Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
File:                     pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft (raw, json)
Hash identifier:          wucNFtWKxNDdsqAp1sNoeYC5jvu/4s8pNx/jxH1zFII=
Subject key identifier:   1E:65:33:EB:A0:D1:2F:70:FE:C2:A9:AD:5E:7E:FD:BE:C1:CE:4A:41
Authority key identifier: A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2
Certificate issuer:       /CN=a566d8337776c98746bd231e69e185db2a9a5be2
Certificate serial:       019F916D7AA573F947C6B5C852337AF1987C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 00:01:38 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:38 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:38 +0000
Files and hashes:         1: 7y0LOepFUcA8OxNwETjP06eOGqo.roa (hash: FtFNn3fJLuNl3O3fnntEfGbv+32KsAHr3SqeYeHUCL0=)
                          2: CuUaPGtvCMhbfFTKvA6UReL_F_Y.roa (hash: UAHd42O2KjlmEGP6gn2QJSSuqJWzfTB5HZHwnRpiaVs=)
                          3: _UUS3q5BecQsPN01euTz6ZXEA3I.roa (hash: /n6cdrP+/xfyaY1mRVl4Rp3lZj1gk+c55nEDkiLkTlI=)
                          4: makv0shcZ5kNgnoatV93mdzUDzA.roa (hash: pcme59je8U1s3r4CfES9LEZanBL2hRJGysIwX84CTmo=)
                          5: pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl (hash: svJ+87wC++JtyW1PjOkVuHGqJd+TIuMpcY1Zglo8VmU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:7a:a5:73:f9:47:c6:b5:c8:52:33:7a:f1:98:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a566d8337776c98746bd231e69e185db2a9a5be2
        Validity
            Not Before: Jul 24 00:01:38 2026 GMT
            Not After : Jul 25 00:01:38 2026 GMT
        Subject: CN=1e6533eba0d12f70fec2a9ad5e7efdbec1ce4a41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:ba:99:d2:74:bd:e2:e3:60:83:52:cd:42:
                    a8:6f:5d:95:28:6c:2f:1d:f3:59:4a:38:e4:96:09:
                    c3:08:0b:fa:df:ba:4f:00:1d:2c:a5:0e:23:3d:8b:
                    17:f1:f8:fb:f1:c4:5e:65:6d:02:cb:19:16:40:6d:
                    3f:ca:8e:c0:d8:ba:12:5b:a9:18:bb:e7:38:bd:65:
                    41:c6:87:d9:fb:f0:1b:a2:c7:c5:85:4d:e7:13:b8:
                    5a:2e:12:1f:00:cc:5a:f7:e1:b0:55:21:d5:0e:13:
                    79:1c:13:51:7a:3d:92:73:24:cb:30:75:82:1d:e0:
                    04:30:6c:20:03:79:be:d0:19:09:67:11:7d:8e:20:
                    bd:a3:f9:1f:11:c0:f4:7b:9d:04:65:c2:49:0c:c4:
                    a3:8c:63:ea:60:ba:cf:c1:07:ee:65:06:16:7b:e6:
                    d3:ea:7c:bd:b9:87:31:7d:60:48:0d:9f:31:49:2d:
                    d3:5e:fa:cb:17:36:dd:f0:38:2a:25:2d:1d:b2:05:
                    28:d3:93:e0:25:15:45:44:da:84:df:87:b4:ea:a4:
                    0a:99:0f:a8:a7:45:10:08:9c:15:80:83:dc:fd:a8:
                    d3:1a:35:9b:35:9c:e8:8e:ec:19:e3:a2:21:d3:7a:
                    bd:c6:45:e5:74:25:ff:86:2a:b9:77:b5:1f:e7:75:
                    13:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:65:33:EB:A0:D1:2F:70:FE:C2:A9:AD:5E:7E:FD:BE:C1:CE:4A:41
            X509v3 Authority Key Identifier:
                keyid:A5:66:D8:33:77:76:C9:87:46:BD:23:1E:69:E1:85:DB:2A:9A:5B:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pWbYM3d2yYdGvSMeaeGF2yqaW-I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/0168ac-342c-4dd0-91a8-1b75867e8dff/1/pWbYM3d2yYdGvSMeaeGF2yqaW-I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:b0:ec:4a:bc:e1:72:62:12:04:d2:e0:c9:fa:fa:85:7f:4b:
         93:40:46:23:a5:03:ff:9a:58:2b:9c:34:7f:68:16:d8:a1:2b:
         b2:1f:39:2f:68:b4:39:84:f3:9c:87:39:28:81:2c:da:39:d2:
         1c:89:eb:03:eb:6d:81:1a:93:35:59:e7:96:bf:36:18:f5:fb:
         41:bb:e1:64:b4:96:09:bd:e4:e6:c3:90:38:bd:3c:f6:96:b1:
         51:5c:9b:76:a7:d8:0b:80:bf:6d:4c:bb:83:60:5b:ec:21:a3:
         47:d4:ee:b1:96:67:39:07:0f:1a:94:22:9a:8d:c1:5a:58:74:
         5e:5d:3f:7c:40:ea:ac:7b:24:87:48:e6:ed:83:31:76:d3:55:
         62:72:03:a3:67:cb:47:3f:ed:54:fd:ce:9d:be:7e:3d:11:de:
         eb:fb:d1:23:8f:32:5b:76:c9:b2:29:7e:2e:6d:90:f7:9a:95:
         99:3d:2c:9a:26:cc:91:1d:2e:46:cb:15:fe:6c:4b:73:1d:b3:
         c2:af:bd:20:5f:a3:d7:5e:75:05:a4:74:3e:b4:a1:81:80:40:
         1d:50:5a:06:43:be:2b:d7:24:53:19:45:0e:3f:50:6c:51:dd:
         d5:7b:0e:be:02:45:a6:e7:8e:e0:69:2e:90:15:8f:b4:d4:20:
         ba:d2:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:46:32 2026 by rpki-client