Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File:                     tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier:          M1pSKqZBDXDsEuyfMl81tv8sQcTEghNWuwFDeAIuh9o=
Subject key identifier:   B4:72:89:80:ED:CF:5F:B6:87:C7:90:2D:B8:C6:7C:7F:25:AA:60:4E
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer:       /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial:       019F276D8550E76C5D3AB56101F54E569B80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number:          19A2
Signing time:             Fri 03 Jul 2026 10:01:56 +0000
Manifest this update:     Fri 03 Jul 2026 10:01:56 +0000
Manifest next update:     Sat 04 Jul 2026 10:01:56 +0000
Files and hashes:         1: 2ZaoqGM6aCKm2bNlZEaeL94Fv10.roa (hash: S0GcAEqKxfe6Q+R2X0UdUocPpyMaBe0EXrwdyrx4AUA=)
                          2: AhPH5Tgl0c0erZbQ41UBHqChXvM.asa (hash: VLsiR2fO2EInnp5+SzZn2B8DlyrzWlf2oyjngstqi6E=)
                          3: CANUIzLfJR4qYVodzcMnNDXdUDE.roa (hash: w932Ollir53g5y+ieb37C38JTybDNf6UCpclagO7ofc=)
                          4: RKWiv_b8Hsm7TZP6_GQSd0RgdgM.asa (hash: QKVQOXrc16Rv1esQVhy/4W+ZeekcFYY56OZCN7aSiBQ=)
                          5: j5nMyhDkND_N1Ut4UNIil32kLZ0.roa (hash: UBj4OSufFBsr7TYpnQq+Obve4nAQx39q2B1z153K9mU=)
                          6: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: qcSdIhacBwwMmJlwfbt2u24l5sVVDWknnca6LZxYlnI=)
                          7: ulEfQmAzeVskbbMTaRHzrFLs4BI.asa (hash: CcZN/YfO0jHOlqqjuNqceiQx+t9WDbjO4d8kXQUVf+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 10:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:27:6d:85:50:e7:6c:5d:3a:b5:61:01:f5:4e:56:9b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
        Validity
            Not Before: Jul  3 10:01:56 2026 GMT
            Not After : Jul  4 10:01:56 2026 GMT
        Subject: CN=b4728980edcf5fb687c7902db8c67c7f25aa604e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:53:eb:e2:59:48:4a:2b:c9:d6:8e:cc:17:c5:
                    06:43:62:d2:35:47:fc:cf:22:19:db:d8:b7:4b:5e:
                    c6:26:02:a8:24:ed:84:0d:3e:63:83:ac:18:1d:b8:
                    b8:b3:94:b9:15:99:48:ef:af:0d:27:3d:74:54:e5:
                    6f:39:a6:3b:62:f8:93:cf:18:fc:90:f6:0e:16:cb:
                    7d:c1:fc:1e:67:b7:58:71:0a:ce:d7:db:f5:a6:fe:
                    2b:10:f4:11:1a:2e:f7:38:ed:56:f7:fd:6a:c9:4a:
                    f9:63:6c:a7:4e:a4:5f:96:24:c4:1c:d4:62:55:7b:
                    b4:f6:15:c0:13:ff:65:fe:80:c3:25:01:cb:82:c1:
                    9c:0f:2b:b2:e0:16:48:df:01:d6:bb:81:1f:9f:b6:
                    ec:ed:c2:e1:b3:f1:ed:1a:e4:ae:85:4f:29:5b:d8:
                    85:27:ff:ae:40:c4:cb:a8:5a:6e:44:60:08:13:ec:
                    be:22:4a:78:96:16:20:7c:26:21:17:96:74:7d:1c:
                    df:4f:b9:cc:ed:24:b8:54:9c:a7:e2:58:03:91:12:
                    6f:21:6a:1f:c9:6b:c2:a3:3c:07:e5:3b:18:c3:fc:
                    85:e5:b9:aa:54:2d:8f:e2:25:1c:a9:cd:48:fe:27:
                    ff:1f:15:e8:12:4f:7c:e5:0a:24:01:1e:03:a7:15:
                    26:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:72:89:80:ED:CF:5F:B6:87:C7:90:2D:B8:C6:7C:7F:25:AA:60:4E
            X509v3 Authority Key Identifier:
                keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:36:57:fd:a8:3a:31:17:2b:59:09:bd:f1:f7:e6:12:d2:
         3b:a0:68:ba:b5:d6:c8:c4:06:79:fa:22:81:13:09:22:20:0f:
         c5:04:5b:5c:5a:43:94:27:93:e2:28:f0:1b:50:fb:e4:7f:d8:
         50:ea:ed:c6:52:71:8d:5a:dd:e2:d4:7e:af:dc:de:74:6f:47:
         81:61:02:ce:78:ce:90:84:05:de:d8:95:0c:fd:48:9c:5d:1a:
         48:9f:2e:22:16:da:75:f5:2c:0b:72:30:7a:4f:89:0c:cc:72:
         c2:3c:74:b6:20:20:24:1f:bc:1e:07:bb:02:5b:04:f0:6f:0c:
         83:34:0e:eb:8b:71:05:e2:30:54:66:88:5c:d0:71:31:47:1f:
         81:1c:5f:58:70:0d:80:d1:7e:2b:88:90:c9:fc:55:cf:43:90:
         79:e3:d8:9d:d8:2e:ec:20:0c:da:c3:c6:7a:20:58:1e:15:c7:
         82:ff:01:de:2c:18:18:a1:db:21:f9:d5:90:f8:20:e5:19:ac:
         a8:97:76:35:94:85:cb:84:3b:e9:5e:6d:90:2c:b1:1c:32:ec:
         9e:32:15:90:1a:35:e0:e5:70:4f:55:36:be:74:f1:dc:fd:39:
         88:66:67:dc:b5:a4:56:c2:c0:d8:ec:24:2a:c8:57:92:d1:08:
         28:4e:10:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 17:37:16 2026 by rpki-client