Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File:                     sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier:          ipyBzIX2/wDT3fNEmUEgNVL4YDt/gH7KnedZulyUeNg=
Subject key identifier:   97:79:F0:B5:B6:47:AE:AD:07:56:19:C9:BB:72:91:41:4A:0E:5B:A3
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer:       /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial:       019FAB9A2E2BC0DF8E9CB801DD72272ACBD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number:          19D3
Signing time:             Wed 29 Jul 2026 02:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:36 +0000
Files and hashes:         1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
                          2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
                          3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: wTxC0fEN2SoFvhArfI1M8wAPDyrEAEZX4X+Vy6bpujE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:2e:2b:c0:df:8e:9c:b8:01:dd:72:27:2a:cb:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
        Validity
            Not Before: Jul 29 02:00:36 2026 GMT
            Not After : Jul 30 02:00:36 2026 GMT
        Subject: CN=9779f0b5b647aead075619c9bb7291414a0e5ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:95:9e:d4:3c:1d:f2:d3:33:c6:91:e9:09:ef:
                    65:32:1d:5a:81:6e:67:4a:98:32:db:03:ec:be:4d:
                    19:2a:88:52:e4:78:0a:da:51:bf:a1:a3:49:04:7e:
                    cc:f6:a8:0a:f4:38:72:39:12:af:3d:c7:10:91:99:
                    91:8e:e5:76:68:fa:16:16:f9:ae:f2:48:b3:2c:a9:
                    c3:48:14:03:f0:7b:05:6a:b0:99:a0:e0:09:00:b1:
                    72:46:34:8a:65:12:b0:d8:55:45:3a:97:e1:90:30:
                    10:a8:4f:6f:bd:2e:e1:6b:16:9a:10:4f:f6:58:29:
                    f7:b3:b3:17:0a:9a:8d:0a:2e:6a:39:23:c8:e1:5c:
                    ee:a1:fc:6a:03:97:ba:61:ca:96:b0:67:9f:a4:3e:
                    50:15:8d:35:62:d9:ff:49:7a:ba:80:1e:a2:75:7e:
                    39:be:1c:ec:79:01:ac:68:3d:a3:31:9c:ff:7a:fb:
                    95:0e:55:8a:fc:91:f2:9e:55:c9:27:99:77:3e:89:
                    ad:cf:28:99:77:5c:ab:5b:1c:38:13:a8:48:d1:b2:
                    7b:dc:2c:4f:07:ca:11:2d:a7:f9:ab:71:f9:ae:5c:
                    eb:c3:48:55:56:f0:95:be:5f:43:3f:4a:7c:99:80:
                    3c:8a:44:8d:84:f3:99:f6:5e:87:48:a9:c5:75:35:
                    de:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:79:F0:B5:B6:47:AE:AD:07:56:19:C9:BB:72:91:41:4A:0E:5B:A3
            X509v3 Authority Key Identifier:
                keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c4:44:81:68:b3:af:3a:a0:c1:ae:40:33:6b:7e:8b:54:df:
         51:fa:5d:03:c5:df:8b:43:63:54:36:e4:44:68:3c:93:cb:23:
         07:51:6a:00:64:bf:f4:72:39:18:97:37:2b:ea:9b:50:02:95:
         bd:4d:69:55:c0:70:69:ed:ed:12:33:3e:a1:49:94:46:21:89:
         ec:76:bf:fc:4b:ba:1a:b2:90:af:50:41:8d:90:65:6c:17:d5:
         08:e3:36:fa:e5:b4:dd:70:60:46:d1:57:59:67:b8:28:47:e4:
         bd:cf:3e:f6:9d:55:cb:f7:cd:43:8c:4d:d0:e5:69:40:4a:6a:
         17:53:5f:16:95:6b:53:87:b5:e4:7e:48:80:e5:a8:18:bd:8d:
         91:58:20:3a:00:b9:21:d7:25:03:8b:8d:5e:f3:62:f3:eb:3e:
         03:92:7b:0f:bc:72:45:32:c0:50:04:f5:2c:38:dc:b2:3f:48:
         6c:66:90:15:97:07:1d:b6:8a:79:63:04:cf:b5:3c:4e:1c:f5:
         3e:a9:c9:8c:b2:19:5e:db:27:da:c1:87:36:c8:97:27:24:b6:
         2a:3b:af:10:37:33:64:c9:6e:50:f0:75:c7:a0:92:24:75:44:
         17:a8:0d:cc:7a:b8:d8:67:a9:90:fe:40:a3:9e:4e:e6:df:a5:
         c4:c4:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:52:09 2026 by rpki-client