Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
File:                     _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft (raw, json)
Hash identifier:          k3vKGfH0hKRvJRVvz0C6wI67c5IRql2Ea/YooF/awDM=
Subject key identifier:   62:E0:A5:41:82:24:C2:79:0A:68:C3:1E:81:D1:15:62:E2:01:CB:5A
Authority key identifier: FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29
Certificate issuer:       /CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
Certificate serial:       019FA3E087D9BCAB082688811ABA0263CF08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
Manifest number:          19D2
Signing time:             Mon 27 Jul 2026 14:00:28 +0000
Manifest this update:     Mon 27 Jul 2026 14:00:28 +0000
Manifest next update:     Tue 28 Jul 2026 14:00:28 +0000
Files and hashes:         1: F13QQirUcyQJSbRfCl6w_cI9WWQ.roa (hash: Qmtb36fS7mGPq7TyueOpeM3xtlJooopxzuWWdKo+FIo=)
                          2: _7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl (hash: FMpLd/eL5vysPmXlutXmqIXWb2obGCLLKWXlRDa0SmQ=)
                          3: yXL2c-lh8z3Pu6QXVoEmuyvEfX4.roa (hash: yk0yZqIR3aCNm4M9eEBAKHg+9JBzxKPA8wbCVYP14nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:e0:87:d9:bc:ab:08:26:88:81:1a:ba:02:63:cf:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb4f40f3211561c29f1bbc320bd87cfa2ddd029
        Validity
            Not Before: Jul 27 14:00:28 2026 GMT
            Not After : Jul 28 14:00:28 2026 GMT
        Subject: CN=62e0a5418224c2790a68c31e81d11562e201cb5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:16:c6:44:99:c5:6d:db:8e:71:84:1f:17:d2:
                    e2:0f:05:47:a3:48:0a:5a:da:b2:22:b1:3d:8c:b2:
                    3f:87:51:c0:7b:30:35:b7:d2:b5:d6:95:dc:9d:54:
                    4c:db:e5:a0:c1:fd:33:ca:e1:93:15:b9:b2:b3:57:
                    3b:78:5c:f3:ff:76:38:d9:9d:f8:f2:63:23:29:5f:
                    f6:5d:1f:24:ae:2f:fb:98:1c:84:fe:c3:b6:13:68:
                    ea:32:ed:55:ba:9f:c0:b7:55:1d:91:1f:09:4c:35:
                    2a:66:41:a8:36:aa:fc:de:c2:c6:51:28:b6:7e:70:
                    f1:5e:79:37:1e:17:35:3f:d3:aa:c1:bf:55:7f:54:
                    36:9e:da:7d:ff:c3:89:36:28:95:f5:88:7d:b5:d1:
                    34:42:8b:35:d5:5c:32:7f:de:04:b7:46:e6:78:d6:
                    2e:21:65:9d:b0:a9:f5:59:98:d9:7d:7e:77:55:e3:
                    b8:91:2c:d6:73:8c:de:d8:5a:d2:93:e6:ab:42:7c:
                    19:1d:47:ee:50:aa:8a:21:f4:d2:b0:83:26:3c:13:
                    f4:ff:07:01:87:52:dc:18:0a:16:15:7c:7f:a8:64:
                    82:f2:a9:d2:41:6a:28:e9:8d:c8:fb:54:7b:b9:94:
                    cd:5c:d7:2f:b5:68:fa:61:22:1e:37:f3:88:24:94:
                    8b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E0:A5:41:82:24:C2:79:0A:68:C3:1E:81:D1:15:62:E2:01:CB:5A
            X509v3 Authority Key Identifier:
                keyid:FF:B4:F4:0F:32:11:56:1C:29:F1:BB:C3:20:BD:87:CF:A2:DD:D0:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/148d88-6136-4374-994b-d53f94e207a9/1/_7T0DzIRVhwp8bvDIL2Hz6Ld0Ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:8d:21:4b:83:c7:9d:76:99:a0:77:e3:93:7d:62:bd:f7:1e:
         a1:f1:9f:4c:5d:0e:ab:51:2b:3b:f2:f6:e4:8c:36:96:42:bf:
         16:f8:a1:e8:94:70:ed:d8:e8:4d:c9:59:94:3c:7e:8a:03:a2:
         25:29:a0:df:8d:4a:b0:4e:d3:da:56:88:ce:19:42:02:29:13:
         aa:83:25:65:49:6d:d1:35:65:a3:db:bb:49:6b:cf:1b:80:0b:
         74:7f:bd:3c:cd:cf:0c:6e:5e:29:3a:44:39:b1:2e:f6:ea:84:
         59:8b:bf:92:fe:0b:f0:92:91:77:eb:a0:be:5d:db:63:1d:f9:
         42:8b:04:4b:c9:54:74:ca:d3:75:57:e9:d5:ef:ad:5d:23:65:
         fe:45:6a:3e:82:21:32:b8:b3:0e:78:4e:a9:1b:0d:3d:cc:25:
         90:cc:99:82:1e:b3:1f:2b:50:cb:f6:c2:22:79:71:84:6e:30:
         dd:07:66:75:08:c9:58:e3:e5:e9:20:e5:75:5c:89:c8:b5:06:
         df:1b:41:be:96:9b:5e:16:24:e0:4c:bd:98:d0:1b:f5:c7:94:
         56:f6:fc:d4:b6:69:62:33:5c:0f:79:6b:7b:b8:7b:a4:99:ee:
         04:cf:0e:f6:9c:01:61:ac:61:3a:8e:27:5d:89:c2:71:ff:25:
         38:44:19:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 16:24:48 2026 by rpki-client