Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File:                     fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier:          1y84ljcJee2K4649VAaLFzIqW17lyAPO2fJUJDaMG4Y=
Subject key identifier:   1D:09:BF:1E:1C:BD:30:67:32:0C:55:EA:53:05:B9:92:49:9C:0D:E4
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       019FA8CFDC6773DFB136C55687323E71AE1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number:          19F1
Signing time:             Tue 28 Jul 2026 13:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:22 +0000
Files and hashes:         1: 12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa (hash: PD8v9Q+OgcnW9fexnmunDxLbOBIKmFVo+JF+JBAe7ck=)
                          2: BDp1uT9kjFAm3N54RW5KWq6_pTM.roa (hash: KqNlOiugDBjYNqy42qin4bY/AA0qkt7dppw/YaijJ6Q=)
                          3: D-8LG2tVdd5-uleb8t-_wqh_Jl8.roa (hash: mVxwGRDiuc9C3st3JN7liHp0YNkXDsxa9l1VHNbN9/Q=)
                          4: Gias09ASbWXb_aQKiFfOMuiQKcg.roa (hash: i2h8OuNqg6FM+2wJRliKGa8uy6A9zEgQ4SXZUve7AdU=)
                          5: ZKFoN8fD1raVVjOmPZzWRUaaugA.roa (hash: R4OUda4QAMCAnPGIK71d8GhzpRyoNd21V6RUuQUoxZQ=)
                          6: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: zkSIJKo9CtS+0RxGr72cAI9tW4MLq8M762Ak9zf332k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:cf:dc:67:73:df:b1:36:c5:56:87:32:3e:71:ae:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Jul 28 13:00:22 2026 GMT
            Not After : Jul 29 13:00:22 2026 GMT
        Subject: CN=1d09bf1e1cbd3067320c55ea5305b992499c0de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:04:b0:cb:dc:65:87:e0:ac:24:48:23:e1:
                    78:92:5d:f2:d8:b7:19:21:78:1b:fa:04:4d:23:ac:
                    18:69:6d:a9:b0:f0:f2:f9:fb:c3:0d:6f:37:b9:00:
                    65:e1:2b:23:e6:83:0c:c6:72:cc:62:86:71:87:e9:
                    a8:9c:28:f9:f0:2d:4d:73:ea:26:b8:40:2c:1c:3a:
                    2d:e1:0a:a6:44:ff:36:68:54:ca:4f:c0:dd:71:60:
                    52:87:4f:9c:cc:da:0a:56:54:f8:49:0b:dd:77:4f:
                    35:3c:a1:44:9a:a7:0f:22:f0:20:92:5f:40:d9:82:
                    4a:be:41:30:c9:54:50:60:33:0f:68:7a:dc:79:c5:
                    1e:dc:67:39:b1:f1:da:52:8e:4d:41:99:c3:31:49:
                    be:e2:4c:8c:02:c1:5c:17:70:f7:ac:ae:d6:00:a8:
                    03:64:74:eb:05:fe:ee:02:77:c0:02:a4:32:1d:a6:
                    8a:6b:68:82:32:e3:c7:3b:d6:51:d9:31:17:cf:69:
                    65:2a:8a:0c:4f:e7:fc:25:0c:17:5c:63:5d:b3:e1:
                    07:be:a5:fc:b9:d6:c3:f8:21:01:3a:d7:f8:4f:1e:
                    f6:3d:a1:f0:84:7b:ba:7f:65:2e:17:b4:51:53:99:
                    c6:16:2e:ee:e2:88:2e:13:ac:12:2b:e0:cf:59:58:
                    61:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:09:BF:1E:1C:BD:30:67:32:0C:55:EA:53:05:B9:92:49:9C:0D:E4
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:10:f4:d1:c6:6f:51:81:5b:8e:96:0d:f1:f4:11:b7:07:
         46:d8:3b:d1:da:f1:37:1c:32:e1:d1:58:d6:f6:fa:2a:3e:7a:
         a0:5f:5d:ca:d0:2f:12:83:a4:01:0f:8b:3d:8a:e2:e2:bf:0f:
         15:f2:3a:69:4a:8b:17:c4:dd:d9:e5:37:73:8a:c1:e4:3c:ad:
         35:ed:40:57:f2:71:26:21:22:ab:1b:5d:6a:17:d6:30:45:c4:
         23:34:47:e8:c0:ce:35:17:ba:33:e6:ee:c9:6b:dc:86:fc:53:
         bf:93:1b:1b:ee:c4:a5:59:3a:3b:d6:42:5d:05:7b:c9:d7:dd:
         5f:65:de:2d:33:0b:4c:43:07:b2:db:cc:19:09:5b:6b:50:da:
         b2:1d:b6:99:65:1a:de:52:8f:5c:b0:ff:26:04:41:a8:f5:27:
         f1:f8:34:7c:1f:19:d9:95:eb:bf:7e:36:57:27:cf:fe:61:7e:
         0e:f6:56:83:91:2d:84:ea:c4:68:de:7b:03:28:24:03:47:dd:
         80:b7:32:49:ea:28:f4:56:65:2e:0a:ea:2e:08:e6:fa:0b:25:
         59:f0:7e:ba:bd:0e:6d:60:ad:a5:fb:de:21:59:e7:05:1c:59:
         49:7f:49:8d:34:e5:c7:a3:2e:14:9b:c5:da:01:84:42:c5:f4:
         c8:f4:bd:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:47 2026 by rpki-client