Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
File:                     1mc4qNrawtDTrt25NPggBmufX-s.mft (raw, json)
Hash identifier:          a98V5fWaZLNHDlLxu5tCIYosAA+zN1GBLwC1xnpyStM=
Subject key identifier:   50:9C:30:2B:D8:56:F0:AC:76:57:C0:C3:37:18:B5:52:3F:55:2B:C0
Authority key identifier: D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB
Certificate issuer:       /CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
Certificate serial:       019F905A056C16FCF79E6DCECEC54F163591
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 19:00:46 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:46 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:46 +0000
Files and hashes:         1: 1mc4qNrawtDTrt25NPggBmufX-s.crl (hash: DF/qqqv6RaMsnzQai1eOTYcF/5AMfA5F9pssqhic9Gc=)
                          2: PvHMHD0aeuQ9T3MtfIs2XmJyQOY.roa (hash: EfRNqiHIBaBfAkezAxeKdTs07evzHPZKbuFa+2c+KMc=)
                          3: TIYeUVbpvuyDC2t31dkXKX77tpM.roa (hash: jq2yqV/pOREhu3bPBF+p4OSILcPoLvkCkURypiB0/n0=)
                          4: cOxS0E2XjVzTbopS5QPfLKjjtnk.roa (hash: mNaGGlEdJbAJ+qyD+c0RDVAtGl4B6iWrOcUapyB/UK4=)
                          5: pI-v5uJ1SgQhhfO7bCx9EJHVnoY.roa (hash: QNyQpokvQqLnIzlnj95bhIcxCT1zZNKDcQ4ODnYC8DE=)
                          6: rCFpqnF0TcjxMo0Y1C5GR4qc4ng.roa (hash: PMdlGjc9Af5sq4QJ2HwfDr1apnmai7YobB9Ga0B6v3c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:05:6c:16:fc:f7:9e:6d:ce:ce:c5:4f:16:35:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66738a8dadac2d0d3aeddb934f820066b9f5feb
        Validity
            Not Before: Jul 23 19:00:46 2026 GMT
            Not After : Jul 24 19:00:46 2026 GMT
        Subject: CN=509c302bd856f0ac7657c0c33718b5523f552bc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:23:e7:6c:53:7c:13:5c:3d:34:eb:2a:69:6b:
                    08:0a:9f:0f:76:08:c7:74:c0:69:84:22:cc:d5:3f:
                    cd:36:a2:ae:2d:1b:3e:23:7a:13:e3:fb:e0:58:a3:
                    cf:f2:8e:d6:fd:4c:e8:19:11:4b:ed:b0:83:6b:ea:
                    94:91:d1:cb:a0:31:3d:95:f5:a5:5c:2d:dc:13:00:
                    c9:fa:f1:81:0c:c5:97:cc:b6:36:e2:fa:25:98:b0:
                    f1:02:a4:9f:f6:4a:cc:c1:ba:34:e0:27:4a:1c:0e:
                    f8:1c:25:c1:91:d8:bc:ff:f9:85:d5:5a:27:b9:93:
                    b3:e0:4f:fe:74:c7:72:21:9d:00:ae:d3:9f:aa:05:
                    80:ca:60:80:0f:5f:b4:3e:42:b1:89:c9:09:d0:c0:
                    75:ab:85:bb:cf:c3:d9:a4:d7:00:cf:0e:af:23:98:
                    d1:0a:b8:f6:43:cb:1c:9a:44:67:81:e3:94:cc:13:
                    15:bd:af:d1:c5:4f:d2:8f:42:f6:0c:81:ab:1a:cc:
                    b0:80:2f:3b:56:33:45:fd:17:cd:35:8b:be:ea:7c:
                    df:c3:b9:63:24:33:22:9a:d0:24:4b:a2:98:2d:c0:
                    c9:03:e0:a8:81:69:0f:44:9d:de:d7:2a:48:9a:22:
                    e9:d6:9d:c0:1f:7f:68:1f:76:62:28:43:8e:06:f3:
                    29:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9C:30:2B:D8:56:F0:AC:76:57:C0:C3:37:18:B5:52:3F:55:2B:C0
            X509v3 Authority Key Identifier:
                keyid:D6:67:38:A8:DA:DA:C2:D0:D3:AE:DD:B9:34:F8:20:06:6B:9F:5F:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mc4qNrawtDTrt25NPggBmufX-s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c57727-9396-4bf8-b25d-6a1e0ec71da8/1/1mc4qNrawtDTrt25NPggBmufX-s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:fd:14:9f:4d:77:d6:6b:94:b3:b1:be:c8:67:94:02:74:fc:
         6f:24:c7:73:25:83:bb:58:81:90:30:d6:80:bc:f3:3c:26:6a:
         f4:b9:99:7d:28:f0:21:bb:d1:de:07:55:87:7b:3d:ba:5c:f7:
         de:54:8c:eb:b7:8f:26:c7:38:c6:71:83:63:1f:62:83:d8:29:
         e4:cf:2a:c0:11:7d:ad:71:40:2e:c4:94:6a:c4:0c:fa:93:cf:
         9e:5b:55:6b:cf:1f:aa:a9:41:27:93:09:4a:85:d4:a9:6f:36:
         0c:63:7d:c1:d6:0e:01:84:b8:d7:22:71:1e:07:15:77:e4:af:
         34:57:40:37:a1:70:6a:8a:97:02:9b:fc:49:f1:6b:1e:a1:2e:
         16:3f:e5:c1:d6:f3:ba:8e:29:0b:13:93:b2:61:d7:f7:14:e1:
         86:b7:2d:61:96:15:a2:1e:51:10:e1:43:dc:2b:e2:3e:b2:c8:
         9f:e9:03:25:af:41:1e:64:f8:a0:f5:4b:c4:2e:fa:c0:6c:83:
         db:26:df:c8:3d:ec:7b:2d:bf:42:75:97:19:9a:f2:65:05:0d:
         54:1e:9c:ec:e6:e7:f2:34:28:31:d8:b3:1e:38:6b:83:7d:b2:
         3b:24:c9:68:86:62:8e:03:99:fe:47:7f:20:16:76:fe:4c:e1:
         90:e5:2b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:38:10 2026 by rpki-client