Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
File:                     f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft (raw, json)
Hash identifier:          d/jA/afG246ayotbNLd3zaPtudvVjVZiSAi5w4smOAk=
Subject key identifier:   C1:02:FE:D3:71:90:60:EA:E6:A7:89:22:19:10:21:F8:F5:AE:3E:C7
Authority key identifier: 7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB
Certificate issuer:       /CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
Certificate serial:       019F9E157AFB56F6D54EFF0E7D90BD5AA3BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
Manifest number:          19D4
Signing time:             Sun 26 Jul 2026 11:00:35 +0000
Manifest this update:     Sun 26 Jul 2026 11:00:35 +0000
Manifest next update:     Mon 27 Jul 2026 11:00:35 +0000
Files and hashes:         1: 1-JpO8q1qatRpRIjMok1nlLPPJtY.roa (hash: lxSDrjSJfDdxFsFnnvYvxdk4e0Y7x830KJAg7m4hvFQ=)
                          2: AkISYLOC_fnGrIUjLvM1LtDRQ5k.roa (hash: SsHVMDv4qWTRMiOyQPgpmacaVt+8MOyUS0XN6APKH7k=)
                          3: KAkO-7xOFpTAGhNLp1btnqE2bSE.roa (hash: IGYFUhUO628GeghMUJEog11qsWIupQM1Ghm5aRQ86iM=)
                          4: f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl (hash: ibVGRd3w8hcKjKw2JML5NBgToGpxjzhA8jElV+6rDxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:15:7a:fb:56:f6:d5:4e:ff:0e:7d:90:bd:5a:a3:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f50077d2dd8a67a1ae8b6abd6bbb3489028a5bb
        Validity
            Not Before: Jul 26 11:00:35 2026 GMT
            Not After : Jul 27 11:00:35 2026 GMT
        Subject: CN=c102fed3719060eae6a78922191021f8f5ae3ec7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8a:ff:57:14:2a:84:15:20:a2:c1:70:e9:3f:
                    4e:af:19:e9:6a:13:6e:6d:e5:2b:86:1f:ae:b9:c8:
                    d8:03:de:fd:76:c5:90:5d:fd:15:75:64:6d:53:b7:
                    6b:4c:56:c0:a6:f0:1c:1c:f7:14:42:ed:34:fa:8d:
                    ca:10:bc:ad:b9:ce:64:35:eb:82:1d:2e:c0:57:f2:
                    a2:35:d3:31:c8:c9:1c:f2:b4:c2:2c:93:bb:5f:3c:
                    9a:89:0c:12:be:3f:01:c7:2f:eb:e6:0c:ba:80:03:
                    2d:27:89:13:b1:85:74:2f:12:29:ff:81:2d:0b:f3:
                    aa:76:d7:c7:fa:43:88:e0:82:c9:2d:93:ed:77:69:
                    18:5b:37:ff:d5:a3:8e:86:71:c5:c0:5d:c5:18:fe:
                    6c:88:90:f0:57:42:9d:42:f8:fb:26:8a:e6:07:6f:
                    b5:ec:e1:17:b0:7f:39:f8:98:2e:cf:be:07:c1:17:
                    e0:cf:f5:53:d6:41:ca:21:7c:73:9f:88:85:f3:17:
                    34:19:7c:1f:7b:e9:60:5a:48:dc:9c:4f:c7:5b:ef:
                    95:95:58:a5:cf:5d:cb:f3:03:88:a7:09:ec:ce:23:
                    d9:fb:7e:cd:e6:3c:e8:a6:1d:7f:c3:f0:1d:b6:71:
                    a6:e7:f8:4d:02:38:c4:df:61:51:22:43:fc:7c:00:
                    6e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:02:FE:D3:71:90:60:EA:E6:A7:89:22:19:10:21:F8:F5:AE:3E:C7
            X509v3 Authority Key Identifier:
                keyid:7F:50:07:7D:2D:D8:A6:7A:1A:E8:B6:AB:D6:BB:B3:48:90:28:A5:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1AHfS3Ypnoa6Lar1ruzSJAopbs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c1c1ce-ea59-4dcf-bccc-3e7cadd88c70/1/f1AHfS3Ypnoa6Lar1ruzSJAopbs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:39:e6:b3:19:6e:08:5b:09:6a:2f:3e:ae:cf:12:3f:17:09:
         cb:93:82:1c:9c:e3:bd:11:a4:13:41:57:cb:c9:a2:15:72:6e:
         f8:68:0a:84:73:85:94:a0:e7:92:8d:c0:d6:68:63:88:6b:65:
         71:a5:34:ed:83:43:10:e0:5a:03:f9:a2:cd:45:fd:56:4c:92:
         b8:5c:e1:53:1e:d5:5a:84:46:f3:ca:50:75:f8:3a:df:3f:93:
         de:93:d1:79:62:0b:f0:13:46:72:5f:d9:a7:18:49:0f:3e:01:
         c6:ef:07:ec:3f:0e:2d:f2:ab:dd:41:0a:fe:8e:d8:41:c6:f0:
         6c:5e:9d:84:6c:fd:a3:c4:b2:64:09:37:f4:b1:e1:85:c8:6b:
         f8:bc:27:38:3f:4b:44:aa:1f:6d:0e:0a:8b:e8:05:d7:70:67:
         03:a6:cc:fe:6c:fc:80:69:79:2a:da:3e:66:3d:5c:f3:c1:76:
         ce:1d:c9:22:ca:ae:6c:15:82:4b:2d:3e:1f:db:80:70:35:38:
         98:86:55:04:1e:83:90:f3:21:e1:42:24:52:6c:33:cb:86:85:
         e1:18:10:13:fe:dd:0a:ec:05:fe:6b:26:b6:dc:35:04:73:e8:
         72:47:14:1b:72:d6:80:3b:37:1f:d4:c8:58:5d:40:83:ee:4f:
         de:98:0d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:28:25 2026 by rpki-client