Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
File:                     1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json)
Hash identifier:          yyOAH4S7uz6TWbI9YAC6UnrKunO9ap3xMdC9b69zJ5Q=
Subject key identifier:   28:2E:72:C0:A1:F2:C5:25:57:D8:B3:E7:6D:0B:78:80:F7:4B:6F:94
Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1
Certificate issuer:       /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
Certificate serial:       019F84C45AA3190746A28B59EFD8D216AAB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
Manifest number:          19CC
Signing time:             Tue 21 Jul 2026 13:01:28 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:28 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:28 +0000
Files and hashes:         1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: Jgt5OqSOTFzZR78gRC39NqNwz9WzpybklAMFU2JBGUg=)
                          2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=)
                          3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=)
                          4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=)
                          5: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=)
                          6: ksti9Cz-YWGrPG3nUQtWw4iwXW8.roa (hash: QXzCZnDrQ2SXERmOPrfezHiPL5LdEJk0j9fQC6saTKg=)
                          7: n8m0xVPUJ7sSm50Su5RRDOcBypY.roa (hash: gyRmAMA/LaYNtHFV0LdlYDTpgJV5V6CTCcVfo5PwA40=)
                          8: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=)
                          9: zJ9v3e8uiAj7Q1OVSD92Rk2ryOk.roa (hash: 9EEvX12mvolHxSL/Y8mliHI1ROhGnZ9siBUYGBNhM2A=)
                          10: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c4:5a:a3:19:07:46:a2:8b:59:ef:d8:d2:16:aa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1
        Validity
            Not Before: Jul 21 13:01:28 2026 GMT
            Not After : Jul 22 13:01:28 2026 GMT
        Subject: CN=282e72c0a1f2c52557d8b3e76d0b7880f74b6f94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:7f:39:9a:f0:9d:1f:c2:71:17:d3:e6:37:
                    23:4a:2c:f6:63:c0:a7:ff:51:14:64:8c:d3:c5:79:
                    ed:d4:2a:9c:94:50:d1:70:b0:f6:63:2e:a1:7b:ed:
                    ff:63:ee:6b:60:6e:a8:56:91:c3:14:ff:86:bd:38:
                    66:5b:69:b1:ed:f0:c3:4d:6f:d7:90:4b:48:09:89:
                    16:c1:5c:04:a3:59:ac:e1:31:57:1a:bc:75:22:02:
                    9f:d6:fa:50:3e:fb:5b:fd:57:5c:04:64:09:0b:a1:
                    06:12:be:e4:aa:8d:b3:ff:cb:c4:11:3e:31:18:8c:
                    18:89:c7:13:04:4a:33:de:43:00:56:f4:45:28:a0:
                    f4:7c:4e:5d:97:dd:34:9d:9e:d8:ae:85:dc:79:2a:
                    2d:21:7d:0d:69:96:49:8a:5c:35:e2:d2:92:05:20:
                    0d:03:82:bb:bf:1c:64:8c:38:f9:65:c5:18:18:9d:
                    ef:77:d5:13:93:8f:e2:14:c0:0b:05:e1:c2:48:13:
                    62:28:82:99:76:86:82:2d:92:83:e3:7f:ec:0f:58:
                    70:27:81:2f:64:2d:dc:99:28:f2:c9:e1:df:f7:3f:
                    43:ac:5e:88:0d:51:07:81:1d:cf:79:22:08:49:da:
                    b1:00:a8:ed:55:a9:aa:ff:e4:6c:f9:41:8e:bf:fc:
                    99:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:2E:72:C0:A1:F2:C5:25:57:D8:B3:E7:6D:0B:78:80:F7:4B:6F:94
            X509v3 Authority Key Identifier:
                keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:6c:d9:e0:b4:18:eb:2b:c3:a5:71:63:95:73:79:5a:b2:40:
         35:fe:42:cc:6d:d1:20:ed:66:2d:94:86:91:a2:a1:e3:c7:72:
         f8:06:db:33:61:12:05:99:18:44:7a:d1:6e:6d:18:42:2c:0c:
         66:19:6c:f0:16:26:1a:91:43:70:b1:3d:fc:1f:7a:09:8a:51:
         9c:ff:cf:2b:d9:e5:21:84:07:4f:63:7a:29:f8:a7:2a:32:c0:
         1d:45:0c:77:d0:0f:90:62:61:b0:ec:35:e5:32:22:75:f3:c5:
         cc:8c:d5:95:0f:95:62:4d:c2:7c:f3:59:d2:c1:69:21:46:75:
         89:d6:e6:32:c8:99:41:d2:7f:17:96:c9:06:bd:bc:63:13:86:
         f4:d8:93:b4:18:25:d2:eb:5a:37:1f:73:f8:7f:a4:c3:a9:ec:
         f8:f2:1c:9c:8e:fd:a5:28:bd:c9:5e:9e:55:13:b0:fd:fc:59:
         34:92:ca:b1:cd:26:87:04:63:84:65:6f:af:9a:a6:7e:50:13:
         97:68:f5:2c:72:8a:17:b2:90:b6:7b:ff:a3:1a:76:be:64:cd:
         25:93:a0:9a:4d:04:e3:7f:f9:dd:c8:5e:31:d6:ab:e1:5a:ca:
         95:c5:f2:bb:70:76:4a:eb:27:68:3a:2e:6a:8d:9c:4f:3b:a8:
         7f:bd:86:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:40:42 2026 by rpki-client