Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File:                     TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier:          ceGxOwwDQb1heHBx5RB2FaC9l/sP2vjkXh5a2RnSkb8=
Subject key identifier:   0D:F3:30:9A:D2:88:5B:DB:0F:22:4D:AB:91:DF:D3:B7:6B:BD:C4:F7
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       019FA00394BAB8E9BE0C7214032BE87D34DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number:          19BC
Signing time:             Sun 26 Jul 2026 20:00:17 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:17 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:17 +0000
Files and hashes:         1: 87ELvGR-tVd6OIalv11-VasMdI0.roa (hash: GT+ViPlDKtnswlta2ucK3jOCqFPeg5F12bpU1G0NLyM=)
                          2: 9HtQbFiuMYK5vn6ZdJ9A8WN33CU.roa (hash: NhpPo4MiaM2h+3uIW+206u04bojlNWdCKr/u5d1izOo=)
                          3: EgoHat_Mmduzy9sVoMLljVSWe1M.roa (hash: sKWx6PYAthDawxft6PEnQMKdlybWEO/LK5TV06bp3aI=)
                          4: Kdv421FxArGX_lR7dnoK8dbBkd8.roa (hash: QF5wI0hLNiGqV5YB/2mk9biUU4gFL01FMlpDcSvN+Dk=)
                          5: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: pEO4oIEi53DbVmrc6Ny8QYsHp557zyimTTeDSDNlRDc=)
                          6: VOy2pqg45DcbaU8g-AYkzB6uwX4.roa (hash: VFjQyoH7Ml5NUEDn/pVO3lEP5cH7fnzrRe/Tnl0alSQ=)
                          7: jueFlTq5Wpmf63P1qlwF3ekSIBo.roa (hash: 73q0Fc/38Tfq14N513XX+nWtiK95t2QQLqH0dSyYsFc=)
                          8: weCSLgcy81oriQwLxEbz5cBeJzg.roa (hash: TJPfh6TbLdnCL07UGvGbszVyYvuSMqDOujw1k7u6TFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:03:94:ba:b8:e9:be:0c:72:14:03:2b:e8:7d:34:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Jul 26 20:00:17 2026 GMT
            Not After : Jul 27 20:00:17 2026 GMT
        Subject: CN=0df3309ad2885bdb0f224dab91dfd3b76bbdc4f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6d:ec:88:d3:90:fa:5b:f6:ce:eb:23:73:1f:
                    49:a0:72:cf:49:d5:2f:6c:fd:81:15:34:be:0d:0a:
                    b2:1e:d7:bd:e5:e4:d0:ee:7d:ac:fe:56:fc:93:8e:
                    3d:8e:2a:1b:71:a8:7a:4c:03:1a:6c:78:67:ae:57:
                    0d:36:b7:94:ce:38:dc:43:13:2b:cd:2c:5f:a9:dd:
                    9c:11:f6:1a:7b:5f:81:ea:74:0a:93:9c:c9:4f:a0:
                    a7:09:16:45:91:35:8a:e6:af:9a:4b:99:54:93:9c:
                    7e:39:55:06:ff:55:6e:43:55:61:d1:1d:5d:f1:32:
                    2c:e5:a9:8e:68:db:9f:dc:70:7e:4f:19:d2:fe:d7:
                    c9:85:35:0f:2f:d9:67:92:db:d5:a2:c8:3f:34:2e:
                    ea:d1:da:d5:44:cb:96:17:c0:25:d2:52:12:f6:89:
                    28:15:3b:c7:f4:0a:d1:d3:8d:8f:3a:e5:c5:dd:4e:
                    ac:c4:5f:d1:44:39:fa:cc:35:7d:41:62:61:8b:b6:
                    65:64:b8:62:45:ca:81:91:b0:e6:2a:95:7f:6c:f0:
                    14:0a:91:e6:cd:00:4b:d9:de:d0:73:0b:0f:80:d7:
                    56:4b:ab:d2:e0:33:88:81:58:65:bd:25:81:78:af:
                    ba:19:c3:20:56:97:ad:a6:ec:fe:30:33:f4:88:1b:
                    e8:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:F3:30:9A:D2:88:5B:DB:0F:22:4D:AB:91:DF:D3:B7:6B:BD:C4:F7
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:3b:ab:55:dd:0f:ed:2e:4f:0b:0b:09:8a:b6:f1:34:03:f9:
         5d:d3:cf:15:3d:a2:f6:c3:79:11:b1:a7:3a:5c:1b:fe:31:7f:
         16:89:5e:80:f8:bf:85:55:c9:35:98:df:de:4f:a3:62:dc:08:
         2c:9a:4a:a9:84:01:7f:a7:02:44:10:51:f1:0e:47:55:43:04:
         56:0f:fe:52:f0:cf:92:e4:fd:70:34:5f:62:0b:a1:3c:f8:04:
         35:a7:33:14:80:6f:ac:bf:6b:a6:29:10:f3:62:f6:a3:62:0c:
         50:a1:c8:d2:e3:c5:03:60:f1:66:05:21:67:6c:47:68:8a:a9:
         0f:9f:c4:63:d5:82:75:bd:f4:f9:d6:11:5b:60:81:39:59:e1:
         46:37:f9:ab:fc:79:6c:35:de:40:66:7b:e1:78:c6:16:a6:13:
         08:3a:10:84:c3:06:f7:d1:bb:03:b6:c9:d4:bd:d0:a3:24:71:
         10:96:e8:1f:74:3f:9d:ad:36:44:2d:19:7f:a6:c5:a1:ca:6b:
         57:b1:fc:77:7f:bb:b6:19:b6:6b:93:e9:f0:35:cd:3b:7e:be:
         ba:36:f2:be:c1:fd:da:11:9a:29:e0:61:43:98:be:0a:b0:c6:
         bf:b6:30:e4:2e:eb:00:cc:45:1d:c3:ac:8f:99:65:03:5d:b7:
         9a:5c:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:17 2026 by rpki-client