Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
File:                     cWAmJ2eaSYC3DYreV48UGS-v65U.mft (raw, json)
Hash identifier:          oSJzrfBlTDrJbyukXQ3DKfYfdrf1LZAzrDUXDG7XtcI=
Subject key identifier:   63:75:F1:84:74:7F:C5:91:7C:93:81:76:EB:AE:7A:48:6F:71:6F:EE
Authority key identifier: 71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95
Certificate issuer:       /CN=71602627679a4980b70d8ade578f14192fafeb95
Certificate serial:       019FAAF5C1EA897533B51BB99CBE8F6BE64B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 23:01:00 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:00 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:00 +0000
Files and hashes:         1: 1MNzVKC9htvcNDGJvI7xuyGACNU.roa (hash: 5RJpFE83PkUMhvbMNjs3KYN+COX8IjLxqtTzJmRO/6c=)
                          2: LO4YOUMQSFJh66TMDDMwnUwbqCo.roa (hash: dmbwDSHT1tN2CWO1W2a6nb7MTfEav+JXvlh9Nn0z+XQ=)
                          3: cWAmJ2eaSYC3DYreV48UGS-v65U.crl (hash: BUSgWuUV9i/MYINkkHpVstVnbSFURb9Jk4rC/mV4bj8=)
                          4: fnKKRoWAVJZeKiOvGQPgr3LCZIs.roa (hash: JHOAXHnAaTWFlsyraZAXCqYuOsM3xPfPaJdjfqdyKlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:c1:ea:89:75:33:b5:1b:b9:9c:be:8f:6b:e6:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71602627679a4980b70d8ade578f14192fafeb95
        Validity
            Not Before: Jul 28 23:01:00 2026 GMT
            Not After : Jul 29 23:01:00 2026 GMT
        Subject: CN=6375f184747fc5917c938176ebae7a486f716fee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:f7:82:a2:b3:8b:3d:e4:24:29:7f:f0:a8:
                    75:dc:19:30:b4:95:ef:6a:20:3c:c1:c5:0f:27:53:
                    ad:8e:b7:4c:a8:4d:a6:11:9d:43:d7:cb:86:f6:da:
                    d7:08:84:3d:3b:b6:3e:d1:89:52:5e:ed:b9:23:83:
                    58:f2:45:3b:53:97:cc:be:be:47:ed:81:7e:75:7e:
                    f6:b3:26:46:eb:46:7e:1b:72:46:e5:2f:3b:72:af:
                    a6:36:eb:41:65:d5:8a:83:fe:35:3b:0f:27:fd:a3:
                    f5:db:00:c5:a3:89:2f:24:d1:c5:e1:ad:31:e8:b0:
                    06:55:e5:1d:d9:a2:fb:1c:6b:0a:50:c2:91:39:02:
                    5a:29:14:1a:be:9a:d5:27:d0:45:99:29:a8:13:f2:
                    4a:3e:2c:c3:1a:8d:f5:bd:c1:33:5b:c9:31:d5:f5:
                    c0:e5:a3:de:de:65:5b:2f:64:86:2a:5e:0b:54:a2:
                    f6:06:91:8e:94:72:ff:a6:b3:ed:67:14:49:1b:3d:
                    98:fa:60:ff:48:a8:c0:ca:56:34:48:1a:7e:26:0f:
                    b9:c5:c7:b8:55:c0:55:f5:f7:6c:ea:8a:ab:75:b5:
                    83:19:37:e6:9e:c1:fd:68:8d:45:4e:8e:2a:21:21:
                    30:f1:88:bb:37:4d:1c:16:b0:90:87:b7:06:68:bc:
                    15:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:75:F1:84:74:7F:C5:91:7C:93:81:76:EB:AE:7A:48:6F:71:6F:EE
            X509v3 Authority Key Identifier:
                keyid:71:60:26:27:67:9A:49:80:B7:0D:8A:DE:57:8F:14:19:2F:AF:EB:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWAmJ2eaSYC3DYreV48UGS-v65U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/26b4e2-caa0-48a3-8117-7d593033d005/1/cWAmJ2eaSYC3DYreV48UGS-v65U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:da:9a:3e:2f:93:83:e8:a7:e0:cc:fc:dd:e7:01:f4:bb:c7:
         34:3b:bc:eb:45:f5:58:b1:7e:7f:db:88:91:38:2c:b4:1f:af:
         27:e7:79:2e:85:1e:4f:ca:e9:3b:f8:67:b6:ce:a0:b2:7e:ff:
         af:9a:e1:bd:ec:35:6b:89:8b:28:1a:42:8f:37:d8:a2:83:ab:
         2f:dd:d1:4a:1b:76:a3:4f:50:05:fc:58:3b:d3:98:15:0d:d3:
         f4:f7:cc:5d:47:0f:7f:4b:0a:0b:9d:97:73:d5:99:00:e9:5c:
         86:22:6c:eb:0b:81:be:a8:ba:ef:4e:05:f9:7f:6d:5d:78:d1:
         94:5a:cc:bb:bb:68:8e:bf:ba:2b:11:cb:c9:63:c4:42:87:c2:
         36:bc:fe:72:93:5c:b9:5c:ab:1f:aa:0a:18:e7:9b:d6:4d:e9:
         ad:f6:3c:6e:d8:39:1a:bf:24:03:85:1d:f1:d3:fb:2e:c2:ec:
         cd:22:2c:f6:81:fa:94:4e:4d:77:cf:55:71:74:6c:a1:c0:40:
         f3:d8:5b:6d:47:45:f6:fb:e7:6c:a6:db:ab:c5:de:4a:95:4d:
         80:68:a1:33:b1:4f:ba:72:04:4d:ed:23:b2:e8:ac:2f:9b:41:
         34:f7:38:9f:e1:07:ee:3f:ae:55:a7:f3:b2:bd:01:d0:c2:35:
         86:95:f9:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:30:35 2026 by rpki-client