Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File:                     fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier:          tcF/sr3QQ2O5GzPnI+Lmdt9eSCghDUUWa3elHZb1V3w=
Subject key identifier:   62:A2:3C:B4:74:16:EF:EA:2B:CF:9D:C2:D1:0E:81:0D:27:B7:E4:57
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer:       /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial:       019FACE3E222A3F8161D14ACBA0C7DB01E1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number:          19DC
Signing time:             Wed 29 Jul 2026 08:00:43 +0000
Manifest this update:     Wed 29 Jul 2026 08:00:43 +0000
Manifest next update:     Thu 30 Jul 2026 08:00:43 +0000
Files and hashes:         1: Jdd-cmX87aL_jT8gx7H2pzeD9rg.roa (hash: rEF/W/6Z+pZc6KaImTNeG/JyJNxyLCm8rc9VcoK/X0o=)
                          2: RXhERJYF9F3xyAQUzqPLF6e3zPE.asa (hash: +udagM0kkzwnlijwfgUtOgl4NvTaL2YpS35XybC3JA4=)
                          3: Vcs9QSjV2KVE3rPf-2ljsZO4_Q8.asa (hash: yoP5UGd9Isi8iSG9JXG0GRxBp5+VrDnOmOlRk93yWB4=)
                          4: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: kWJ6l0KyiM0Z/HdDMTspitcsiwILRF10jvEQioBGK/E=)
                          5: gFOjbWB7I_w-vrenN-Bunfa99k4.roa (hash: jwgceh/3ITVpquNuTB6w5OIjCduknP3STqxn7Za9hOo=)
                          6: qICYlqQKnUp69sPFBkSudA-GEjQ.roa (hash: lj3RVVuEbPd9/CqRy/WnF37Zb0OlvVGPlQOnHzEZNs8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:e3:e2:22:a3:f8:16:1d:14:ac:ba:0c:7d:b0:1e:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
        Validity
            Not Before: Jul 29 08:00:43 2026 GMT
            Not After : Jul 30 08:00:43 2026 GMT
        Subject: CN=62a23cb47416efea2bcf9dc2d10e810d27b7e457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:32:67:60:96:59:00:be:5b:6e:97:9c:11:
                    f8:2c:bf:87:b6:9f:92:9a:ab:a4:26:4a:bd:f0:88:
                    bb:c5:75:73:c5:f3:99:9e:4c:93:78:dc:4d:41:a5:
                    94:de:70:bd:29:33:4f:55:c8:91:9d:ed:5f:b9:2e:
                    21:2e:63:cd:b7:54:9b:cc:3e:87:aa:83:9c:eb:ad:
                    a1:91:bf:67:a9:9c:6c:a8:57:42:b2:b8:de:a9:db:
                    92:26:d3:aa:d6:7d:d3:76:7c:60:b3:3b:c1:53:79:
                    73:41:3d:26:49:5f:46:59:15:ac:b8:68:de:fa:13:
                    14:9d:e1:67:30:18:db:01:6f:e7:b0:b2:ec:8c:37:
                    cb:7a:cf:5c:f8:fa:ad:9e:06:90:6b:55:35:3c:a0:
                    71:4d:42:48:7d:37:8b:b5:c4:6e:74:53:1d:ec:aa:
                    71:7c:3b:fa:91:b9:77:41:6b:f1:1a:b1:37:86:11:
                    ab:61:25:9e:35:ef:c4:c2:57:72:e1:3e:88:be:19:
                    22:b9:ca:52:24:b3:ca:ea:53:d7:57:a8:4a:57:ba:
                    b2:a0:6e:48:47:a8:6e:9a:e3:92:f8:f0:5c:f6:ec:
                    4c:3b:fe:1b:ef:e1:0e:ee:ea:fe:e1:3f:54:92:4e:
                    23:66:9f:1d:bd:af:c4:5b:d3:91:7b:2b:0d:5a:2d:
                    65:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:3C:B4:74:16:EF:EA:2B:CF:9D:C2:D1:0E:81:0D:27:B7:E4:57
            X509v3 Authority Key Identifier:
                keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:f6:4a:06:2d:0f:39:cb:7d:84:b1:79:24:c2:e0:d8:9b:72:
         5f:1a:e2:9a:94:bc:6a:59:0e:f9:bd:de:3b:cd:88:08:d2:69:
         2a:de:3c:b1:42:b2:e6:04:62:71:6b:14:f9:51:43:30:e0:86:
         5c:d5:08:ff:92:f8:16:30:02:b1:82:6c:0e:c8:31:8f:44:90:
         fe:6e:4d:b0:28:c6:04:77:25:31:1f:80:5a:e4:7f:2e:d2:5b:
         03:dc:29:04:ea:1d:50:d9:8a:19:4b:d4:95:f0:20:6d:6a:cb:
         d6:87:e2:86:19:7a:6b:72:fc:27:67:4b:55:dd:42:c3:6b:e5:
         c9:f0:b2:b9:8d:6c:0d:4f:9a:0f:00:5b:d5:8a:31:df:87:8b:
         80:13:42:a0:4f:e0:fa:b8:d6:8b:c7:e5:59:de:34:2a:64:f5:
         0c:13:b0:17:14:b0:14:5b:f7:29:a6:ed:75:6e:7d:16:e8:3c:
         eb:d7:e5:90:55:35:9c:f8:9c:c1:56:92:94:51:8c:4f:fe:82:
         8b:e6:a2:f8:81:64:c8:6a:98:89:68:3a:3a:6d:87:7f:14:03:
         47:60:50:98:a1:0a:4e:ef:97:c3:3f:4d:c7:7a:72:04:3e:f8:
         af:4d:d9:03:b3:d9:cd:7d:d6:f8:fc:04:e7:ae:b7:91:50:96:
         82:1b:76:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:44:10 2026 by rpki-client