Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File:                     t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier:          TKptlIdrLAyzWN4VWPiWwe5bcW9duxdyGrPDovVmByM=
Subject key identifier:   25:42:1B:C2:D1:A0:1C:70:0A:53:DD:15:18:69:0E:C6:9B:06:E7:03
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer:       /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial:       019F92B66663DAB0D367EBA6C733C607AC75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 06:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:54 +0000
Files and hashes:         1: MwSiI9GchKzKf7qBJz16eEvXh-o.roa (hash: Ya5VgXFHK7dGaRYg+cDCB5cxS5nYPyBDhXocUh/n9cI=)
                          2: fjMubu-qV26IszBH3XWThUEp1jQ.roa (hash: nM6/+tL+EeUavkkSwnU8Z5g0dAyeEyJMz2lMeFc9xyg=)
                          3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: 8ucBgpAdNuUjRAAyxVSe1twP9UcO4qYedMSlBvEbjqw=)
                          4: zXLnfUczUBBQtu-uo6mCxhK1HNI.roa (hash: 5SgEpDYdRUOD9p+rClAHWfynMXe8ZAzFE3cf1BLha3s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:66:63:da:b0:d3:67:eb:a6:c7:33:c6:07:ac:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
        Validity
            Not Before: Jul 24 06:00:54 2026 GMT
            Not After : Jul 25 06:00:54 2026 GMT
        Subject: CN=25421bc2d1a01c700a53dd1518690ec69b06e703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fb:cc:58:ab:c1:72:0f:d1:e9:bc:65:5d:09:
                    39:1d:b7:e3:bc:a5:b0:eb:d1:cc:a5:d3:93:46:1b:
                    75:37:36:1e:fa:07:0a:27:43:a2:bf:fb:c0:d3:f7:
                    b5:0f:ad:31:73:4c:98:02:42:21:9d:03:81:98:3a:
                    3a:f0:21:c7:c1:ad:37:d0:ec:a4:92:99:76:77:c5:
                    19:6f:88:ce:c7:82:55:41:c5:f7:b5:0b:56:0c:42:
                    90:b6:73:8a:ec:84:12:68:7a:f1:cc:01:a2:bf:c6:
                    96:ef:e6:9b:7f:f6:77:7b:06:2f:4f:04:85:f0:25:
                    47:e9:81:36:5e:04:59:1f:17:3f:fc:f9:b7:7d:e5:
                    a9:b3:84:8a:50:37:4e:98:e2:01:e8:ed:db:73:35:
                    0c:5b:55:5a:a0:c0:83:e9:bd:c5:84:64:e5:93:df:
                    21:2f:03:ba:50:04:cd:fe:1a:17:9f:cf:34:2a:7b:
                    a7:6b:32:a7:29:d7:1a:91:e3:d1:af:59:ce:81:30:
                    a7:41:04:ff:af:c1:9b:96:a1:25:99:4a:2e:f6:5a:
                    ca:dd:41:9e:01:36:b3:25:9d:85:6c:1d:11:6f:22:
                    40:fa:ae:6c:a8:3c:11:49:58:4a:49:ca:45:a0:8f:
                    d6:2e:ee:83:03:51:96:cd:13:9a:9f:98:71:6e:88:
                    23:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:42:1B:C2:D1:A0:1C:70:0A:53:DD:15:18:69:0E:C6:9B:06:E7:03
            X509v3 Authority Key Identifier:
                keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:5a:25:d5:b8:f6:0d:a6:14:0c:6d:e9:c4:d0:af:3f:24:a5:
         c7:c4:10:94:d8:92:52:d1:8d:37:fe:d9:84:f4:32:19:73:56:
         a3:fe:17:9f:e7:06:f8:22:0e:8f:17:91:bd:5d:ab:57:fe:2c:
         99:e0:64:63:3d:ca:03:23:47:88:5d:1c:d4:e7:0f:b7:e7:d3:
         aa:ff:12:a0:64:68:7d:03:9e:8b:c0:02:58:eb:54:5a:48:de:
         9e:e4:4f:97:1e:cd:e2:5d:13:ff:b0:5a:be:70:37:f9:99:0e:
         42:31:52:5d:4c:ca:08:ce:94:12:44:7d:e7:0e:e8:31:bc:8a:
         23:a3:02:d4:d9:23:51:d4:77:01:6b:11:a1:69:59:ce:5a:c7:
         e7:45:64:24:d6:df:2e:75:3c:dc:aa:3c:37:49:01:36:1e:ef:
         65:b5:62:92:eb:f7:f1:74:63:2f:c4:4d:dd:23:5a:58:0d:79:
         0d:bf:02:d2:2e:f2:8a:bf:94:f0:cc:37:f5:b1:14:bd:35:3d:
         35:ae:db:37:96:a2:26:0a:8e:f2:51:6f:bd:2d:d4:14:eb:01:
         a8:c4:c5:4f:07:bd:cf:37:7d:a8:3c:78:f3:15:eb:53:98:67:
         42:dd:7d:c6:55:44:28:a5:c4:22:b3:a1:0b:fc:5c:f9:cd:41:
         74:20:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:09:59 2026 by rpki-client