Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
File:                     dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft (raw, json)
Hash identifier:          VXcf8/1LHTUsLKkwQLerYP5ucSV56kYS3NGvh+v61SY=
Subject key identifier:   C7:FD:C3:D9:7E:5A:5C:47:13:83:6E:4C:44:95:F6:30:35:58:A1:F4
Authority key identifier: 76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F
Certificate issuer:       /CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
Certificate serial:       019F9FCCA07DDC6C645411B046C419B7689A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
Manifest number:          19D2
Signing time:             Sun 26 Jul 2026 19:00:15 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:15 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:15 +0000
Files and hashes:         1: dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl (hash: FFrqHExrG+0j+7AXlAXLy5pfkxh+6z6FIPwwFsjiQXI=)
                          2: tSEZjU-vS57hTqP83y9FF4MrWAs.roa (hash: ozjgCaqpcyjXz1n6hccmETcyoNzECahsGI6im8BxTac=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cc:a0:7d:dc:6c:64:54:11:b0:46:c4:19:b7:68:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7654b0cc2c3f6b757ff52cba165d9ffa88ced30f
        Validity
            Not Before: Jul 26 19:00:15 2026 GMT
            Not After : Jul 27 19:00:15 2026 GMT
        Subject: CN=c7fdc3d97e5a5c4713836e4c4495f6303558a1f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:43:17:f9:a1:6a:2f:1a:2d:94:55:2a:b1:
                    57:21:ce:35:3d:b7:94:8e:29:6c:1e:16:90:33:5c:
                    51:08:60:d4:39:d7:1c:c9:28:75:39:46:25:3d:40:
                    23:43:41:4f:12:25:e8:dc:ef:f1:f0:a4:2a:65:30:
                    02:f7:9c:47:04:48:c2:fc:9a:41:4e:43:c5:de:64:
                    7c:c7:b4:f4:aa:ca:7a:ad:14:46:cf:73:12:6a:8e:
                    a6:b7:8d:78:a4:f4:71:bc:e1:b8:73:9f:ff:b3:79:
                    22:90:e5:74:12:51:40:f6:f6:12:aa:69:9f:ea:09:
                    77:c4:28:cf:c0:cf:a4:1f:23:51:bb:82:91:29:4b:
                    da:d8:d9:2d:3f:09:8c:41:f9:9b:2a:48:e2:7a:72:
                    e5:d0:d1:02:36:3f:81:bf:99:af:e9:ca:96:38:e1:
                    30:09:96:f4:71:28:6c:ef:49:a0:c1:da:73:31:5a:
                    f5:72:80:7c:5d:58:ba:1d:20:68:3f:91:54:03:8a:
                    73:6d:80:f2:a6:75:13:22:d7:bf:5c:fc:ac:60:98:
                    47:6a:2d:24:a1:c5:ff:32:4a:5c:8f:25:f1:7c:44:
                    ad:57:63:e0:12:67:86:58:a1:17:98:33:97:31:38:
                    83:7e:ca:9c:0b:24:eb:7b:2e:28:6d:8b:dd:5c:b3:
                    7f:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FD:C3:D9:7E:5A:5C:47:13:83:6E:4C:44:95:F6:30:35:58:A1:F4
            X509v3 Authority Key Identifier:
                keyid:76:54:B0:CC:2C:3F:6B:75:7F:F5:2C:BA:16:5D:9F:FA:88:CE:D3:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/58/122641-71af-459c-b9c1-8b156db4ff35/1/dlSwzCw_a3V_9Sy6Fl2f-ojO0w8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:7c:61:db:e5:8a:ad:fc:d7:2f:ac:3d:91:65:12:b6:04:c9:
         c0:d3:91:02:0e:b0:12:7b:61:69:af:50:53:94:14:75:33:1a:
         c9:cd:6b:8d:df:8c:31:7d:dc:8d:d0:ce:52:4e:aa:7e:0c:54:
         e3:17:03:12:a0:99:49:a3:4b:00:19:dd:c4:0f:6c:1e:fe:33:
         4e:9d:26:c9:52:f8:5f:84:27:00:49:71:17:c8:8d:fa:f8:ea:
         8e:3e:b1:c3:e8:ad:7b:61:b0:66:75:07:bc:74:6c:78:55:74:
         66:e5:84:70:d4:7d:90:61:1d:ad:33:48:7d:a4:76:f4:93:3d:
         da:c6:a5:8d:d7:fe:7b:38:67:f7:04:32:38:c3:6e:4a:ed:ee:
         5e:c4:ba:66:c2:56:67:b7:57:cf:3a:a0:bc:f0:4f:1a:1b:c3:
         53:7c:95:8b:de:09:ea:a5:fa:59:44:f8:8b:3b:53:39:bd:98:
         9d:78:fd:32:db:92:ab:77:9a:44:94:b0:0c:d8:73:ac:39:c4:
         78:c3:eb:0a:10:0c:d3:38:ab:11:84:25:8c:9a:a1:f3:34:46:
         db:e1:40:00:d8:41:c6:8b:73:63:de:12:05:0d:3b:9b:5a:3f:
         fb:d0:71:9f:a3:58:60:49:2e:ae:e5:ae:98:b4:53:b1:15:49:
         33:4c:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:33 2026 by rpki-client