Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
File:                     Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft (raw, json)
Hash identifier:          jxLyO92v7PJiZYgHStvE0kBViMJpYgi5yr75ZJsMLRI=
Subject key identifier:   9A:28:E6:D2:45:14:93:44:86:89:84:7F:63:11:FD:93:36:B9:FE:F4
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Certificate issuer:       /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial:       019F645D0894BDDC45E492B0C3688BA8A9EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
Manifest number:          19B0
Signing time:             Wed 15 Jul 2026 06:00:46 +0000
Manifest this update:     Wed 15 Jul 2026 06:00:46 +0000
Manifest next update:     Thu 16 Jul 2026 06:00:46 +0000
Files and hashes:         1: 1-ZahvYxgAa5M_mDA6_2eC-rBenI.roa (hash: 978w808DkY3VDvL0hj5f3PlMqWZxHQFkwmbW19+/jR8=)
                          2: 7tiBKXEaHXd2T3JrhotcdPIQdHM.roa (hash: uX2d9uSrsFhlR/nFxsm7FePXc9bNjhHTQMjCrrOLdlo=)
                          3: Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl (hash: 0nc2yQ3bZKxAiUWwRDcIOsYEgOUqpYptwNviII0rWZ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:64:5d:08:94:bd:dc:45:e4:92:b0:c3:68:8b:a8:a9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
        Validity
            Not Before: Jul 15 06:00:46 2026 GMT
            Not After : Jul 16 06:00:46 2026 GMT
        Subject: CN=9a28e6d2451493448689847f6311fd9336b9fef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d7:08:71:57:59:e2:38:21:7e:77:d7:64:78:
                    c1:54:8d:38:27:e4:6d:7c:31:7e:4a:d3:08:9d:86:
                    31:55:b8:46:20:75:d1:59:fa:ad:15:e8:de:d8:90:
                    ad:59:a4:83:70:1b:87:ae:61:4f:64:38:35:6a:da:
                    63:26:31:20:3f:07:ef:14:42:75:2d:b4:ea:29:10:
                    53:0a:f8:34:dc:32:b2:49:30:2b:05:a3:47:d1:b0:
                    32:8e:4d:78:68:4f:2d:85:6e:8e:09:ea:e0:a3:76:
                    db:02:15:64:67:3c:ed:ce:b0:80:e2:a1:0a:8e:8b:
                    4d:a7:fa:86:62:c5:56:ff:5e:eb:74:7d:36:d0:a1:
                    e4:82:45:ff:dc:81:c7:7e:42:e6:84:1a:0a:5e:f7:
                    3c:e0:27:e8:63:a4:25:14:b4:dd:4a:95:43:3c:34:
                    47:8d:67:89:ef:36:f9:78:64:14:24:94:4f:66:00:
                    de:5f:d5:78:09:d4:93:f2:48:67:d5:4f:cc:21:9b:
                    f9:f1:fc:7e:de:2d:f1:53:7e:28:42:fd:5c:7f:2d:
                    8e:5b:14:ac:58:ea:73:42:53:3c:84:77:86:08:86:
                    26:f2:63:d8:b5:5d:71:ee:f0:e7:17:8d:8a:8c:6e:
                    53:16:d5:ef:5d:14:14:de:0b:c8:b3:66:62:86:03:
                    45:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:28:E6:D2:45:14:93:44:86:89:84:7F:63:11:FD:93:36:B9:FE:F4
            X509v3 Authority Key Identifier:
                keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:13:96:4e:bd:98:6d:68:67:7d:96:a6:2e:e5:73:48:b7:c1:
         06:02:ef:43:c0:1e:83:ea:97:91:57:cf:ba:7c:20:0c:f1:59:
         0e:2c:d5:f5:09:23:34:d3:21:61:32:c0:6b:63:74:07:34:2b:
         f9:dd:f6:d4:05:39:19:8a:69:fb:81:0e:6b:a1:e6:8b:26:70:
         bd:e2:2b:6d:09:eb:6b:02:2e:33:ed:9e:ce:bb:50:41:47:13:
         45:e6:cd:4a:d7:56:c3:2b:f0:61:e3:ba:7d:ff:f6:79:73:f6:
         b1:85:f9:32:63:fb:a0:1b:83:60:a2:e6:c4:1c:91:20:1e:33:
         50:09:0f:50:dc:39:dd:37:1b:ad:9f:9b:a2:b7:9c:87:c8:0c:
         ad:ec:ca:2d:70:56:02:8c:38:ec:7c:dc:85:3e:3f:e8:46:59:
         2b:61:c2:fb:00:b2:15:cd:d8:17:69:dd:c3:81:0c:61:87:7d:
         07:eb:5e:14:5c:15:0b:79:2a:c3:7e:a7:b7:24:19:20:83:60:
         2f:6c:e4:ed:20:f5:bc:5f:3c:f8:a7:5c:d2:79:21:ca:25:48:
         ae:0d:c0:99:de:94:bf:08:69:87:cd:a8:a5:23:67:ca:d9:3d:
         90:13:e5:e3:1c:61:79:3d:26:a6:ac:5f:8a:65:d4:59:8f:76:
         52:c3:87:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 14:52:30 2026 by rpki-client