Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File:                     4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier:          qYR4vjP3cFUeViN5hniO1n24Q+onY0g+4LjPjBEDSFE=
Subject key identifier:   DC:F5:A1:92:46:72:0B:3C:98:57:F3:E4:21:62:13:9D:D2:BE:6B:26
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer:       /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial:       019F8F7F21F0E78A1B3EC5C0D9104D1557AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 15:01:41 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:41 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:41 +0000
Files and hashes:         1: 2fN3eFa0bjosUQqjhzxnSC-ZbG4.roa (hash: adZ7mZtP0EOWzdaHjuDb/aCtRN0v7AY6Df2Y3DcoCAs=)
                          2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: 5qfU0fKv0j13bYKHMxJRrqbe45AeXSTE8wyj28Crolw=)
                          3: 9v_0JWu-xS3HupRXSgVGs4u-y9E.asa (hash: sTee8C1I1rz26eDODyCBNjrldfLm0tSqfnc3UkcLmsI=)
                          4: VFTnlB7fVRBsXRxIBDV1iFufXkE.asa (hash: iqnFhWzzO6j+t2K9kgwBf/ErkVyc0h9GJuE4NZx67oA=)
                          5: Vq_xfXcXdKcO1UzpZxW6yviyyFE.asa (hash: m8FshAEN/KHrFIoeny5MQ2gIm897mevyMxMfoqG/biI=)
                          6: YivW_0JV1PXQKNZNuU-YZa-0178.asa (hash: UK5xEl6Yl9PtluY9Smceeot0bF0az/oSTMQ4CgDOsRs=)
                          7: fQpqOd1l93-P-yMVY0liF15r3FA.roa (hash: fe669y4X3Xx1cDS4i66TQBvbP8wPt7PZfJZDiZ3TAoM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:21:f0:e7:8a:1b:3e:c5:c0:d9:10:4d:15:57:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
        Validity
            Not Before: Jul 23 15:01:41 2026 GMT
            Not After : Jul 24 15:01:41 2026 GMT
        Subject: CN=dcf5a19246720b3c9857f3e42162139dd2be6b26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:80:3c:39:51:73:74:d9:56:15:9c:95:a5:5a:
                    a4:c7:72:ec:dc:7e:c1:f4:0b:94:7d:9c:c9:90:dd:
                    4e:48:ca:94:46:4d:85:59:95:d8:ba:1e:10:f8:6f:
                    b3:61:99:27:8d:ad:0f:dd:be:1e:83:38:8e:49:77:
                    a5:10:b7:28:72:ab:77:48:50:4f:0e:86:b2:71:20:
                    5e:bb:b3:9d:f0:4f:44:f2:8c:20:a2:d2:58:96:cb:
                    ce:fd:2b:ab:f8:6b:50:07:c7:78:45:de:eb:7e:35:
                    4c:b5:e4:f4:88:33:9a:7c:cb:44:99:c7:63:e7:05:
                    f4:93:48:aa:3d:e8:5f:08:e8:76:d0:dd:a4:8d:f1:
                    37:fb:55:67:f5:b4:39:ea:4d:1d:6b:7c:cb:27:cd:
                    4b:13:8f:27:b9:5b:80:39:36:cc:e3:8a:f1:17:e3:
                    81:fe:dd:af:37:9f:54:54:14:b0:64:f0:fe:e5:00:
                    73:20:6e:4d:e6:d0:61:09:7a:cf:22:ba:94:78:d3:
                    28:67:21:b2:86:da:f9:39:31:29:6f:1f:11:10:8a:
                    af:07:29:31:88:6a:e1:06:2f:16:3c:ab:a6:d5:a4:
                    15:2e:d0:a5:e2:ee:7a:7f:5f:4f:12:0c:c7:c6:31:
                    41:9f:92:d8:a4:87:8d:31:55:03:1e:95:5b:85:a1:
                    4e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:F5:A1:92:46:72:0B:3C:98:57:F3:E4:21:62:13:9D:D2:BE:6B:26
            X509v3 Authority Key Identifier:
                keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:f5:96:50:27:cf:2c:04:49:43:08:23:37:ce:1f:f5:fb:b8:
         1c:48:51:70:92:4a:03:75:bd:fa:55:57:60:38:b6:e5:9c:9d:
         1c:93:6a:95:ff:fd:09:0a:0a:55:0f:f8:14:78:2e:23:9a:b7:
         05:ea:fc:a1:7f:32:18:29:f3:45:7e:86:f4:6a:fe:f9:f5:51:
         82:24:08:fd:05:3b:4a:24:b2:4e:ac:06:e8:a1:8a:bc:45:3b:
         5b:2e:26:af:c0:52:85:f2:f1:cd:2d:b7:57:f6:90:3b:24:c8:
         e8:f9:69:e2:d0:f1:bf:5c:cd:f0:f0:1a:9a:39:74:52:5a:1b:
         b3:76:b4:44:13:54:a7:d9:07:c4:80:c2:40:09:ac:17:77:e6:
         20:2e:d1:f9:a0:6b:8f:46:36:de:c4:fc:65:41:de:53:64:82:
         da:c4:25:8e:a6:32:a2:49:55:fa:17:86:84:db:90:88:4d:1f:
         62:73:1a:0d:98:9f:37:44:8b:0a:f6:4f:b3:19:0b:46:89:56:
         cc:01:d1:78:5e:9f:e7:fc:33:0e:82:8a:cd:6f:93:90:59:de:
         7e:9e:69:ec:9b:7d:6b:9e:7d:d0:16:d1:76:13:29:6e:09:e8:
         09:dd:ab:92:ea:ba:34:b4:00:fb:82:2f:e3:8a:f3:a4:80:8d:
         95:0e:ef:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:13 2026 by rpki-client