Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
File:                     mFrmxZw15GA4fa68-4Zvih67NoY.mft (raw, json)
Hash identifier:          NK0jbPlVSdCktEmh1qpTjcGXN/sevsTJHNgVy9vsrDc=
Subject key identifier:   FB:89:DD:08:A5:8D:21:F6:D8:D3:F7:84:A9:9B:99:16:9C:A4:B0:D8
Authority key identifier: 98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86
Certificate issuer:       /CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
Certificate serial:       019F829DF8AE82B61E7245B8441801A596B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
Manifest number:          19C0
Signing time:             Tue 21 Jul 2026 03:00:18 +0000
Manifest this update:     Tue 21 Jul 2026 03:00:18 +0000
Manifest next update:     Wed 22 Jul 2026 03:00:18 +0000
Files and hashes:         1: 6mr_negPNHsR5J0MSqEp_ieYKiU.roa (hash: R2V3SBjHf1L7l3zp37riDQXw6pyaQxn29F6fxbrUIig=)
                          2: GljtY0R1J1ByOdSoq7cvOo-xQ8U.roa (hash: Fqs7S4w69EF6ZT+aB+xuRmBdIVTZ/4rbTRRyrV/zgKA=)
                          3: JIvUMyg919C-AEiCOLhbtlj6cjE.roa (hash: c3tt9IXLSdvp7thburVJzoa0SnXdItptroj1j30Mafk=)
                          4: S2LndCNixy083ZTjbNt_shK0ePU.roa (hash: /dwxq7l7Ax9j0ZmPcwmkPrxtmD1WAiHSHcUMVp1m05I=)
                          5: mFrmxZw15GA4fa68-4Zvih67NoY.crl (hash: ysy5DFTvCLB/XthoqDqbZp2GV0+AIhPzYCsZCJ/1Hy0=)
                          6: wMBz1OxL3HTz5yYKEtRNA_2ypJc.roa (hash: dgJQac7vUSrU8OsO7dHZl/BzAOs/LTYZ/18knGRwxgA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 03:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:9d:f8:ae:82:b6:1e:72:45:b8:44:18:01:a5:96:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=985ae6c59c35e460387daebcfb866f8a1ebb3686
        Validity
            Not Before: Jul 21 03:00:18 2026 GMT
            Not After : Jul 22 03:00:18 2026 GMT
        Subject: CN=fb89dd08a58d21f6d8d3f784a99b99169ca4b0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:39:f3:e1:a7:6e:26:5c:b2:fd:e4:67:5e:83:
                    2a:bd:5d:fb:22:8a:80:63:da:ab:a3:f0:32:1e:78:
                    e2:61:22:48:68:53:6c:25:3f:36:9e:94:b0:dc:f5:
                    53:c6:81:54:fc:54:6a:b5:82:e7:34:e5:fd:ff:01:
                    20:e1:ca:c4:8a:b7:4c:a1:64:d9:ea:a8:3f:e2:74:
                    92:a8:ff:1f:cb:6a:86:86:9e:7c:bb:8c:6d:be:e5:
                    3e:fd:79:b9:3f:22:5a:ec:60:bc:86:31:fe:f3:4d:
                    62:ad:fa:e9:f2:b4:66:0c:4b:dd:ca:bb:0c:38:65:
                    d7:92:2e:cd:f6:8f:0f:17:97:ee:5d:71:c4:b8:81:
                    51:32:3e:5f:d5:c7:c2:5d:74:07:53:2b:d0:be:a3:
                    34:7f:ec:fb:cd:6c:35:5a:12:8f:c9:a4:ad:44:1c:
                    d2:6e:8e:b4:fb:f1:f4:4c:1d:00:3a:36:f5:a9:e1:
                    f1:98:f2:14:38:3a:14:9e:f7:a7:d6:78:24:6a:f2:
                    24:d4:cb:ee:ea:9d:fa:24:2b:36:c2:4b:28:9c:ec:
                    8f:38:05:a7:23:4f:5b:38:b3:77:30:7c:d0:67:4d:
                    06:a3:8d:98:a0:23:e5:ee:93:c3:09:00:55:67:18:
                    6c:e9:01:cc:40:31:f9:51:8b:a9:92:ad:c3:91:e1:
                    ad:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:89:DD:08:A5:8D:21:F6:D8:D3:F7:84:A9:9B:99:16:9C:A4:B0:D8
            X509v3 Authority Key Identifier:
                keyid:98:5A:E6:C5:9C:35:E4:60:38:7D:AE:BC:FB:86:6F:8A:1E:BB:36:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mFrmxZw15GA4fa68-4Zvih67NoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8b906b-9c1d-45d9-86ba-c7fe62227df3/1/mFrmxZw15GA4fa68-4Zvih67NoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:59:58:eb:f7:cb:ac:58:34:9b:bd:9b:5b:04:bb:f6:8c:b7:
         45:5f:ee:a5:67:43:be:88:e5:65:33:69:c1:76:67:3c:cf:77:
         d1:7b:5f:22:de:aa:40:e5:4b:03:47:85:af:78:71:bb:e0:f9:
         f9:f5:83:e5:5f:ee:54:f1:ca:23:ca:ed:86:b5:91:8c:77:88:
         26:e5:e0:7e:32:5e:93:3e:33:1b:34:68:e8:a4:c6:ae:8e:03:
         b7:4f:3b:69:8f:86:f8:97:df:d9:e4:20:ed:ac:a2:46:98:7c:
         e8:87:43:69:a5:0a:33:ce:5c:5a:7e:a3:9c:2b:cf:bb:3a:ab:
         52:c6:ff:8b:a8:dd:36:8a:9b:21:f4:eb:57:89:89:3c:8c:10:
         b5:a4:65:c9:c6:20:78:bb:36:6e:5d:2d:17:66:9a:f1:23:a9:
         81:a1:40:91:7e:f5:42:65:a4:0b:48:8f:8b:38:1e:94:eb:85:
         79:40:b2:78:36:59:48:9a:2e:87:67:52:58:35:63:40:dd:f2:
         71:db:ff:cb:c2:0a:e5:b6:39:2e:85:c6:c1:31:f4:ab:ee:44:
         b0:00:4f:86:4b:9e:77:86:d0:10:16:b3:6d:fc:9b:02:5b:b2:
         df:4e:8e:0e:e0:6b:11:98:f2:b4:4e:a5:bf:cf:8e:e7:bc:12:
         4d:9b:02:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:40:55 2026 by rpki-client