Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
File:                     1zCimUHvvHp5J_ApSB4scloaZxE.mft (raw, json)
Hash identifier:          5H+astAOY6Di+aHpVdaVX+NT8duIW2WdVXDNjjAUqck=
Subject key identifier:   99:D9:3B:91:CA:88:FD:18:E7:43:CA:69:F0:7C:94:DA:3E:45:D3:DD
Authority key identifier: D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11
Certificate issuer:       /CN=d730a29941efbc7a7927f029481e2c725a1a6711
Certificate serial:       019FA9070650D73612FDE223F2CBFABCEF62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 14:00:37 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:37 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:37 +0000
Files and hashes:         1: 1zCimUHvvHp5J_ApSB4scloaZxE.crl (hash: oK9szSx9PdMb898fG5co7poUbYjPTlx+dSLadvfx0Qc=)
                          2: YsrfKZUom0hhdvtAbQlQ31S1LpI.roa (hash: QER6EJFTVwn6uMFElRbueTl9ramohyi1r1R/wDUOkjQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:06:50:d7:36:12:fd:e2:23:f2:cb:fa:bc:ef:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d730a29941efbc7a7927f029481e2c725a1a6711
        Validity
            Not Before: Jul 28 14:00:37 2026 GMT
            Not After : Jul 29 14:00:37 2026 GMT
        Subject: CN=99d93b91ca88fd18e743ca69f07c94da3e45d3dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:1f:2c:30:2e:be:8a:58:7a:74:2e:24:17:
                    4d:84:91:b1:47:76:40:bb:61:9c:1d:e5:ef:a0:96:
                    e3:f6:fe:7b:5b:32:2c:68:94:9b:d3:ff:e8:a3:b6:
                    2c:17:98:6d:34:55:fe:69:14:cd:ca:2b:16:02:68:
                    9b:03:c2:8d:86:17:62:47:11:8c:ba:36:5a:5b:62:
                    90:55:a1:57:e1:07:6f:ba:e8:79:79:2e:9f:fe:be:
                    dd:d5:2a:9f:5b:24:36:fd:9e:f5:f3:be:d9:2a:0a:
                    81:73:3f:73:ca:7c:87:c5:96:53:c6:cd:e7:41:46:
                    ca:97:f4:01:f2:62:d7:c9:7a:6a:cc:ad:37:c4:9d:
                    97:a6:58:be:cb:14:6b:bf:42:21:e8:05:ad:b3:dc:
                    1c:78:d4:3f:b3:df:a2:34:5d:2e:7f:6e:c6:2e:e1:
                    03:ad:6b:50:3e:ec:c2:7a:07:16:c9:cd:50:3e:f2:
                    34:0d:b7:22:71:ce:ab:f0:10:02:ef:95:78:dc:ec:
                    51:ed:43:d6:70:56:0a:66:e6:95:85:66:43:1d:a0:
                    ff:e2:77:05:e7:b0:5b:cd:55:74:53:4c:09:4d:cb:
                    fb:06:12:a4:92:b6:08:34:e2:8a:41:be:12:4d:1b:
                    48:36:3e:e5:31:40:67:81:ef:0b:eb:6a:bd:30:4b:
                    3e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D9:3B:91:CA:88:FD:18:E7:43:CA:69:F0:7C:94:DA:3E:45:D3:DD
            X509v3 Authority Key Identifier:
                keyid:D7:30:A2:99:41:EF:BC:7A:79:27:F0:29:48:1E:2C:72:5A:1A:67:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1zCimUHvvHp5J_ApSB4scloaZxE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/64c5a9-b379-4999-af7a-3c0fa18c58cb/1/1zCimUHvvHp5J_ApSB4scloaZxE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:1f:d3:d6:53:9d:68:57:e8:78:4f:5c:00:9e:2f:ce:82:08:
         3e:ed:b0:1f:84:b0:26:bb:24:d4:8a:c1:ca:26:c5:4c:d6:93:
         b6:d8:fd:58:b5:ef:c9:25:77:1c:c7:a1:67:00:ab:90:e1:be:
         3f:51:28:48:89:11:48:68:55:7b:24:26:80:1e:c2:fb:74:56:
         4e:16:e3:9a:04:a8:51:8f:09:96:29:0a:2e:e9:25:7a:e6:ce:
         5d:ad:f8:73:ef:71:54:ab:13:48:93:e6:9a:32:1f:38:93:7a:
         0f:f6:87:2d:a5:59:85:25:17:a3:be:2b:b8:b8:8b:c7:c5:c1:
         68:a2:26:32:24:a0:f2:55:e1:73:16:bc:80:ca:51:1b:3c:79:
         da:2e:1a:21:87:d2:23:72:07:fe:17:e5:9e:b5:5a:5a:88:c0:
         d4:ad:bf:bf:da:a0:92:c6:64:b1:7d:72:a0:03:7e:9c:6a:eb:
         d8:b9:a5:88:e3:4e:55:95:ee:06:36:56:18:30:d2:d3:0a:88:
         2d:22:6b:f0:02:59:d9:8c:6e:3f:a6:6e:11:fd:47:13:49:d1:
         37:83:55:2e:cf:40:fa:07:d2:67:21:c5:00:12:a4:cc:ad:d5:
         96:ca:47:49:5a:2e:82:ee:ca:97:14:89:de:df:f2:05:02:cb:
         09:06:90:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:42:39 2026 by rpki-client