Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
File:                     SoCVkn7lfM7iVqpDnxY2hrWMVww.mft (raw, json)
Hash identifier:          KCayhWtvSEF4Y3aBwsve30rta28ZP3PhH5/5uesyVEM=
Subject key identifier:   29:C1:8C:9F:74:0F:67:A6:CB:11:D2:15:2A:82:0F:84:1B:16:66:34
Authority key identifier: 4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C
Certificate issuer:       /CN=4a8095927ee57ccee256aa439f163686b58c570c
Certificate serial:       019F954A5FF6A3F5CBEEA840104E87592CAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 18:01:47 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:47 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:47 +0000
Files and hashes:         1: SoCVkn7lfM7iVqpDnxY2hrWMVww.crl (hash: 5ZtFrljPyWsIWi6zKCvqu6Fm1xPEcKErPmW7w6QLM2Y=)
                          2: pth9nCfBOVCefSZjAlug7noCoiE.roa (hash: KUjSylzqEOQCJFtk+as86jaCnLWzKEeHrEArRWzUT98=)
                          3: ukI_HPYNJmvBtX0I8YnAqCqHIKc.roa (hash: V4VFe3RvbqJ8JaD1mJXWX5JH1StQafZpQ0cqoqd+N6E=)
                          4: z8VOUiSLPVMno5KoGBbOODeDDys.roa (hash: ReCSqOhvRxYoHh6okc3nEFEolgVxGfoS2RfPgFeXDJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:5f:f6:a3:f5:cb:ee:a8:40:10:4e:87:59:2c:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a8095927ee57ccee256aa439f163686b58c570c
        Validity
            Not Before: Jul 24 18:01:47 2026 GMT
            Not After : Jul 25 18:01:47 2026 GMT
        Subject: CN=29c18c9f740f67a6cb11d2152a820f841b166634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:dc:83:c5:f1:17:66:bf:7d:f6:19:1e:e6:
                    31:91:08:e8:ec:63:91:55:74:0e:b1:ee:d1:6c:73:
                    10:e3:52:fc:6e:5d:06:4e:ac:aa:2b:0c:a1:b2:23:
                    a0:82:42:99:dc:f7:03:ed:ed:e3:82:1d:89:fc:72:
                    40:5b:9c:3b:fd:da:78:26:9f:70:6b:99:b4:fb:30:
                    b6:dc:49:af:73:95:89:0c:0b:d5:e1:fd:0c:e4:f4:
                    3f:58:ed:cd:27:59:2c:49:f3:1f:df:26:19:58:41:
                    79:36:da:6d:39:bd:78:f0:6a:de:36:51:f6:fa:41:
                    0a:cc:8d:29:7b:de:c9:81:97:e0:09:68:83:82:df:
                    84:34:6b:40:dc:7e:e6:a2:d9:d3:60:e3:04:e8:fb:
                    07:cb:4d:a0:71:e0:2f:4f:27:bb:ec:2e:3b:4f:3a:
                    84:72:c3:e0:b1:d4:0d:d2:c5:db:3d:9d:1f:cf:9f:
                    27:35:62:40:4a:3d:ed:56:11:03:23:77:a4:a3:c6:
                    f5:2a:39:3c:3f:cc:e1:ae:8e:e6:72:f1:24:9a:70:
                    18:d7:a4:d6:8a:b7:3c:14:43:42:96:5d:96:75:da:
                    eb:b5:7e:7c:67:af:75:9e:1b:ad:31:bf:30:41:dd:
                    ea:c6:7a:a3:11:03:92:df:49:69:76:89:0d:9f:76:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C1:8C:9F:74:0F:67:A6:CB:11:D2:15:2A:82:0F:84:1B:16:66:34
            X509v3 Authority Key Identifier:
                keyid:4A:80:95:92:7E:E5:7C:CE:E2:56:AA:43:9F:16:36:86:B5:8C:57:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoCVkn7lfM7iVqpDnxY2hrWMVww.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/c1e3b4-2d61-44cc-9081-0f9d43d864bb/1/SoCVkn7lfM7iVqpDnxY2hrWMVww.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:dc:1b:7c:70:62:f0:ed:b7:6c:64:7e:df:75:57:46:51:ac:
         85:66:98:5e:ed:f1:7a:32:0b:2a:a9:22:59:21:c2:d2:c1:76:
         89:07:48:d5:c2:f5:77:0b:c4:8a:94:c3:14:94:8c:ba:07:3a:
         ac:f4:cc:b8:af:38:87:73:db:ce:d9:b2:0e:25:2f:47:6d:84:
         a2:a0:c1:3f:47:21:73:94:3e:86:b5:55:af:dc:4a:c5:6a:88:
         69:24:4c:a8:b2:b1:a8:a9:12:e0:5e:79:3d:47:1e:81:5c:1d:
         9a:19:3d:52:58:30:d2:f4:cc:0c:fd:42:c3:42:01:43:52:09:
         5d:f4:26:47:6a:78:0b:98:28:0f:97:ee:d5:f5:3c:3e:64:b2:
         1b:37:16:0e:da:0a:94:0b:a9:94:96:9a:ae:1c:d4:d0:fa:79:
         c8:14:38:46:cc:1f:8b:c9:29:a9:8d:bf:6f:09:83:bb:ed:ce:
         07:de:83:74:8e:4a:89:d7:a1:6a:6a:88:92:42:6b:0b:07:e9:
         09:2a:f4:43:ee:01:da:d9:1c:bf:53:e1:c4:c5:66:d2:a7:0b:
         13:28:2b:a3:78:14:1a:95:e4:5a:3d:da:d9:fb:cc:f2:46:9d:
         f6:cb:6e:3a:0f:12:9c:70:0a:d8:c4:b7:c8:c0:3c:6a:c5:f5:
         ea:28:76:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:46 2026 by rpki-client