Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
File:                     mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft (raw, json)
Hash identifier:          xbacVk8TOaFpcsqvOxQ4p6inUuNM+tv6ZYsisV1oSEU=
Subject key identifier:   D5:6F:74:12:68:1D:5B:6D:32:6D:27:C0:CB:EC:AB:4A:A6:E7:FC:1B
Authority key identifier: 99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4
Certificate issuer:       /CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
Certificate serial:       019FA3AA7E84621C1A232A7A5AA3E0BBE130
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
Manifest number:          19CF
Signing time:             Mon 27 Jul 2026 13:01:27 +0000
Manifest this update:     Mon 27 Jul 2026 13:01:27 +0000
Manifest next update:     Tue 28 Jul 2026 13:01:27 +0000
Files and hashes:         1: Qgxf57MIAaUh2izrQbJxHll1rZk.roa (hash: ysJPiSoLiEWtNYzZGXULJmHPqHhXSoqXkjRsWNMouC0=)
                          2: mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl (hash: UzeMZXko6jeYkeF4YiEKfOndesKDrdZE+s4ryLPYZIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:aa:7e:84:62:1c:1a:23:2a:7a:5a:a3:e0:bb:e1:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=990d9fe793b18eef91dc76fbcba2b2cfc52e0bc4
        Validity
            Not Before: Jul 27 13:01:27 2026 GMT
            Not After : Jul 28 13:01:27 2026 GMT
        Subject: CN=d56f7412681d5b6d326d27c0cbecab4aa6e7fc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:52:2f:c0:bf:79:fb:9f:8b:f2:a3:97:49:fa:
                    91:1f:43:98:b5:34:ea:a2:38:6f:4d:56:61:b6:a7:
                    ce:db:90:43:6b:21:e3:2c:39:04:61:c1:dd:6e:bc:
                    63:0a:88:ee:1b:ea:44:57:49:01:0d:2c:ae:84:98:
                    c7:8f:81:b4:67:aa:7d:f8:53:9d:a2:09:06:03:af:
                    87:ae:9d:ab:e6:52:25:17:2c:0f:98:79:90:92:6d:
                    4a:83:a4:58:21:f5:dd:41:1d:14:18:ba:86:b1:94:
                    2a:12:d9:20:29:6c:58:57:da:c4:8d:67:e2:a3:de:
                    89:3c:88:34:0e:51:eb:cc:ee:75:24:a7:6f:1d:63:
                    a3:28:05:dd:85:b3:57:62:9e:80:d6:bb:f2:ff:15:
                    b3:a4:00:4b:58:be:bf:dd:a5:29:13:4d:8e:8b:86:
                    77:1c:ea:21:a8:38:67:9d:28:1f:31:d9:ec:a8:da:
                    0e:89:44:e6:fb:29:c6:1c:d0:98:12:78:f9:e0:eb:
                    16:c9:4e:48:a7:d2:7f:5b:3f:1a:50:cc:70:30:d1:
                    62:ca:3c:e2:b0:d1:f1:e0:e8:72:86:42:6b:64:31:
                    3a:f5:2b:a6:92:fb:88:52:6e:a3:70:61:55:e4:83:
                    03:ca:dc:ac:e9:44:a9:d5:12:71:06:27:3b:a6:97:
                    92:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:6F:74:12:68:1D:5B:6D:32:6D:27:C0:CB:EC:AB:4A:A6:E7:FC:1B
            X509v3 Authority Key Identifier:
                keyid:99:0D:9F:E7:93:B1:8E:EF:91:DC:76:FB:CB:A2:B2:CF:C5:2E:0B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/af1aae-c5f9-42c7-a7ff-e296f818ade9/1/mQ2f55Oxju-R3Hb7y6Kyz8UuC8Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:60:b2:3e:25:fd:79:8b:5e:b8:30:f7:73:d5:73:03:94:7f:
         2e:a8:de:e6:ed:17:14:46:bc:92:fb:d6:19:ba:de:a8:4c:5b:
         54:4f:d4:5d:b9:45:de:0d:b4:24:6c:9d:f6:24:11:f9:d1:1c:
         09:34:f2:b7:7a:9f:76:ac:61:43:d5:5e:44:5c:04:b6:8e:48:
         61:b1:ea:dd:21:7f:3a:d0:d1:ba:77:11:39:61:55:40:44:cb:
         7b:85:9d:12:a8:29:24:c1:fb:28:9d:27:f4:22:26:a5:3c:ef:
         ac:78:e3:29:58:41:f6:2a:2b:93:44:f2:de:d2:d0:36:4e:bb:
         05:5e:c0:2d:ef:60:9e:32:f5:07:40:98:6f:5c:e4:7e:b9:ac:
         9b:d8:3b:00:45:3d:a2:38:ac:9b:39:84:3b:bc:a6:c1:ee:a2:
         0c:30:7e:ac:92:6a:41:07:9e:08:13:d7:f0:37:a8:56:82:d5:
         c2:fa:06:ef:eb:5e:ae:5b:61:8f:d3:68:02:22:13:8e:7f:51:
         e1:ef:0d:49:45:d6:23:ba:d8:6d:09:2f:6b:a1:f3:f7:45:50:
         6b:d1:4b:04:4f:6d:fe:78:6f:05:31:ec:bd:e0:7a:9e:ec:37:
         af:6f:35:ac:1d:fe:68:62:94:80:22:6f:9f:fa:b6:c1:56:bb:
         ee:15:6e:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 17:06:55 2026 by rpki-client