Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
File:                     m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft (raw, json)
Hash identifier:          dYLdXECidF8pN5fTD0s1kEDBO/Fbqs4mawBMMDRJavg=
Subject key identifier:   37:22:24:28:B8:7D:54:C6:9B:1C:9D:35:5E:FD:17:7F:AC:6B:7D:D9
Authority key identifier: 9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE
Certificate issuer:       /CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
Certificate serial:       019F71E189CAE97BE1499B9D65621A94543F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
Manifest number:          19BA
Signing time:             Fri 17 Jul 2026 21:00:33 +0000
Manifest this update:     Fri 17 Jul 2026 21:00:33 +0000
Manifest next update:     Sat 18 Jul 2026 21:00:33 +0000
Files and hashes:         1: V2qGOcFGArZxDVhU93OkH7I5tZU.roa (hash: Qx/eCdyI2+oie6BNIEJmjhm2r/dBvwBAeJ6b6LuahQY=)
                          2: WrF8RZjbYEiiD0wqPqyzH7bojHg.roa (hash: SASBUcOpWPVFaGgXimL1oxrkpjPpL7o7jdrVHK+m9J4=)
                          3: gdPavX0yF7T7Wyp2RjBRxSe2U1s.roa (hash: YT5SSoDomUlfm9K9ESFgm6mAwjS+3bk9K/ENIJxNzus=)
                          4: m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl (hash: nx8jrPC68Ir2+QjLEQcdKFUZGq7iuZxDKmyf6lVbsng=)
                          5: m5yMYV4pBm1qpA0jit6hm99wXvM.roa (hash: 15C3Wvo3bxrDjbCmZIkVXncLYoGj5VtzpzHvZLU0GJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:71:e1:89:ca:e9:7b:e1:49:9b:9d:65:62:1a:94:54:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b7d24416aa8a478b3ed36e2e65855d42259d9ee
        Validity
            Not Before: Jul 17 21:00:33 2026 GMT
            Not After : Jul 18 21:00:33 2026 GMT
        Subject: CN=37222428b87d54c69b1c9d355efd177fac6b7dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:24:46:83:97:df:99:bf:f6:a3:18:61:e2:64:
                    be:ee:93:91:11:c0:74:57:88:3e:52:ed:f0:f7:8d:
                    0d:b4:8a:59:fc:57:87:f5:c1:26:70:74:97:05:ff:
                    9e:1e:81:82:f8:95:c2:4b:67:12:df:a8:80:cb:1f:
                    2a:e9:d9:01:8e:f9:37:71:8e:a2:0f:a3:3a:fa:2f:
                    11:e9:28:8e:89:1f:19:d9:b9:be:2b:01:7a:46:f8:
                    6f:54:e2:0e:c7:a5:8a:1d:98:d0:86:d6:35:6b:16:
                    f7:5a:a2:c7:67:8c:cc:f3:87:51:1d:a7:24:f5:c5:
                    07:4e:47:f0:fc:09:56:fc:4b:22:aa:da:8d:14:b0:
                    05:c4:2e:e7:c7:ab:a2:5b:81:e6:ac:8a:e3:ca:af:
                    91:e6:8a:0c:db:6a:57:43:22:c9:92:bf:41:f6:33:
                    5e:f4:07:b9:aa:3b:12:29:e6:20:a5:6a:8f:f3:89:
                    8c:96:81:7f:c4:a1:04:ed:80:e4:a5:0b:e0:29:34:
                    fd:e3:c1:c5:67:5e:e5:2e:86:2a:9b:63:a7:f3:5c:
                    aa:9f:88:39:1e:f2:4f:2a:d4:96:9e:50:c9:0e:69:
                    d6:0b:e9:37:a3:8c:5a:81:18:18:55:ea:25:9a:8d:
                    e6:27:ce:de:19:5b:af:80:60:69:8e:2e:cf:99:e3:
                    91:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:22:24:28:B8:7D:54:C6:9B:1C:9D:35:5E:FD:17:7F:AC:6B:7D:D9
            X509v3 Authority Key Identifier:
                keyid:9B:7D:24:41:6A:A8:A4:78:B3:ED:36:E2:E6:58:55:D4:22:59:D9:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m30kQWqopHiz7Tbi5lhV1CJZ2e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1b8f2a-0abd-4ffb-82f6-ef3bbb05655e/1/m30kQWqopHiz7Tbi5lhV1CJZ2e4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:80:09:0f:69:c8:6f:5a:2f:3e:03:2d:f9:1d:0b:58:c7:65:
         97:2c:ef:0d:cb:5c:4b:df:8f:9b:3a:81:71:af:49:40:0b:39:
         ec:82:d3:63:a4:52:91:10:60:d8:c6:5a:b8:70:a0:3c:ee:58:
         b0:5a:97:c0:d0:e1:c9:11:dc:19:29:e9:9d:5d:e0:75:f6:bc:
         d9:78:45:5c:b8:04:fa:ca:37:d4:be:0c:42:0b:a8:1e:27:d4:
         51:ad:2d:3f:e3:31:85:e7:e2:05:22:28:ce:06:e3:b4:30:5a:
         5f:01:f1:55:8c:69:58:13:56:0f:be:cf:5f:12:68:5b:67:6c:
         4e:1b:5a:19:a3:28:ac:b4:01:a5:d3:ba:4a:9a:92:46:00:b0:
         47:f2:84:2b:d6:ae:a4:83:62:f6:9e:a8:f2:a5:c1:4f:80:bf:
         1b:98:df:28:c6:18:c1:91:1f:2b:ce:1a:99:fa:ca:c5:08:6c:
         7b:a6:0f:50:8e:1d:e8:3c:a8:d0:63:8f:a8:99:b4:e6:2b:38:
         5a:71:2a:48:ef:9b:b6:e7:2d:f5:a4:73:be:fc:58:89:6f:b6:
         ce:2b:c4:4b:09:71:ad:eb:27:7d:a4:a5:0f:96:bf:0e:ed:4b:
         68:8d:cc:93:97:f5:59:45:f4:da:94:2c:72:1a:18:95:e8:09:
         4b:a2:99:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:55:04 2026 by rpki-client