Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File:                     1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier:          6pYrsC/FgwWrhnPLiF8pVWMU1wgioeseGv/TJvRSdNQ=
Subject key identifier:   5F:37:AB:C2:5F:60:3D:2F:9F:8C:A1:85:9B:40:00:DE:A9:DF:A9:DC
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer:       /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial:       019F916D9788E81400C4EE7889A3EAD50ED5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number:          19D1
Signing time:             Fri 24 Jul 2026 00:01:46 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:46 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:46 +0000
Files and hashes:         1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: Wj3EvmVyCA4PbyrLPjdSQvdZrN9G/uWiWXlSaDnuOCk=)
                          2: 5K9Oh9VZsr3HOBptEMVsjoP_e_Q.roa (hash: YLy3at+4CK7XbYpoK63TH6Fci1Db7Ppm/QM9MlBVSzc=)
                          3: 7IcPHrXROTuNTf_SahmIzDpYk_c.roa (hash: L5UDzTnOOmL94lsJB5GitXxrT2tqiHBlNusXsGvxUwU=)
                          4: 8MABlsDBV8LP0o72Ps6uS8md-EE.roa (hash: fXmqgSgl411LYZCpGZdGkCF4TgXdZdFuZkTr9EWcmVw=)
                          5: fgjW20ZQ04xgq_qRpAWkrcJGzFo.roa (hash: pmOI3CWB5wHFkABDYT1l6+9Xm8dMktyYSLlosvObWto=)
                          6: kvYtIdmIQzWeY2WuPqJRuov5ET8.roa (hash: zx3Gr9VP3ErTlMy9nzS4kzrfscRLipsAviORigX1SFE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:97:88:e8:14:00:c4:ee:78:89:a3:ea:d5:0e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
        Validity
            Not Before: Jul 24 00:01:46 2026 GMT
            Not After : Jul 25 00:01:46 2026 GMT
        Subject: CN=5f37abc25f603d2f9f8ca1859b4000dea9dfa9dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:19:79:1b:16:01:2f:67:f5:87:f3:e7:4d:98:
                    23:ca:5f:7b:10:fb:c3:75:4f:a0:15:ac:c6:64:c0:
                    f0:6b:10:07:4c:73:b0:47:92:54:68:20:ef:bd:53:
                    9d:e0:4f:c3:0f:df:96:6b:d5:1b:14:a2:b8:88:04:
                    a9:27:d0:e0:56:9f:b4:c6:2c:c1:ec:6e:4c:e7:16:
                    0e:bf:db:83:0e:93:df:00:da:44:c4:94:04:2d:64:
                    d3:e4:50:3b:80:be:4e:2a:2c:2a:d6:60:f5:3e:75:
                    8c:27:bc:41:8d:36:7c:39:71:89:15:9d:32:94:a4:
                    37:d1:76:4c:17:ef:52:54:83:1e:ca:a5:14:58:11:
                    82:f9:26:08:67:4b:29:f6:11:63:3a:68:9e:ae:48:
                    7a:7f:ad:dc:bc:07:d7:8a:2a:2b:91:18:7d:3e:c1:
                    56:6c:2f:7e:ce:22:77:34:ad:2e:74:13:6e:9a:33:
                    59:3e:e7:cd:17:22:c5:32:8d:6e:51:f0:fc:65:41:
                    7c:0d:5c:f4:e9:88:fb:75:93:6d:d5:36:df:31:84:
                    b2:d0:24:b2:21:27:ad:c2:de:50:f9:09:6c:0a:ac:
                    bb:ba:76:85:d4:a6:34:2a:a8:20:c2:3f:69:9b:a7:
                    8d:7f:5d:35:e4:cf:10:cb:1f:c7:9c:17:18:a4:ed:
                    97:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:37:AB:C2:5F:60:3D:2F:9F:8C:A1:85:9B:40:00:DE:A9:DF:A9:DC
            X509v3 Authority Key Identifier:
                keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:3c:67:6c:87:5b:18:c2:83:80:a7:d8:dc:9e:21:b0:e7:b0:
         ae:96:76:e6:17:2a:cb:a0:c4:55:13:94:33:49:c1:c1:2e:54:
         a6:a9:b6:82:45:42:10:44:7d:05:0f:f4:3e:c5:a7:54:9c:5d:
         ef:e4:b7:80:70:b9:05:d3:5b:23:dd:05:f3:e6:51:62:5c:61:
         58:cd:2b:cc:47:db:9a:b1:2c:fa:34:45:d8:a9:e3:55:b1:97:
         42:a7:aa:03:84:70:41:51:e7:da:8e:25:85:fb:37:0d:e7:03:
         cf:4d:a7:a1:40:2e:ce:14:60:a6:73:b3:e2:1d:51:57:56:0e:
         94:98:ab:9a:10:42:c4:10:c8:06:86:05:29:8c:7a:8d:0b:39:
         e1:5f:70:bb:6a:71:b3:65:62:26:10:cc:50:dc:f0:c0:b0:9f:
         c7:8f:31:13:83:fa:5d:79:90:24:a3:bc:84:27:0a:fe:1c:25:
         96:c0:8a:a7:5e:e6:87:0b:84:c7:9e:16:f8:86:94:01:15:52:
         53:f6:4a:40:78:0b:cc:e9:92:9b:b0:c0:40:52:8c:73:a5:77:
         40:b1:b1:03:38:be:41:a0:7b:5b:9d:7b:29:fc:f9:59:48:8f:
         4a:25:44:d6:21:07:6a:4d:fa:50:79:04:95:99:4c:87:51:6c:
         d4:62:90:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:40 2026 by rpki-client