Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
File:                     c_IQ8SmaHgrucdwdeeX7EgktMKk.mft (raw, json)
Hash identifier:          CcRjQQ5yH/RZMIBolSNxwmbROreE9CXVu+89QdwFQ1Q=
Subject key identifier:   2B:E2:28:5B:CD:2D:8F:44:CC:59:CB:0D:73:C6:DB:76:29:D7:B5:FF
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Certificate issuer:       /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial:       019F83438594ED9469DC36539C6DB949D810
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
Manifest number:          19E8
Signing time:             Tue 21 Jul 2026 06:01:08 +0000
Manifest this update:     Tue 21 Jul 2026 06:01:08 +0000
Manifest next update:     Wed 22 Jul 2026 06:01:08 +0000
Files and hashes:         1: DZMUgwqZTew_AIq02ZLPKDpbTYE.roa (hash: zHfVpuiksrUGKB8ICNHjrDl5IxhuSu4hChZHL57TIOU=)
                          2: E_7ISSwzh-AzkcURcKG1UBHObwg.roa (hash: fZa0WBEUKgsquXMzv9u9jFUdHdw7HPHhLmdCS89OIG4=)
                          3: PdhTLCzS94CSZKH6b3DIBk5Rvps.roa (hash: aEYKUEVb3YSj13VmPxeTpVeblAEFaCEyE+oxalL99hY=)
                          4: PdiLR6TNVHL1PiwB_9TjhY2_4Mw.roa (hash: fxJolf7HcMsKt8n4SeoLRKU0s9QwXZsLgW50Kw3yYQM=)
                          5: c_IQ8SmaHgrucdwdeeX7EgktMKk.crl (hash: em9TYIw9c7iEpFqx1Dwimv1iooYQ5XgNV8iLIigfLGI=)
                          6: ct7G4Mom5Boc802bEbFFnAVpv-0.roa (hash: adbr+0r2/YFext/ZvzXaEL0mKU5w0/dxwR1z36K4Lc4=)
                          7: gDzhjRCZK_FApJYIWCYUq-55Q2U.roa (hash: cqVkcQFspksV97CWkorGKdmXrskou3R0TD9pkV2DUcA=)
                          8: mhTVQr4r3DZ7VGITyIG_xnJTKZ0.roa (hash: wCR6DC8Pqa4qxwOFxGkFj4Y4ZzJ+te0bBqmlHbBzVjQ=)
                          9: rguuKu0JocggKCL3qQF5U1vu6P0.roa (hash: 6Ae1aACirOJ8duoAp8UtLd/ooRChADVPUXnqoj0mDb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:43:85:94:ed:94:69:dc:36:53:9c:6d:b9:49:d8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
        Validity
            Not Before: Jul 21 06:01:08 2026 GMT
            Not After : Jul 22 06:01:08 2026 GMT
        Subject: CN=2be2285bcd2d8f44cc59cb0d73c6db7629d7b5ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:99:e0:8a:53:5c:92:65:9d:55:2d:41:55:65:
                    e4:f2:1c:60:15:db:bf:05:be:c3:46:0d:82:31:d3:
                    bd:17:b7:85:5a:7e:31:8a:4c:33:65:e1:7b:18:97:
                    9e:2c:45:8f:49:3f:ac:5b:86:9a:24:17:e8:7d:52:
                    f2:96:df:1c:f4:28:ef:a1:d7:ba:85:86:30:cb:5f:
                    67:b1:d3:4f:d4:dd:a3:d6:9f:65:14:6a:d1:b2:f6:
                    6a:6a:20:a2:b3:ac:ea:3a:f5:a5:c1:31:10:aa:47:
                    0e:c0:f2:fa:b7:ce:e6:49:b5:70:32:d6:24:6b:ef:
                    0e:aa:92:dd:d2:d6:e1:4a:5a:9d:ac:fd:58:a3:d1:
                    a8:7d:7c:13:eb:ed:87:88:bc:b2:63:d4:55:dc:99:
                    b1:93:80:c2:3a:e2:f1:89:2f:58:34:58:69:bc:74:
                    ec:67:12:b7:c3:42:81:ff:5f:35:e2:c5:ff:10:70:
                    c6:99:25:fa:32:c8:69:23:38:09:11:f9:f3:ef:7c:
                    39:12:88:d7:b3:e8:ca:f1:34:b1:8a:f2:11:29:66:
                    fb:2e:75:35:8a:c2:29:58:32:0b:51:55:e2:34:7e:
                    e9:2d:e4:c9:f5:af:8a:16:1f:e3:08:60:41:02:b7:
                    f4:7b:c9:13:56:18:57:fb:1a:c2:a9:4e:32:83:ae:
                    48:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:E2:28:5B:CD:2D:8F:44:CC:59:CB:0D:73:C6:DB:76:29:D7:B5:FF
            X509v3 Authority Key Identifier:
                keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:6a:15:e3:ab:01:1d:37:24:ae:63:10:98:16:3d:f0:cd:26:
         e5:b2:c6:73:94:73:f4:ac:f8:d9:3d:44:50:ca:f6:e8:f6:9d:
         a4:6e:9e:52:1b:12:60:de:94:71:8b:a9:43:70:3c:c3:0b:5e:
         b9:b4:ad:12:17:6a:fb:86:b1:4d:44:9f:fb:60:a7:f8:70:a8:
         b1:36:8f:fc:66:21:96:82:3a:f8:8e:22:22:c2:95:9b:07:13:
         63:9a:13:41:c4:03:10:e4:90:30:c9:ec:d2:f1:a8:c8:a7:be:
         8d:f9:5b:cd:98:98:e2:5b:76:5a:01:87:f7:62:c8:70:f3:38:
         73:c7:8b:67:3b:d4:c7:fc:5f:7f:f7:da:17:bf:4c:57:d1:6c:
         67:f2:ac:fd:de:0f:6b:d7:f8:44:fb:bb:29:60:a1:7b:d0:aa:
         16:2a:a8:89:b2:3f:85:9a:94:f2:ed:a3:30:7e:97:27:98:17:
         b1:b3:2f:a8:67:49:60:51:d0:94:5f:42:90:ef:23:8a:35:c4:
         ee:0c:64:56:a2:b5:cf:8a:42:db:5a:9b:44:1a:44:89:71:60:
         e4:57:11:10:62:36:fd:97:45:84:c5:c3:f4:d7:25:4a:bb:8f:
         2e:92:56:19:ee:7e:bc:74:74:6d:80:e4:10:6f:80:7a:48:16:
         43:33:47:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:14:00 2026 by rpki-client