Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
File:                     _h0Y2aIic226wjERC4jerI2wM20.mft (raw, json)
Hash identifier:          QGrKuo15U49JVRwuWyTxooPrjZOGOnkoHYvJOjo1pb8=
Subject key identifier:   BD:CD:29:41:B7:D2:2B:4B:3E:A0:B6:30:D1:51:A8:8C:97:08:0A:29
Authority key identifier: FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D
Certificate issuer:       /CN=fe1d18d9a222736dbac231110b88deac8db0336d
Certificate serial:       019FAF098114CBCB4ABF54117779A179EE13
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
Manifest number:          19DA
Signing time:             Wed 29 Jul 2026 18:01:03 +0000
Manifest this update:     Wed 29 Jul 2026 18:01:03 +0000
Manifest next update:     Thu 30 Jul 2026 18:01:03 +0000
Files and hashes:         1: BGnG6gtmJf9oXbmJn6G8to3OAXQ.roa (hash: 7lUuJCGm6EGdC4KlGNBvD3jQRgoMt2XAzy3kEwKql7A=)
                          2: GRQeTTIlDXdek7LI3xSxbyP0wko.roa (hash: /36LNNo/X3fjiRfzW93svxxPJpEouDboCXaZzVepsY0=)
                          3: QIkShXbbHThv1aeU1a-peKPDkSs.roa (hash: VjCUy/EF7Rus5PhS1elNAKUIyC4Ng0/nopkU975oiO4=)
                          4: _h0Y2aIic226wjERC4jerI2wM20.crl (hash: W/fOsocIldWAFKDBFhkIscqZP1EIvMcSJ67mrNqz5yM=)
                          5: iYHzEnXzX7Ri36tD7aub9iMoOmA.roa (hash: 1jW4is5cwWCDH+AJEWg+glpxZJwRIEFEPAYxOuttUh8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 18:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:af:09:81:14:cb:cb:4a:bf:54:11:77:79:a1:79:ee:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe1d18d9a222736dbac231110b88deac8db0336d
        Validity
            Not Before: Jul 29 18:01:03 2026 GMT
            Not After : Jul 30 18:01:03 2026 GMT
        Subject: CN=bdcd2941b7d22b4b3ea0b630d151a88c97080a29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:7d:1e:36:0c:52:25:37:1c:5c:9d:80:ec:19:
                    fa:c3:df:d6:ef:6e:6f:07:8e:1a:0d:76:eb:bd:87:
                    b1:0c:b0:73:47:7b:7d:9d:e1:13:b7:08:d1:98:f1:
                    de:f1:10:85:54:b5:46:b7:bc:e2:48:56:5d:8a:b1:
                    5d:60:c0:5f:6b:aa:cf:4d:c0:f2:16:c4:39:23:05:
                    6b:ed:01:1a:d0:79:61:7b:78:1e:c6:6c:b3:a3:4b:
                    9f:b9:d4:06:c9:f2:3a:2f:f4:5c:e3:37:8d:63:d2:
                    60:cb:8b:8b:8f:24:d6:7c:6a:60:7f:16:da:86:c9:
                    91:25:38:9f:de:ef:18:77:79:24:6e:82:f3:49:e2:
                    77:58:e5:35:19:63:8f:14:d4:8f:1b:f8:28:e9:49:
                    70:0c:b3:b4:bc:33:83:e9:98:ad:fb:2f:79:16:56:
                    0d:00:32:84:94:bb:ac:d6:ec:38:c6:d6:f0:85:05:
                    cd:63:d9:cc:65:53:7f:bf:54:ed:fe:c1:bd:03:4f:
                    b4:c6:7a:4c:32:c6:2e:d5:3f:3d:56:3c:89:2f:c2:
                    8d:43:56:9b:fd:15:af:36:ad:ec:de:6f:96:4c:49:
                    bd:c1:84:19:ce:6c:5a:c3:15:59:7a:65:2f:26:f7:
                    fb:d4:c3:21:04:3c:68:a2:bc:7b:bd:6d:65:bd:6a:
                    d6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:CD:29:41:B7:D2:2B:4B:3E:A0:B6:30:D1:51:A8:8C:97:08:0A:29
            X509v3 Authority Key Identifier:
                keyid:FE:1D:18:D9:A2:22:73:6D:BA:C2:31:11:0B:88:DE:AC:8D:B0:33:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_h0Y2aIic226wjERC4jerI2wM20.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/64e1ef-9ba8-4307-bfad-6587f76fd810/1/_h0Y2aIic226wjERC4jerI2wM20.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:fb:62:ab:1f:03:7f:df:33:9d:fa:7c:c9:82:39:58:95:fb:
         12:74:55:b1:1f:01:6b:3d:5a:59:67:e4:cf:1c:22:e3:f6:9a:
         ea:85:cb:29:0e:11:9e:54:0c:e8:4a:25:de:87:97:d4:a8:ab:
         f5:df:51:08:0b:f7:9d:fd:95:3a:96:3b:6b:fb:dd:0c:c1:af:
         72:da:6d:af:c1:1f:2c:1c:27:b3:1d:e0:c7:83:04:b8:e1:17:
         ba:98:58:07:d9:d5:89:4d:68:cf:d5:75:be:81:51:99:4d:42:
         9c:6b:2f:46:16:db:98:47:c9:54:86:32:01:e7:f8:5f:e8:84:
         5c:b8:1d:9f:55:30:6e:48:b0:75:06:c2:88:92:92:74:20:45:
         38:e6:8c:90:21:11:3a:c3:dc:d4:fe:7b:0d:1b:42:c6:2f:2a:
         a8:78:55:e3:a0:b0:73:df:01:7a:ab:f4:c0:1c:1c:22:31:2f:
         7e:14:b0:53:89:12:9b:3e:90:f8:79:a9:63:c9:db:e8:69:e5:
         e8:df:35:6f:6d:f6:a5:29:66:d9:de:d2:3a:ab:f9:df:6b:e7:
         d7:82:a2:fe:8e:4b:a9:b2:f5:f9:50:29:c0:d9:43:af:92:ef:
         a3:6f:21:20:8c:f4:28:5a:76:cd:31:2a:f4:e2:2c:9a:ec:27:
         17:40:a5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 02:48:49 2026 by rpki-client