Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
File:                     1-RqCIwAuMSTluwboLU9go3m5Pc0.mft (raw, json)
Hash identifier:          GzjL7MMUkFMHWfom0V9Yj+bgDTNlprS6PYFhb2yJflw=
Subject key identifier:   2B:35:F0:71:7F:C0:B6:47:C3:A3:56:A7:29:FF:12:E9:F8:02:11:36
Authority key identifier: F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD
Certificate issuer:       /CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
Certificate serial:       019FA899D26A913F0CD35CA5A80990BC552C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
Manifest number:          1484
Signing time:             Tue 28 Jul 2026 12:01:20 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:20 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:20 +0000
Files and hashes:         1: 1-RqCIwAuMSTluwboLU9go3m5Pc0.crl (hash: RNTd7IqlP+Q1hCGJBZyy1fPQpo54TUIsCnIAeKuCbxw=)
                          2: ysWkHcC4m8dES9G1oMzcknx5ywc.roa (hash: XtvZJNZbz5U46btMQCpXBJcIu+lpBGoaLYth/6jGpzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:d2:6a:91:3f:0c:d3:5c:a5:a8:09:90:bc:55:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f91a8223002e3124e5bb06e82d4f60a379b93dcd
        Validity
            Not Before: Jul 28 12:01:20 2026 GMT
            Not After : Jul 29 12:01:20 2026 GMT
        Subject: CN=2b35f0717fc0b647c3a356a729ff12e9f8021136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5c:eb:75:5b:14:27:c2:99:1a:b0:c4:c7:8e:
                    f8:ec:99:b4:08:18:ce:d5:ef:6d:4f:8e:7a:23:94:
                    1e:96:e1:24:fa:7d:2a:d6:ca:8e:00:52:62:92:12:
                    b2:34:a7:de:f3:07:cb:5b:bb:2d:09:c4:a5:31:84:
                    fe:bd:e8:20:22:2d:c9:f8:d7:88:43:8e:60:ac:75:
                    f8:df:02:94:fb:72:a7:00:cb:fd:29:b5:a0:c9:a2:
                    ea:ca:2b:0c:b9:e6:2d:18:80:ff:14:43:f6:bf:6f:
                    9b:ec:2a:37:06:8c:f8:a0:ea:65:b2:34:69:f7:ac:
                    04:72:e2:98:6c:cb:43:30:fb:8e:54:06:e6:4d:70:
                    6f:ed:6e:46:7b:8e:0c:81:57:1b:9b:b6:d2:9c:ad:
                    79:e7:18:a1:60:1a:ed:02:72:64:21:7e:81:54:37:
                    9d:95:13:15:13:d2:c1:bc:d4:20:13:a7:7f:b7:78:
                    b2:f8:d5:5a:91:f5:23:50:e5:f2:be:04:01:03:8c:
                    6d:3f:be:10:24:1e:48:06:60:11:8f:38:56:e2:05:
                    22:21:8d:ac:22:b9:33:16:6f:76:e9:51:26:bb:f5:
                    e2:fc:9d:ca:b5:92:a1:8e:27:5e:cc:2f:0a:29:82:
                    e2:e7:f3:84:fd:8c:51:f4:b2:6a:e8:29:95:a7:63:
                    44:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:35:F0:71:7F:C0:B6:47:C3:A3:56:A7:29:FF:12:E9:F8:02:11:36
            X509v3 Authority Key Identifier:
                keyid:F9:1A:82:23:00:2E:31:24:E5:BB:06:E8:2D:4F:60:A3:79:B9:3D:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RqCIwAuMSTluwboLU9go3m5Pc0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/943732-9621-4a42-87da-b2de3ebf3e7e/1/1-RqCIwAuMSTluwboLU9go3m5Pc0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:16:a7:c3:f3:92:c0:e4:63:54:4b:b0:6b:29:f1:95:8e:fc:
         89:6d:3a:a1:8e:2c:d4:dd:36:56:30:e6:bd:27:84:f5:46:81:
         8d:31:df:42:4f:05:0b:86:00:80:95:47:b0:f5:a0:0f:7f:21:
         e6:fa:89:84:b2:35:f1:e9:ef:5b:50:c7:f1:ea:9b:3f:38:13:
         ec:1d:ec:bd:3f:db:6a:9e:78:50:ef:2d:74:06:12:93:9e:03:
         dc:69:90:ff:94:7f:bf:ef:2a:61:38:4e:a1:29:84:db:b8:60:
         3f:ce:36:5d:b1:32:ba:59:d0:7a:95:8e:30:e3:ab:52:c4:d6:
         dd:73:ba:ae:51:fe:dd:a8:dc:f1:aa:21:03:19:fa:9d:05:04:
         00:aa:84:ed:ba:c1:c5:7e:f4:88:ee:03:1d:9f:81:b9:1d:a3:
         f4:4b:d9:8e:81:ff:ad:67:7d:7a:1d:44:4a:ee:23:16:e8:61:
         b1:f7:ac:bc:fd:e1:09:cc:6f:ad:94:a0:b8:66:bd:55:24:94:
         03:a2:36:19:8c:e4:fe:60:dc:07:c5:5e:8b:f2:46:f1:4a:eb:
         21:c6:2b:5d:3f:2b:31:35:41:3f:50:5b:56:9b:3f:72:5f:a2:
         ce:b4:f1:87:bf:95:03:72:a5:d9:14:9b:3b:71:11:21:47:b0:
         e0:ec:80:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:10 2026 by rpki-client