Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
File:                     0sKw7hh5KECQZdGe6cCFjowX6hM.mft (raw, json)
Hash identifier:          XZj00qN7ryCK5ZKWTyC3GmTrIzhOfc1AAjW+fk8uvBI=
Subject key identifier:   46:6A:AD:47:F1:B0:82:59:44:ED:0C:07:22:6D:B8:91:B6:CC:72:E1
Authority key identifier: D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13
Certificate issuer:       /CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
Certificate serial:       019FA93E13F34F58AED1AA4901DCFD1CBDD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 15:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:45 +0000
Files and hashes:         1: 0sKw7hh5KECQZdGe6cCFjowX6hM.crl (hash: FKYYmbngfttilFactN1z6YbJcC5Iy/8RtvHddZOjnZ4=)
                          2: Yd0ISItT25nHU31sDdFobBWtukM.roa (hash: BpfqZXiuQQu7xNd4WIEYwPFlxLRUFTvBsSR5u9ClQwA=)
                          3: _73P6T6R3O1x9vvtr2p4XPdIlxo.roa (hash: LQcRZBmXpQKqNcm08uPyPyuOJz2qTqd9JQZhTsJFO+g=)
                          4: cZX-vXoSkiVX1DDpE2stQryxES0.roa (hash: DZ4toH+8MBJm3/Ie0kvOYB9O/Ot8hRGuCx70ecPDboc=)
                          5: eoJQmOi00RtisYT69k2lcfpvuTI.roa (hash: zyn9MIC0PYdNEQ/1NTEkC1cOqVRsDhiTSo2jAFn7xpI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:13:f3:4f:58:ae:d1:aa:49:01:dc:fd:1c:bd:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c2b0ee187928409065d19ee9c0858e8c17ea13
        Validity
            Not Before: Jul 28 15:00:45 2026 GMT
            Not After : Jul 29 15:00:45 2026 GMT
        Subject: CN=466aad47f1b0825944ed0c07226db891b6cc72e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:07:c6:a3:28:d2:0d:0b:73:33:ce:ec:72:40:
                    5a:b5:1f:c1:8a:53:14:e8:76:e1:4f:f4:65:df:1c:
                    4f:c6:cf:8a:08:da:e5:e1:d4:42:dc:86:9a:48:0a:
                    a2:b2:93:0d:c5:26:72:ee:36:96:ef:f1:d4:39:1c:
                    d6:e9:be:e4:fa:3f:db:a2:90:a7:de:1d:1f:8a:4f:
                    9e:cf:c8:af:93:a5:03:66:14:de:21:49:9f:37:f5:
                    e1:05:b2:8e:9d:bf:59:15:5d:3a:b4:56:37:68:ad:
                    11:db:82:a1:bb:0b:7f:dc:b2:9a:37:49:8b:e1:3c:
                    85:53:44:bb:76:e1:12:44:5d:79:89:f0:a9:c0:d7:
                    3e:a2:7d:5a:7d:17:55:cf:e1:f0:dd:8a:9d:a4:6e:
                    d6:30:00:11:05:ef:87:23:60:2e:47:6d:6c:f0:ef:
                    ab:fa:72:40:fc:14:b9:d8:1c:42:b6:d7:26:09:12:
                    90:d4:8e:c9:24:f1:9b:00:13:ab:f2:71:9c:bb:a2:
                    ac:5c:97:0e:73:f8:57:b3:76:35:56:1b:ba:84:f2:
                    40:19:29:c4:2c:b7:d1:28:29:79:93:71:d4:2a:a1:
                    ea:a2:a4:c4:08:20:54:1f:c5:6f:7c:4f:f6:30:11:
                    dc:48:b8:bc:1a:b7:01:ec:cb:7a:b3:90:fd:fc:97:
                    81:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:6A:AD:47:F1:B0:82:59:44:ED:0C:07:22:6D:B8:91:B6:CC:72:E1
            X509v3 Authority Key Identifier:
                keyid:D2:C2:B0:EE:18:79:28:40:90:65:D1:9E:E9:C0:85:8E:8C:17:EA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sKw7hh5KECQZdGe6cCFjowX6hM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/abac14-6eab-4985-867a-c8e863c1a8d1/1/0sKw7hh5KECQZdGe6cCFjowX6hM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:e8:78:37:77:c6:88:7f:8f:0b:3b:b2:dc:37:e4:12:a8:db:
         cb:d9:65:37:c8:69:3d:55:ba:38:ff:6e:3d:73:81:d6:5c:af:
         11:5b:32:36:95:eb:63:db:2d:36:bb:84:cf:96:d5:22:bf:ff:
         4f:25:74:90:b5:03:fa:86:29:0e:11:83:fa:e4:36:5e:83:4d:
         51:65:51:a1:f5:49:ce:3e:a4:7f:eb:79:f2:b4:93:9d:23:f1:
         e4:78:be:78:a0:a4:cd:27:e7:2f:38:b4:ea:5d:ed:18:af:c9:
         6f:04:b3:dd:05:e7:bb:be:ca:c0:55:b9:0a:3d:35:8a:c4:89:
         7f:fd:a1:3e:51:9f:3d:ff:1c:e1:10:52:7b:4c:02:3d:e8:0c:
         a3:5c:59:1a:68:67:3d:96:3a:96:eb:90:bb:a1:d6:7d:b9:a1:
         ea:e5:32:74:9c:ba:ea:2e:99:0e:cb:78:34:5a:d1:46:2c:82:
         46:68:de:6d:f0:c8:45:1c:ca:d6:e1:9d:4f:42:2d:4f:17:af:
         88:36:9e:f6:0c:38:57:01:ab:b7:52:5e:27:4f:28:11:bb:82:
         c2:be:98:28:d7:37:b8:1f:da:41:ba:8c:7f:29:80:53:ea:e9:
         3e:96:90:d9:75:37:d4:9a:3d:ea:fe:50:58:01:56:5f:65:0c:
         46:a3:0b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:49 2026 by rpki-client