Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
File:                     bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft (raw, json)
Hash identifier:          mratPRA56k1d+MWRfJoRVmumwh4SYmy++1quESMtoAI=
Subject key identifier:   4F:84:9A:45:93:DF:58:1D:03:2B:B6:71:85:42:EB:0B:96:19:20:8E
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Certificate issuer:       /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial:       019F8FB4CBA3F357507FDB09F8C657DEA4DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
Manifest number:          19DC
Signing time:             Thu 23 Jul 2026 16:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:18 +0000
Files and hashes:         1: 1-sLM79fhgln3kKtmAVDWOo1kwmw.roa (hash: EUHr6hsfI8WuHLl/CT9f9Qt7naBdoIdHB1PmYGEqxpI=)
                          2: 2GyceDm_XAmgavG6-5vW6sV6cj8.roa (hash: kTGmpubLRdREIFhz3PYfU7sXxSrDuw6tha9TW2osTVI=)
                          3: R-Ms9tnwVFr5zGPdMpveWYmvzTU.roa (hash: 4hVn6BmRDmF60zXMMdHkc2jChJsAngJEvYhtXGC9Vjo=)
                          4: ZK9ALarqOpzm0i2rpLZ-rHOMzdo.roa (hash: RllCIZ6AldL0IOvShUd1+ZNf+viS99vPh52YLrvbtJU=)
                          5: ZmcfgQVw9WznPpWT9yLghomma18.roa (hash: dwEz5IwUCOta4WNqfA1M1PPK2wh9BaQxA/M28+Mkwpk=)
                          6: bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl (hash: IX4YemxkdhqlGbanm5IT5NdoxNouEDxjYQDCPhZ3+PQ=)
                          7: ks2_IkZaAakd1-3jQOWLy85dDy8.roa (hash: mLEy/InkNukmfeS2zm1mvXpvR+u6dmdc0Mw1w4KWFN4=)
                          8: vcHdvq4j0MZDMpwY_Sh1_lhpemE.roa (hash: TJZuXEOOt0r/V9EaRl+qnNfFa6UZgYtOnc2ci1AuANA=)
                          9: yO-faN1p6CDhjtBsMnJFSamd0b4.roa (hash: f5cjUT10BBqhpOr6X0AO88BjDl80sXjlHTe7MTa/7YQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b4:cb:a3:f3:57:50:7f:db:09:f8:c6:57:de:a4:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
        Validity
            Not Before: Jul 23 16:00:18 2026 GMT
            Not After : Jul 24 16:00:18 2026 GMT
        Subject: CN=4f849a4593df581d032bb6718542eb0b9619208e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:1a:d0:15:6a:71:68:bf:40:73:31:2d:ba:76:
                    b7:b6:33:96:66:76:36:1a:97:3e:d5:12:88:21:be:
                    13:7d:28:4e:f2:20:a1:4d:28:55:ed:a3:ff:8e:60:
                    ac:25:c3:88:45:f0:f5:2e:d0:9f:a8:0f:00:43:ad:
                    a2:2b:45:8f:c9:69:6f:7d:7d:dd:fd:73:5b:15:5d:
                    57:49:0e:5b:d8:e4:f7:4b:8e:03:bd:e2:e4:b7:ec:
                    dc:57:fc:98:95:b0:f5:d0:92:ef:98:7a:10:28:9c:
                    35:31:4e:e5:61:34:48:17:59:aa:b2:82:ee:45:1c:
                    6f:c1:15:15:b9:6d:85:42:32:de:d5:05:6c:5d:34:
                    7b:ba:04:e2:71:6b:2f:b9:4d:4a:7e:e3:32:cc:0b:
                    67:78:75:52:31:c0:d7:e2:cf:fa:f6:8a:73:9e:7c:
                    39:eb:46:0a:58:68:14:c9:14:b1:d6:cc:51:43:37:
                    c6:bf:cc:54:3d:25:49:d0:da:db:8b:24:61:b3:08:
                    5d:de:7f:ea:78:a0:61:37:b7:ef:9a:61:0e:3c:bd:
                    1f:d3:2b:c1:83:30:4f:4f:d7:aa:03:e5:47:66:c8:
                    be:cb:8c:f6:26:31:24:5a:3c:4d:79:76:dd:9f:41:
                    0a:06:f4:57:92:a7:25:a8:50:a3:58:81:6f:84:71:
                    bc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:84:9A:45:93:DF:58:1D:03:2B:B6:71:85:42:EB:0B:96:19:20:8E
            X509v3 Authority Key Identifier:
                keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e5:1a:f8:c6:d5:e8:52:3c:df:fb:a6:2f:ab:91:fb:ca:5d:
         5a:b0:ec:31:d5:e5:ea:fb:2d:c3:ba:15:24:34:d3:66:6d:29:
         2d:aa:67:59:36:70:8d:c0:94:bd:e0:39:1b:b6:84:e7:ad:66:
         8e:65:9b:b2:f8:f7:c6:8b:2c:08:f1:31:bf:ce:65:1b:00:d2:
         7a:12:b1:e0:7b:44:c7:17:3a:59:8a:07:16:dd:1b:ae:0f:43:
         f4:c5:23:f2:ec:b0:ca:f8:8b:b6:d7:8c:42:c2:02:ee:6c:3d:
         3a:16:f5:b2:60:05:a2:3a:e2:a5:d4:97:02:72:6c:76:8d:2e:
         a6:5e:bf:8c:5c:60:86:cc:9c:6f:c2:2e:b1:86:58:37:97:b5:
         d5:fc:57:57:cf:ed:7a:13:19:de:12:30:59:52:f4:ac:9d:e5:
         3c:d2:9a:fa:32:d6:4f:26:ab:ab:9d:09:d9:27:ee:9a:df:2e:
         af:1e:33:b7:13:bc:b3:b3:d2:81:72:9f:5f:99:20:77:79:9c:
         0c:79:56:28:99:a7:e0:b1:4a:e9:09:18:37:21:c4:70:f9:06:
         d7:f2:89:d1:6a:e9:22:70:f6:41:9c:0e:c8:a9:4a:8b:4c:f9:
         4a:d0:9e:fa:11:b5:60:a7:23:fb:49:cb:a2:d4:58:c5:12:b5:
         f1:e1:51:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:56:48 2026 by rpki-client