Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
File:                     _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json)
Hash identifier:          5IcwTJ89Pbh3t0iPFwa8nHpPoItZcRBb3rHa7EkwYVQ=
Subject key identifier:   27:13:77:42:D9:6F:97:E8:B2:DE:C3:19:5B:A1:9C:6B:D7:7F:D6:DE
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Certificate issuer:       /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial:       019FA14E292C3B4C7E9DDA8C2C424DBF3D15
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
Manifest number:          19D3
Signing time:             Mon 27 Jul 2026 02:01:21 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:21 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:21 +0000
Files and hashes:         1: 1-Txs3OfJBF0-L5N04u9viiEkExs.roa (hash: yCRGF/dCmsVFPH4M1prjAs/Ch8adr1cnpUiJaDaeRHw=)
                          2: PXdVrTfvOREuwYCi1hBh_drpxXc.roa (hash: B/ByN/OVMs5NKQAves3njbZUv4VZGqQ3E5hohAeKtx4=)
                          3: UC4QXNFGsoHkQG3dZ4Gib3wh1nc.roa (hash: m8cmj611CUqDl1+NNeNnVGJqJBdqb5a0cWtJhXaEPn4=)
                          4: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: IsG/kQddJBexyoPqFO0VpZJu39kl6qTNKpNv1HEMPxI=)
                          5: xqdYiyOjRSciwZ2UnJ_79WalaOo.roa (hash: BhmwEyRFaLJTPcKk47g4mCuag+1KvgvlYQorDHsQN9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4e:29:2c:3b:4c:7e:9d:da:8c:2c:42:4d:bf:3d:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
        Validity
            Not Before: Jul 27 02:01:21 2026 GMT
            Not After : Jul 28 02:01:21 2026 GMT
        Subject: CN=27137742d96f97e8b2dec3195ba19c6bd77fd6de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ba:56:b5:0d:28:f1:ce:20:94:3b:6b:79:3f:
                    41:a6:15:72:5d:5b:48:a5:d7:2d:02:8d:e2:d5:20:
                    a0:e6:55:00:41:d2:40:8f:84:83:1e:72:e3:0a:a7:
                    5b:41:be:e2:a1:af:22:83:6e:e6:67:fd:6e:a0:ac:
                    4b:12:b9:57:e2:4e:b8:96:07:03:08:02:c5:96:f6:
                    d9:d3:fa:9d:05:ab:4c:60:0e:21:14:7e:28:f2:84:
                    42:25:a5:e9:c7:6c:df:fe:0f:8d:01:60:ba:cf:79:
                    64:85:80:90:ff:7d:ac:b9:b2:fd:98:88:58:3e:d9:
                    6b:1d:b1:fa:e3:e7:a1:7f:0a:80:16:99:16:f9:3f:
                    12:d0:6a:30:a1:82:54:46:cb:b0:d4:dd:8a:35:f8:
                    c4:22:d4:4b:54:18:66:ce:ba:69:52:7a:0a:82:08:
                    06:82:63:a4:85:41:58:a0:f3:a1:cb:ec:b7:51:49:
                    52:f4:4e:65:e7:8f:6e:7a:13:fe:a3:26:65:7d:1e:
                    0b:e0:a0:38:bf:21:bb:2d:2d:75:53:a3:7a:99:e9:
                    af:8e:a0:b1:76:c9:ca:ec:92:eb:be:85:74:cf:f8:
                    b5:4f:1b:05:04:1c:71:4b:38:e4:7c:15:64:ea:ce:
                    01:82:75:9a:88:aa:22:b5:86:3d:5d:18:dc:5a:53:
                    7c:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:13:77:42:D9:6F:97:E8:B2:DE:C3:19:5B:A1:9C:6B:D7:7F:D6:DE
            X509v3 Authority Key Identifier:
                keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:d5:8b:01:a9:46:57:c9:a3:53:db:c5:72:5c:f3:6a:67:74:
         96:75:a0:54:79:ea:73:19:0d:7e:88:57:9d:fc:8d:8b:81:8a:
         6d:1f:ca:46:f1:b2:aa:31:2d:8b:8e:57:e3:d8:b9:d1:75:a5:
         e7:0e:ab:1e:ac:d6:d5:d3:47:20:8a:7a:bb:60:42:d6:c8:ea:
         d6:1c:c5:90:ce:ea:98:20:34:99:1e:bd:3a:c4:ab:d8:ec:90:
         ff:f0:0d:b6:3b:01:5b:84:89:d4:22:31:bb:1e:b3:73:63:78:
         38:39:88:5c:07:be:a4:9f:d6:25:b8:07:76:59:c6:1f:71:42:
         0c:b7:c8:d7:95:e9:76:42:70:24:b5:a6:41:41:4c:f3:86:ac:
         c7:77:cb:3a:42:27:f2:33:ce:0a:d3:5c:98:b7:d7:2a:02:29:
         1a:dc:a2:b6:26:12:78:d8:f9:81:9d:83:54:a1:e3:0f:77:bc:
         91:16:9f:26:52:35:f0:0d:3b:49:e4:81:38:cc:d8:c9:05:aa:
         36:9e:31:7c:cf:ef:64:88:1f:4d:63:12:2f:8e:fb:b8:f7:2d:
         a6:99:be:bb:5a:87:5d:05:23:42:f0:24:b5:e6:21:9f:1c:e1:
         30:37:82:d8:fb:89:0f:ab:7e:50:53:2f:8d:52:0b:76:d1:d6:
         d7:c9:92:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:58:31 2026 by rpki-client