Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
File:                     T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json)
Hash identifier:          v+OQITzyyykI2z5Zf3JV+9uvrZXV26HHAVmcRxPQQ8c=
Subject key identifier:   55:54:32:01:9B:9E:81:13:18:BD:56:1E:4D:C6:EA:A7:C2:DE:FC:AD
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Certificate issuer:       /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial:       019F859FA67AEE76D82F6916975FDFB95EF8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
Manifest number:          19D0
Signing time:             Tue 21 Jul 2026 17:01:00 +0000
Manifest this update:     Tue 21 Jul 2026 17:01:00 +0000
Manifest next update:     Wed 22 Jul 2026 17:01:00 +0000
Files and hashes:         1: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=)
                          2: 7238-yc1zsJP5-yGaMOBc9f0LR4.roa (hash: URHGrmmmyevt5Yc3E+g4gLi9Y6wbhMdw/A5AP3gBz1Q=)
                          3: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=)
                          4: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=)
                          5: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=)
                          6: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=)
                          7: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: aED1M8Ce9T+mVH/Ezj2jFoduzjQ5iHfRypdGZzg0oas=)
                          8: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=)
                          9: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=)
                          10: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=)
                          11: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=)
                          12: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:a6:7a:ee:76:d8:2f:69:16:97:5f:df:b9:5e:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
        Validity
            Not Before: Jul 21 17:01:00 2026 GMT
            Not After : Jul 22 17:01:00 2026 GMT
        Subject: CN=555432019b9e811318bd561e4dc6eaa7c2defcad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:da:42:10:57:87:ae:69:47:2c:c3:5b:30:8d:
                    a6:98:f8:45:ab:56:03:68:2c:ab:c8:a7:3b:54:b3:
                    54:5f:3b:97:b3:72:24:35:cb:8b:c1:5f:a7:14:c3:
                    36:cd:0d:46:fa:39:5d:fa:cb:9d:f4:cf:ae:f1:f1:
                    1e:16:5e:3c:5a:48:85:5e:42:f3:a8:47:eb:09:41:
                    1c:8f:09:60:3e:07:71:95:c9:2f:ad:97:7b:cf:b7:
                    f5:66:d5:aa:0f:ae:f7:80:d9:33:8d:3c:02:2d:b0:
                    58:18:00:09:45:49:9f:59:ba:ab:1e:7a:d2:40:91:
                    44:aa:47:fd:fa:30:6f:e0:c0:66:fb:34:30:9e:22:
                    bc:7b:58:4e:7b:9f:da:3d:e6:6f:22:3d:51:52:b4:
                    77:51:34:70:54:52:07:1b:27:1f:09:d2:58:95:58:
                    44:72:1d:8b:08:39:8b:34:37:5b:64:88:59:43:be:
                    c4:5f:b1:b2:4f:ef:b8:fe:24:64:8d:86:79:67:a1:
                    c8:93:c4:0f:c7:40:41:6a:00:32:da:0b:04:0d:5d:
                    5d:9a:44:81:14:07:bd:37:e0:69:34:d4:e9:9d:64:
                    0f:9a:1e:7f:c7:f0:08:90:1c:0f:24:77:b4:eb:7f:
                    69:e4:f0:0e:74:58:a3:74:51:c1:52:03:dd:13:15:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:54:32:01:9B:9E:81:13:18:BD:56:1E:4D:C6:EA:A7:C2:DE:FC:AD
            X509v3 Authority Key Identifier:
                keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:78:fe:39:5e:3a:8b:33:b7:54:87:e5:e6:a6:12:e3:70:83:
         42:23:e4:c6:6b:a2:5c:b2:53:8b:65:a2:28:a8:f3:e3:37:fd:
         94:75:47:84:67:0b:fa:35:d8:37:e6:42:76:0e:d0:23:ff:51:
         74:3f:9d:da:a6:64:15:85:a4:fe:1b:01:32:de:0a:31:13:b4:
         b4:61:10:a3:6b:ff:e2:a1:f1:7c:14:c4:f2:79:59:56:9f:19:
         e5:d1:44:7c:eb:2b:26:09:70:57:5b:f2:4d:49:30:1a:43:c0:
         9e:c5:62:e1:79:01:ab:08:79:cb:5b:b3:2a:49:fc:36:89:91:
         d8:c2:5b:da:bf:2d:bc:44:fd:70:66:cf:c1:e8:d9:0e:b4:6d:
         18:c4:1c:3a:0d:6b:5d:b5:6e:55:ac:d4:61:69:59:d5:a9:2e:
         b5:e0:a0:e7:b1:53:bb:5d:6b:57:44:e5:26:ab:dc:1f:75:c3:
         75:fc:32:fd:09:4e:32:7c:b0:16:04:aa:0d:cf:f6:35:8f:cf:
         4c:42:7d:2e:56:db:32:57:d9:66:8b:26:cd:64:82:c6:fe:31:
         87:67:13:14:e9:59:3d:85:5e:9a:1f:1c:5a:9c:8d:b6:33:28:
         cb:1d:0b:08:a7:a4:bf:fc:f6:26:06:78:dd:4a:9b:1c:66:5b:
         d4:8a:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:05:41 2026 by rpki-client