Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
File:                     V0U31U828UIjG8gXA4hyy2B7Iec.mft (raw, json)
Hash identifier:          Q/fHg38W2dQEToOE/KubMasHkX96OdrZ0ngrKQhLa08=
Subject key identifier:   8E:39:99:84:C0:C3:F3:16:A5:BE:84:40:FF:33:05:5B:C2:69:E3:67
Authority key identifier: 57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7
Certificate issuer:       /CN=574537d54f36f142231bc817038872cb607b21e7
Certificate serial:       019F927F0ECF10F24E586679701C63E36F27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 05:00:28 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:28 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:28 +0000
Files and hashes:         1: EN3L4pyXEtd8agpR0WCbncdFo08.roa (hash: NJ7X+GYc10QZ6IeNjYC/5Bh9ragVjwZPuZ02BIahBWE=)
                          2: V0U31U828UIjG8gXA4hyy2B7Iec.crl (hash: BdC4EpmEU5B8AgVL25xzgxKIa6PP+AWPB3R5jlVW5Sc=)
                          3: XqMHBcQ29GYlAXAHxl_tZSyNUyw.roa (hash: guYbephFWzsh8FHC2Qa9VPR7KtfEEUDQXbV2Oqjwf9U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:0e:cf:10:f2:4e:58:66:79:70:1c:63:e3:6f:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574537d54f36f142231bc817038872cb607b21e7
        Validity
            Not Before: Jul 24 05:00:28 2026 GMT
            Not After : Jul 25 05:00:28 2026 GMT
        Subject: CN=8e399984c0c3f316a5be8440ff33055bc269e367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:15:0b:72:7d:60:2d:13:65:6a:aa:99:33:3d:
                    34:8f:c4:13:12:a5:a0:15:4c:a2:af:b0:a6:2f:57:
                    75:d6:c4:cb:d8:98:c9:63:ed:28:7f:66:34:1b:ed:
                    66:9b:fa:33:38:28:32:27:db:9b:58:45:92:85:6d:
                    af:8d:aa:6a:c9:77:29:f5:ba:70:2b:50:b2:fe:ff:
                    5e:4f:ad:39:9c:68:55:43:98:7d:42:3f:a3:9f:50:
                    db:9f:ef:f1:28:ec:e4:1a:4e:5c:c3:a9:a1:53:43:
                    67:0e:72:8e:ad:b4:6c:c1:b2:4c:f6:4e:b1:aa:dd:
                    36:fa:dc:b3:fb:c3:99:83:f5:32:b7:81:e3:06:26:
                    5f:d9:d1:53:97:3a:6f:37:d3:91:f7:62:da:0a:67:
                    e1:4f:fe:c8:51:b4:ef:49:e0:b6:79:7b:c3:f3:f7:
                    2c:8f:aa:24:c5:45:6a:a4:1f:50:7a:f4:5d:aa:6b:
                    63:85:0f:bc:75:4e:23:00:6b:92:4a:ce:ae:ec:28:
                    d4:80:8d:86:56:d6:04:cd:87:25:a5:b6:0e:4f:03:
                    36:20:69:0e:2d:3b:bd:02:d0:33:1d:d7:2c:72:25:
                    cb:ad:8d:c2:1b:d8:7e:50:22:8a:3a:a3:37:a0:9f:
                    5b:6d:59:61:07:9d:f8:bd:fc:b5:e0:74:17:0a:93:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:39:99:84:C0:C3:F3:16:A5:BE:84:40:FF:33:05:5B:C2:69:E3:67
            X509v3 Authority Key Identifier:
                keyid:57:45:37:D5:4F:36:F1:42:23:1B:C8:17:03:88:72:CB:60:7B:21:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0U31U828UIjG8gXA4hyy2B7Iec.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/fdd25d-c034-49f3-890d-4b89d377808e/1/V0U31U828UIjG8gXA4hyy2B7Iec.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:19:47:88:5b:c0:df:9c:4b:c5:4e:7e:f6:ae:e6:b5:d7:6b:
         65:62:6b:e6:f5:c9:56:95:62:e3:41:d5:fa:73:72:c9:fb:f3:
         c2:52:ba:81:25:ea:32:23:20:7b:56:62:cc:ff:c0:2c:a7:8d:
         7f:a4:49:1d:3a:24:40:b7:a9:13:8a:22:7e:51:42:da:dc:96:
         08:75:d8:df:55:42:1b:8b:ee:98:9c:de:b9:95:ea:51:d6:48:
         91:6e:dc:7a:de:a6:3a:cc:f9:88:d8:5a:db:16:77:df:af:2c:
         e9:f1:d1:b9:e8:50:b2:c1:82:94:70:25:b4:28:dc:0f:4e:4d:
         5f:0d:3a:52:d3:37:2c:b0:14:f2:94:a7:bc:7d:3c:96:04:c2:
         ba:a2:14:e7:98:a0:9e:84:28:a0:33:38:96:24:f2:1a:c8:31:
         a8:1c:b0:6d:b6:75:78:42:bb:6e:ec:49:4c:47:10:2e:23:56:
         30:7e:81:f6:9c:cb:86:7f:2a:09:dd:4c:ab:1c:9c:d0:02:93:
         5e:60:10:d0:3e:c5:6e:d3:da:4b:a5:57:69:d3:53:38:e5:e8:
         0c:b1:00:8d:b7:41:ca:8e:8b:fe:89:43:24:74:69:bc:b3:80:
         7f:63:46:20:c5:7c:41:53:e7:6c:0d:1d:b0:94:b3:3b:7c:28:
         11:88:03:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:54:41 2026 by rpki-client