Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
File:                     p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json)
Hash identifier:          ZrOd7uSDwIWUPx+lysdXYX20qhlX/+z9ecw8zg1zT58=
Subject key identifier:   24:46:41:0E:23:62:E6:99:AA:73:1C:B7:2A:BE:C2:15:BC:07:3D:CB
Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3
Certificate issuer:       /CN=a7d78de0234e6f99701592f536e45f5f5594eec3
Certificate serial:       019FAAF543EF5AA0A13B20B48328647BFA9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
Manifest number:          19DB
Signing time:             Tue 28 Jul 2026 23:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:28 +0000
Files and hashes:         1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=)
                          2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=)
                          3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=)
                          4: CiXCz7OWck5adEg6z95YRceHxmU.roa (hash: EasCRjc+VBWg+tlVvV7czSSDbpGCqgxTM2n5TXY0Ipc=)
                          5: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=)
                          6: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=)
                          7: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=)
                          8: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=)
                          9: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: e4zWm/wMmvnPfAlGuMqORM7oxDLKAiLawmCS9ZwjgLw=)
                          10: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:43:ef:5a:a0:a1:3b:20:b4:83:28:64:7b:fa:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3
        Validity
            Not Before: Jul 28 23:00:28 2026 GMT
            Not After : Jul 29 23:00:28 2026 GMT
        Subject: CN=2446410e2362e699aa731cb72abec215bc073dcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ac:13:95:ee:72:8b:8a:18:90:26:da:98:da:
                    8f:5c:95:8d:45:c2:c0:d6:e3:0d:36:8f:ac:14:1d:
                    44:a8:00:10:47:4a:0b:c0:6d:8f:d4:b5:62:b1:dc:
                    30:28:26:24:1f:11:a2:cb:97:29:f4:7e:22:26:cc:
                    4d:53:b2:6a:8d:9a:89:7e:6e:ab:c8:d7:3e:ff:9b:
                    33:eb:94:ca:b5:1f:6e:30:6a:0f:7e:3f:fd:eb:fa:
                    f1:2d:5d:78:40:47:8f:19:58:dd:b3:52:8e:83:f4:
                    de:ae:a7:d2:ec:b8:34:bb:c8:7e:d7:e2:69:ad:ca:
                    e2:61:81:75:ac:78:2c:98:f0:b7:be:05:cb:6a:59:
                    7b:eb:a0:6f:7e:78:14:d2:7a:76:47:fd:11:1e:d7:
                    24:7f:72:3c:df:1b:b2:99:52:a7:a1:dc:9d:b2:fa:
                    4d:90:13:81:be:4f:9d:62:af:fc:f3:cd:bc:3d:d7:
                    32:18:26:fa:d3:d5:47:94:14:31:70:47:8e:5c:e6:
                    62:13:d8:b9:78:8e:4e:80:d8:3b:e2:80:5a:3d:33:
                    b7:e2:7e:24:f6:13:a9:62:97:f0:ec:01:37:a7:2a:
                    fd:8d:81:9d:06:bf:48:69:13:e2:a8:b3:4e:24:f6:
                    87:87:da:9e:f0:4c:fd:d9:66:47:54:0a:21:04:89:
                    ad:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:46:41:0E:23:62:E6:99:AA:73:1C:B7:2A:BE:C2:15:BC:07:3D:CB
            X509v3 Authority Key Identifier:
                keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:97:1c:cb:06:cb:07:95:4a:58:38:15:55:32:f7:a1:32:7f:
         09:fd:49:9d:9b:03:98:d7:74:c6:f4:8c:8f:72:2d:bf:2f:40:
         87:69:7f:22:f2:42:0e:64:4d:eb:72:45:dd:c7:70:7c:6f:b9:
         a8:56:a6:03:91:a6:7c:e5:21:58:6b:1f:2e:63:36:fb:a4:87:
         f1:8b:f1:80:51:97:cf:af:0d:1a:33:23:25:de:f4:4e:88:f6:
         91:80:5f:88:e6:de:d6:76:24:27:b9:2b:cf:b6:e6:3d:77:05:
         1a:7c:7c:1c:bf:20:59:f1:88:37:6a:cf:1b:88:b5:1d:63:02:
         36:58:96:3d:47:68:ad:65:ae:b7:99:f2:d9:cc:83:9d:bc:2b:
         66:a4:43:d6:db:88:7a:70:bb:b5:9a:cb:7c:3e:e2:84:14:75:
         47:84:42:65:77:af:6e:00:e4:86:5d:43:03:96:f8:c7:e3:3f:
         ac:0b:31:83:d1:7a:26:c6:0c:da:2b:2a:35:13:2c:89:f8:36:
         26:9f:6d:08:6d:97:81:fe:1a:a9:09:48:e3:c5:13:95:b2:8d:
         72:60:ba:aa:cd:2a:3d:57:91:8d:df:aa:72:53:5e:e1:b0:68:
         b5:59:45:e2:cc:cd:14:9c:33:97:81:d7:d7:ce:0b:3a:80:f8:
         65:b4:b6:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:01 2026 by rpki-client