Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          NoyyCH2NCt+9BVeMFP8qAVmygLIZXhsMg+quxqHcByI=
Subject key identifier:   E2:2A:84:BE:B3:A4:2B:AC:D7:D1:74:98:3B:29:92:AD:1B:99:BB:BF
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019FD9186E9BBB891D2A4F9AAC44FB111DCF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          19F0
Signing time:             Thu 06 Aug 2026 22:01:24 +0000
Manifest this update:     Thu 06 Aug 2026 22:01:24 +0000
Manifest next update:     Fri 07 Aug 2026 22:01:24 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: rREaesqywVXLjjVy5UZFePF50Zpzfipr3/GGH0Bt4+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 22:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d9:18:6e:9b:bb:89:1d:2a:4f:9a:ac:44:fb:11:1d:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Aug  6 22:01:24 2026 GMT
            Not After : Aug  7 22:01:24 2026 GMT
        Subject: CN=e22a84beb3a42bacd7d174983b2992ad1b99bbbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:65:62:f0:79:be:a6:e4:69:39:78:21:2f:5b:
                    95:da:4d:06:c4:bf:cb:21:e8:1a:09:df:c9:36:61:
                    0d:3d:12:b9:2f:89:07:85:a9:1e:55:0b:37:c6:f9:
                    30:0b:b8:0e:a5:70:7f:79:4a:94:5a:e3:aa:18:12:
                    50:37:1d:ff:b9:9f:c3:3e:0a:f2:b4:c9:01:7a:da:
                    4a:55:c4:ff:17:36:9b:73:dd:6e:7e:04:85:e1:5a:
                    1f:9d:a8:f5:45:67:0d:da:c1:5b:1e:ab:2c:82:09:
                    1b:cc:89:17:6c:36:a1:b5:43:43:0a:6d:72:73:7b:
                    ea:bf:aa:68:b2:08:62:0a:00:77:e0:4c:35:a3:6b:
                    3d:f6:57:b7:07:ef:32:59:71:6d:08:9a:05:a9:0d:
                    88:46:ff:b8:8a:46:7f:50:10:fc:79:fd:0d:24:29:
                    42:b2:bb:03:55:f8:7c:9d:35:a1:e9:6b:8e:cc:86:
                    97:cf:17:20:86:1a:d1:99:0d:21:f1:b3:32:5a:98:
                    fe:9b:4e:06:60:6c:20:6a:ee:3a:5c:31:7a:d7:4a:
                    d9:1e:60:04:1c:ae:64:30:55:a1:08:28:c7:34:9e:
                    3f:2a:83:1c:08:0b:6d:e0:43:b5:41:4e:f0:81:cb:
                    1b:b4:a2:4a:d4:b0:9e:90:a9:f1:ba:ba:28:0b:db:
                    a4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:2A:84:BE:B3:A4:2B:AC:D7:D1:74:98:3B:29:92:AD:1B:99:BB:BF
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:98:2d:78:a7:d9:55:91:42:a6:1f:0a:24:48:ff:b8:d7:8f:
         2b:ad:45:f2:cc:0c:05:2e:ce:b4:17:2b:cb:d8:b6:4d:a0:80:
         50:ba:6b:06:b5:73:89:a0:ad:bd:3d:96:19:8d:8a:b6:9a:d4:
         69:9f:77:33:0d:e5:67:c5:04:2f:bd:27:26:85:d0:22:59:81:
         59:ac:6b:33:04:c2:ac:fa:c0:d3:74:74:26:47:0e:4a:ad:ad:
         d1:5a:dc:11:58:57:89:48:c9:0d:c1:6a:67:a5:c5:ef:e5:77:
         e9:2b:66:f1:3b:3a:cd:64:1a:2a:61:aa:12:1f:1f:e5:82:ef:
         38:f9:01:bd:b4:c5:75:1d:90:0d:be:90:07:98:51:5f:b1:31:
         40:82:78:18:72:d9:74:94:9d:3a:ac:50:34:a7:fd:5c:7b:1f:
         1a:fa:8d:ac:dc:23:0f:cd:51:e8:b8:c0:05:26:3a:f9:b6:8c:
         26:92:13:6a:e7:dc:bc:6c:4a:27:d2:90:eb:f6:f4:bf:41:8b:
         68:91:9d:c2:64:27:4f:df:f2:c4:f0:e8:1b:8b:00:2d:ad:8b:
         02:18:b6:d0:d9:98:b0:69:10:b9:0b:2e:a2:94:db:ae:8a:dd:
         09:d0:7c:e1:9e:e7:7b:19:4a:6c:d2:65:69:aa:bb:40:f7:99:
         9a:b1:5f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 03:21:02 2026 by rpki-client