Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
File:                     H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft (raw, json)
Hash identifier:          RG9HNdBcLp0hHO1ZP24TfxNtr2T1im5nqH639fIrULc=
Subject key identifier:   04:24:AC:F3:BC:69:2A:8A:A0:8C:34:F5:3E:92:08:85:DF:42:82:7F
Authority key identifier: 1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34
Certificate issuer:       /CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
Certificate serial:       019FA9AB7AB5F2CB1E9D9BA55CD3210903B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
Manifest number:          19EE
Signing time:             Tue 28 Jul 2026 17:00:15 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:15 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:15 +0000
Files and hashes:         1: H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl (hash: bnwG+R8BAtcCordqNZ4g5xDlPrBsz6N1AcKKwb6jKhw=)
                          2: RoJCbChu4UCP6HbU25IvOtcjfaQ.roa (hash: ZExXuwYNhboyV3wplBFPIwIw4SZUYPtrZTHjOMct0iE=)
                          3: TCMNO3-CS_Nx-NPlLu6HlbDn--Y.roa (hash: JY2kbXROkO8FWfujlDIjurbZxxm0qrKzSX4v6ycpeWY=)
                          4: X5485C7ZqsWTqkySl5Kn8ckUA60.roa (hash: w+70iAnq3DeMprlSCHwSgxGyujS0yHyNG0DURrrh5ls=)
                          5: Zl6fGzQYTOHjw4PolDvPxgAOgoQ.roa (hash: GhUA9dcCQFJ4Ezs37D2x3nBwq7ffRWZrt0wbE9KxdKY=)
                          6: aPxKVSvNRXkuueNUo0oD6qVAbdI.roa (hash: 61RoVPH2gZzr7aCEfyXLcJOn37DXu2XNDfa7Kms2beA=)
                          7: egiEHr2WR8rBb2S9AoXjNrRe6SI.asa (hash: +F1NPoSJ7zieN8nKd424PJvQQuv32Y1xryB26LSSqhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:7a:b5:f2:cb:1e:9d:9b:a5:5c:d3:21:09:03:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f61aa5d1befd7a0fe3e4dfe3aa8da73efcfba34
        Validity
            Not Before: Jul 28 17:00:15 2026 GMT
            Not After : Jul 29 17:00:15 2026 GMT
        Subject: CN=0424acf3bc692a8aa08c34f53e920885df42827f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c2:92:18:87:cd:24:1e:af:0e:e3:7a:3f:10:
                    e9:78:9d:b8:83:5f:b1:6f:b2:92:ce:e2:0c:48:78:
                    ae:7d:55:46:01:41:76:27:09:fc:62:9c:57:68:a3:
                    85:1e:e1:69:b4:7a:72:19:0f:9f:22:38:e2:a9:3a:
                    a9:d7:31:36:4a:d5:9b:aa:5c:fe:b7:58:ce:7d:a0:
                    ec:e4:7d:b9:d0:fe:33:a2:07:fc:92:0a:ad:7e:ff:
                    01:e6:e2:e6:65:b9:37:74:90:49:ef:ee:f0:f4:d0:
                    df:e6:2c:c5:f3:da:57:7b:09:49:aa:e4:52:6f:df:
                    32:34:90:b2:a3:35:48:ac:95:b3:08:98:7d:5f:cd:
                    23:ad:f0:76:18:df:21:24:d0:b0:d6:50:ac:f4:cf:
                    4d:91:04:d4:16:34:ee:da:56:aa:91:67:c5:77:02:
                    bb:87:2c:06:3f:0f:bb:a9:a4:69:c5:b1:20:e5:3e:
                    b4:9c:ec:46:4f:67:ca:1e:7d:79:50:5c:01:51:db:
                    45:6d:c4:d4:43:23:bf:ff:a2:28:5b:11:75:00:1c:
                    bf:9f:5b:19:70:12:fa:89:cd:6f:99:bb:d3:c2:e7:
                    07:bb:18:c1:97:26:dd:c7:4f:29:ac:1e:2e:1c:50:
                    54:93:f2:a0:9c:1c:66:d7:b2:f1:1b:12:9d:a2:9e:
                    80:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:24:AC:F3:BC:69:2A:8A:A0:8C:34:F5:3E:92:08:85:DF:42:82:7F
            X509v3 Authority Key Identifier:
                keyid:1F:61:AA:5D:1B:EF:D7:A0:FE:3E:4D:FE:3A:A8:DA:73:EF:CF:BA:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2GqXRvv16D-Pk3-Oqjac-_PujQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0ad414-3df1-4b38-869e-c621e8df95ff/1/H2GqXRvv16D-Pk3-Oqjac-_PujQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:0e:53:bd:f2:0b:ca:28:b2:df:db:ae:6d:08:f0:66:5f:87:
         1f:f8:51:de:37:e8:a3:45:79:b3:cd:ef:f7:39:f0:eb:00:df:
         ed:27:d0:dc:f4:dd:b1:9a:08:d3:00:68:b6:26:39:26:26:09:
         23:96:d4:85:17:3f:f3:fe:77:f8:6c:70:d3:64:11:b9:77:5f:
         e4:e6:95:d8:c6:85:29:fa:a4:b2:e8:50:f5:82:63:91:2c:f9:
         95:21:71:67:d6:31:48:57:41:27:b1:1a:bc:05:6b:02:1c:b8:
         bf:4e:00:a3:9a:5d:b8:d1:09:93:ff:26:ad:9c:29:14:8c:c1:
         c2:3c:a3:61:12:98:4f:d8:3e:c1:0e:65:1f:3e:e4:37:d4:de:
         c9:28:17:ab:54:6e:79:54:4b:5d:ff:07:52:91:c2:85:1c:6e:
         91:8a:94:e5:3e:8f:e4:b0:b1:2f:db:c0:8b:08:01:af:c7:b5:
         c7:63:1a:f8:3d:42:28:f9:73:b9:4f:33:c0:51:73:7b:c0:5d:
         ec:d8:e5:f0:02:8a:9b:15:5d:09:ca:7b:5a:91:e1:88:46:54:
         0d:85:f6:c4:f9:7c:fb:cd:9b:32:45:f6:76:57:5d:e6:4f:4c:
         43:e2:a9:f3:19:b5:21:14:72:30:9c:33:b3:e0:aa:a9:0e:18:
         5a:2d:ce:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:04:50 2026 by rpki-client