Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
File:                     R-lMy3tgHaDKCUafYPZTZA_tjBw.mft (raw, json)
Hash identifier:          qVewEzrIFP9x5uI5fVtd5uYKB7wdVRSlI4GWhB45Hks=
Subject key identifier:   97:3E:46:3C:73:9B:70:FB:ED:80:88:E3:16:74:53:A1:D7:B5:14:A8
Authority key identifier: 47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C
Certificate issuer:       /CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
Certificate serial:       019F604990A300AF9601B37FCE8E8815B599
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
Manifest number:          19C1
Signing time:             Tue 14 Jul 2026 11:01:01 +0000
Manifest this update:     Tue 14 Jul 2026 11:01:01 +0000
Manifest next update:     Wed 15 Jul 2026 11:01:01 +0000
Files and hashes:         1: AFEWredyAjvqwTGptAJ8OUVB7P4.roa (hash: 2m1v01Idcr237fiGD0VAWcDdfdXlJYmgXEBaQhLhLnM=)
                          2: NDSds1zweD0ntatyUwleIAzeIJM.roa (hash: +ZrwYT4v0e9jZWWQ6oW4TJF+kc5mZHurMYfZvW1kcaw=)
                          3: NG0J62IT4TEYyBuMqKM6OpYG_0Q.roa (hash: 0M3OIOezZ3BNzW0tJgVErTfGfdQ/cL0eGWBKnFHK6bA=)
                          4: R-lMy3tgHaDKCUafYPZTZA_tjBw.crl (hash: WPoYt/aMrIPsec3GLithD6fyGhvLgOQHxcwjTeNxUc8=)
                          5: c4vO0T2N1wxzMzxlgtz0m8cOMRE.roa (hash: 8oVfciD817bSEs2qpkUByGlM63u7F5Is6kgsu7Ks33U=)
                          6: eUCYKUszQzKLl5y0TD_e2TpUs_M.roa (hash: sXPTK8NFfl134JTfg8VQ0nOUGTnLwDMaXmy5yBYZ7ag=)
                          7: ydzz4qC4IHTCEdAs_sR3u8QA-U0.roa (hash: BxYGaauFkfj9FqWYAmJGU+STO4UuDXKQhKUEiwoFjr0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 15 Jul 2026 11:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:60:49:90:a3:00:af:96:01:b3:7f:ce:8e:88:15:b5:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47e94ccb7b601da0ca09469f60f653640fed8c1c
        Validity
            Not Before: Jul 14 11:01:01 2026 GMT
            Not After : Jul 15 11:01:01 2026 GMT
        Subject: CN=973e463c739b70fbed8088e3167453a1d7b514a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ea:31:dc:bc:b1:36:bf:93:17:43:72:71:b1:
                    81:03:62:56:40:88:e8:a5:45:d1:19:30:57:8b:83:
                    1d:aa:6c:35:b1:34:4e:55:1f:bb:7f:56:66:e4:21:
                    a1:c7:3f:bf:9e:2b:b3:f9:df:3b:a2:c7:01:61:cd:
                    73:59:c5:3e:e7:1e:84:f8:3e:45:3d:ac:ef:a1:65:
                    88:b0:28:69:cc:2f:49:be:5a:19:a8:b5:3d:9d:50:
                    a8:d3:10:7a:03:7d:5b:43:71:a2:b5:8e:9a:09:36:
                    e7:9a:cf:01:46:d3:8f:7a:e2:22:ec:30:ba:ea:60:
                    3d:d9:27:0f:19:26:7c:89:56:1d:35:f7:df:aa:e1:
                    04:42:3f:4f:9a:8c:6a:ca:74:a5:f4:f0:0f:1d:71:
                    01:c0:bb:1e:e6:9a:d7:4f:25:b4:f2:15:2f:68:0a:
                    19:9c:dc:41:24:f5:a4:a3:47:d7:ca:cf:eb:45:5f:
                    c0:44:50:9c:5d:3a:ae:c3:20:63:2d:e8:22:6f:d2:
                    3c:64:03:45:cc:3c:1d:04:41:a1:1e:9f:be:07:95:
                    00:91:32:f9:56:f3:33:54:4a:bd:5c:28:ce:ba:b6:
                    8d:2f:d5:47:d2:18:b7:de:3b:27:62:c9:c9:2f:28:
                    23:ce:62:70:94:cd:74:38:b8:d5:1c:73:ca:b7:99:
                    73:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3E:46:3C:73:9B:70:FB:ED:80:88:E3:16:74:53:A1:D7:B5:14:A8
            X509v3 Authority Key Identifier:
                keyid:47:E9:4C:CB:7B:60:1D:A0:CA:09:46:9F:60:F6:53:64:0F:ED:8C:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-lMy3tgHaDKCUafYPZTZA_tjBw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/9e29dc-cec9-49e2-bce4-bd90a3f06e16/1/R-lMy3tgHaDKCUafYPZTZA_tjBw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:fc:52:bd:91:92:65:51:20:ae:65:4d:36:10:74:4f:2e:ad:
         60:9a:0b:b7:20:6a:a8:31:9f:bd:bc:14:f3:34:da:e8:31:3d:
         5f:79:3c:43:de:30:db:eb:f5:8d:18:c1:56:3b:63:c7:dc:07:
         4f:b7:b4:82:55:8c:fb:c1:de:9b:99:00:60:3a:c6:41:9a:56:
         ab:e2:7d:78:1f:83:ba:37:6f:95:fe:87:93:c3:c6:59:b8:1d:
         3c:1e:09:6a:fe:b5:f6:2a:94:9b:f9:9c:1c:d3:30:06:30:40:
         91:d2:e1:33:74:50:38:20:17:19:e3:f9:47:9d:e2:6a:22:18:
         9a:2b:9c:42:13:99:b4:94:6e:6f:a9:e0:f3:e8:b7:42:26:4c:
         f7:da:f0:d7:2d:f5:fe:e0:64:fb:8a:2c:70:c1:dc:bb:07:6e:
         78:9e:b1:f9:b5:52:58:8d:23:fd:b1:a6:e4:fd:27:4e:45:74:
         4e:bb:1d:11:5b:a2:11:af:4c:90:d6:4d:6f:44:aa:17:05:c2:
         e6:d8:f9:5e:10:e2:09:9c:0f:98:71:36:85:ec:d9:f4:64:1a:
         61:a0:60:2a:8b:ec:24:99:c4:72:96:3e:70:8b:d7:38:0b:52:
         2a:7a:e2:6d:b7:2b:8a:28:38:37:1a:7c:9e:46:0a:02:f8:8e:
         72:68:57:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 18:37:40 2026 by rpki-client