Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File:                     Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier:          GGsGaPPxdK4X1dG6WcvGyVJpGUbIZYwKwUi2LrVLnQs=
Subject key identifier:   DC:62:35:38:3B:E8:CB:0D:99:7A:33:84:A7:11:15:55:1C:1C:26:A7
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer:       /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial:       019F927F6AA1006D94D20B9C4816CCB5CFA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 05:00:51 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:51 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:51 +0000
Files and hashes:         1: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: E4MQ0yTFUySNsy/aoErYCK3RK6ln6JtOsp2xukzQBKk=)
                          2: UjTF-iOQAXe4C3nZk-jwPq5ebdI.roa (hash: tFcUi9io00Ps5a/Z3POpXjF44juMRJlgoOF7wGi0PbM=)
                          3: xA9wQK7FhZNKFk2Yx1BJl8C_iZI.roa (hash: /YX7ZCj/46xGv8r5M338uysfyyueDfTM3OjkYQhbm54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:6a:a1:00:6d:94:d2:0b:9c:48:16:cc:b5:cf:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
        Validity
            Not Before: Jul 24 05:00:51 2026 GMT
            Not After : Jul 25 05:00:51 2026 GMT
        Subject: CN=dc6235383be8cb0d997a3384a71115551c1c26a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c4:18:47:bc:ba:5d:dc:cb:39:d9:14:20:c9:
                    2c:5f:74:4c:b1:6f:a5:06:24:8b:1a:53:0b:c0:e8:
                    45:52:66:8d:89:8e:ba:f7:85:02:7d:5e:42:1d:83:
                    33:9e:5c:27:9b:98:6f:58:01:cc:03:6b:76:1f:82:
                    19:36:36:73:2c:54:d4:18:fe:33:4b:25:9e:21:64:
                    c4:74:1a:62:03:e1:6c:fd:3c:68:2f:3d:c3:13:86:
                    d1:cd:d2:ed:cf:76:c8:47:47:92:a2:da:d8:0e:e5:
                    ef:ee:d0:63:cd:f6:ae:8f:69:7b:53:a1:42:7c:50:
                    33:3d:87:11:d9:cc:56:c0:1a:da:5a:8d:d2:0b:c4:
                    7c:67:9e:8f:4a:81:0c:5d:e9:f1:8c:f1:c9:20:dc:
                    85:dd:4a:3c:01:d9:02:8d:8e:bb:72:09:54:3e:29:
                    b9:e4:a2:b6:8d:71:3c:4b:03:44:cb:5c:2b:95:76:
                    dc:83:dd:59:42:63:43:17:6f:d4:f8:2c:ea:25:b2:
                    88:ee:20:84:69:4a:a8:3f:06:a3:e1:5f:67:0b:7d:
                    6d:a8:94:6b:08:5c:a0:d3:2b:64:06:21:35:18:66:
                    c6:3e:74:0a:6e:15:e0:3b:5b:04:b9:c3:97:c7:7d:
                    e4:f5:15:98:88:68:a2:3a:73:d2:db:2a:9f:76:d5:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:62:35:38:3B:E8:CB:0D:99:7A:33:84:A7:11:15:55:1C:1C:26:A7
            X509v3 Authority Key Identifier:
                keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:50:70:d1:f2:df:59:fe:c3:c9:c8:bb:9a:03:80:07:5d:a0:
         dd:1b:2c:0b:69:3e:5f:17:dd:29:a7:27:49:60:8e:1c:4b:34:
         67:15:8b:af:e7:2f:e0:e0:57:18:f2:f4:12:d5:c0:c8:c8:d8:
         37:fe:28:6c:79:cb:26:28:d9:e8:62:e9:38:b0:70:18:ad:02:
         35:42:64:bb:36:41:ca:b7:6b:bd:8e:92:20:87:ec:29:b4:ae:
         8a:2c:c4:55:8b:ce:67:f2:47:4d:21:df:25:f0:4b:e8:dd:13:
         2f:e8:8e:1d:6b:e3:11:81:3c:a5:b7:3a:41:22:8c:fb:55:61:
         ac:63:4f:f8:12:ef:9d:61:06:fd:2d:8e:6c:51:c2:6d:5b:6d:
         a0:54:a9:07:e3:65:a0:65:72:54:d2:88:09:16:76:cd:a4:8a:
         88:42:5c:58:55:c0:5c:7a:f8:dc:d0:57:6c:10:f1:a3:d1:b4:
         3e:bf:8d:38:01:68:3b:a9:28:ca:3b:61:14:cf:88:6e:bf:99:
         89:7d:5e:27:1d:98:f6:df:4c:82:1d:3a:06:a0:e6:d5:82:99:
         83:7a:9c:8a:92:47:33:6f:96:80:6e:8b:29:1e:85:16:dd:ab:
         d3:c9:c7:6c:e2:a0:dd:98:d5:21:d8:bf:15:ed:b4:08:b8:e3:
         23:4c:29:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:23:05 2026 by rpki-client