Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
File:                     1sSAuslyYH_atgVZOoS4NkxqsbA.mft (raw, json)
Hash identifier:          r/5lEyNyUAa6xPcU73u0BD/Y1R8svfdcsHBlUVgQOj0=
Subject key identifier:   9A:65:9B:26:1E:05:5A:3A:B3:A9:22:6F:4A:A4:9C:75:82:79:4C:2A
Authority key identifier: D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0
Certificate issuer:       /CN=d6c480bac972607fdab605593a84b8364c6ab1b0
Certificate serial:       019F91A43910ECE5EB87CA5347F04C00AE93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 01:01:26 +0000
Manifest this update:     Fri 24 Jul 2026 01:01:26 +0000
Manifest next update:     Sat 25 Jul 2026 01:01:26 +0000
Files and hashes:         1: 1sSAuslyYH_atgVZOoS4NkxqsbA.crl (hash: QC5uW8KvSr0LgEMoUNrMAkZJp/JX+x8nYk94qlxuQKE=)
                          2: tW-LG8p_My_QT_8i-gjOqmzJ1Ts.roa (hash: YItMICwV7cTxmKYQakjHX3JondYYmxrBy1kmJFx/JBA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a4:39:10:ec:e5:eb:87:ca:53:47:f0:4c:00:ae:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c480bac972607fdab605593a84b8364c6ab1b0
        Validity
            Not Before: Jul 24 01:01:26 2026 GMT
            Not After : Jul 25 01:01:26 2026 GMT
        Subject: CN=9a659b261e055a3ab3a9226f4aa49c7582794c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c3:d5:5f:53:9c:90:21:4b:32:73:a1:d3:c5:
                    f3:48:9e:a0:cb:61:4d:2c:ad:2d:1f:c9:cb:50:e2:
                    b5:01:a0:c5:35:be:08:32:54:4e:fc:d6:61:b4:31:
                    6f:84:94:e9:45:73:20:92:ec:7c:04:ff:2c:88:65:
                    00:99:f6:49:e1:c1:47:f6:88:b5:21:54:5e:72:75:
                    f6:14:7c:dd:df:f1:72:44:31:3c:bf:bc:cd:9a:88:
                    61:f6:60:c0:1f:ae:61:20:d6:1e:16:03:94:10:a1:
                    f3:ed:ef:da:ad:16:38:7e:91:c0:47:44:12:80:4b:
                    f6:74:92:58:10:89:ab:c9:56:84:90:8c:83:6f:78:
                    01:a6:0d:30:98:47:f2:a2:5b:b8:b3:ab:cc:2d:6f:
                    e7:3d:9a:ce:39:7b:ea:45:74:8b:34:67:ee:dc:41:
                    af:18:b4:a7:a1:11:8c:b1:9a:73:29:5d:14:3a:52:
                    95:fd:71:2d:d4:a8:13:6d:d1:5e:cc:68:65:f5:e6:
                    cf:9e:7f:85:90:1e:1d:bf:fe:31:9b:7f:dd:23:9b:
                    51:a0:f0:12:00:aa:a3:75:e6:23:26:b1:d9:cd:cd:
                    04:56:90:07:95:aa:63:89:e2:54:8a:b8:d8:5d:80:
                    c2:f8:38:1f:ec:ae:ad:34:dd:93:6d:dd:5f:93:b1:
                    d1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:65:9B:26:1E:05:5A:3A:B3:A9:22:6F:4A:A4:9C:75:82:79:4C:2A
            X509v3 Authority Key Identifier:
                keyid:D6:C4:80:BA:C9:72:60:7F:DA:B6:05:59:3A:84:B8:36:4C:6A:B1:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sSAuslyYH_atgVZOoS4NkxqsbA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/8918fa-f4ab-4b19-9453-97c73be93bcd/1/1sSAuslyYH_atgVZOoS4NkxqsbA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:43:d9:67:45:f7:f6:25:dd:e2:8b:c3:bb:fe:d5:14:d0:72:
         57:c1:65:bd:4e:bc:4f:ee:c1:4a:5b:03:2a:2a:95:47:02:12:
         a5:2a:e9:bc:07:15:9e:4f:03:8a:15:9f:6b:f5:f9:ad:9c:1c:
         c9:ce:e1:a9:25:ec:67:cd:0e:b9:ae:1b:69:6f:50:70:91:69:
         52:05:af:6d:af:98:36:e7:eb:61:6b:74:a3:d0:54:11:af:65:
         f0:f2:c9:9e:12:b2:79:e1:76:0b:b0:4c:9a:a6:0e:e7:fe:57:
         fc:38:27:6f:34:1c:34:42:e6:f5:17:c3:1c:e9:b4:63:3b:54:
         7f:80:e5:ac:d6:ea:19:59:dc:71:6d:3a:cf:f2:e9:75:5b:6b:
         7a:38:6c:4e:f4:f7:84:77:56:ad:14:ee:88:f3:47:5b:b1:a3:
         48:de:36:b2:d2:64:62:97:6d:96:b1:b8:58:d2:c3:72:6c:2a:
         00:c4:d8:a0:81:21:c5:e4:3a:70:64:7a:17:a5:cc:39:86:2a:
         c3:84:17:0f:6c:ae:77:0c:73:3b:cc:6c:b0:f2:d9:67:40:c6:
         69:67:2b:96:aa:35:ff:42:94:f2:2b:5d:82:2f:17:96:aa:46:
         8e:33:f1:54:2b:d9:0e:49:59:32:c1:15:a1:84:bf:4f:cf:b4:
         51:02:d9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:46:22 2026 by rpki-client