Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          DNuVEn+JJ8kp4UogsWcdkJGCbf6wUZ8UwwomlbUxeAQ=
Subject key identifier:   14:E2:6D:DE:DD:9D:C7:FF:8E:8D:AE:B3:C5:20:4C:56:CF:53:73:F5
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019FC3D9DD6EC2A8A03C74B210A7F331F067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          19E5
Signing time:             Sun 02 Aug 2026 19:01:02 +0000
Manifest this update:     Sun 02 Aug 2026 19:01:02 +0000
Manifest next update:     Mon 03 Aug 2026 19:01:02 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 1B2haZqE6sUz9BccEt6WWZRbffDY9OQ1SPfdwveyFes=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 19:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c3:d9:dd:6e:c2:a8:a0:3c:74:b2:10:a7:f3:31:f0:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Aug  2 19:01:02 2026 GMT
            Not After : Aug  3 19:01:02 2026 GMT
        Subject: CN=14e26ddedd9dc7ff8e8daeb3c5204c56cf5373f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:e2:3b:6b:52:21:fa:74:89:dd:60:1c:63:c3:
                    70:90:e3:f4:d9:23:0b:e5:ca:40:db:ec:c6:a9:74:
                    1f:58:53:6f:28:bc:64:33:b2:c2:df:99:e7:1e:3b:
                    9d:d2:ec:a4:13:9b:51:91:20:46:00:f3:b3:ba:bc:
                    24:d1:96:fd:97:62:08:5d:27:17:c7:c5:ea:1a:2d:
                    6f:f1:a1:b9:e6:ae:9d:e2:15:aa:9a:92:2a:7f:dc:
                    2c:3c:46:17:4d:d8:f1:a0:0f:06:e9:cb:38:cc:a0:
                    5e:20:f8:74:60:a3:2b:5a:5e:6c:97:51:34:b8:75:
                    6c:90:22:47:3f:8e:a9:31:2c:b8:7a:fc:d6:97:15:
                    c0:9a:e7:49:d6:e7:82:1f:79:33:b4:51:51:08:ce:
                    f0:82:32:68:38:7e:ec:70:3b:35:72:08:7e:12:f0:
                    38:5e:f1:fa:c3:7c:c3:e9:a8:6c:1a:88:6b:04:01:
                    39:8f:e1:fe:ec:8f:c3:7b:94:0f:80:04:13:76:23:
                    16:51:77:7d:94:7e:86:9e:88:20:7c:d8:a0:5d:4e:
                    cf:8f:a6:c3:8f:08:f0:43:9a:85:e2:5a:5a:6d:6a:
                    bd:c7:52:82:f6:61:eb:99:de:b8:40:18:2c:21:d1:
                    9a:23:0d:b7:ea:a1:74:39:0c:1b:ba:ef:e3:f4:32:
                    4c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:E2:6D:DE:DD:9D:C7:FF:8E:8D:AE:B3:C5:20:4C:56:CF:53:73:F5
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:a3:55:e0:0b:9f:f8:2d:15:9d:d4:24:4d:86:fa:25:59:23:
         a6:d7:fc:92:e4:d9:51:5a:22:7c:0a:c7:c0:a9:a4:c8:3c:4c:
         82:ec:d2:5b:c0:3a:42:79:24:72:68:91:c5:35:fa:26:1c:db:
         f4:5a:86:d8:64:a7:cc:a2:80:32:7d:50:fd:8a:43:d4:32:0b:
         c6:19:3f:1b:36:ac:15:7b:f8:f4:ed:a6:7f:3c:3b:0a:90:20:
         75:72:da:c2:85:9c:68:3b:c4:5d:37:35:39:98:cb:a5:19:84:
         3b:45:30:d8:f4:98:28:57:82:0a:cc:b0:ad:c9:8f:e3:a7:29:
         18:63:6b:06:3b:df:21:ec:fb:01:47:93:9b:b0:71:df:56:8f:
         96:79:81:08:d9:a0:8b:d7:68:5d:82:2d:66:88:e1:95:fe:39:
         44:c6:e2:59:bb:2d:f4:51:d9:ce:9a:15:ee:6e:ce:5e:bc:6f:
         63:e1:07:ac:40:ec:06:e7:e0:f3:0c:3c:82:3b:87:1f:79:74:
         9c:3e:c2:0d:12:cf:12:95:23:db:fa:45:a5:33:03:ac:1a:98:
         f0:f6:c1:e7:2c:ba:18:9a:44:48:f7:ff:f6:e1:6c:9e:15:78:
         7b:31:b2:11:93:db:66:0a:39:e8:8f:7a:9c:28:16:03:c4:12:
         cf:e7:1e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 3 03:10:51 2026 by rpki-client