Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          l1maIB039bXocrTPZW48Qkx77KwqVMzl27TfF8Yeh5M=
Subject key identifier:   79:FB:D4:AE:FC:C6:BA:34:DE:23:00:7A:CF:78:BE:2C:D1:4B:F1:C1
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019FEE56455F79303CCA2F0CEDE5AE2BDE6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          19FB
Signing time:             Tue 11 Aug 2026 01:00:58 +0000
Manifest this update:     Tue 11 Aug 2026 01:00:58 +0000
Manifest next update:     Wed 12 Aug 2026 01:00:58 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 6+PHbR0Eud6/Jy11HOD5FRP+14HQWdDVXSEcQPcZVj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 11 Aug 2026 23:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ee:56:45:5f:79:30:3c:ca:2f:0c:ed:e5:ae:2b:de:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Aug 11 01:00:58 2026 GMT
            Not After : Aug 12 01:00:58 2026 GMT
        Subject: CN=79fbd4aefcc6ba34de23007acf78be2cd14bf1c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:59:67:d5:cc:37:90:e3:ea:cd:20:ca:11:
                    6e:f6:f1:bc:6d:8f:6c:0e:a7:fb:e8:f8:7e:e8:d4:
                    b7:e8:99:92:4d:c1:72:48:1e:3b:84:d0:d1:68:6b:
                    6b:a9:f8:0b:77:1d:26:ce:02:9a:93:50:62:54:9b:
                    22:3c:3b:a2:cb:ed:ec:9b:74:d8:58:19:ba:e1:0d:
                    bd:6f:fe:57:1f:65:c3:33:68:ab:11:1e:e9:52:54:
                    20:ea:19:a0:c7:a3:70:2f:c8:f8:72:23:8b:05:1b:
                    36:67:4d:b0:88:51:e1:da:dc:9d:a7:29:a0:e9:d9:
                    22:b4:4c:49:ce:0e:0a:10:c3:52:2c:3f:9a:ee:a2:
                    91:c9:fa:80:06:f7:97:ee:16:9a:2e:06:f8:e1:e4:
                    b4:54:3b:8d:8e:42:1d:04:12:7a:f5:59:f3:09:5e:
                    b0:7a:0d:5b:4c:ac:b8:27:ed:23:59:f8:4f:30:de:
                    2b:97:06:02:db:41:03:b8:09:40:6f:75:87:b7:4e:
                    e1:a1:b4:67:ef:f3:c3:90:41:9a:5d:85:8a:35:03:
                    25:6a:b3:2d:28:4a:ca:c5:55:09:92:4f:5a:80:8b:
                    ff:05:01:cc:6b:2e:3a:d0:b1:6f:9f:66:71:e7:2e:
                    bd:51:aa:64:6e:f5:ba:72:ea:40:ab:0c:9e:da:65:
                    9e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FB:D4:AE:FC:C6:BA:34:DE:23:00:7A:CF:78:BE:2C:D1:4B:F1:C1
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:2f:20:09:8a:58:bb:f3:b9:8c:90:cc:e1:2f:25:11:0a:2a:
         7a:ab:e2:f1:fb:32:f5:db:db:49:19:8d:5a:5d:f9:11:e1:de:
         ae:e9:00:9c:56:6f:46:5b:e3:68:d2:0f:d5:77:26:52:f8:13:
         c2:81:f6:dd:40:4a:07:86:60:23:1b:c0:9a:64:0a:66:ea:d1:
         b9:2f:fa:5b:8c:21:af:e8:f8:70:12:37:40:01:c1:5f:a0:5a:
         9f:74:cf:06:7e:2b:66:34:f1:b2:f8:87:b5:04:e8:a1:82:73:
         f3:04:97:84:84:93:fe:ea:49:e7:fc:bb:e9:36:56:80:1e:0e:
         81:27:a4:f5:5d:50:b3:ea:ac:80:1a:2e:49:b4:58:7d:81:54:
         01:1b:83:d2:6c:ae:ad:7e:7d:7a:fb:e2:57:94:db:84:77:6e:
         a5:15:d2:a6:53:24:c1:f6:54:8f:cb:f0:cf:36:0d:32:bf:c7:
         0b:21:35:bd:db:74:2a:06:03:e9:95:e4:df:2e:ae:02:ce:a1:
         0f:b7:05:59:12:2a:e2:8b:30:f5:ae:1a:c4:be:29:cd:9d:c1:
         e0:86:45:63:30:ff:6a:0f:a7:5a:83:fa:fd:d7:12:b3:5f:53:
         fd:42:5c:8e:51:47:28:9d:51:0e:58:3d:f8:f5:c1:69:f2:7c:
         f4:46:42:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 06:37:45 2026 by rpki-client