Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
File:                     p_lKuTUFS4bctdatutLf21ZLUkg.mft (raw, json)
Hash identifier:          CgbcKkNYuvbPtkRwukvK743oT6pQY9WSkpo2xH5zuIs=
Subject key identifier:   71:16:08:51:7A:AD:F3:F3:67:B3:80:1D:A1:AC:CA:CD:EE:29:BF:02
Authority key identifier: A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48
Certificate issuer:       /CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
Certificate serial:       019FABD170E96E1F24B732ED603A42E64925
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
Manifest number:          19D7
Signing time:             Wed 29 Jul 2026 03:00:57 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:57 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:57 +0000
Files and hashes:         1: 1-qbRbX71ZtqzATiAIr_2cHLpT2E.roa (hash: 80UD49+4eAKYXdHmbKKPrWk/eFWzqmC9nsf2Sb2JWAc=)
                          2: OHNfoBMAU3xGnwf5tzn2G_YDSFI.roa (hash: T2noCjQvATNrV0LGWxL0yXlHH9lINoswZ6xk9SUmTdM=)
                          3: _Cx6x6OYI0AEDhlscd8HyWPxJFQ.roa (hash: Dl+MVhNB+0e5OFzfhLng21/Lw1g8tjBPug9HjFBm/XQ=)
                          4: p_lKuTUFS4bctdatutLf21ZLUkg.crl (hash: WqoZC1DS06hIMBdIlRVZNyFrprfUdaoyX2GeHFLM79E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:70:e9:6e:1f:24:b7:32:ed:60:3a:42:e6:49:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7f94ab935054b86dcb5d6adbad2dfdb564b5248
        Validity
            Not Before: Jul 29 03:00:57 2026 GMT
            Not After : Jul 30 03:00:57 2026 GMT
        Subject: CN=711608517aadf3f367b3801da1accacdee29bf02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8a:da:a1:fa:23:d2:18:2c:3e:e3:e9:e3:bc:
                    e6:4a:39:39:ee:3f:a4:52:3e:9d:35:68:4c:69:9b:
                    94:4d:80:94:cc:74:77:9e:b5:95:b8:57:11:9b:6d:
                    85:85:12:1e:48:4f:30:df:2a:8b:3d:3f:89:b2:05:
                    32:10:17:90:cb:28:d2:48:df:e7:1c:ef:7e:64:3a:
                    61:af:57:d5:86:26:5d:ee:4c:4b:f1:96:5b:5d:65:
                    c8:ed:f9:e2:70:29:71:9a:9a:d5:44:05:be:1b:72:
                    ec:32:51:35:e2:d3:50:b0:cf:07:b9:d9:1e:98:f8:
                    53:5c:b9:c7:c3:72:02:5b:eb:f5:01:54:48:dc:40:
                    62:86:1d:8d:f6:e1:0d:7c:cf:e8:d0:2b:63:fc:c6:
                    0d:10:6b:91:5b:10:81:31:9f:ff:0f:d2:ff:31:bf:
                    37:25:49:9b:94:71:45:80:60:ad:8b:13:4c:51:1e:
                    a2:44:01:3c:ac:c2:11:22:ce:ab:c8:a2:fd:b7:25:
                    9d:36:51:c1:46:83:07:7f:bb:96:65:85:d3:3c:4c:
                    2d:45:02:df:94:36:db:7f:26:27:cd:7f:6c:5e:1d:
                    56:2f:67:65:76:f3:34:3f:f0:56:6c:9b:e9:4c:12:
                    be:2f:cd:c0:c2:c8:9a:60:3d:a9:e5:4d:14:c6:84:
                    7f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:16:08:51:7A:AD:F3:F3:67:B3:80:1D:A1:AC:CA:CD:EE:29:BF:02
            X509v3 Authority Key Identifier:
                keyid:A7:F9:4A:B9:35:05:4B:86:DC:B5:D6:AD:BA:D2:DF:DB:56:4B:52:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_lKuTUFS4bctdatutLf21ZLUkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7e38b2-bec1-4464-a0ca-7d258b620169/1/p_lKuTUFS4bctdatutLf21ZLUkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:9a:e0:5d:a0:2a:08:d5:d2:31:62:8c:6a:6b:a0:24:74:0b:
         ad:94:32:8b:b2:4c:50:f6:d7:2e:fd:fb:36:c8:b3:2b:b6:7a:
         2b:d2:8c:cf:3c:f8:31:eb:10:79:c1:a1:ae:41:73:a8:a7:6e:
         6d:84:51:ba:40:88:f2:37:5a:b0:71:61:30:42:f8:4e:8d:6f:
         15:c4:6b:09:d4:6a:ce:76:79:67:c0:a8:cc:e1:4b:a2:81:bc:
         a5:57:b5:ea:e7:7e:98:4c:89:6c:cc:b0:c2:87:b9:d6:4c:f9:
         28:26:ef:e4:f6:13:b5:ea:e9:12:b8:b9:54:bb:54:a4:6c:f9:
         5c:4b:a2:f2:b8:4a:e9:46:f5:a5:e2:1f:70:80:80:86:5b:0e:
         78:25:64:e8:20:3e:79:f7:8d:92:c9:36:33:14:1f:9b:fb:fe:
         f1:2a:57:fe:17:09:3a:62:a1:7d:74:4e:0c:e5:cc:90:e8:aa:
         f2:14:c7:34:ba:4f:7d:94:0a:e5:e0:ee:87:47:76:0a:20:63:
         4c:f6:e8:46:9f:dd:86:12:5c:76:54:34:bd:e2:36:15:4e:14:
         18:9c:61:13:59:3f:65:0f:e0:7a:25:8d:a5:c1:aa:71:f2:54:
         7d:ef:2d:04:9b:b1:7f:85:8f:60:1e:95:ef:33:5c:c7:d9:a7:
         dc:68:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:40:24 2026 by rpki-client