Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File:                     TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier:          u/wwrFVCxAYr3ESFbU4UhkEVxDfDY25IXupLWmtOefc=
Subject key identifier:   9D:C7:E6:3B:22:CB:1C:9D:1A:7F:94:78:B0:A5:81:06:3D:F2:62:5D
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer:       /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial:       019FCA4A6210A8EA6CFE117724176B9C5DA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number:          197F
Signing time:             Tue 04 Aug 2026 01:01:40 +0000
Manifest this update:     Tue 04 Aug 2026 01:01:40 +0000
Manifest next update:     Wed 05 Aug 2026 01:01:40 +0000
Files and hashes:         1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: TIF6vNg4YANR0nhAf41LlOfzscue7jglOUW16WVKiPk=)
                          2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
                          3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 04 Aug 2026 23:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ca:4a:62:10:a8:ea:6c:fe:11:77:24:17:6b:9c:5d:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
        Validity
            Not Before: Aug  4 01:01:40 2026 GMT
            Not After : Aug  5 01:01:40 2026 GMT
        Subject: CN=9dc7e63b22cb1c9d1a7f9478b0a581063df2625d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7f:9b:7c:b7:6b:49:ea:2e:be:20:9a:0d:92:
                    a9:5a:75:67:79:d9:b0:f6:d1:40:00:9e:c4:47:67:
                    c8:0b:0c:de:95:cf:c0:d2:59:41:fb:f4:31:5a:29:
                    69:24:98:37:71:72:02:71:61:a4:4e:b6:b1:eb:e4:
                    91:7b:ae:fe:fa:01:40:dc:49:a9:64:61:75:84:6c:
                    92:ee:42:2b:90:c0:62:f1:96:04:8b:2c:de:c2:6a:
                    ba:a6:5c:f2:cc:28:c4:2a:20:35:a2:03:b3:45:44:
                    4e:ce:f7:71:2f:f7:70:71:b6:89:e1:1e:60:12:88:
                    9d:5d:5c:25:91:7e:7d:44:88:e0:8b:aa:6a:40:f7:
                    63:f6:57:70:57:2f:6c:e5:7e:2c:6e:50:cf:2f:1e:
                    23:ed:31:6e:ac:7b:7f:71:6b:db:08:e4:7a:74:71:
                    bf:15:9b:16:d4:7d:3f:3d:34:55:1a:05:ca:93:a0:
                    6a:a0:83:c5:d9:2e:f6:fc:7d:1c:fd:56:60:5d:35:
                    a5:a1:60:6f:9c:c2:3d:59:54:a8:96:f2:bc:16:73:
                    99:a6:47:a7:e7:e8:54:db:27:a7:74:f6:db:d7:50:
                    8d:14:0e:e1:89:a1:93:35:3d:4b:59:34:ab:35:c3:
                    9d:d9:23:e7:ce:7c:f1:2a:7f:ea:5f:48:df:90:4f:
                    8b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C7:E6:3B:22:CB:1C:9D:1A:7F:94:78:B0:A5:81:06:3D:F2:62:5D
            X509v3 Authority Key Identifier:
                keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:07:50:2e:8b:d0:9c:9c:60:fd:66:b8:b9:70:c0:c8:6f:68:
         d6:fc:ef:1f:2c:7f:11:46:d8:19:0f:08:4a:be:0b:20:35:ea:
         e4:39:ea:89:cd:e3:c3:ca:07:4b:b1:c3:f4:39:2c:96:7f:63:
         00:1c:e7:b5:b8:a3:d6:6a:e0:a7:64:a6:d8:9e:64:d4:1c:a5:
         3e:b2:5b:f6:e0:59:9d:05:c5:02:10:15:48:ed:6d:98:7a:fb:
         8f:77:7d:12:14:d4:76:fe:a3:00:de:8f:53:8f:39:57:4e:46:
         27:e4:2d:48:bd:12:99:73:62:43:05:33:95:14:d4:81:a9:16:
         0f:21:c4:df:9d:f9:98:92:c1:de:53:c8:e7:a2:84:a7:97:82:
         b0:ab:8e:19:8d:76:35:1e:f0:a4:59:87:cb:5e:ca:aa:dd:ad:
         f2:30:cb:fd:ea:d3:8a:27:a2:b2:a1:27:e6:57:f3:78:60:c3:
         3e:5a:79:5f:19:b0:02:ba:94:09:d0:2a:28:e8:1f:fa:c6:9d:
         2f:24:c9:03:5d:80:c2:20:21:a6:24:f2:80:9b:ef:5f:f0:00:
         4b:e0:fb:0c:8c:39:b3:eb:e0:68:a5:93:c2:bf:16:a9:b4:f2:
         3a:b2:fc:d0:27:a4:0a:0c:f2:84:0e:85:04:ca:4f:0b:9a:7f:
         0b:e6:7f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 4 08:45:35 2026 by rpki-client