Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
File:                     9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft (raw, json)
Hash identifier:          8PuEQIvInd+0RtPLSZj/9E0lncuvC7iNnhNXI4+loLo=
Subject key identifier:   44:42:83:A7:C3:8F:DE:18:B5:16:41:85:5A:56:95:93:8B:C5:F8:3A
Authority key identifier: F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8
Certificate issuer:       /CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
Certificate serial:       019F82D56DFA49C200205C559FE1656D1A8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
Manifest number:          19C3
Signing time:             Tue 21 Jul 2026 04:00:53 +0000
Manifest this update:     Tue 21 Jul 2026 04:00:53 +0000
Manifest next update:     Wed 22 Jul 2026 04:00:53 +0000
Files and hashes:         1: 8gINa2lFaHAK60FtqIDDhXwZP7w.roa (hash: z1FvylnNOuEEDQQea39SZ8k3cYtqZE6bJ6wCeGonrDw=)
                          2: 9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl (hash: ji460t4CZUoHoVplA+nnD7yfBJza298ILIy1C8PcIIw=)
                          3: IbJ4yELvtm8HXdu0Yp_CCRHVlP8.asa (hash: NPCHrCQgVoOMqCSPlDc/hj6wxQzJAbSJUalGFEL7VEc=)
                          4: tRcrwi6Z0c7Sb0NYMrmjnVVjOto.roa (hash: unf/ZbmoQZ2C8O0WxuwscfoRSvADWqKnPxDoOQZPINs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 04:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:d5:6d:fa:49:c2:00:20:5c:55:9f:e1:65:6d:1a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f42b084f9b9c98cfd90410b8305cc6cb46dcced8
        Validity
            Not Before: Jul 21 04:00:53 2026 GMT
            Not After : Jul 22 04:00:53 2026 GMT
        Subject: CN=444283a7c38fde18b51641855a5695938bc5f83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6e:b8:f3:0d:13:4f:26:61:64:04:bc:f8:44:
                    b8:f2:8a:75:7b:19:50:3a:ec:2a:0c:6b:55:0b:0d:
                    d2:e0:c7:d4:8a:4f:34:4a:63:03:0a:2c:73:c4:0a:
                    23:0c:dc:b1:b3:24:f5:2d:6a:b1:28:29:7c:29:80:
                    19:c4:ee:1e:ea:d1:7d:65:a1:ac:83:cc:c2:92:1b:
                    3e:c0:84:d0:75:c3:91:e3:b0:54:2a:4c:48:5d:82:
                    7f:b3:d1:06:31:17:c6:dc:e1:1f:f1:91:37:62:b9:
                    aa:55:55:bb:2c:eb:3a:28:6c:53:a1:b8:08:c6:56:
                    69:88:c5:52:a5:1b:2c:99:ff:f9:9b:36:7f:86:aa:
                    bb:30:4a:f8:f8:c0:66:ef:bc:c0:35:a6:e0:28:7e:
                    c0:74:83:35:00:8c:71:81:87:d9:6c:ea:07:4e:d6:
                    6a:74:8f:0a:6d:72:01:dd:e1:90:db:25:f2:df:b4:
                    8f:a9:52:23:80:05:7d:2e:41:38:5c:1b:bd:5d:25:
                    b8:90:00:75:57:2a:01:6b:06:58:0b:0d:4a:db:77:
                    58:c0:43:29:51:34:4f:ed:6e:14:6a:b1:d3:23:b7:
                    21:15:20:12:d9:a6:7e:94:f8:85:dd:a3:6f:fe:3e:
                    8d:a3:85:f1:c8:ac:a9:2f:ff:c1:b2:43:1b:3c:1b:
                    2b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:42:83:A7:C3:8F:DE:18:B5:16:41:85:5A:56:95:93:8B:C5:F8:3A
            X509v3 Authority Key Identifier:
                keyid:F4:2B:08:4F:9B:9C:98:CF:D9:04:10:B8:30:5C:C6:CB:46:DC:CE:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9CsIT5ucmM_ZBBC4MFzGy0bcztg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f949a5-84ac-459d-b9a0-6a9cd94202ff/1/9CsIT5ucmM_ZBBC4MFzGy0bcztg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:a0:d6:95:e7:9c:fc:74:ae:23:a6:46:47:db:55:6b:70:9d:
         46:b1:f8:ce:28:73:1e:e7:20:29:b0:b5:63:47:51:7c:7a:ca:
         31:ec:8c:4a:03:b1:bd:e0:e9:f0:37:85:07:64:24:e2:ec:ac:
         d9:fb:45:23:e7:07:8b:d8:8f:a0:43:a0:e0:96:a0:4c:6f:1e:
         78:da:22:d1:05:7a:44:6f:d9:c4:10:13:09:87:fb:32:22:5d:
         f5:19:a8:fc:16:f0:e7:d5:9f:a4:b6:e8:41:df:d4:5e:64:d2:
         3f:d9:01:04:45:81:07:b0:d0:8f:3f:80:4d:a4:aa:75:b0:8b:
         ba:3a:3e:83:03:30:d6:2a:6c:34:1b:0e:8b:d7:30:40:6c:fc:
         8e:1f:c4:e7:74:62:8c:ee:50:c2:bd:e4:8d:19:0a:dc:05:97:
         25:3d:70:59:ec:e7:65:b8:5b:c1:1f:cc:18:58:ce:3b:b3:fd:
         f5:0a:8e:10:6a:4d:fd:5b:2a:36:7d:1c:da:9e:ea:c3:01:c3:
         52:5f:86:df:78:ce:f1:dd:a9:6b:c8:6b:f1:35:41:c8:61:96:
         14:33:f5:68:2f:4d:9c:5e:da:cf:82:d4:09:04:5d:d9:24:c2:
         d0:d2:ed:2a:20:f1:fc:79:67:c0:89:9f:a7:42:f9:55:1a:2c:
         0a:c5:25:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:13:13 2026 by rpki-client