Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
File:                     61AMkAIyHwOWRYNxC3uqRZc0EhM.mft (raw, json)
Hash identifier:          XWv7Ejtf1pGZ9dojFvQuqSpcy5UVD+PL+KWtlBqxtzU=
Subject key identifier:   0D:8B:B6:0A:3A:F4:02:BC:30:08:8C:CA:15:0F:85:76:EC:7C:11:B4
Authority key identifier: EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13
Certificate issuer:       /CN=eb500c9002321f03964583710b7baa4597341213
Certificate serial:       019FA29740FCF3AEA9DB2219E707096C9B73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
Manifest number:          19D9
Signing time:             Mon 27 Jul 2026 08:00:49 +0000
Manifest this update:     Mon 27 Jul 2026 08:00:49 +0000
Manifest next update:     Tue 28 Jul 2026 08:00:49 +0000
Files and hashes:         1: 2J-n_QRhoR4a65UVIs6pv6asqOw.roa (hash: 9Yh/Vpu5pfQV98+zQR6ofyPenEUhv1rcYnZD7GYtLoA=)
                          2: 61AMkAIyHwOWRYNxC3uqRZc0EhM.crl (hash: JYMwWJw8SQxzk73H27sz1FLpeNkjCeBRVVncDRfcARM=)
                          3: NBS3MDGzYGIADNWFbZYjYkdUa9s.roa (hash: v7XG+TXBJYETx2VmTgwzwAMvOODuFSiHzEpsJiItnm4=)
                          4: bmr462MOzzVfibPxeKpu-EewsJA.roa (hash: CnF+rGIRS/b/VIz1Q6MMhGy+46VVxN260juxQ8X0FSw=)
                          5: xG9W89NLTMo3zDEcMXWD8-7tuik.roa (hash: z2qG6bl0HluFOz/GCJOPJLYtdHcGTOZW8wletJFCQ5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:97:40:fc:f3:ae:a9:db:22:19:e7:07:09:6c:9b:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb500c9002321f03964583710b7baa4597341213
        Validity
            Not Before: Jul 27 08:00:49 2026 GMT
            Not After : Jul 28 08:00:49 2026 GMT
        Subject: CN=0d8bb60a3af402bc30088cca150f8576ec7c11b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:3c:53:ec:21:ef:db:33:1f:73:5c:12:f5:
                    c9:64:f0:23:73:0c:60:51:31:95:78:b9:f8:02:ac:
                    2b:d6:c3:28:eb:9b:40:71:4d:6c:81:de:ed:21:b9:
                    57:34:16:38:82:d5:6b:a5:f7:75:da:99:ca:74:fa:
                    eb:a6:12:cc:ed:8a:28:56:cc:c1:1e:89:09:66:33:
                    bf:10:c1:15:c2:ba:fa:69:e6:3e:e7:b5:b1:17:d8:
                    fe:e9:03:95:c1:af:58:f5:ae:5b:c8:38:cb:32:05:
                    2a:8f:35:8c:99:6d:5c:cc:77:d0:43:12:42:b6:22:
                    5b:18:9f:b0:5d:b8:89:f5:15:eb:be:31:24:d7:b6:
                    c8:6d:d9:f5:2f:4e:1d:b3:36:5d:34:73:6e:36:05:
                    1f:03:ab:05:fb:2a:fa:cf:7b:9d:1a:b6:6d:6e:d2:
                    a4:a7:74:06:7d:b9:82:14:58:cd:46:8f:fb:e1:c1:
                    0c:ed:02:d9:38:f6:13:46:97:e8:c9:2e:73:86:c8:
                    43:07:43:f0:91:23:ad:ce:0d:8d:99:79:c0:10:7e:
                    ae:06:d9:47:61:cf:ef:33:05:b9:93:97:2d:5d:a9:
                    fa:0a:a9:22:4e:7d:96:a8:7e:75:2a:a9:53:82:2c:
                    2d:df:d9:fd:69:0c:48:40:32:58:b4:41:86:4d:d4:
                    30:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:8B:B6:0A:3A:F4:02:BC:30:08:8C:CA:15:0F:85:76:EC:7C:11:B4
            X509v3 Authority Key Identifier:
                keyid:EB:50:0C:90:02:32:1F:03:96:45:83:71:0B:7B:AA:45:97:34:12:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61AMkAIyHwOWRYNxC3uqRZc0EhM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19c09a-d79a-4de4-8a86-4a685962f3e8/1/61AMkAIyHwOWRYNxC3uqRZc0EhM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:14:3d:e8:bb:2d:07:a0:84:8d:27:92:99:82:6b:b2:43:e9:
         73:4b:1a:24:c0:ee:50:36:ac:7c:b1:ff:58:97:f4:66:3a:3e:
         d6:09:82:0b:c1:cd:53:e3:13:5a:c3:33:87:4b:55:ba:91:5f:
         c7:86:c9:02:fd:a3:bc:a9:7a:3e:fd:25:db:9b:5a:94:94:1e:
         03:d9:62:31:39:fa:af:6a:4d:bc:12:02:e3:93:3e:c4:3d:a3:
         02:f8:20:26:0f:34:cb:71:f9:bb:ca:db:bf:5f:a6:a3:5b:df:
         a9:92:24:31:3d:63:07:db:78:28:2e:e2:ad:29:56:83:df:e8:
         86:51:92:5f:1b:e7:f4:ae:75:70:56:f7:0d:95:cf:24:e2:ee:
         a5:b0:54:3b:0d:0a:2a:e9:5d:f0:1e:7c:68:a6:6e:1e:65:51:
         48:09:99:29:29:1d:aa:7e:2d:fd:65:d7:d3:25:c4:9e:4c:39:
         2b:68:77:c6:c9:97:21:f5:48:5a:ec:b3:96:dd:8b:a5:8c:92:
         6e:a3:40:38:9b:d4:73:54:d4:f8:0d:1f:5a:a8:d2:a5:d6:d4:
         10:a3:04:2b:cb:5e:95:2d:18:2e:cb:67:47:47:74:3d:6d:e3:
         0c:1b:b9:4e:be:12:6f:33:5d:98:7c:fe:dd:11:a0:00:a8:ec:
         88:08:1f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:25 2026 by rpki-client