Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
File:                     29fJUTSL0uCcyvdvV7g4XxXfROQ.mft (raw, json)
Hash identifier:          mvdx4z83jJNbfsR3qKPmBhAVMl0/w5/PuDtnu41YZLw=
Subject key identifier:   E5:99:89:16:51:C5:32:C4:B9:6D:14:06:4C:94:39:CA:6D:2F:8F:3E
Authority key identifier: DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4
Certificate issuer:       /CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
Certificate serial:       019FA9E2BDAD99005F3001E891ABE595EB79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
Manifest number:          19D8
Signing time:             Tue 28 Jul 2026 18:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:36 +0000
Files and hashes:         1: 29fJUTSL0uCcyvdvV7g4XxXfROQ.crl (hash: SQXIqMfBqHoz3AdAPPMPXsiJm5UTNva1Fk0Hv9IhXE8=)
                          2: IPrRSq2gSatbbHi6fEa8RlmwLy4.roa (hash: RM5/PHoNGaX7XlREXjG/og78083kPTzGlX0ZOlSLFII=)
                          3: mVkogJ-xnAweLAL7bsWjhT8Cpqw.roa (hash: B0ZHTRT8wUE+jzJV8TMgxREJDsonVac0/VpJ6Sd0ekg=)
                          4: ngezMG7cjg7kdta93owuwynmRkU.roa (hash: AWPdd4TuywUrgEAGlpfA8F/3L75UudUwvDZHYHDHNyo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:bd:ad:99:00:5f:30:01:e8:91:ab:e5:95:eb:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbd7c951348bd2e09ccaf76f57b8385f15df44e4
        Validity
            Not Before: Jul 28 18:00:36 2026 GMT
            Not After : Jul 29 18:00:36 2026 GMT
        Subject: CN=e599891651c532c4b96d14064c9439ca6d2f8f3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c5:bd:44:2a:e7:d7:37:70:86:67:33:7f:4b:
                    af:38:78:4f:b7:fe:ce:a8:34:c7:1b:6b:4c:64:e0:
                    97:b2:f2:4b:28:bd:e0:88:ad:6a:5e:51:14:dc:9b:
                    6e:ff:69:99:f7:42:3e:1d:f3:0a:a0:50:87:9b:8d:
                    cf:b5:b8:ac:ae:72:0e:5d:36:c7:32:a5:54:2d:8d:
                    c4:22:fb:68:76:70:49:ce:05:27:27:e6:5a:06:67:
                    ee:da:ce:60:ed:83:0a:7e:e0:a1:ff:17:b3:92:e2:
                    6b:b2:dd:93:1f:9b:f5:50:fe:df:a6:fe:b0:d4:18:
                    d8:1c:e8:c6:ca:44:8a:a0:3f:0a:36:fd:8f:2d:88:
                    9f:58:78:88:1b:83:01:e7:07:9d:ff:08:05:5b:91:
                    b4:3e:a6:1c:72:54:59:8f:e9:76:81:37:59:98:f2:
                    ba:64:40:99:6f:26:e0:a8:84:aa:52:8e:f0:2f:58:
                    2a:cc:34:93:99:45:07:60:42:97:04:2f:d1:9c:25:
                    b2:04:83:1f:58:2e:a7:5d:87:cb:22:9f:26:7d:27:
                    33:17:bf:e5:2c:a2:e1:62:fa:c3:28:c7:e6:06:ec:
                    dc:72:82:e9:8c:1d:7e:f6:03:a2:b7:f9:5b:6c:b8:
                    f5:a1:7c:ec:99:94:69:e5:03:bc:0a:9e:74:1e:9a:
                    f0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:99:89:16:51:C5:32:C4:B9:6D:14:06:4C:94:39:CA:6D:2F:8F:3E
            X509v3 Authority Key Identifier:
                keyid:DB:D7:C9:51:34:8B:D2:E0:9C:CA:F7:6F:57:B8:38:5F:15:DF:44:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/29fJUTSL0uCcyvdvV7g4XxXfROQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/853c76-a398-435a-be41-7d0ac52815a6/1/29fJUTSL0uCcyvdvV7g4XxXfROQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:68:1c:02:cb:7d:d7:76:47:84:4a:ef:e1:2a:a3:09:3d:a4:
         45:14:e1:70:3a:72:ae:d1:4a:38:2a:a0:58:b4:27:93:83:6f:
         3a:ff:c2:4e:06:28:6a:58:9b:84:f3:e1:f6:f5:4d:76:52:18:
         07:19:97:6e:43:9f:2b:53:43:5c:a1:0f:bc:a2:64:d5:57:8c:
         ca:9c:8f:d1:1c:7e:8d:48:7c:81:02:26:f8:ba:5f:b5:b3:cf:
         38:41:68:d3:db:0e:ce:f3:d4:93:89:44:1a:df:87:85:c1:bd:
         1d:9a:c0:76:9b:a5:01:8f:27:1c:c6:d7:e1:8a:47:88:8c:7d:
         41:d6:53:6b:a2:29:fc:fb:8f:23:16:51:59:29:47:90:00:b4:
         47:b2:8a:26:1a:4c:8a:b0:62:28:11:b4:64:06:c6:9e:26:51:
         eb:e2:9a:7a:d5:19:9b:8d:3b:f1:71:3b:45:2e:3b:08:f0:73:
         1f:db:6e:dd:8f:53:bc:ab:1f:22:83:c4:6d:78:3c:c0:32:10:
         41:59:f2:1a:63:ee:87:1e:ac:31:70:72:04:71:75:35:1c:f8:
         f2:7e:18:20:d9:8f:33:13:22:0b:32:f3:5b:a9:82:b6:ea:e8:
         b6:9e:5b:db:8a:42:96:f9:8c:9e:36:53:75:a5:62:88:c4:76:
         25:77:94:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:27:03 2026 by rpki-client