Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File:                     1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier:          To2eNxa+wsRg59vyDdtBz5j4yjPuPb1eGYQGf9DXWNs=
Subject key identifier:   FA:1B:51:EA:A5:7B:7B:0A:9A:C2:FF:5E:24:36:CB:82:0B:F2:26:36
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer:       /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial:       019FA0A8CB1F4AD89892771296E723681809
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number:          19D2
Signing time:             Sun 26 Jul 2026 23:00:44 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:44 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:44 +0000
Files and hashes:         1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: +RrgdZrEsXUCcDzBDGODnmyJJ7zmETXKzTsdMNpx6Sg=)
                          2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
                          3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
                          4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:cb:1f:4a:d8:98:92:77:12:96:e7:23:68:18:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
        Validity
            Not Before: Jul 26 23:00:44 2026 GMT
            Not After : Jul 27 23:00:44 2026 GMT
        Subject: CN=fa1b51eaa57b7b0a9ac2ff5e2436cb820bf22636
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:32:ba:ba:a0:70:c1:aa:b7:6e:36:91:6c:26:
                    83:be:6e:c8:a9:fb:a4:6b:9a:f0:7a:a5:6c:27:52:
                    3d:68:ae:34:db:18:8c:84:a7:6d:5d:d6:82:aa:dd:
                    7f:49:5a:fa:68:22:f4:c3:17:be:f9:05:af:55:49:
                    1a:1f:ce:70:1f:19:91:6d:65:06:30:df:b3:16:cf:
                    c4:21:ef:72:9c:7b:db:ae:7d:6d:a4:d9:42:61:01:
                    8a:47:84:8f:7e:c3:ea:c3:ec:e7:d1:bf:58:c5:49:
                    35:26:56:75:61:e6:06:1c:9e:2e:38:6e:df:99:8c:
                    18:fb:9a:47:c6:7c:00:9b:2d:76:9e:69:33:e6:5a:
                    92:cc:c4:80:8d:28:dd:e1:dd:de:24:12:ff:65:18:
                    42:45:6c:be:44:bd:b6:4e:76:4a:e9:35:cf:c3:f5:
                    57:f0:7a:fd:0f:29:9e:87:a8:e0:cd:c5:36:01:c7:
                    f8:56:4e:df:3c:71:d3:5f:de:79:9a:fe:93:c4:1d:
                    ae:bf:4d:b3:26:29:eb:ad:b8:25:23:95:9b:17:27:
                    42:15:0f:69:e2:0c:28:a8:33:c0:88:53:86:2c:4f:
                    59:1b:8c:8d:d7:a9:f0:5d:38:fa:aa:b4:b5:c0:50:
                    68:05:76:3a:a9:fc:97:fe:b7:85:46:f9:08:1e:ec:
                    69:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1B:51:EA:A5:7B:7B:0A:9A:C2:FF:5E:24:36:CB:82:0B:F2:26:36
            X509v3 Authority Key Identifier:
                keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:9c:49:06:b0:fd:41:e8:f4:b6:aa:f1:88:d8:0f:71:00:16:
         a6:9c:c0:34:4f:7b:09:cc:d0:8a:a6:a0:c4:ca:ed:7b:f8:a2:
         64:4d:d2:b1:a0:c8:54:8b:db:19:3d:27:ad:34:ba:58:67:71:
         1c:4a:d1:4d:89:b6:28:84:8e:1f:60:d3:59:68:55:90:fb:c4:
         36:1c:c3:b7:44:37:d8:72:4b:98:4e:13:9e:28:a4:94:6d:52:
         e9:0a:77:05:c2:81:c6:54:52:a7:0f:cd:cd:22:2c:a8:0a:4d:
         76:26:d4:db:88:e7:87:ff:9f:e0:71:e2:ee:8c:b5:ab:d9:0d:
         8e:c5:8c:c9:1e:05:fd:a5:d5:cb:39:8f:94:6a:a1:1c:74:e9:
         ba:0a:ad:20:0a:5a:03:10:b2:59:09:68:17:d6:ae:9b:7a:27:
         82:3e:20:24:a4:e9:5b:73:d4:a7:51:33:6d:c8:97:4e:14:dc:
         91:b4:c1:4e:df:6b:c4:bc:8d:bb:c1:cf:b4:c2:2d:b4:2f:d5:
         b7:ae:58:42:b6:84:b1:c5:c1:65:e0:7d:c3:8b:02:99:99:4d:
         8d:be:43:8f:0e:1b:fc:4f:67:32:47:38:49:27:38:91:68:2d:
         4d:84:0d:cc:ee:fe:07:d0:83:f8:46:ea:62:ca:5e:88:75:ed:
         05:fe:b6:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:28:20 2026 by rpki-client