Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
File:                     fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json)
Hash identifier:          /E1QUHCvAi4NOsbrH0/Ve7MrLyANlaj3L1WjU1bZg5A=
Subject key identifier:   21:F7:F2:05:8F:DC:2E:C0:78:9D:38:71:E4:6E:5D:DB:19:45:6A:9C
Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E
Certificate issuer:       /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
Certificate serial:       019F9F2841A39DF435271E9A0C611F086A77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
Manifest number:          19E2
Signing time:             Sun 26 Jul 2026 16:00:43 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:43 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:43 +0000
Files and hashes:         1: NtvT6CD2I_6TfsATUb8G0iPohz4.roa (hash: 3QtiYDBmY6HJqn3yMKh8PCjoRTlhC0HDfTJNACRrjJk=)
                          2: R7AO6IcvjTtY4l0ByEe_0R_j0AU.roa (hash: MxomD2zeC9vv3+OGbCN11f0B1+3GrxfrkJYc0+4VX6I=)
                          3: ZSFvFvOHpvhz9jdVYyPf-qedyuc.roa (hash: y2p8lWtao0cmGhQ7xMI9uO+GzRfpUJD6YxLs8A6673A=)
                          4: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: ZB4t5/5pX69n7xX+jf65EFdKAhoOzghU0mOLIiy73TE=)
                          5: lHWMLrOWJPIs4BBwC991DrKwGo4.roa (hash: y28g4c7JhwolCgwgEN4bgF07Be1DrEjj6ZIL1k4Kjr4=)
                          6: wGcdIhwPZifk9b5KwZGniOVO1zo.roa (hash: UMDT/HLq1qMrunLYwsmcqNpWQGNS7EvqfPtBAOKrN8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:28:41:a3:9d:f4:35:27:1e:9a:0c:61:1f:08:6a:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e
        Validity
            Not Before: Jul 26 16:00:43 2026 GMT
            Not After : Jul 27 16:00:43 2026 GMT
        Subject: CN=21f7f2058fdc2ec0789d3871e46e5ddb19456a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c7:b8:50:34:2b:ab:69:bc:bd:5b:7e:c3:63:
                    21:45:c4:0f:63:36:bf:2a:10:e8:2e:35:5e:a7:cc:
                    8a:61:b9:57:4a:1f:78:37:c1:d5:11:c5:cc:a3:08:
                    8a:14:1e:9c:56:26:c7:61:f1:a5:0f:9b:df:f8:d5:
                    1d:a7:58:a3:b2:ef:9f:2e:56:44:5b:71:64:9a:af:
                    4a:91:0a:49:e9:02:2b:94:96:2c:fe:38:50:e8:2b:
                    57:1f:e6:da:c0:4f:fd:44:4a:21:f5:bc:34:cf:92:
                    0c:de:d8:fa:52:6c:19:14:25:e9:83:25:b0:84:f8:
                    fc:42:01:87:59:e7:8c:a6:38:ad:ac:07:79:a5:e2:
                    fe:b3:11:64:37:d9:f6:5e:77:f4:e2:2b:17:14:b3:
                    21:a3:ad:b9:71:e8:19:4c:3b:45:3b:27:bc:04:53:
                    11:a4:85:30:8e:a6:2f:72:da:2b:52:4b:19:10:bc:
                    da:94:01:af:93:3f:68:4c:ff:69:7a:1d:09:bb:7a:
                    81:98:59:b5:81:bf:e7:a8:2a:89:26:d8:77:8b:c8:
                    c6:b1:be:a1:32:6e:2f:70:9a:9f:ad:ab:d4:54:9d:
                    03:8f:8c:f6:5e:83:a8:92:02:16:f4:c4:b5:2e:5a:
                    9a:cf:c6:8c:a5:e7:1b:9a:c7:74:03:8c:32:7f:a2:
                    03:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F7:F2:05:8F:DC:2E:C0:78:9D:38:71:E4:6E:5D:DB:19:45:6A:9C
            X509v3 Authority Key Identifier:
                keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:1e:ea:39:2d:21:3a:b6:db:54:df:b4:15:fe:95:38:85:a6:
         22:6e:f5:da:77:58:60:b4:24:7e:95:e8:8d:cc:69:20:a5:de:
         da:d4:79:6c:16:d2:2d:40:52:b7:49:47:dd:2f:e9:1b:45:75:
         54:99:ce:49:6f:79:a5:9c:31:13:88:13:45:be:dc:5b:c2:bb:
         7c:74:dc:12:b9:45:17:60:c6:72:aa:86:8f:4f:86:de:0e:57:
         1a:35:3e:68:26:cc:e2:e3:b3:cd:06:07:a5:2c:7f:29:94:f7:
         f4:e6:9e:fc:ec:09:f5:d6:de:4f:e0:5f:16:78:b9:65:2e:fd:
         85:8b:bc:9a:2a:89:89:f2:bd:0e:d5:e9:4d:21:99:00:cb:a8:
         6b:4b:cb:31:8b:80:0c:87:8b:36:c4:0e:1c:b7:f1:16:8b:83:
         5a:48:fb:18:6e:93:5a:bc:8a:70:6e:8c:b1:d4:8a:e5:6b:00:
         55:65:a0:9d:83:fb:2a:ea:4b:15:fd:d7:e2:5b:7b:fb:ee:e4:
         c0:9b:1b:0f:69:c0:1d:45:27:da:51:aa:97:44:fb:be:d7:38:
         62:9a:01:3c:ec:b8:3c:f2:02:e6:09:7b:05:ce:34:65:14:da:
         f1:9b:78:3f:88:3e:c1:a4:74:85:97:b7:3f:64:cc:eb:52:72:
         9a:74:37:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:17:49 2026 by rpki-client