Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
File:                     Rg0xSfxQypeX9Q_engKggxNMUBk.mft (raw, json)
Hash identifier:          YIx6ldY7PVgAeWXe4jWy1EjoYH5YRzHVV405O4ovjqk=
Subject key identifier:   0C:60:4E:B9:46:B3:9D:59:85:24:8F:0B:6D:F8:BE:A5:9E:05:A4:A3
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Certificate issuer:       /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial:       019F860D73EA4E5F52434B6DB02EBBBE846E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
Manifest number:          1889
Signing time:             Tue 21 Jul 2026 19:00:56 +0000
Manifest this update:     Tue 21 Jul 2026 19:00:56 +0000
Manifest next update:     Wed 22 Jul 2026 19:00:56 +0000
Files and hashes:         1: 80AHb416dPFtah1nGaAc_7l46Ec.roa (hash: 2D/X4apH00Mk7Ti0XtGlvP9oq+7ZpgnstiU/IgSvOD0=)
                          2: ANo9L73aObGqzdP0orWNPP3485k.roa (hash: Q3dDG3+jQe8HP6goxHrxtXjwKKzMb7l9p077g0BZffQ=)
                          3: KXpXJO-YFLLgP89XzYYz7qcHQUY.roa (hash: GGh45Wv5joUkRSI7WVUZH33rmAafKbq5cLNpmunXMXY=)
                          4: Rg0xSfxQypeX9Q_engKggxNMUBk.crl (hash: xm1QuYt/ETv7n8m/fQ/bt3QnHbFyBO9NqhYTNHV8L60=)
                          5: ZGPQKEDVE9F1MV2KWCts_BoufGk.roa (hash: epehMPMwEjYywMBrhnF1PZ/wa0g0S9LNY7+R460jN/I=)
                          6: iWOLIa8CHwTMmCIWqUjl6myNeCQ.roa (hash: rcAH7VEF8TBjliKTDv/7zF+IYhohItkkjWceaK+DiMY=)
                          7: uUDFzxBxpPtA7UjADRUOTQEPY_Y.roa (hash: h5Q3Ax5wjUbWsPmn7ajHFEGC0r7tCkijHeUzTOQ9fVg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0d:73:ea:4e:5f:52:43:4b:6d:b0:2e:bb:be:84:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
        Validity
            Not Before: Jul 21 19:00:56 2026 GMT
            Not After : Jul 22 19:00:56 2026 GMT
        Subject: CN=0c604eb946b39d5985248f0b6df8bea59e05a4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e1:79:2a:1b:6a:45:3e:a3:eb:75:c1:57:82:
                    45:50:cb:bc:74:0e:8c:64:f8:b3:c2:96:9a:ba:b6:
                    9c:fb:49:fc:08:88:d5:e7:5f:64:b1:87:8b:9c:9f:
                    6f:89:b8:9d:2f:0e:e2:70:01:ab:17:d3:36:14:14:
                    19:a4:54:33:d6:0b:3d:c6:69:88:c0:70:66:42:95:
                    cb:66:12:ba:8a:36:1f:35:09:dc:3a:79:ea:d0:83:
                    84:07:ea:1e:81:b5:aa:37:43:98:38:c0:6b:df:a7:
                    1b:7d:42:ac:3d:a7:c4:24:03:d8:bf:09:9e:01:74:
                    76:82:ca:09:47:69:59:78:7a:31:b7:ae:5b:ef:e8:
                    dd:c2:5e:7d:4b:ac:16:5b:d1:02:ba:d6:ed:72:db:
                    71:33:27:78:93:3a:18:43:46:b7:0c:67:e4:ef:73:
                    d2:56:5a:66:80:dd:f4:d3:0d:d3:ac:69:49:f3:a5:
                    bb:8f:6d:f2:7d:36:ad:97:b1:5c:d6:76:4c:89:d2:
                    c9:59:fa:4e:08:e4:c3:f7:c2:97:78:9a:a5:56:d5:
                    06:a2:e0:f4:d1:26:ce:ad:67:81:0e:01:d3:00:59:
                    93:85:9c:b2:b6:8f:0b:1c:ce:68:55:18:64:95:2e:
                    f8:8c:4a:7d:5d:28:0f:3c:ca:73:d6:75:ab:fb:aa:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:4E:B9:46:B3:9D:59:85:24:8F:0B:6D:F8:BE:A5:9E:05:A4:A3
            X509v3 Authority Key Identifier:
                keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:95:78:3e:ec:64:75:4c:40:69:98:93:54:aa:81:c0:c0:88:
         fd:fe:49:49:f7:b2:f3:64:af:96:26:57:54:6e:f7:13:da:0a:
         e6:20:c7:65:59:97:61:bf:41:92:88:c1:d2:64:11:0b:60:00:
         68:1f:78:33:6a:56:0f:9e:1d:3a:8d:ee:62:98:ec:d9:69:de:
         24:2c:1a:c1:69:de:73:1d:93:9a:ef:eb:ee:c1:b6:35:0b:7e:
         23:af:2a:aa:de:cd:59:ef:7f:24:dd:d5:59:36:54:33:52:4c:
         55:1f:ce:c6:27:a7:0e:ad:5d:14:1a:75:3c:69:24:ce:2b:61:
         f9:97:32:ed:0c:64:24:3f:e4:51:f8:0d:da:54:cc:67:d3:9f:
         cf:8c:98:93:b5:b6:57:05:b8:05:27:4b:75:49:16:97:d9:37:
         af:c9:a5:4a:72:95:37:6f:52:60:6a:ee:69:7f:8c:ac:d2:32:
         20:3a:b2:5b:7b:66:3a:c5:e6:6d:d1:8c:1e:48:84:b0:d6:b8:
         16:5a:a0:a4:1e:c0:4b:c4:5b:9f:a0:10:86:45:15:8a:04:c1:
         d5:b9:e0:0b:2b:db:ce:aa:76:58:74:bf:1f:9e:a3:f2:27:21:
         e3:29:9c:f4:eb:d4:ff:6b:18:7f:32:21:70:f3:35:6a:52:c1:
         7a:ca:20:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:13:06 2026 by rpki-client