Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          YujkYqXh79OlsC+fs0XiJMlJvNY219zkrz5mPcpnWcM=
Subject key identifier:   48:64:18:E2:F3:B5:36:43:85:E0:3E:E9:3F:56:3B:A4:4B:B7:CF:95
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019FCF70203F39D09231239A5A033BA3A525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          19EB
Signing time:             Wed 05 Aug 2026 01:00:59 +0000
Manifest this update:     Wed 05 Aug 2026 01:00:59 +0000
Manifest next update:     Thu 06 Aug 2026 01:00:59 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: aPRuXhkYKR379zz3LSUG4FZW7TwSveg5b1yhgnCw5ew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cf:70:20:3f:39:d0:92:31:23:9a:5a:03:3b:a3:a5:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Aug  5 01:00:59 2026 GMT
            Not After : Aug  6 01:00:59 2026 GMT
        Subject: CN=486418e2f3b5364385e03ee93f563ba44bb7cf95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:2b:ff:11:d4:0f:b4:dc:dd:2e:5d:91:0e:9f:
                    c6:d4:19:fa:2b:ba:55:8c:e3:cb:b2:b1:1a:4f:d2:
                    10:45:6b:39:70:05:2e:6f:ff:fa:a0:40:7e:7f:62:
                    fc:6f:cf:76:14:6a:cf:11:5f:12:f8:92:4f:bd:70:
                    5e:55:c8:80:9c:15:e4:84:e2:46:86:2a:07:2a:87:
                    b6:e4:49:e9:6e:1b:6d:da:72:ac:ce:54:5e:c7:08:
                    3d:05:57:f9:d5:99:51:38:c8:3e:29:6f:f7:b8:e2:
                    e8:44:48:98:88:06:ea:6b:38:8f:ef:38:bd:58:d3:
                    3b:e6:0a:9d:6f:d3:3b:cd:d0:30:d2:11:43:fc:57:
                    6c:2d:e9:ba:62:cd:2d:94:b9:4a:51:8b:ab:33:e2:
                    58:f2:bd:32:c9:88:1c:b0:60:f6:90:b7:18:68:7d:
                    07:3e:5c:8c:10:39:7e:16:90:d5:99:b0:96:31:09:
                    60:8d:32:45:29:70:19:68:7c:b8:9f:f8:e8:7a:77:
                    44:77:d2:e9:b7:a9:99:88:41:8b:86:63:74:db:65:
                    bf:13:d3:0e:77:7d:10:66:5f:b1:14:39:9b:29:ea:
                    0a:7f:56:9a:75:20:95:8e:74:6e:6d:82:5c:ee:52:
                    d8:39:66:58:64:c3:1a:82:60:a5:fb:75:0a:40:3b:
                    3a:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:64:18:E2:F3:B5:36:43:85:E0:3E:E9:3F:56:3B:A4:4B:B7:CF:95
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:2b:45:da:73:70:05:49:47:da:bb:32:80:fc:47:77:fe:1d:
         9a:e0:c7:a5:a3:e1:b5:fb:1a:2f:a9:fb:1e:38:d9:ba:57:4d:
         b3:4e:24:f9:0d:1c:eb:a7:a7:eb:b7:5b:74:b0:23:84:64:0a:
         ba:5b:4f:06:eb:8b:51:03:e3:a2:e9:01:d3:a1:8b:95:a5:30:
         82:0a:cb:a1:0b:fa:e5:57:35:4f:fd:38:36:16:83:a5:33:cf:
         b0:c0:d0:e7:ba:43:81:bd:02:52:fb:38:58:48:02:da:93:4c:
         87:55:2d:fc:87:0a:de:a2:55:88:35:25:5e:05:d6:36:24:e0:
         81:ed:8b:e0:11:dc:2d:df:6e:7a:6c:68:ee:b1:48:4f:ee:7e:
         67:6d:c6:5c:04:9f:cb:8f:0e:a8:8b:b0:5f:d7:e1:78:cd:b5:
         6b:0d:02:62:a2:f8:b3:ef:4c:a8:f5:b6:11:9c:5a:92:89:3b:
         6d:a0:6b:8f:aa:a3:f5:8c:53:51:fc:a6:4d:d6:8f:96:96:b0:
         1a:36:99:ea:f2:61:d9:8a:13:c5:77:1d:de:41:27:c3:6e:d8:
         e4:34:fd:94:64:55:ea:55:37:b2:87:e5:22:b2:63:56:f7:05:
         9c:2f:2a:4b:7f:48:4f:8f:b2:db:73:2e:3e:0e:d7:8f:10:52:
         a7:22:22:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 5 02:58:56 2026 by rpki-client