Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File:                     toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier:          aJueQRBVF59N5twGu5brVrunEHI03nFgF3QP0CvgMBc=
Subject key identifier:   1A:DE:03:16:F7:19:3F:22:38:77:16:6E:B5:6C:47:25:93:09:43:2B
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer:       /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial:       019FFAFFA82D0441264CC86A5342B018BD28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number:          19FD
Signing time:             Thu 13 Aug 2026 12:01:26 +0000
Manifest this update:     Thu 13 Aug 2026 12:01:26 +0000
Manifest next update:     Fri 14 Aug 2026 12:01:26 +0000
Files and hashes:         1: Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa (hash: z2PsPLaUE/pjgoZrk9x3ve1iWv9V87jouLdEBjFOK3I=)
                          2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: qdB677bGF1JVkfk4B4dUYSIfQeBBQJlfNKJ1RIrSa1k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 10:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fa:ff:a8:2d:04:41:26:4c:c8:6a:53:42:b0:18:bd:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
        Validity
            Not Before: Aug 13 12:01:26 2026 GMT
            Not After : Aug 14 12:01:26 2026 GMT
        Subject: CN=1ade0316f7193f223877166eb56c47259309432b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b9:a1:8a:1e:71:e0:c2:7e:2e:98:8e:07:06:
                    1f:85:4d:b0:d0:c5:50:9b:37:87:60:3f:0d:3c:6a:
                    06:b6:dd:9f:7b:9a:02:5c:dd:59:df:b0:55:23:73:
                    68:54:9a:06:fb:9d:a1:01:1a:64:94:05:1c:13:ba:
                    87:e6:f9:64:d4:e9:c8:e7:6f:3d:57:e4:0a:38:89:
                    58:8d:84:d8:a0:5e:ea:64:aa:35:5a:2e:64:01:3a:
                    14:8d:0b:29:99:67:1c:24:de:af:6c:ec:26:fc:bd:
                    33:fd:eb:f5:5d:4f:93:8a:1c:a9:ab:70:55:3b:5a:
                    5b:11:92:62:81:78:f6:ff:c7:cf:84:f3:c1:d7:21:
                    1a:20:2f:ef:b4:ff:36:a3:18:4e:ba:63:83:40:86:
                    9d:23:1c:60:64:3b:34:22:83:fd:89:7c:4e:c2:f1:
                    18:43:52:1b:2c:f4:07:3c:43:6a:05:d4:c1:9b:73:
                    d1:e0:2f:cd:28:e3:c8:6d:f3:95:26:a4:63:5e:19:
                    d6:be:9a:6c:ba:6f:6f:d4:6b:24:74:f5:ba:4c:30:
                    9e:76:47:50:c8:09:86:43:31:67:4e:f7:06:7e:15:
                    4d:c6:69:52:67:58:a2:e8:e5:1c:c6:45:3b:f1:35:
                    37:cf:47:6e:79:f8:a9:f7:e7:22:6c:c2:86:47:36:
                    db:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DE:03:16:F7:19:3F:22:38:77:16:6E:B5:6C:47:25:93:09:43:2B
            X509v3 Authority Key Identifier:
                keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:90:17:6b:6d:f5:8f:b7:78:d6:e6:fc:ba:92:50:1d:a0:38:
         2a:38:99:48:37:a9:fb:5b:11:b5:9c:a5:ea:ee:cf:79:9e:b7:
         97:bd:a4:7e:f8:69:b0:c8:81:9a:eb:18:15:e6:0a:bc:5f:34:
         b6:81:28:9d:48:2f:88:3b:92:05:22:85:ea:43:c4:85:94:e3:
         3f:c8:9c:3c:c6:1d:14:2e:05:83:f6:a2:52:3a:8d:03:1b:74:
         47:7c:05:94:13:20:a7:1e:8f:cc:8b:0c:29:43:37:7d:59:c9:
         92:33:98:af:a8:60:45:ec:dd:bc:cf:00:e2:0c:be:4d:a9:3d:
         dd:fd:0e:5f:3d:e6:3a:8a:f0:4c:1f:92:78:94:53:61:2f:6a:
         ca:d2:13:b1:4e:e8:a0:b8:7e:f3:ff:70:7a:8c:80:17:51:69:
         27:78:28:99:9d:56:ec:eb:6b:d0:d8:7a:a7:32:3d:99:2c:c0:
         98:47:66:e6:81:2d:23:79:57:74:79:33:56:01:08:20:c7:33:
         f0:d8:b3:f0:bc:d1:0d:28:77:0f:5c:bb:3c:88:56:98:51:04:
         94:a7:76:0b:d3:33:23:e4:d7:12:f0:59:2d:18:6b:69:89:60:
         ba:18:24:25:13:5e:10:7e:34:e1:4a:82:c1:18:56:92:19:e2:
         45:c4:a5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 15:53:23 2026 by rpki-client