Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          2LxgFpcObH2D4nUYyuzuwOgKMlKrCwIl0ftaD6s6RVQ=
Subject key identifier:   F6:64:B1:1C:CA:82:99:18:4C:1B:FF:F1:FE:19:99:11:C4:95:04:8C
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       019F93C96E938A9D738D2D90E9BBC02F5F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 11:01:19 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:19 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:19 +0000
Files and hashes:         1: 5ruGjzi72EzHeNevEE3JGyLtXgQ.roa (hash: F631VpzOVt6zeqgnyepT7OlQYefuALhIBPjhvOj+SbM=)
                          2: MLTMNf6RdXQHgobliz7oe72JkjQ.roa (hash: vynBVcDFPo0FhDEU/VJwzCvxOSeIG5MJSs1ntfusClo=)
                          3: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: 1nFPDRYJdyjV4LH8mdS70ba+qSA1tz7RgnZAKxo5gPE=)
                          4: fXZclwjMmJuKFUf7Q9P-NHbNEpQ.roa (hash: anvE7nbyIQqcqcLLGmm77d4AcDLATJhTxcyjOxhWcfo=)
                          5: qq9jEWnUkq7RixjGSRxp41ikMoQ.roa (hash: YTairbAOKk2TzoyqKR+ve0ERswXp2cOBJyd3vALW04Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:6e:93:8a:9d:73:8d:2d:90:e9:bb:c0:2f:5f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: Jul 24 11:01:19 2026 GMT
            Not After : Jul 25 11:01:19 2026 GMT
        Subject: CN=f664b11cca8299184c1bfff1fe199911c495048c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:3e:17:3c:47:3d:6d:d7:1a:9b:74:4a:32:bd:
                    8a:e3:c2:49:70:59:91:a7:44:ed:70:38:62:e6:31:
                    34:12:b9:ec:af:58:b3:a6:47:6b:0f:f4:59:f1:8b:
                    78:b4:2a:cb:8d:a2:7a:b1:db:c1:e9:28:e0:b9:3b:
                    74:0c:eb:cc:c6:72:fb:76:95:7b:d0:43:0d:2b:2d:
                    b8:01:c6:ae:b8:f6:42:be:c7:ea:47:95:10:e5:1f:
                    36:1b:c3:d2:65:b4:5e:c4:0b:9a:61:68:b4:c8:0a:
                    8d:fd:d5:aa:7f:fc:9b:19:5f:0e:3a:a7:a1:d4:e1:
                    a4:bb:c9:34:e0:ae:06:09:5f:33:d7:99:7b:56:63:
                    d8:3f:8f:03:f5:77:81:95:bf:41:9b:8f:2a:56:dd:
                    b7:bf:bc:a4:a5:14:89:25:d0:94:08:7e:2d:cc:9f:
                    0c:1c:67:c6:12:a0:36:7c:83:78:17:de:b8:c2:ba:
                    33:72:ff:24:67:6f:a8:90:e1:02:d0:c3:db:dd:be:
                    5f:ba:65:99:41:a0:cd:51:f4:7c:3c:d2:37:10:4c:
                    8d:0e:8c:62:59:b6:91:b9:97:d4:8c:28:c5:b4:4e:
                    21:4c:69:bc:78:b1:57:cd:ff:81:98:37:6d:a2:1b:
                    21:22:82:e6:8f:a4:78:e5:ac:36:3b:14:59:67:cf:
                    21:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:64:B1:1C:CA:82:99:18:4C:1B:FF:F1:FE:19:99:11:C4:95:04:8C
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ef:fb:30:2a:c9:36:1f:a2:3a:c6:cb:4c:39:ae:9c:04:fb:
         65:2b:cf:28:dd:a3:b0:9f:18:23:ba:0e:c0:68:4d:4a:f4:be:
         cd:97:53:0c:8c:e7:70:c9:86:1d:33:6e:ee:73:ef:b0:92:f3:
         7b:81:47:a8:07:87:40:c0:dc:a1:16:f9:e4:dd:98:a9:69:df:
         12:9a:b8:51:e6:fc:d4:8d:a4:32:04:f8:cf:b1:22:b6:a4:2d:
         f2:90:33:80:43:11:f8:93:6c:1d:0e:c3:ea:10:be:41:50:3f:
         75:84:43:5f:8b:3a:bf:e8:13:6b:a0:62:9a:7b:83:38:13:a6:
         c4:c8:00:b6:15:58:8b:85:ed:33:bc:38:cd:6e:c6:97:9f:f9:
         b8:fd:94:3d:75:75:65:21:84:89:0d:d2:f2:66:66:09:39:39:
         47:b4:af:f9:5e:a6:59:67:00:c5:94:2b:03:18:9a:54:1d:71:
         04:f9:36:0a:b2:08:36:77:57:75:7c:0b:d2:95:c2:0c:95:35:
         9b:56:74:4c:59:60:ce:e5:1d:58:98:b3:aa:5f:bb:88:8f:fd:
         36:3c:b7:01:3d:1b:43:06:a0:bd:0f:c9:3d:93:d3:43:43:e8:
         ae:fd:55:01:f5:22:16:51:76:d4:69:8e:3e:d6:e3:4f:3f:30:
         55:1f:f0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:34:40 2026 by rpki-client