Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
File:                     ge7UCROD2e1AVtn07_fSYi3c4gU.mft (raw, json)
Hash identifier:          8y9oq9ld7PahO++H2GvbOV9eZwChK9tZ2Kkm9owtfAY=
Subject key identifier:   93:4E:25:55:B8:A3:B0:A1:8B:3E:51:CB:FF:B5:A3:F1:8C:BA:A6:66
Authority key identifier: 81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05
Certificate issuer:       /CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
Certificate serial:       019F909107D81FF60A3EAAAB6C50DCA7022A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
Manifest number:          19E5
Signing time:             Thu 23 Jul 2026 20:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:51 +0000
Files and hashes:         1: 1-NC7tshaF2ypJ8_MjHNn7wk6ylg.roa (hash: jCwzjmjn98JT6TSQJ5ZYF1MDhZK9lKwwZgcySCCZS8w=)
                          2: AQBZKKUw0CfqLnDcy9hcMLkcBVQ.roa (hash: e8Nsfm4NARCM4kcuUWqaXIOJHBmE9O9GAIR9R4lcjmA=)
                          3: VuSedNq080u42oe8PtK90QTYvdk.roa (hash: ZZTjW9ToPnYbK8YX5tY0XOAbcYCc6gHAC9O1wsgeddc=)
                          4: XiqMdLxfKoUjx95VMJtJvMxAZvY.roa (hash: SXoL5HuxIAiQquuEruAdXQNKyAHRVH7HOzbYGfTqh5A=)
                          5: Z9B94VUuwMzLp1J1_UmV3P3-Bog.roa (hash: b0gWVuQa3wcBnwLUc4jIKMufXEjkfGFHau8pBV9DYlo=)
                          6: bVitBPgZXTQtQI1h9qes3hDRRxY.roa (hash: tqq2V5OTdPLeDjlXCD6tq05OTPazJPQl/dxmKD2F5i4=)
                          7: cv4Cs8DaCPOEr7XZp50WAfCUcpg.roa (hash: cs5Ky6akeTvG5KK7sDCjf8pbC4RQG38T4pA5RDdI7FM=)
                          8: ge7UCROD2e1AVtn07_fSYi3c4gU.crl (hash: gooIF7fknxHcAJ1pMXM+naeGdmbF1PrX0jIsLWNWsas=)
                          9: nQU1rY2ErLKpGm3xNOk2Vd6maac.roa (hash: I6X6MYBEOfSMB0M7TNs7z1Yj80MN+WqIyp43IIumKAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:07:d8:1f:f6:0a:3e:aa:ab:6c:50:dc:a7:02:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81eed4091383d9ed4056d9f4eff7d2622ddce205
        Validity
            Not Before: Jul 23 20:00:51 2026 GMT
            Not After : Jul 24 20:00:51 2026 GMT
        Subject: CN=934e2555b8a3b0a18b3e51cbffb5a3f18cbaa666
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:ba:9c:6d:29:fe:2a:dc:a7:34:a7:e1:a7:
                    1c:36:55:e5:81:b3:90:5a:d4:9a:03:b1:c7:65:b3:
                    e4:3a:e1:d3:66:46:ba:d6:9d:1d:e5:9a:cb:1b:af:
                    6d:17:d6:57:be:27:12:59:28:dd:9c:62:9b:d7:01:
                    8f:d9:2b:ab:1f:b9:49:82:05:eb:e5:2e:0c:2f:72:
                    67:12:d4:b7:db:f4:e9:14:00:f6:d9:4f:62:50:24:
                    d0:1b:59:dc:ed:06:20:51:26:85:ac:93:48:c0:f3:
                    09:3d:c0:3b:94:fe:86:f5:d9:28:de:c2:a8:05:69:
                    10:6c:d9:7d:d1:da:17:df:e0:72:41:e1:8b:90:89:
                    89:46:1b:50:a0:8f:52:7b:80:01:ef:16:da:cf:f4:
                    1e:90:d3:de:3c:a7:c4:86:98:10:73:5f:52:38:69:
                    1c:89:36:de:1b:7d:02:5d:ed:83:d1:8d:8f:f6:3f:
                    e3:b8:ab:aa:ca:7f:d8:28:47:72:81:a0:08:b0:5f:
                    21:37:a8:c9:33:2b:fd:b3:c2:03:6b:0a:40:9e:52:
                    84:38:4e:e7:ba:b4:cc:f9:d3:90:81:8a:69:70:fe:
                    f1:cb:ab:2d:15:2c:ba:e9:4c:0e:c9:e8:9c:b0:5f:
                    ac:d7:41:c7:d2:86:c1:d8:0c:b6:0a:ec:fa:35:37:
                    28:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4E:25:55:B8:A3:B0:A1:8B:3E:51:CB:FF:B5:A3:F1:8C:BA:A6:66
            X509v3 Authority Key Identifier:
                keyid:81:EE:D4:09:13:83:D9:ED:40:56:D9:F4:EF:F7:D2:62:2D:DC:E2:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ge7UCROD2e1AVtn07_fSYi3c4gU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4a9cc4-2b9a-4ef2-a33a-872b3710c2a1/1/ge7UCROD2e1AVtn07_fSYi3c4gU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:00:eb:de:2a:1e:c5:a8:43:31:4c:47:63:01:73:8f:26:de:
         87:13:8b:a6:bf:4d:e6:0d:a3:c0:1e:3e:8a:95:98:86:ae:de:
         ea:fb:25:ee:8c:6d:44:36:0d:10:b1:42:a5:5f:fa:b1:4c:31:
         f9:ff:d2:2a:cf:5f:1f:fc:79:93:b1:e3:03:be:df:ae:49:82:
         f7:98:98:12:2b:5a:f9:46:ae:23:64:b3:a5:10:02:af:50:c6:
         02:1f:80:57:9c:72:d0:9c:a8:88:09:43:be:5b:16:7d:a1:d6:
         31:76:89:47:ce:23:79:33:d7:5c:8e:d7:cc:e0:93:2f:6c:c8:
         e9:51:1b:18:d5:89:f8:60:11:66:f6:0e:5c:7d:30:6d:a8:61:
         b5:a4:c9:95:72:c9:4e:37:bd:f2:68:0c:1b:b8:5e:49:c8:98:
         91:df:b4:60:bf:2a:f1:bf:14:d8:b2:7e:dc:1a:2a:4e:dd:4f:
         86:57:d6:b4:0d:de:3f:f6:79:03:27:a1:71:bb:cb:33:0b:b3:
         1b:f5:e8:da:6f:9e:a0:09:f7:2b:39:4f:85:88:5b:b5:e4:06:
         8e:90:d1:2f:cb:33:9a:f6:85:79:b9:f0:9e:83:55:57:86:e9:
         e1:60:99:78:c5:ae:b5:fd:78:9a:53:de:e9:57:93:4b:70:f5:
         1a:aa:55:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:21 2026 by rpki-client