Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File:                     TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier:          7k+RQg1e5IvgUOKUdJVPUtIvRD41EJ+zAf1VGUFmpKI=
Subject key identifier:   5E:D8:4E:7B:E9:A0:10:BE:58:67:D2:F9:40:78:5B:7E:18:29:83:43
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       019FA26092B49273D9803AB9391F8D398909
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 07:01:05 +0000
Manifest this update:     Mon 27 Jul 2026 07:01:05 +0000
Manifest next update:     Tue 28 Jul 2026 07:01:05 +0000
Files and hashes:         1: EuzrvuKdTBEUT1iTSTu2oWpyl08.roa (hash: 6lfE37g+270FUBODA6XRsyANZt1xmAjhCCTH8Dga4fo=)
                          2: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
                          3: L2kVxbfcMS2nv-PBLG1ThCSQCJM.roa (hash: vnnfABGEtbcmc5yS9HseTFPLNWl4SZGd7BuXLhUduKk=)
                          4: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
                          5: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: FZR/aWiIrxjuikBdLKFbbGugBsMojaJHhvZkW13r/Mo=)
                          6: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:92:b4:92:73:d9:80:3a:b9:39:1f:8d:39:89:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Jul 27 07:01:05 2026 GMT
            Not After : Jul 28 07:01:05 2026 GMT
        Subject: CN=5ed84e7be9a010be5867d2f940785b7e18298343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:52:b4:f1:51:a2:66:2d:1f:19:bb:3d:d0:0a:
                    58:0f:a8:f0:ee:68:74:f9:5b:e4:ac:92:4e:99:8b:
                    5c:db:49:51:2d:60:fa:68:59:89:e9:b1:3c:bf:46:
                    e0:4f:ee:40:de:c2:a3:05:68:5f:93:07:24:c0:d7:
                    f4:d6:45:bc:95:e8:33:34:49:2f:12:63:a1:e7:7c:
                    6f:c8:01:01:5a:48:a6:d4:dc:81:92:15:bf:db:c2:
                    dc:15:ae:45:72:8d:ec:14:6b:ff:ce:b2:b3:d1:3f:
                    4f:65:3e:cd:18:d5:2f:e3:ab:01:f4:f0:59:ce:9b:
                    e0:6e:ff:40:3f:da:a8:65:ae:ad:a6:ea:51:64:11:
                    8c:a0:ae:12:ec:73:c3:7a:8d:23:c4:ad:50:ec:55:
                    47:b2:18:4f:5c:65:85:80:49:7e:80:8f:57:a5:c1:
                    3e:38:7c:88:18:07:77:22:87:62:fb:d1:c9:97:bd:
                    0c:34:20:69:54:64:ed:c5:01:03:f8:e3:28:88:02:
                    0a:ba:85:28:5a:bf:18:54:38:2a:ad:09:3b:70:b8:
                    93:9c:61:0b:e0:65:3d:56:ae:85:7a:63:4b:f6:fa:
                    b1:60:6f:de:3d:e6:57:47:e0:90:c3:30:4d:20:b6:
                    b3:7a:35:ed:ef:2e:0e:fa:19:53:23:38:f5:a0:02:
                    10:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:D8:4E:7B:E9:A0:10:BE:58:67:D2:F9:40:78:5B:7E:18:29:83:43
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:09:24:eb:23:b3:83:22:82:b6:c7:4e:e4:ad:81:ae:e8:25:
         74:44:eb:da:64:36:36:d1:36:4e:89:1b:b0:88:dc:f3:92:fb:
         57:7d:71:c9:35:44:97:d7:7a:8d:43:9b:88:1e:4c:cb:41:64:
         c7:bf:54:62:b0:a6:59:b4:8a:c4:93:be:bf:26:82:1d:19:4b:
         37:68:8b:90:fa:47:91:45:cd:e1:79:71:ba:d1:f7:ee:74:01:
         fb:f3:65:eb:7a:dd:ed:8e:12:3b:cd:51:b5:70:5e:75:13:55:
         6e:01:15:28:9b:08:00:5e:d5:31:45:ce:85:07:51:a9:a9:dc:
         bb:ff:eb:ad:c9:ff:1e:01:00:c6:44:72:2e:84:fc:c0:25:bb:
         ed:1c:ac:82:ba:67:f5:a8:63:e4:8a:50:57:66:d9:dc:a0:b3:
         dd:e8:ca:23:da:48:3e:56:1e:67:29:34:3b:1e:ad:23:d4:d1:
         98:06:b3:71:96:45:f1:86:ae:04:97:ee:f3:23:f2:2c:74:9d:
         23:16:2a:0d:56:93:2d:5f:e7:32:9f:35:9e:f8:64:35:90:cc:
         1c:25:77:3b:51:0f:8d:9a:a9:61:9f:01:8b:aa:bd:a2:63:db:
         74:bb:78:19:09:ba:ff:00:67:43:c1:eb:eb:95:10:e0:91:40:
         9a:13:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:54:21 2026 by rpki-client