Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
File:                     Has2Xsw1BFitorCUnuZ--djG9Nw.mft (raw, json)
Hash identifier:          RCuwObpnfDmri9XobZKivF7PSwuTudVUPxyLqGtzkUw=
Subject key identifier:   19:DF:1C:8F:E3:1D:FA:69:78:7E:5F:78:7F:3E:75:A6:E2:4B:B3:C3
Authority key identifier: 1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC
Certificate issuer:       /CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
Certificate serial:       019F848D13889A5AE3218C1426D1F37B6933
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
Manifest number:          02C9
Signing time:             Tue 21 Jul 2026 12:01:05 +0000
Manifest this update:     Tue 21 Jul 2026 12:01:05 +0000
Manifest next update:     Wed 22 Jul 2026 12:01:05 +0000
Files and hashes:         1: GJ9jq1utAOnfB6vGzK5aQugyYRo.roa (hash: 4LC584iGEYWuEuibcnVRjFRB3sB/Gg71VV3hzTlGieE=)
                          2: Has2Xsw1BFitorCUnuZ--djG9Nw.crl (hash: 7yatuj0bZcUavMFP5i+ju6UXReVdELBB2rbD9zF+1OE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8d:13:88:9a:5a:e3:21:8c:14:26:d1:f3:7b:69:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dab365ecc350458ada2b0949ee67ef9d8c6f4dc
        Validity
            Not Before: Jul 21 12:01:05 2026 GMT
            Not After : Jul 22 12:01:05 2026 GMT
        Subject: CN=19df1c8fe31dfa69787e5f787f3e75a6e24bb3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6e:dd:1a:d3:12:94:7e:79:df:71:20:bc:4d:
                    2d:bf:24:bc:4c:47:e1:f6:44:84:ab:3a:fe:ad:1a:
                    fb:58:88:70:ca:e9:e5:bf:92:97:ca:b9:51:5f:dd:
                    70:c3:c6:71:8d:26:3f:4a:42:46:ad:0f:de:f5:da:
                    1e:9e:ec:f8:c1:e3:0f:09:fd:d7:71:00:3f:33:64:
                    f7:ef:fc:7c:2e:62:b4:07:90:cb:5a:5a:b1:27:2c:
                    fc:b9:90:c0:7d:d5:14:6f:4f:cc:3c:9f:2b:ee:4c:
                    fa:54:d4:fc:38:e9:be:20:a7:31:d4:55:a4:11:3a:
                    ac:9b:b3:bb:ab:96:99:86:a3:b4:b3:55:35:01:45:
                    f2:21:07:59:41:da:4d:60:13:16:d9:de:ca:73:ac:
                    57:74:78:b4:6e:e2:14:df:75:3d:72:40:f4:34:bb:
                    9d:00:2e:23:b7:d5:4b:65:ee:5a:40:ca:c5:83:6f:
                    5d:aa:92:0b:f1:6e:1d:b0:f1:5b:3c:2b:6b:1f:a4:
                    72:fc:79:5d:83:88:16:70:d6:8b:b3:af:64:c5:19:
                    94:92:07:41:2f:82:fb:0a:ff:37:b2:73:76:46:c8:
                    1b:37:44:17:78:06:ec:65:c0:28:f4:1d:c6:f3:25:
                    96:77:2d:7e:d0:09:5c:10:4f:9a:b4:17:32:95:88:
                    1a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DF:1C:8F:E3:1D:FA:69:78:7E:5F:78:7F:3E:75:A6:E2:4B:B3:C3
            X509v3 Authority Key Identifier:
                keyid:1D:AB:36:5E:CC:35:04:58:AD:A2:B0:94:9E:E6:7E:F9:D8:C6:F4:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Has2Xsw1BFitorCUnuZ--djG9Nw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/fa8f78-76e5-48a9-abb0-60ae76646dd4/1/Has2Xsw1BFitorCUnuZ--djG9Nw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:79:8d:55:9a:16:27:9b:22:ee:10:1b:76:3e:e1:c3:53:73:
         58:0b:cc:09:71:2e:8a:c5:72:de:bf:d6:8c:68:01:33:de:02:
         2e:be:ec:10:bd:57:43:e5:79:dd:41:75:17:3d:14:8d:75:7d:
         fc:c1:9e:c7:2d:47:1f:5f:e6:d1:f3:82:95:79:d0:f1:69:da:
         3e:c9:44:de:92:7a:bd:53:2e:f0:c9:b6:2e:db:a6:69:e5:93:
         75:98:1a:8f:b9:51:4a:57:60:98:a1:c3:ca:dc:df:1b:94:f4:
         83:46:fe:51:90:f2:32:3e:d7:d3:9a:46:55:73:d3:4f:b7:3d:
         57:84:89:00:4f:f0:29:c1:a9:ed:96:2d:c2:2b:05:87:42:6e:
         b7:b2:f3:5d:a2:45:d0:f0:08:4a:7e:d9:8b:94:a7:1e:15:f4:
         ef:58:42:8c:34:02:04:64:e0:d5:22:47:1f:20:13:06:47:1a:
         14:4b:e5:77:1c:3b:d2:34:0d:95:f4:be:54:f7:c5:b4:f6:12:
         b6:68:78:92:51:68:1b:99:85:27:4b:93:3d:32:c3:aa:c8:39:
         d7:a2:f3:4c:7d:ab:14:5b:9a:75:8a:9a:a6:f0:ed:8b:ce:c0:
         5a:63:a2:7e:f9:c8:30:71:6d:e6:f3:81:6d:b6:eb:80:f6:77:
         0f:33:27:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:00:05 2026 by rpki-client