Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
File:                     pLZmyw5UlhFut65nFNkFUwm6aaw.mft (raw, json)
Hash identifier:          +7IvIGi14G8+sy5q2fs6Q03QzrbOcvlZkIq+bJiSBlw=
Subject key identifier:   8F:5E:15:6B:55:47:41:D0:B7:49:5A:0C:1D:F1:13:CA:6E:E5:3B:F5
Authority key identifier: A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC
Certificate issuer:       /CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
Certificate serial:       019F91DB30C9CF9DFED2EECDF0E36941992A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
Manifest number:          1921
Signing time:             Fri 24 Jul 2026 02:01:28 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:28 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:28 +0000
Files and hashes:         1: DHr7JGtON15Cis6DyR54N2LbQu0.roa (hash: Hbp+JgUraGKes5zUXwpHdkwns9L2SkKZwHJUBgVjmZs=)
                          2: VjNXjC-0wab16uqPCuhxskDPjCA.roa (hash: NM6EunarFLybHJwbwp3+FCoMQV5bhN/V+aR1Sck6SRs=)
                          3: WeTbf8dcRo8G21LDVVtXbo03soA.roa (hash: QqajL4kQWlIWW2N7/aHVs0UE2naN1GLmSLf6lsBMEjs=)
                          4: aa1hzF_rvMsCHPPz8XLjEXxKqbQ.roa (hash: FOtd1tSudJEuWqdQe1qjGDxCbYMX+Uz0UsR5mshe4tI=)
                          5: gjPIRKPJi_4QrZoYKNfG1ZHCwWE.roa (hash: LJkRn1C/fK0birIG4ak1fx3zIs3X/kg2rtCRZNfSQ0s=)
                          6: pLZmyw5UlhFut65nFNkFUwm6aaw.crl (hash: P+Xrdt9BXIqkXpCjH1NqGDOcnnIQTUxPtAEBtDCNdHc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:30:c9:cf:9d:fe:d2:ee:cd:f0:e3:69:41:99:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4b666cb0e5496116eb7ae6714d9055309ba69ac
        Validity
            Not Before: Jul 24 02:01:28 2026 GMT
            Not After : Jul 25 02:01:28 2026 GMT
        Subject: CN=8f5e156b554741d0b7495a0c1df113ca6ee53bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:2e:1b:d0:09:b6:98:9f:a0:c1:3f:b5:42:
                    bc:e8:a0:bb:a6:0e:ad:d3:d2:c1:e2:57:56:05:79:
                    fb:b2:f0:4c:4c:ad:0b:4c:cd:c5:49:8f:c8:93:1c:
                    7b:b4:a8:0e:60:c4:17:24:4c:df:fd:65:98:91:a4:
                    0e:4c:bc:03:85:0d:e1:5f:2c:db:d2:03:5d:bf:54:
                    bd:aa:74:61:ec:a6:0e:e7:09:9b:dd:aa:a8:a0:cd:
                    ce:61:28:aa:c9:92:bc:38:da:b9:14:47:41:ca:5d:
                    a9:12:3a:74:1c:55:59:76:ed:ea:34:ff:0b:d4:1d:
                    da:c6:34:7e:14:ae:23:0d:a7:fa:f6:74:75:43:44:
                    7f:50:37:f3:64:56:3f:77:46:0c:8e:dc:da:65:13:
                    bb:03:8a:37:1c:54:40:c1:f1:de:16:5c:06:1e:b9:
                    c3:93:b1:b8:e5:0d:e2:aa:80:91:b1:f8:94:b7:66:
                    48:aa:f7:b8:34:05:66:da:b1:49:19:f4:3e:81:f7:
                    bd:b7:00:d9:98:37:fe:a0:86:16:c1:39:35:74:98:
                    2e:7c:0d:af:cc:67:0c:9f:56:e0:f8:f7:bb:76:5f:
                    12:c3:dc:0c:8d:02:f4:3f:dc:03:67:ac:f3:ea:2a:
                    5f:f2:24:cd:0f:44:74:ad:d1:2b:bb:5b:9f:81:da:
                    56:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5E:15:6B:55:47:41:D0:B7:49:5A:0C:1D:F1:13:CA:6E:E5:3B:F5
            X509v3 Authority Key Identifier:
                keyid:A4:B6:66:CB:0E:54:96:11:6E:B7:AE:67:14:D9:05:53:09:BA:69:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLZmyw5UlhFut65nFNkFUwm6aaw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/f74280-cc6d-41c1-858a-b5368330baf2/1/pLZmyw5UlhFut65nFNkFUwm6aaw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:e5:57:4b:59:23:43:0d:fe:92:29:3f:ea:13:61:4c:fa:49:
         35:65:1a:0f:ca:0a:5a:aa:4f:e5:b4:e4:ca:23:a2:9b:b2:67:
         54:18:5e:12:21:6d:44:0f:bb:8f:88:98:0a:38:b6:c1:b2:e0:
         27:13:e7:d2:a5:ee:cf:b0:c3:6f:6e:d9:10:cc:0d:dc:7f:4f:
         80:70:8f:da:89:fe:9a:98:07:04:21:96:94:c2:3a:d4:c3:4b:
         bc:37:05:76:7d:11:e3:2c:de:6f:16:84:25:74:42:cd:01:eb:
         7f:47:ba:34:b4:61:3b:95:8b:ef:c9:b7:f6:d6:eb:f2:69:d4:
         f7:cc:da:e8:45:3c:32:2c:f1:e3:c2:2c:ed:91:78:22:04:0f:
         2a:75:31:c6:b6:4e:e9:ff:11:56:a3:f7:05:bb:16:98:d3:e5:
         c9:d8:21:e3:63:15:34:bf:46:b9:9a:cd:cd:89:b9:28:30:e9:
         32:67:4d:cf:2a:90:e8:fe:5d:57:48:4d:8c:ff:c9:8e:48:71:
         3f:49:f1:d4:37:d4:3d:25:e3:c7:ca:f5:b7:c1:7b:4f:a2:ac:
         60:86:1c:35:fb:81:47:c2:fd:90:6a:78:1c:58:f6:d0:44:f0:
         cd:a9:c7:e6:c9:b4:75:c6:5a:96:19:ab:82:80:0b:94:00:db:
         03:e1:84:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:54 2026 by rpki-client