Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File:                     TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier:          4EuHuI+dvICg0ofLDMrPuVD3DvTqGBdNP0qSCwROKM4=
Subject key identifier:   B8:4D:8D:0D:AE:48:64:C8:6F:3B:2D:03:5A:86:64:AE:E8:70:BE:E7
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer:       /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial:       019F935AC0AEA5D9344CB536ACAD28CC8EAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number:          19D9
Signing time:             Fri 24 Jul 2026 09:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:25 +0000
Files and hashes:         1: 1SNNaJd-_nZGjSy8KhTgEu_TWEY.roa (hash: DTRv2jcApfzQZK3kJVDp954M/vKt+twRMmk7r67fyZA=)
                          2: 1bQOLq12VlIMZXXolofAPH9O5cY.roa (hash: nNr1MzlTDsd5ryhxxC8zve5I9A8m7Ud69POGWpKdnLw=)
                          3: 7Z4vT_pGnwjFtMmenLcRoqmUPrc.roa (hash: 0NI8q2txBSLwYGEyadLBX2+xdl05r7JbnQBUmGMxhLc=)
                          4: IM3Sgf6n85MJ0JQ5zz3x973QECY.roa (hash: RhRSY8YyTjB3zZVDnbDfxNa5aiv4sYD92KtaLzLLg4A=)
                          5: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: 3qgqgp2QXkw5XwueWIL5rv3cBbmq4xkSNnMbztz/jsQ=)
                          6: cefT8Znon0EMvLEa4jZbAItaX68.roa (hash: zuUKY/0e1yWLD2162lMycJrs/wJncsLp3x6qIl7VWD4=)
                          7: klIt1NStPul9M_ZMJsdKutacUMM.roa (hash: Bg/ud8VNM1Ut9qaDX4Qy7kRtx9Mw6PMvkK9VqDfBpa8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:c0:ae:a5:d9:34:4c:b5:36:ac:ad:28:cc:8e:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
        Validity
            Not Before: Jul 24 09:00:25 2026 GMT
            Not After : Jul 25 09:00:25 2026 GMT
        Subject: CN=b84d8d0dae4864c86f3b2d035a8664aee870bee7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:c9:f6:fe:fd:d4:cc:81:c5:dc:54:de:54:c2:
                    45:a3:85:40:46:7d:65:5e:2b:94:16:0e:87:1d:b8:
                    ef:5f:f8:c7:04:52:73:d8:e8:7f:b5:32:a9:7d:7b:
                    ed:54:da:21:ef:16:ad:6f:36:cc:33:9a:b5:45:4f:
                    ee:31:8f:bb:49:c0:10:89:b5:f4:85:2a:ac:cf:11:
                    cc:3f:d5:f9:92:c4:91:a9:74:83:35:82:9c:55:6d:
                    42:69:3b:fc:09:30:df:a1:60:bf:62:4a:e9:02:9c:
                    ae:62:af:03:76:14:0c:e1:9a:b9:cc:e3:64:f1:90:
                    6d:14:7f:bd:0b:94:d2:ec:f0:49:08:6f:5d:36:da:
                    8b:40:f0:30:62:bb:2a:d9:69:6b:d2:dc:36:44:d3:
                    c1:7a:87:cb:e2:d3:5f:3d:eb:67:5a:e2:26:09:4b:
                    66:44:4b:1c:4a:42:13:fe:6b:7e:26:3d:89:b9:d7:
                    f5:66:b5:43:8b:82:64:14:05:e5:84:48:61:6c:f6:
                    aa:b8:1c:8f:34:cc:db:9c:21:a1:2d:40:76:ba:44:
                    dd:ac:fb:4b:87:c6:5d:2a:aa:52:e1:22:6e:cb:4a:
                    c5:f8:b7:4c:54:f0:26:bf:f5:5c:72:bc:7c:07:46:
                    90:f9:30:96:d3:8c:42:b9:f3:83:92:de:a6:85:7c:
                    8e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4D:8D:0D:AE:48:64:C8:6F:3B:2D:03:5A:86:64:AE:E8:70:BE:E7
            X509v3 Authority Key Identifier:
                keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:6c:c7:ac:b1:0d:03:b5:d1:dc:2a:c8:0c:e7:6f:c6:e5:5b:
         d4:33:3a:2e:66:36:ea:fe:bc:2a:d9:33:22:0e:ec:eb:22:87:
         bd:ec:08:1d:f8:09:08:d7:7f:36:e9:31:ff:7c:cb:98:c9:94:
         b5:d2:23:31:bc:68:e1:94:eb:7c:b6:76:37:a4:dc:ee:1a:dd:
         55:2d:52:0e:33:7c:1c:24:54:66:ad:3e:6e:49:1c:16:d0:eb:
         40:ff:a5:67:9e:6a:58:b1:b0:4c:a4:2e:61:cd:57:83:49:87:
         b4:a9:13:3b:06:c1:5b:8b:d9:44:07:bb:bb:0f:ae:22:ff:2b:
         c7:ec:9f:89:39:26:c4:32:45:39:c1:f2:ec:ea:61:98:e1:cd:
         37:ba:35:a7:01:cf:1f:7f:ca:11:36:a9:2d:c5:62:ea:38:b4:
         2d:61:e5:54:d0:59:4c:76:87:67:c9:22:87:c2:98:6f:29:e6:
         1a:85:16:db:ea:42:9a:70:fb:54:bb:44:e1:f4:03:04:74:dd:
         93:88:5e:63:33:60:0a:d4:9e:0e:af:3e:e1:6a:06:54:a9:1b:
         55:0d:ab:f3:5e:0e:58:e0:7b:2b:cd:bf:22:a9:f5:86:01:5b:
         37:71:b1:6e:52:7e:38:ff:d4:91:db:70:0d:94:47:77:8e:27:
         96:83:33:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:27:01 2026 by rpki-client