Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          4EOZiREauMSCHxVOOSkOoqcGNhGOm/GGAwXnf5ePjsI=
Subject key identifier:   96:83:3F:37:69:98:05:73:F6:23:B8:19:7B:04:2F:65:B8:1E:30:C4
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       019F82D5D9520C420449C79B1B7B43F33A49
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          19E5
Signing time:             Tue 21 Jul 2026 04:01:20 +0000
Manifest this update:     Tue 21 Jul 2026 04:01:20 +0000
Manifest next update:     Wed 22 Jul 2026 04:01:20 +0000
Files and hashes:         1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=)
                          2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=)
                          3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=)
                          4: GcjqtR6eaVf9zI7HkXKSnJA3w6w.roa (hash: A4MXiuxUupC9OPHA/5SoE0YyMSrNretsQcoN/Jow0+w=)
                          5: UxGBNLJORbA-dUtSWizJlzSR79A.roa (hash: iSbtbOdc4793QhhKCfmSFXrRr7lnZaOwHAQy1vMKWow=)
                          6: VI1RqKQ9FUKeH02MRHEork21o40.roa (hash: wdOOodFBuGweEJw4KzRpikC1wFqxQBn+ps1AczyBeZ8=)
                          7: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: 0T5HdLeuutw8XgRDAXbP8a01+wp+PwOMUVVMJYE7Uo0=)
                          8: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=)
                          9: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=)
                          10: u1nf-Thyw228svKtPSH3GG9Q0kM.roa (hash: zfCV7njN88258Q8HEPbW3g+KPAWnYoYtUU7LB/pH0+w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:d5:d9:52:0c:42:04:49:c7:9b:1b:7b:43:f3:3a:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Jul 21 04:01:20 2026 GMT
            Not After : Jul 22 04:01:20 2026 GMT
        Subject: CN=96833f3769980573f623b8197b042f65b81e30c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:d4:d5:da:b2:03:0e:71:c9:9f:0e:59:1d:
                    fb:a4:31:8a:19:f6:c5:9b:dd:b5:3b:fd:5e:30:26:
                    af:bf:a7:22:38:a5:3c:5c:dc:25:21:2f:e8:7e:84:
                    78:28:7a:2b:78:4e:91:46:3b:04:6d:dc:28:c2:36:
                    4d:9c:90:6f:6b:60:2a:5c:b5:eb:56:b6:bf:28:31:
                    1e:87:56:6d:7a:d4:16:1f:16:25:48:c9:53:c2:78:
                    75:83:c0:4a:b6:4c:af:48:bc:34:f9:c3:08:7d:49:
                    e1:b0:24:74:28:18:96:f1:c2:5d:47:fd:1f:01:21:
                    20:07:d9:95:36:fc:a3:0d:3f:52:58:1b:74:bd:9c:
                    67:87:a4:6d:41:60:fd:06:66:93:37:75:5c:4b:df:
                    1d:e8:05:64:2b:15:53:e9:38:09:d9:98:79:1b:d0:
                    7f:66:e1:96:9f:54:41:b5:22:6a:d9:fc:0c:17:90:
                    2b:2b:c1:7c:4f:b3:7f:f6:95:93:47:e3:16:bb:33:
                    79:47:4b:24:66:73:f1:73:3c:9e:b9:06:69:0d:0f:
                    f2:b9:53:6e:71:b2:f6:ad:14:b1:e2:c3:d6:41:65:
                    08:b2:c4:ec:57:49:5a:3a:05:1a:46:8e:a0:2a:1b:
                    ea:53:ab:51:18:16:b4:23:84:fb:5b:19:d7:d6:2d:
                    a7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:83:3F:37:69:98:05:73:F6:23:B8:19:7B:04:2F:65:B8:1E:30:C4
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:c3:25:c3:2c:b8:b6:79:83:98:e9:ea:ef:49:3c:11:9b:fc:
         a8:d8:28:a9:89:da:65:f9:97:bf:94:00:4f:ae:fa:b8:8d:a7:
         20:7b:3e:d5:59:d2:38:49:2a:31:fa:2c:ca:c9:bb:39:78:0f:
         2a:7a:ff:66:1f:bc:c2:13:83:63:6b:75:b2:5c:d5:e9:19:fc:
         10:66:2e:72:94:b1:1a:b2:f8:66:fc:98:95:cd:7b:9d:08:fd:
         15:d5:79:b8:be:d1:40:db:e4:08:c2:cb:d3:f8:73:6d:0e:a9:
         8b:1d:82:62:5c:f3:f9:bb:7f:fe:4a:b0:69:fb:ae:b8:ac:39:
         aa:8f:9f:08:8c:74:66:94:98:54:1f:aa:75:66:00:99:d8:0e:
         64:6b:e1:49:eb:8e:41:9b:61:14:37:6b:1f:a9:f1:99:5c:0b:
         d9:b9:87:51:71:b8:f2:60:86:5a:d7:70:90:b1:ea:cc:49:c3:
         f9:f6:51:bd:96:57:2d:22:85:ec:96:7c:67:e7:7f:28:21:1b:
         9d:54:e5:fb:b7:fc:50:bb:03:54:3c:46:d6:78:12:ae:70:40:
         2f:0e:03:1d:be:34:6d:0d:c7:73:54:48:5e:67:bc:2b:66:5b:
         f9:3c:f5:77:e5:6e:3d:74:07:26:14:5a:0c:a0:69:20:c0:0d:
         4d:cc:ec:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:07:54 2026 by rpki-client