Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File:                     S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier:          XsinJP0v/WrRFfXNQQDJW8JTN6pKdvZkqTNsLa5F3iI=
Subject key identifier:   71:03:DA:0F:08:CE:86:12:82:C8:BD:8E:15:1C:FB:4F:13:3E:31:F2
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer:       /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial:       019F92ED98557F59D331D855EC71C612AC6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number:          19F2
Signing time:             Fri 24 Jul 2026 07:01:12 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:12 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:12 +0000
Files and hashes:         1: R4nwBrKG7x9uOWCG8K_so7mVRUo.roa (hash: R6vN21QkHPK5A6K5j3qcFOHwB6bVk1zcZeUr2+mwrXk=)
                          2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: Cznor5+5uU5EPott/f7LPX3w3h8QZweRuM35CBdAahQ=)
                          3: cN9-QkcDeRmmddqpx80fjE4LD7s.roa (hash: O0DZXiBII2s8che4/ZMrj0hj9juscGV08AllWCCgxdM=)
                          4: p8O4ZN9Xeldr_QvYtZL9RkkK6rk.roa (hash: KcqVP0b3/1a1YhXbBJeqeSikqnykQvFC4LFHO5+2KLo=)
                          5: yCZntdcD-FiyyzALoPRod_Tynro.roa (hash: A7enThxiUzB12fnWIKjiXX2k7pCD4DTrx01Es4L2jQE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:98:55:7f:59:d3:31:d8:55:ec:71:c6:12:ac:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
        Validity
            Not Before: Jul 24 07:01:12 2026 GMT
            Not After : Jul 25 07:01:12 2026 GMT
        Subject: CN=7103da0f08ce861282c8bd8e151cfb4f133e31f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:19:59:cd:09:43:f1:e6:34:a2:72:c2:99:7c:
                    bd:a5:be:68:46:38:47:54:2d:c1:df:2f:cc:6d:58:
                    68:62:24:f7:f7:70:9b:94:cd:e3:d7:0a:d3:75:52:
                    31:cf:33:ce:ed:a4:4f:a4:e7:47:e6:6b:98:9f:fb:
                    b8:bb:36:26:4c:12:68:26:96:28:4f:88:1d:7b:6a:
                    ca:62:65:9b:47:46:77:b8:c7:bb:b3:3b:d2:22:72:
                    9a:9f:72:44:98:72:ab:59:21:a8:26:7e:41:89:36:
                    d9:59:c1:11:73:ce:fc:99:c9:aa:b9:cb:a3:35:34:
                    fc:e2:57:fb:9f:70:73:19:d5:6b:e1:1a:fb:51:47:
                    53:f0:51:f7:3f:00:d7:1c:68:ce:65:84:c4:17:a4:
                    f4:ba:fe:bf:d0:b4:6e:2b:e9:68:fc:fb:46:0a:b6:
                    77:6f:88:30:a8:86:7f:99:7c:0a:ef:22:d3:5f:4e:
                    60:80:80:60:77:45:40:71:bb:3f:82:89:a1:d5:10:
                    ab:3c:87:5f:01:34:bf:c0:2b:b2:2c:0f:86:98:38:
                    36:67:58:82:c2:11:68:98:f4:eb:e2:6f:28:93:45:
                    a5:44:49:8f:40:3d:ee:7a:f7:37:5f:cd:5f:d9:91:
                    22:d7:4a:90:1f:e0:f6:55:74:9e:fa:d1:37:ec:b8:
                    3f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:03:DA:0F:08:CE:86:12:82:C8:BD:8E:15:1C:FB:4F:13:3E:31:F2
            X509v3 Authority Key Identifier:
                keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:cf:34:9a:f2:6d:f9:f1:9b:8b:35:c0:15:6c:b5:1e:e7:3f:
         08:36:ac:5c:26:d6:11:51:63:48:04:43:27:91:ac:d3:3c:80:
         c8:57:2c:b6:39:04:d5:67:c7:70:1e:23:6b:35:5c:59:8a:4b:
         ca:e8:bb:51:2c:40:85:93:93:af:5a:92:e7:7a:f5:9f:8e:bb:
         61:2a:a3:bd:60:66:65:ee:d5:82:ed:50:ed:5a:a6:d3:26:b1:
         73:af:12:04:94:e6:1f:4b:1e:31:42:7a:d6:6f:ff:86:02:6c:
         ff:7c:56:dd:73:d5:e7:fc:d2:40:4f:9c:f1:a2:ab:8c:43:a1:
         bf:d7:cb:07:0e:69:11:57:f6:2b:31:a6:e6:6f:b3:2b:65:9f:
         99:cd:fa:ae:b8:7e:c4:9b:1c:e4:59:bf:c0:7a:a1:c2:a1:12:
         b1:45:67:d2:19:99:93:0c:f3:d3:88:a7:07:f7:ea:34:a9:d2:
         64:81:6e:f5:d5:03:88:16:ba:d9:db:42:93:91:f3:12:77:f0:
         ab:36:30:f2:b6:1b:84:d6:df:38:2f:81:12:13:71:9f:24:07:
         a0:5b:cf:a7:b8:86:d5:d6:d0:a9:18:6b:e9:5c:38:2b:e1:98:
         0e:1a:48:df:30:1c:70:8d:7a:15:4f:f2:15:d1:30:93:37:d0:
         c5:a4:0b:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:33:37 2026 by rpki-client