Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
File:                     Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft (raw, json)
Hash identifier:          bSukd9EbYwoBgbFUrdG+7Q+V5idhauWtggS/MdGpvHI=
Subject key identifier:   A1:8F:38:95:A7:A6:4C:B4:CF:28:62:83:C9:62:75:84:7B:9D:09:28
Authority key identifier: 4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81
Certificate issuer:       /CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
Certificate serial:       019FAA5119D286FC007C22B8E8C9F5F1EC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
Manifest number:          0C4F
Signing time:             Tue 28 Jul 2026 20:01:09 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:09 +0000
Manifest next update:     Wed 29 Jul 2026 20:01:09 +0000
Files and hashes:         1: 5q372ZYutsCUz8Adh42BDHyk-Q4.roa (hash: BchsU4eLHUNLVQAhgzCwXDrK//3ZZPqmg8lTLv3tS4U=)
                          2: NLcVYv7QX8TzU3KtiBGBznThjOY.roa (hash: zcrKX9GnGSrAQghL6HOZ1jKtZzfy7mUWqAXuCLC1AoU=)
                          3: Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl (hash: xXSl4oYJ9sCuZ82EK9P4fam09DMbb+VXfo8z7OIjKNA=)
                          4: _7dkRJNdgno_GD2ibO_640can6k.roa (hash: HOjekM8lbibDsKXgP8G+mm2S14ox7PoL8Qm4nXTQM8A=)
                          5: k7kKv6wuSKhleW2ZaqCRlyTOnqg.roa (hash: vHAo540aOlLXcMUBuG2BeP/L+cRzc7W2l6L3IJqazT4=)
                          6: npKzb3PFUxX4Bw57jliQikbaLcw.roa (hash: M9IdE7WGGhfZFQSXJAA+dif3VflTqRbAIN9CrkGm2Uw=)
                          7: pvc-B_3QixFPowWlmBysdManies.roa (hash: smzWblNFTzaELYi0qGSnhdt1o2cjyEz4ffgvHQy8gQY=)
                          8: uBQJIWL215Slh10pYtC2hfOmW6E.roa (hash: Fz8wa9yReSoXHDz0VQB6kGJWo8LpEP+Z66cA5kA041o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:51:19:d2:86:fc:00:7c:22:b8:e8:c9:f5:f1:ec:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f2d30b015ec4ef1b0d3c64347c8d1b598293f81
        Validity
            Not Before: Jul 28 20:01:09 2026 GMT
            Not After : Jul 29 20:01:09 2026 GMT
        Subject: CN=a18f3895a7a64cb4cf286283c96275847b9d0928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:4e:04:67:31:d1:97:2f:c7:6f:18:1f:23:af:
                    61:9c:86:c6:ff:69:1b:0f:c6:81:17:95:be:7f:f4:
                    8e:9b:39:a2:43:a3:bb:52:39:1c:db:52:f8:21:71:
                    81:37:ad:e0:56:94:8b:8f:13:a3:0b:c8:9b:2d:00:
                    68:58:b7:3a:bb:d1:32:d8:2c:b6:b7:48:dc:19:73:
                    26:66:a3:94:8e:34:8f:00:6b:c0:c7:f9:a8:a8:e1:
                    8d:a7:54:af:ef:4d:b8:ac:5f:7b:dc:63:60:25:79:
                    fc:ae:d1:a9:22:46:65:04:b1:f9:d0:bd:82:6a:dd:
                    23:b2:a8:3c:1f:8b:49:65:86:a0:28:0c:97:4c:31:
                    f8:03:ac:26:3c:32:f8:fc:69:60:05:48:87:dd:8d:
                    90:e8:a7:68:84:e7:30:7f:7c:6b:1c:81:da:96:b5:
                    c7:cb:31:f8:99:50:36:b0:a9:3e:a1:6b:09:17:11:
                    99:51:6f:12:ff:f7:1f:a6:23:26:8d:ce:ca:d7:67:
                    50:f2:ac:09:a5:73:be:32:88:c1:03:61:8c:6f:61:
                    64:d7:62:c5:38:6e:84:81:61:a0:41:e2:31:9b:e5:
                    d5:30:4c:41:9e:ea:9b:b3:23:67:60:c9:62:17:d7:
                    2a:d2:ff:8c:46:73:2e:b5:55:2d:1d:9b:d7:97:85:
                    e0:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:8F:38:95:A7:A6:4C:B4:CF:28:62:83:C9:62:75:84:7B:9D:09:28
            X509v3 Authority Key Identifier:
                keyid:4F:2D:30:B0:15:EC:4E:F1:B0:D3:C6:43:47:C8:D1:B5:98:29:3F:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/9668b5-5e92-4c18-9bb9-4351bbf74c0c/1/Ty0wsBXsTvGw08ZDR8jRtZgpP4E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:bc:73:29:05:0f:09:dc:37:33:d9:4d:fd:2e:17:7c:6c:e2:
         09:af:46:f2:d7:34:1d:32:2d:3a:20:5f:b8:87:e9:fe:87:c4:
         81:65:fd:c7:78:a8:c4:02:45:52:6e:2c:ca:29:76:50:51:09:
         97:6b:d0:66:89:17:0c:b3:c7:df:f2:31:59:0c:96:df:ec:67:
         dc:ba:22:8e:bb:46:d4:f1:83:08:61:0b:57:0e:9b:a3:97:98:
         31:96:78:25:ff:fa:86:35:15:45:c2:fb:81:61:02:2e:78:0c:
         90:49:bd:7c:8f:21:39:1a:39:82:4f:0d:4f:90:b7:42:5e:09:
         19:bf:04:08:dd:e1:b0:67:d2:89:bd:0a:1e:af:e1:48:ca:08:
         8c:13:14:12:15:17:a7:67:4d:67:27:96:26:50:82:20:b9:36:
         b8:21:7a:1b:ae:24:94:f8:4f:a4:79:48:ed:13:c6:38:ad:e9:
         82:26:bf:8a:4c:51:e8:56:b3:2f:16:cc:78:a8:af:93:0c:77:
         1e:12:98:ad:39:d4:83:34:96:3f:65:9f:62:6e:41:10:c8:96:
         45:bf:f5:61:a6:7d:74:9d:4d:dc:00:cf:b9:ee:73:10:fd:fe:
         96:28:92:8c:9b:7d:3a:0c:2c:ac:f9:99:2d:06:28:12:b2:bd:
         65:90:5e:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:53:18 2026 by rpki-client