Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
File:                     M69dxinNSTdZfz_NhYylyA7ZfFA.mft (raw, json)
Hash identifier:          DymSGm2Cw471wptN7mQftXfBWg78OnkUfWAmKRhmmMM=
Subject key identifier:   E0:8C:46:0A:58:D5:EE:0C:B8:14:E8:C8:03:DE:6F:58:B5:8C:C8:FA
Authority key identifier: 33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50
Certificate issuer:       /CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
Certificate serial:       019FA2CEF34A1ABB6680B42F6214057FACEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
Manifest number:          19D2
Signing time:             Mon 27 Jul 2026 09:01:39 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:39 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:39 +0000
Files and hashes:         1: M69dxinNSTdZfz_NhYylyA7ZfFA.crl (hash: 1+hu5GM6uLtA3MiZsDdkmiW8nniHkU/Imdpwz2gwjTs=)
                          2: O_VDSTEuqOGqu70pCxRmCW-6TUA.roa (hash: 9GMoYD3Uj1noF4pEvupjpvPMeufwxuuOufErPrD7SRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:f3:4a:1a:bb:66:80:b4:2f:62:14:05:7f:ac:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33af5dc629cd4937597f3fcd858ca5c80ed97c50
        Validity
            Not Before: Jul 27 09:01:39 2026 GMT
            Not After : Jul 28 09:01:39 2026 GMT
        Subject: CN=e08c460a58d5ee0cb814e8c803de6f58b58cc8fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b2:72:44:0b:e0:f6:47:00:e2:38:a0:c4:fc:
                    68:46:a0:d2:11:c7:65:89:65:6c:1b:04:f6:a7:ef:
                    66:7b:91:ce:d9:fd:b6:ef:2b:9b:09:05:a3:15:bc:
                    7d:ad:1a:af:d0:ba:d1:bb:f9:14:42:f4:91:02:c9:
                    93:18:ba:18:48:eb:63:84:52:45:a2:2b:e5:fd:ea:
                    9d:4f:0d:5c:56:44:89:ad:6f:a4:14:28:f3:3f:49:
                    4a:53:5b:12:ac:c5:30:a3:8a:ff:3f:16:5a:a7:24:
                    a7:b3:27:9d:86:9f:4c:fc:c4:e2:a6:e8:0e:5a:91:
                    a8:ac:2b:f1:d4:ad:05:20:ed:b4:40:11:55:6a:9a:
                    cf:82:a8:76:60:d3:cb:c8:cf:c6:2b:8c:ec:d7:e8:
                    3d:2d:4c:4b:8e:c2:9e:04:4f:31:d5:e3:a6:f0:64:
                    8d:a5:b1:22:e2:c4:10:58:a8:df:64:41:63:db:67:
                    ec:6a:63:60:3a:fe:58:33:e2:22:49:1d:08:a1:87:
                    ec:94:d9:0a:b7:13:1e:04:7f:75:93:37:e3:73:81:
                    82:a1:f7:79:c1:ec:32:76:3e:51:e3:0e:0f:d6:3a:
                    6a:26:17:49:09:40:2e:9f:a2:37:d8:38:5b:cc:3b:
                    34:74:da:29:b3:18:cf:c4:55:3a:2d:10:ef:3a:35:
                    ee:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:8C:46:0A:58:D5:EE:0C:B8:14:E8:C8:03:DE:6F:58:B5:8C:C8:FA
            X509v3 Authority Key Identifier:
                keyid:33:AF:5D:C6:29:CD:49:37:59:7F:3F:CD:85:8C:A5:C8:0E:D9:7C:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M69dxinNSTdZfz_NhYylyA7ZfFA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3552ae-c55e-4a0b-b8fe-e26e9f51ddb2/1/M69dxinNSTdZfz_NhYylyA7ZfFA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b8:b7:97:44:52:ed:59:80:5f:60:a9:ca:67:ff:52:92:01:
         b9:f5:f7:90:71:85:3c:2c:45:6a:6f:e1:bb:a2:5c:62:fd:56:
         b0:55:23:8b:10:d1:ff:2d:97:bc:e7:cf:51:06:8d:db:4a:39:
         56:9e:2b:72:c4:62:4f:4c:1e:88:4e:4c:13:a8:48:75:a7:48:
         e9:c3:6d:a0:eb:f0:6d:c2:42:bb:d5:99:5b:b9:ee:86:02:88:
         07:1f:90:77:6d:f0:f3:a1:1c:bc:ed:0c:64:52:01:e3:a3:11:
         b8:83:0a:67:e9:10:ec:65:4c:93:8c:b4:36:12:f4:83:3a:e2:
         d4:8e:be:a9:d4:57:65:5d:05:15:d9:b1:50:17:2b:97:73:15:
         1c:d3:41:f5:ee:dd:d5:fa:86:7e:61:07:f7:67:98:ee:17:1b:
         95:2e:46:cc:4c:86:bc:61:11:26:af:74:4c:5d:48:a8:bc:09:
         08:c0:65:d9:f7:7b:81:55:bd:0e:b3:70:6d:af:46:53:a0:2c:
         18:0c:c5:93:94:c6:48:2e:01:23:dc:0e:4c:32:6a:96:fc:8c:
         25:e9:c1:c3:91:76:e7:52:9f:27:d2:82:7c:5c:fe:57:33:f4:
         b9:23:db:15:67:ed:76:3c:4f:6a:c2:0b:1e:5c:1c:94:4b:bc:
         89:f8:d5:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:33:00 2026 by rpki-client