Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File:                     NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier:          0W08TiGzPXzbOlREg/fWBWaelZywLnVwV8VtSBC/Hgw=
Subject key identifier:   2D:8F:40:B2:35:ED:5F:95:7D:29:25:30:2E:F2:89:11:C8:AB:35:0A
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer:       /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial:       019FA00439085303727BBB7AB2F2AFD71D31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number:          19D2
Signing time:             Sun 26 Jul 2026 20:00:58 +0000
Manifest this update:     Sun 26 Jul 2026 20:00:58 +0000
Manifest next update:     Mon 27 Jul 2026 20:00:58 +0000
Files and hashes:         1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
                          2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
                          3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
                          4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
                          5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
                          6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: vfkrMEP1gqC0fcCRzgIACpMFn27NFfAYV8eAcjwXnNA=)
                          7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
                          8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
                          9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 20:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:04:39:08:53:03:72:7b:bb:7a:b2:f2:af:d7:1d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
        Validity
            Not Before: Jul 26 20:00:58 2026 GMT
            Not After : Jul 27 20:00:58 2026 GMT
        Subject: CN=2d8f40b235ed5f957d2925302ef28911c8ab350a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:33:66:ab:cc:2d:6a:fb:d5:e4:e4:41:41:
                    95:65:ab:ee:05:2d:7e:ea:9a:f4:ac:ed:0e:4a:1f:
                    a2:13:a6:e6:8e:8f:72:2a:2c:57:d2:c3:e2:73:f4:
                    95:78:4d:3f:d6:b2:ac:78:b5:09:e2:ee:4a:43:d5:
                    6a:b8:a9:6f:76:a9:33:3d:cb:00:0a:e2:2c:cc:c6:
                    1d:99:e9:40:e1:ff:08:09:e4:7a:c6:0d:54:ea:3c:
                    b3:c7:c0:3c:b4:7d:52:ae:bb:a5:71:62:6d:48:f2:
                    ac:20:e6:e0:85:c8:b0:f4:7a:93:34:96:8e:9f:4a:
                    42:4b:86:85:9e:5d:55:13:87:ed:f6:57:c7:fa:2b:
                    de:77:86:0d:28:b3:8d:22:f7:93:ae:6d:3a:8a:9c:
                    12:fa:f3:e2:0b:b2:45:7d:a1:49:bb:c6:bc:c5:d3:
                    db:3b:75:4d:a4:aa:1b:ca:3e:4e:49:f5:30:8f:05:
                    44:5d:85:7a:9a:5c:8e:4a:94:23:00:9f:90:20:02:
                    d9:c0:ee:a4:d0:2e:bb:0f:e2:f1:56:8d:24:96:71:
                    44:09:37:34:fd:73:3b:dc:40:4f:47:c8:3b:76:f4:
                    c6:76:44:e3:14:c5:9c:a1:ee:3c:74:c0:7c:68:c8:
                    93:ef:06:72:54:40:95:4b:f7:0b:37:e4:c7:5b:9c:
                    09:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:8F:40:B2:35:ED:5F:95:7D:29:25:30:2E:F2:89:11:C8:AB:35:0A
            X509v3 Authority Key Identifier:
                keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:15:61:a2:1b:40:ce:7e:b3:38:09:fa:9d:83:6b:8b:b9:a8:
         e2:7f:27:d3:b1:c7:90:c0:63:e1:aa:41:aa:41:4f:c3:b8:89:
         70:6d:56:35:fa:e1:24:87:a7:31:1c:15:5a:6a:69:51:61:d6:
         a4:40:fe:58:74:32:5a:cd:40:64:f5:2a:0f:1f:d6:eb:dc:c7:
         57:3d:fd:8d:04:2f:70:2b:46:2a:54:ed:44:f2:25:df:12:79:
         25:37:84:35:b8:ab:92:61:78:4e:21:85:e4:ff:d7:de:b0:a5:
         02:8e:03:16:59:af:13:99:62:e2:7b:1c:8a:92:de:26:24:6d:
         ae:f8:9c:f0:11:19:74:3f:57:77:a2:df:a5:ea:32:fc:5a:0f:
         7a:31:c3:d0:57:b8:e3:76:ba:d3:46:cc:08:8b:af:42:bd:41:
         0a:7f:44:1c:52:6c:4e:71:22:5e:4f:76:4e:f0:2f:c9:a8:eb:
         ec:40:c2:71:f3:87:e4:59:1d:21:e4:b0:00:f9:6d:8a:10:42:
         0d:31:1b:7c:a5:81:16:ad:8a:c8:35:41:65:62:9a:46:7d:34:
         83:53:08:05:2a:22:3b:cb:ac:6a:ac:cf:96:6b:8a:f3:28:0f:
         c8:f2:db:9a:6e:99:0e:57:5e:cd:66:a5:63:dc:79:57:9e:f4:
         92:af:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:50:51 2026 by rpki-client