Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
File:                     1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft (raw, json)
Hash identifier:          US/Dx6qiYjz2DEf9Xj6+UExU3ynEQImIlgVsUsbJv68=
Subject key identifier:   E0:5F:8D:AE:B9:87:9F:06:1F:36:6D:5B:FB:1F:EE:5A:9A:D0:39:68
Authority key identifier: F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2
Certificate issuer:       /CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
Certificate serial:       019FA9AB856198C361C2BB4887B64AE453DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
Manifest number:          19DF
Signing time:             Tue 28 Jul 2026 17:00:17 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:17 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:17 +0000
Files and hashes:         1: 1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl (hash: KVugkBn83+0ihALcvjW5QVcOmK3jDmGBTsWe9xIMLoI=)
                          2: 40tYHzrdIOKM0_j4QKh_7shzx8k.roa (hash: SKNQQTkqDQxf7nvw2qRuH0Vq4RF5cs3xZPCOte7W/OA=)
                          3: QNpprllplAM88mMrWtN3ag177fE.roa (hash: 5dP2zjfT0bTz8XtRVCAWieBHqUYv0AqhPnTwXU8eFn4=)
                          4: Ss-pxg7MCUnATOQpuT8Jh8a6KnM.roa (hash: kmr+HuErFhNT7cviIumckQWDHYCPiWsB0llSSAYvKio=)
                          5: dkTEhcSUjmDmfcgVaKjPvVY65ho.roa (hash: CEmoGVLgn+ZeP+7mTHI7wWOP1MgXpbR4Ij+5W74s23I=)
                          6: fXSStTtN6IqbqkCD3E5j3kC-YHI.roa (hash: zVgHJh9lJVijMpBB+dDgMK+AGLHEUW+Je1xWignFzIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:85:61:98:c3:61:c2:bb:48:87:b6:4a:e4:53:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8857ecf441e5ea1d7181fec7e97e6dbc1220fc2
        Validity
            Not Before: Jul 28 17:00:17 2026 GMT
            Not After : Jul 29 17:00:17 2026 GMT
        Subject: CN=e05f8daeb9879f061f366d5bfb1fee5a9ad03968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c8:e5:b2:b3:c9:9c:ee:ad:3a:85:c4:46:03:
                    4f:b6:a2:ff:0b:dc:88:fb:4e:11:ca:80:89:08:a4:
                    2a:c4:3a:ff:64:6a:a2:77:6a:39:df:d7:02:c5:79:
                    82:2c:01:fb:b0:08:fa:1f:35:82:4a:be:31:da:0a:
                    fd:8e:fd:98:3a:ad:41:75:f6:65:f3:d4:d6:1c:54:
                    f3:e2:e2:2f:dd:5b:44:9f:50:b7:e7:a8:9d:f7:cf:
                    2d:9f:f9:ef:ab:81:41:39:bb:dc:50:6b:90:eb:c6:
                    e6:89:52:46:03:7f:eb:16:b6:3d:81:13:e8:95:3f:
                    59:5f:eb:43:82:30:8c:89:65:6e:43:d0:3a:2b:06:
                    3b:68:66:7c:99:28:2f:4f:dc:df:08:ee:13:28:00:
                    85:ed:d9:0e:68:37:1c:71:22:63:08:43:8f:60:f2:
                    59:6c:8d:1b:2a:d7:ab:1d:17:bd:21:09:94:9e:da:
                    89:b7:ad:8b:24:da:2e:9d:ca:62:c8:c8:94:f9:65:
                    25:81:1c:bb:07:43:4f:92:45:41:38:3c:9b:1c:45:
                    07:60:f1:34:54:ed:b7:45:a6:8e:69:5c:28:b7:31:
                    17:db:49:08:ce:1a:72:b5:c6:2a:14:a3:5d:a0:5f:
                    20:28:a2:77:7e:6b:52:e3:da:b8:c9:04:1e:2d:22:
                    24:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:5F:8D:AE:B9:87:9F:06:1F:36:6D:5B:FB:1F:EE:5A:9A:D0:39:68
            X509v3 Authority Key Identifier:
                keyid:F8:85:7E:CF:44:1E:5E:A1:D7:18:1F:EC:7E:97:E6:DB:C1:22:0F:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-IV-z0QeXqHXGB_sfpfm28EiD8I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/c84976-d5ea-4e7f-8ed3-a89f81776406/1/1-IV-z0QeXqHXGB_sfpfm28EiD8I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:5a:85:3f:63:ac:c8:8f:73:03:4d:e5:a4:f8:cc:cf:8e:c8:
         17:24:3f:7f:21:2b:07:60:cc:7f:e7:21:c0:e4:e4:a4:ea:6b:
         52:4d:a8:ad:e8:d6:e9:98:93:38:12:e4:c0:50:6e:71:e5:c4:
         ad:3d:17:e0:c0:a0:f2:5c:d3:b7:86:75:d3:8e:08:d7:f6:f6:
         39:35:5c:0c:e3:09:b7:80:f4:b9:e8:d6:41:0b:b9:ec:fd:68:
         a5:c9:dc:84:ba:59:8f:df:91:3a:5c:e2:53:51:73:82:ab:68:
         fb:64:83:fc:6f:9b:63:d9:15:5f:dd:62:cd:f5:7d:80:4b:60:
         16:64:d2:ae:b8:8e:95:65:9c:7f:96:94:81:60:59:8e:6d:7a:
         ff:e5:8a:9c:2e:1e:ea:42:7b:2e:26:01:04:17:b4:c8:d2:c6:
         97:25:00:14:f0:74:ed:bc:b5:82:44:15:9a:29:0d:d5:bc:19:
         93:c4:4c:c5:32:fa:79:89:84:03:e0:d9:6b:98:4e:b2:77:e8:
         06:58:c0:c4:06:6c:da:94:de:74:f5:65:6e:eb:4e:e8:54:e6:
         c0:bd:22:98:01:88:26:6d:76:11:61:4d:ad:c0:11:72:f4:4f:
         c9:13:fe:e2:c6:fb:c2:2d:87:c5:2c:80:26:80:6d:89:a8:95:
         92:7a:07:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:57:15 2026 by rpki-client