Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          qGjQS1Ld9oJMjGIsxU8EKy72pN9WyDRBEOK0aItiwB0=
Subject key identifier:   38:0A:F1:AD:0E:8D:0A:61:22:E6:CE:76:DA:CD:F2:1C:F4:47:D8:C4
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       019F84FA69C2C01DDE2E65FB2D3F13216DC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          19CC
Signing time:             Tue 21 Jul 2026 14:00:31 +0000
Manifest this update:     Tue 21 Jul 2026 14:00:31 +0000
Manifest next update:     Wed 22 Jul 2026 14:00:31 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: Kez2e/agu+m+ATOKH56MZppC6ibo6tOm4EFM53ZVV8c=)
                          2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
                          3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
                          4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
                          5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
                          6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:fa:69:c2:c0:1d:de:2e:65:fb:2d:3f:13:21:6d:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Jul 21 14:00:31 2026 GMT
            Not After : Jul 22 14:00:31 2026 GMT
        Subject: CN=380af1ad0e8d0a6122e6ce76dacdf21cf447d8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9c:1c:93:65:b6:50:d8:d6:d6:6c:2b:81:6a:
                    61:05:ee:34:20:a8:07:23:04:3e:9d:45:4b:6a:44:
                    83:70:63:e6:3b:46:41:57:e1:42:83:24:f7:e2:f8:
                    b0:3f:ea:f3:89:33:0f:a7:aa:5b:9b:ce:85:15:bd:
                    61:51:96:4d:7f:3d:27:64:c0:13:7f:b4:5b:1e:fd:
                    9d:64:a7:06:23:bc:f3:e5:9e:3b:e2:a8:87:78:53:
                    00:b6:7d:1f:bf:f3:37:be:97:08:cb:30:ba:ba:57:
                    04:be:55:07:9e:42:61:5a:da:82:27:bb:f8:62:d0:
                    f2:db:9a:5e:c1:a9:d3:93:7a:d4:79:38:ce:12:49:
                    8f:88:45:ca:dd:ac:1d:83:16:ed:4e:2f:78:c7:99:
                    ed:b0:6d:ed:cc:ed:95:17:f9:47:8c:a9:72:0e:b3:
                    0a:6f:3c:70:c0:d9:0f:b4:61:ae:ee:a1:09:95:74:
                    ab:2c:c6:d5:9a:e6:79:b1:49:e0:67:b8:8a:dd:9a:
                    cc:a5:51:42:e7:66:35:00:b4:3b:5e:77:6e:0f:0b:
                    6c:24:8a:1d:d9:72:ca:ba:ff:f6:85:0b:dd:7e:8f:
                    d8:84:68:9a:c4:59:a8:cd:74:22:7e:41:94:59:27:
                    e1:e4:22:34:1d:bc:f4:5f:de:c8:ab:f5:a8:47:43:
                    8e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0A:F1:AD:0E:8D:0A:61:22:E6:CE:76:DA:CD:F2:1C:F4:47:D8:C4
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8f:02:f6:44:52:0f:e6:e5:6b:73:99:d5:98:b7:f3:7d:db:
         a7:25:3b:d9:0b:fc:27:32:5d:14:61:f9:bf:8a:a1:df:1d:8b:
         bb:1f:9b:0b:91:bd:82:12:f5:e8:d3:74:9c:12:59:b5:a9:cf:
         31:64:1d:2c:5c:08:99:a3:ad:78:6b:66:10:ed:3f:87:3f:b2:
         37:5a:fb:e0:4a:5b:55:58:28:42:fa:f4:21:00:e9:e8:5e:7e:
         dd:8a:27:99:e7:d5:3d:8f:d6:a2:b7:f7:29:dd:ef:81:96:be:
         44:fc:00:bc:4d:ae:c0:7c:11:23:57:3e:8a:63:f0:6e:69:bc:
         f9:e7:f3:39:5c:c8:df:86:2b:e7:89:12:93:bd:48:b2:b7:9b:
         5b:6c:33:94:38:8c:cf:1b:e3:0f:8e:b0:8d:0d:e2:ab:ff:ea:
         0d:f6:a6:88:89:53:d2:d1:93:a9:ce:c6:2c:eb:32:7e:49:6a:
         68:d9:d4:5a:c4:f7:38:b7:64:3a:12:65:c8:e9:31:ae:a9:8d:
         ce:10:da:35:b8:1f:c4:27:d5:29:db:c4:12:d0:b7:e7:0d:43:
         7f:64:f1:53:37:5b:84:27:81:94:b3:f3:97:38:45:7c:53:66:
         9b:80:bf:25:06:40:d5:1a:9c:ae:10:b9:6b:55:e0:ad:da:ff:
         b5:27:84:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:26:57 2026 by rpki-client