Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
File:                     piqMeh9qTJSeAntTadl9dXbhR_g.mft (raw, json)
Hash identifier:          ch1nNseejdy10jZoZrNh2Squzii+qCo9jt+BeIf9Thk=
Subject key identifier:   CA:90:81:5C:1A:87:B2:4C:0A:09:40:22:EB:3B:C7:6F:FF:FD:E2:2D
Authority key identifier: A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8
Certificate issuer:       /CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
Certificate serial:       019FA071C36B469CB242721EFE6682A24021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
Manifest number:          0E12
Signing time:             Sun 26 Jul 2026 22:00:37 +0000
Manifest this update:     Sun 26 Jul 2026 22:00:37 +0000
Manifest next update:     Mon 27 Jul 2026 22:00:37 +0000
Files and hashes:         1: Sr6zqiJ99FeqwYQ28f19iLqoqDg.roa (hash: TL3BARSlFoDZ5ZNhUOEZiPZ9fIVbuOQ2POjRAByuFjI=)
                          2: TGeDIFBGIW5eczvcX5q3jNyzVtA.roa (hash: DgUdGVPI56iMDORgQFEHjPBMjjgqkbyYMnQ4bBFfVcc=)
                          3: piqMeh9qTJSeAntTadl9dXbhR_g.crl (hash: 8cN4dEk1SRXVnjHV7c0kUgGJrr2Zz2E1gl0MfVkaI/8=)
                          4: tVbgzppTtTNiiJtIVClKJaUjV5Q.roa (hash: +w5E9Iu1vewLPX6wA/Khvas6REQH1AClWY9b6rdLWo0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 22:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:71:c3:6b:46:9c:b2:42:72:1e:fe:66:82:a2:40:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a62a8c7a1f6a4c949e027b5369d97d7576e147f8
        Validity
            Not Before: Jul 26 22:00:37 2026 GMT
            Not After : Jul 27 22:00:37 2026 GMT
        Subject: CN=ca90815c1a87b24c0a094022eb3bc76ffffde22d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:19:45:fd:09:04:aa:98:ef:88:99:da:e2:f4:
                    85:6f:c8:8a:01:ae:da:69:6e:e5:75:84:cb:1f:64:
                    18:1c:57:dc:16:dc:a7:eb:6a:d8:51:06:3b:0f:41:
                    c3:db:1f:4c:11:4c:05:30:9a:9b:b5:af:73:06:86:
                    68:e2:fe:cd:de:c2:3b:2b:67:4b:79:56:84:98:0b:
                    97:cd:27:10:1b:fb:3d:7a:a5:43:ab:3a:00:7b:c6:
                    9d:eb:c4:ad:37:82:39:5c:e2:fc:97:f2:44:d0:42:
                    ad:d6:20:42:44:d4:44:fa:aa:fa:dc:09:76:d4:cf:
                    c6:c6:00:b5:ec:e2:20:ef:2f:42:94:88:db:77:42:
                    45:af:b9:24:1a:77:a9:f4:a2:7a:38:c3:05:2f:7b:
                    ee:23:e9:f6:3c:20:92:63:e3:30:af:c7:50:e0:db:
                    af:66:1e:1a:71:77:56:48:18:86:79:04:06:dd:e9:
                    f8:3d:3c:23:2e:4d:f2:87:89:30:ae:1e:72:75:11:
                    29:92:60:14:ec:ca:ce:7c:e1:b2:e6:0b:c6:b0:c6:
                    5e:08:a9:8b:20:ee:4b:5b:ce:b6:41:cb:fc:6f:e9:
                    1e:1d:1d:53:b8:5b:84:92:cc:68:6b:89:e0:0c:ed:
                    dd:1b:82:74:71:ba:b9:bd:b2:ad:fb:43:59:b4:f0:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:90:81:5C:1A:87:B2:4C:0A:09:40:22:EB:3B:C7:6F:FF:FD:E2:2D
            X509v3 Authority Key Identifier:
                keyid:A6:2A:8C:7A:1F:6A:4C:94:9E:02:7B:53:69:D9:7D:75:76:E1:47:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/piqMeh9qTJSeAntTadl9dXbhR_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/fc022d-f8e5-4a6e-8b1f-58c85d4336bc/1/piqMeh9qTJSeAntTadl9dXbhR_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:c7:30:52:79:23:dd:78:0a:88:84:00:d4:8d:c4:28:13:9e:
         fe:14:ea:08:b1:bd:a1:da:9a:01:a3:49:da:c3:02:d3:05:86:
         69:4c:8d:3d:a2:99:58:a5:e2:e0:e7:75:74:84:c9:d6:31:61:
         53:7d:6e:ac:44:0c:2b:92:4d:e5:0d:0f:e0:c5:11:ad:d2:96:
         e0:79:b4:53:27:77:d5:49:c2:27:0e:7d:57:77:c4:78:db:4c:
         a3:6a:39:29:f1:e6:e7:f4:19:1d:10:d8:58:53:04:1f:85:86:
         f6:17:ca:e7:dc:74:07:a1:e5:3c:e8:ac:09:ba:43:93:0b:86:
         4b:2e:83:d6:49:10:88:c2:9a:30:2f:b0:95:5b:f9:bd:f9:67:
         22:15:a8:cf:1e:b2:c8:24:4b:2d:a7:23:42:b1:c0:67:f0:6d:
         2d:ab:53:7b:2a:13:04:6a:06:99:b4:fd:e4:e3:d5:72:37:1d:
         22:27:a8:72:d4:a6:0b:a0:7e:a6:d4:18:70:60:5e:1b:66:95:
         af:1b:7c:c6:ef:43:a0:7d:f5:c8:87:42:d1:26:cd:74:dc:b9:
         2c:27:1f:ec:2e:2c:57:88:bb:fe:d6:c7:28:b3:7b:1f:d1:d4:
         28:2b:8a:01:64:53:cf:a8:cf:b6:2c:d1:af:aa:68:c8:24:cc:
         b1:cb:62:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 01:24:22 2026 by rpki-client