Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
File:                     sUq6i2B0k5NHjoPDYObL110Vb4k.mft (raw, json)
Hash identifier:          tZ+t2ZxzcVTMKWcSxQfsRWkBi8ukkN9Anwr15YEG9d0=
Subject key identifier:   88:12:3A:6D:5E:6C:6A:D6:7A:21:7D:A2:C4:8B:6A:5D:78:CF:5F:04
Authority key identifier: B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89
Certificate issuer:       /CN=b14aba8b60749393478e83c360e6cbd75d156f89
Certificate serial:       019FA9AC179A5ED8EFAA755E1321014F9868
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
Manifest number:          19ED
Signing time:             Tue 28 Jul 2026 17:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:55 +0000
Files and hashes:         1: BNGsIBv7sWp2fOKlpI8C175vLlQ.roa (hash: eyM+s9WcByg+YY0/4Dp4QwuY5QeC3jXo3DV9x7QTm5Y=)
                          2: GNnihfuu4jh_yXs-M1krTDUOrlA.roa (hash: 61Jv4z0csr2COmiMGYq3MLC3cHU14wWW5cLQiVVApec=)
                          3: kCsBaUzl0VJzCqTvefgRf9Ora-Y.roa (hash: xGacFlbxros0DtBMF2AYVgiGm+bKu4KlmyADoX0xnf0=)
                          4: nqWDXagxBzxrBVWBHaYrt9rKNS8.roa (hash: 7+e+M3EfBs7lbbCHfGGIHb2Ur/53QLZjVcPqXQmzk1Y=)
                          5: sUq6i2B0k5NHjoPDYObL110Vb4k.crl (hash: +ColZE4Iq2+DG0yk9/Vv02qBtT98HtbraPBDAtDWPnA=)
                          6: yVjyK7moU749yDHM4YFWLT8BzMY.roa (hash: Qxg8YMNwND54rMep/aY9L2yiJefuWsNWVLjOpvtLiUg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:17:9a:5e:d8:ef:aa:75:5e:13:21:01:4f:98:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b14aba8b60749393478e83c360e6cbd75d156f89
        Validity
            Not Before: Jul 28 17:00:55 2026 GMT
            Not After : Jul 29 17:00:55 2026 GMT
        Subject: CN=88123a6d5e6c6ad67a217da2c48b6a5d78cf5f04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:cf:a0:b5:62:b8:29:ae:10:33:71:07:74:d4:
                    f6:9f:6d:47:a2:4c:b2:62:58:bb:e9:00:54:60:d9:
                    8e:65:6a:25:2c:a1:e5:55:09:4b:6e:18:48:77:38:
                    a8:16:13:9c:bb:09:cc:3a:0a:1f:73:78:43:69:2d:
                    eb:e6:39:0a:af:b9:77:52:d7:02:d0:f7:41:12:b2:
                    c5:2d:29:a5:7a:46:73:d8:8e:39:cd:f0:b9:26:04:
                    97:b5:54:66:c9:ab:ec:03:20:fd:24:e3:3a:88:1b:
                    2c:fd:dd:f3:87:31:8b:f1:34:ab:ad:81:96:89:f6:
                    23:9a:0b:8e:92:79:bc:01:7f:f9:96:6a:00:11:18:
                    20:63:1f:96:92:55:90:22:2a:e6:14:8c:8b:84:10:
                    f0:89:c1:b3:e2:59:63:92:74:6c:d2:fb:42:80:40:
                    2b:61:7e:45:dc:a4:63:99:d7:a6:69:c0:db:b8:ea:
                    1b:67:ae:3f:03:ec:21:45:f4:9d:cd:d1:a2:39:20:
                    bc:96:b7:36:b4:63:35:0c:5b:4a:e9:71:ba:cc:43:
                    8f:20:47:4c:f4:66:54:4c:99:d9:61:39:d8:4c:6d:
                    40:e8:70:f6:7f:ab:ec:2a:f0:a6:51:6f:b6:60:ba:
                    cd:c5:50:70:67:e1:11:84:9c:a2:22:df:c2:f4:b0:
                    67:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:12:3A:6D:5E:6C:6A:D6:7A:21:7D:A2:C4:8B:6A:5D:78:CF:5F:04
            X509v3 Authority Key Identifier:
                keyid:B1:4A:BA:8B:60:74:93:93:47:8E:83:C3:60:E6:CB:D7:5D:15:6F:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUq6i2B0k5NHjoPDYObL110Vb4k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/461685-073e-41af-9bb6-cf6c305212eb/1/sUq6i2B0k5NHjoPDYObL110Vb4k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fb:8a:be:0c:09:fb:eb:f6:b3:e1:95:74:d9:b3:fe:2a:37:
         b3:a1:b4:d1:c3:7e:bb:fc:63:45:d4:de:e6:9c:2d:20:b3:1b:
         9e:76:98:6f:af:9a:15:a4:2c:f7:1a:81:d1:99:4d:f2:2a:67:
         3c:47:6c:2b:42:36:dc:80:b5:52:40:49:b8:48:ff:6a:e4:01:
         59:d4:1a:a5:1b:cf:10:92:22:0a:db:77:31:86:64:53:1c:99:
         b7:a4:85:4e:f3:8d:aa:a3:e2:d3:cb:d7:9c:05:7f:73:8c:d2:
         b7:03:a8:f5:52:bf:cf:98:5f:e2:8d:25:2c:9b:e0:15:37:9b:
         58:f0:32:15:c6:e3:86:3a:07:5f:cb:04:0d:e0:8e:52:20:42:
         1b:de:c0:19:e5:9e:4f:3d:31:e8:aa:3c:95:1a:f3:ef:61:0f:
         2f:19:25:f8:a2:fa:e3:b6:8e:67:dc:af:49:c8:9d:d0:72:68:
         9f:e7:f2:29:28:e8:86:0e:ef:2e:ab:aa:a1:ed:8d:ae:0b:18:
         2a:90:7d:ea:03:ba:62:5a:1c:ed:6d:a4:c0:b4:2b:f9:5c:21:
         c6:51:74:a4:ac:4b:d9:4e:1d:4b:f9:d6:60:93:24:9e:b8:0e:
         e4:c5:1a:08:e2:3d:aa:a0:75:5c:af:1b:85:76:5a:91:1c:54:
         3b:32:0d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:01:54 2026 by rpki-client