Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
File:                     ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft (raw, json)
Hash identifier:          WCHflQkjk8SLslY0hWF96F4gkLBHEZiZT7MMy55LqVw=
Subject key identifier:   19:F7:28:AA:0D:C2:04:6E:AA:BE:B5:83:FD:86:62:A1:AB:7F:42:DE
Authority key identifier: 01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68
Certificate issuer:       /CN=011ccd009b2a6eabc5418574b637c6c402219c68
Certificate serial:       019FA89A078BA7144670B104694A8ED94CE6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:34 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:34 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:34 +0000
Files and hashes:         1: 1C1T-Cyq8mgFHUK4lOr9J9p2o8Q.roa (hash: 9d+iz6B4Z4xX5mHQ4/EpfJi09w1cOsmeX27jGLacUQg=)
                          2: ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl (hash: NYFHgnukjS2dvdA4pBXc6MDk+jz8x9QdTzSZOdi4Xlc=)
                          3: JgyHfDa-F26mJBen_nZoWt6VcN0.roa (hash: ka95gjqbnp5vTxYoWFPFDU7HoiwfqxAnl9QDgNI170A=)
                          4: KaDCW-vC8OxSYgmvnlwc2RGGcso.roa (hash: Gw4saiquCFr7/vJ07qJKsW4oGWHTcwpcNkMJOpqv4XE=)
                          5: L-mOuZ8QI7UU1nUFmDP22HfR9Ow.roa (hash: 7Al0u5Q3YV7dlLeAcQ+RUgnxhwI9m0WFEsG/SLzqm0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:07:8b:a7:14:46:70:b1:04:69:4a:8e:d9:4c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011ccd009b2a6eabc5418574b637c6c402219c68
        Validity
            Not Before: Jul 28 12:01:34 2026 GMT
            Not After : Jul 29 12:01:34 2026 GMT
        Subject: CN=19f728aa0dc2046eaabeb583fd8662a1ab7f42de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f1:b9:62:5e:60:f9:99:50:52:c7:c1:f7:b7:
                    aa:9f:f5:a7:6c:a3:1a:be:10:3c:24:08:84:94:7b:
                    fc:9a:a1:42:78:8c:80:f5:a0:cb:f0:eb:b5:fa:9d:
                    22:25:01:d9:e1:13:d4:1d:56:83:f0:85:46:da:39:
                    b0:14:20:8a:f6:0c:52:33:60:1c:c4:71:87:69:6f:
                    52:f4:68:c8:fc:a3:b0:b7:14:f1:b4:16:3a:b2:40:
                    99:21:c3:3d:82:48:ec:f5:ec:9c:c5:83:18:65:ec:
                    3b:43:fb:46:27:e7:63:57:22:78:cd:27:2b:fd:86:
                    f5:47:2c:27:1f:bc:0c:1f:08:1c:56:d3:fb:bb:d6:
                    25:4f:f6:e3:ee:1d:53:be:e9:af:2d:9e:a8:8c:6e:
                    cb:31:3c:ff:a5:2f:91:67:c3:de:b0:00:6d:47:40:
                    98:a8:c3:f9:85:de:2a:68:cb:65:e3:5e:bc:68:b0:
                    ed:e7:9f:82:6a:88:7e:c5:c2:2a:3e:6b:34:fd:0f:
                    a4:06:70:34:e5:d5:26:b4:d6:dd:d9:e5:9c:fd:84:
                    30:de:87:fe:35:3e:24:38:0f:2b:c7:7d:ca:95:f2:
                    d6:9c:bc:f5:1f:e5:e5:90:44:dc:66:0b:81:79:4b:
                    81:2c:d4:54:70:be:fb:e0:37:34:90:18:78:3a:d6:
                    00:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:F7:28:AA:0D:C2:04:6E:AA:BE:B5:83:FD:86:62:A1:AB:7F:42:DE
            X509v3 Authority Key Identifier:
                keyid:01:1C:CD:00:9B:2A:6E:AB:C5:41:85:74:B6:37:C6:C4:02:21:9C:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ARzNAJsqbqvFQYV0tjfGxAIhnGg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/c1765b-e3a5-410c-9cd3-6ca340fa7493/1/ARzNAJsqbqvFQYV0tjfGxAIhnGg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:c0:c7:d7:80:07:37:76:88:17:19:e5:b9:38:35:6b:a3:18:
         37:20:e3:ae:86:4d:aa:f4:75:54:32:00:f4:0f:37:dc:6b:e0:
         10:6e:97:c5:9e:c3:26:37:e4:34:0c:58:c4:97:3b:a2:cd:1c:
         82:69:35:8f:97:44:f7:f0:d8:ce:49:1d:4f:0f:c5:36:4c:aa:
         cb:d2:9a:d9:fe:e5:0a:1b:c7:4b:72:4b:fa:c9:7d:fd:37:0e:
         9b:0f:99:db:b9:29:54:c7:d1:e6:47:fc:c3:ef:28:0c:ae:82:
         98:2f:27:72:56:d3:a1:b3:5e:75:bf:c1:ad:d1:9b:b8:56:fc:
         b9:50:8d:67:f3:5a:fa:36:e6:aa:63:b8:22:1f:80:e8:7c:d4:
         16:84:a4:f6:33:49:ee:64:88:7b:22:97:99:c1:1a:44:24:b6:
         b0:22:ff:0c:c4:d9:04:33:61:d4:98:3a:a5:ca:a1:03:f6:f1:
         5b:db:ad:0a:d3:6b:31:f6:e6:56:3f:ad:7c:9a:9a:87:9f:a4:
         dd:68:2e:cc:ce:90:fb:be:ac:04:e1:b7:41:7f:18:2b:42:b5:
         df:a4:96:d8:d3:77:bd:12:39:43:af:9b:65:d3:40:e7:93:4a:
         df:ef:c5:a2:9b:ea:ea:d6:1f:bf:05:91:a7:96:5b:c0:62:6f:
         c0:2b:86:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:04:07 2026 by rpki-client