Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
File:                     f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft (raw, json)
Hash identifier:          q+NPCmsL/VygbsKTed7qwViU/SaRLYJerSRuvzTuoWs=
Subject key identifier:   B6:8B:8F:CD:50:82:B1:B1:37:27:7D:8B:1A:C8:E2:D1:74:81:DB:44
Authority key identifier: 7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B
Certificate issuer:       /CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
Certificate serial:       019F8455DF2670C4DA68EB657F90DDBBE3A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
Manifest number:          19D5
Signing time:             Tue 21 Jul 2026 11:00:47 +0000
Manifest this update:     Tue 21 Jul 2026 11:00:47 +0000
Manifest next update:     Wed 22 Jul 2026 11:00:47 +0000
Files and hashes:         1: 1-m6k8GA9p4ZvRRt_IEBX1hvXSqw.roa (hash: ampjSRymUyQsDP6vuBsTUVzHhqhSNIFHHc8gno3VuVk=)
                          2: 1-vjFWmfG0701a1RWTVQR-wPwzPM.roa (hash: 7mCdtNCbIcMrpoX0PSQXD/jut52p6bBvzWyqRVVXaOs=)
                          3: FGWSmCiFor0nTfWbxjmzYP_XTWE.roa (hash: SoNbcAzZOAbsaX1DWlnc7rcsM5HKeRW27Hbeu6b+U0I=)
                          4: U5mnoIrhi2-xwQ0MbfRjL_85uWo.roa (hash: MKGyp4HJxPM8RFddtv+Sf1HDZ8q6UPmk/UuasqpHff0=)
                          5: f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl (hash: 4eB871vqs5y+NHMF1WIUqkahS0TK2J7BZEt2swKr1fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:55:df:26:70:c4:da:68:eb:65:7f:90:dd:bb:e3:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f515ead095eed9ac4cabc5ab4ad0b5867d9f01b
        Validity
            Not Before: Jul 21 11:00:47 2026 GMT
            Not After : Jul 22 11:00:47 2026 GMT
        Subject: CN=b68b8fcd5082b1b137277d8b1ac8e2d17481db44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:21:21:a1:b0:46:47:89:6e:f4:b1:2f:b0:
                    cc:9b:0d:bc:a6:3f:39:86:47:2c:db:2c:3b:fc:d4:
                    5b:08:30:fb:82:5c:41:b7:30:12:6e:c8:62:4e:07:
                    2b:0a:f2:10:b7:55:0f:37:23:ad:18:07:99:aa:75:
                    52:00:d3:c2:b0:eb:88:80:52:d3:04:f1:c9:e1:bb:
                    37:15:1c:8e:4d:26:f4:59:23:56:7c:73:61:bb:72:
                    f7:7f:69:e3:71:86:af:d8:52:d4:67:67:ae:4d:54:
                    a3:00:a0:34:f2:9d:cb:f3:ae:36:e5:52:3d:0d:9f:
                    e4:c2:5e:d1:62:ef:d6:d1:ce:55:70:3e:80:19:12:
                    01:ff:0f:f3:39:c4:fd:a5:ab:b9:a5:33:4b:44:09:
                    dc:30:01:b3:e8:b9:d0:32:ab:87:99:72:32:b5:68:
                    96:7a:be:94:43:f3:93:cc:04:3b:54:88:37:80:b3:
                    18:43:78:75:01:66:82:f2:55:27:11:5a:af:d2:5e:
                    b1:70:49:4f:26:9b:62:13:6a:4d:72:85:41:af:7e:
                    87:45:98:ca:cb:a3:49:75:85:be:d2:48:7b:35:3f:
                    ab:f3:17:1c:d5:04:5c:74:24:b9:e5:80:95:b5:6f:
                    58:e5:4c:99:7b:76:2a:d0:e4:2b:74:2e:a6:83:66:
                    7a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8B:8F:CD:50:82:B1:B1:37:27:7D:8B:1A:C8:E2:D1:74:81:DB:44
            X509v3 Authority Key Identifier:
                keyid:7F:51:5E:AD:09:5E:ED:9A:C4:CA:BC:5A:B4:AD:0B:58:67:D9:F0:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1FerQle7ZrEyrxatK0LWGfZ8Bs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5c2a59-6025-400e-ab28-f0a624d40912/1/f1FerQle7ZrEyrxatK0LWGfZ8Bs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:dd:6c:7b:63:87:26:89:04:9b:3b:53:b5:15:4e:44:fd:d9:
         33:62:ca:d2:5f:d6:c5:1a:54:a5:4e:37:e8:1c:d2:1d:01:fd:
         60:46:1b:ac:e5:95:fe:55:f0:b3:fe:3b:77:c5:6f:b5:db:16:
         8e:bb:47:ea:5d:af:b3:13:bd:33:22:79:60:f0:56:52:ed:26:
         99:47:a0:7e:d8:c8:58:1e:3c:35:ed:67:72:04:0b:fd:95:9b:
         63:12:ad:59:ea:3e:80:f3:17:e7:9a:25:9f:4a:16:55:49:5d:
         46:84:15:6a:c2:9b:69:5f:3a:9b:69:09:26:62:83:ab:73:5f:
         a6:b8:f3:6a:58:e3:26:23:f8:e7:1c:2b:99:c3:35:05:c5:44:
         d4:ee:39:fd:95:02:3c:74:33:47:99:fa:35:94:65:d5:4c:d5:
         23:97:89:f2:52:9e:1d:57:ce:be:10:23:8f:e7:a8:3f:a7:f3:
         b3:42:72:86:b8:5a:1f:62:cc:e9:08:ab:49:07:70:f0:5e:1d:
         10:00:93:32:61:5d:ab:a3:66:10:b8:23:49:f7:58:e2:fb:aa:
         56:0c:08:52:b6:9d:1e:e6:f0:e9:cd:6b:45:2d:c5:be:23:a2:
         14:03:ec:19:19:e8:a2:f4:ed:5b:aa:92:81:65:52:5c:c1:9e:
         be:05:0e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:28:41 2026 by rpki-client