:55:c9:bc:23:be:6e:a9:63:1b:73:66:f9:ff:
         50:77:9e:15:6a:91:f2:ac:3f:86:a4:d7:f5:20:03:3a:97:15:
         30:e7:4a:cb:14:8f:10:74:fb:bb:aa:f8:36:c6:ef:5f:5c:28:
         0f:3d:5d:e3:28:c9:eb:16:bf:e5:1b:6b:6b:08:80:51:8d:92:
         45:03:47:39:63:c5:27:87:f3:0e:3d:b4:2d:f7:81:b0:54:5e:
         ca:1c:2f:c4:49:17:b4:20:85:58:59:9e:d0:41:c8:09:34:46:
         1e:c2:9e:46:a9:cb:af:8a:23:50:e2:c8:22:c4:d1:92:bb:73:
         44:69:51:1a:85:ed:24:3a:fb:37:f9:79:11:bf:90:6b:7f:2e:
         1a:02:db:41:66:c8:30:cb:9f:a7:e4:21:f0:32:55:be:a5:65:
         1f:6c:4e:85:74:c0:df:6d:13:3b:ea:b3:36:18:41:38:0b:4f:
         cf:9f:4b:3f:09:b6:ed:f6:5d:9d:55:d9:08:e5:f8:6e:c1:89:
         50:72:5a:1a:1d:79:1f:fa:09:9c:e8:72:f1:04:bd:4c:a0:70:
         b7:f6:98:32:65:88:74:30:d3:58:9c:f3:f7:50:31:b8:f1:df:
         47:68:ad:25:7e:28:91:af:ba:65:2f:69:4a:2e:a4:43:d1:f1:
         e9:f2:5a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:10 2026 by rpki-client