Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
File:                     sSZ6Uay2bymRvqUkP-OIBolxofE.mft (raw, json)
Hash identifier:          8WK7OVK88Yi0b7hTA3vz+GluFCFA1FpPSogzPsI/JuY=
Subject key identifier:   7F:37:49:AC:DF:93:E7:CF:10:82:B8:96:A5:7B:33:A6:14:FB:17:C2
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Certificate issuer:       /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial:       019FACAD24611C6950AD074DAC1F2DAD77A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
Manifest number:          19DE
Signing time:             Wed 29 Jul 2026 07:00:55 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:55 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:55 +0000
Files and hashes:         1: 23A1M_7D38Nasymq2osByPDI5cA.roa (hash: wp6SoUXMRZMv8bCbA5J4Lo7L/L66QrTkl3U2sJg5Tss=)
                          2: 7tRxzOjQ9HlU-8n_YoQ9S2kmRLc.roa (hash: VZLOnCAersGhWtsmb7R0s5AlGZFScIm4sdJlK/A7tN8=)
                          3: eAGo7tcphLVCScj4mWyqTWB40DE.roa (hash: vUYrbB3y1Fed1n+d3yU4y69AsjIYo8MsiwphvcU79ek=)
                          4: kORyH1zk4kpVVZcN-RFEOaPpCYQ.roa (hash: eM3a4CHDiPxCoPRiTlT4LzKEhGGZUAXh/d8bAjKFKxA=)
                          5: sP8B78WvrO-I9FMOKnP4eLOTxh8.roa (hash: j0/QkDqzGm9cKi69XdtrTTNVhk9moQxAiYICzefknS8=)
                          6: sSZ6Uay2bymRvqUkP-OIBolxofE.crl (hash: 9yWrd2lly1tTbi32xvlBgLyDjIpRqEBJBYSHGEU68HQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:24:61:1c:69:50:ad:07:4d:ac:1f:2d:ad:77:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
        Validity
            Not Before: Jul 29 07:00:55 2026 GMT
            Not After : Jul 30 07:00:55 2026 GMT
        Subject: CN=7f3749acdf93e7cf1082b896a57b33a614fb17c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:50:a7:b6:25:ac:ec:44:80:24:ca:fd:48:40:
                    88:3c:0b:75:ec:16:ea:93:94:7b:88:7b:53:bf:5e:
                    ba:c0:42:76:c0:f6:6e:58:88:07:d5:84:57:f6:9c:
                    64:bd:c7:6b:a3:ba:a2:6d:e8:bd:0f:4b:cd:46:6a:
                    0b:2d:76:2a:f5:0d:87:13:7a:53:f7:47:94:19:91:
                    d2:16:15:1f:a8:78:86:89:cc:81:36:da:78:e1:46:
                    23:ac:27:74:e9:65:93:35:1d:f3:42:62:e0:2a:b4:
                    e7:17:42:ce:78:00:6f:9c:2d:a7:83:b8:59:ae:69:
                    c6:0a:23:09:27:99:ab:a0:e4:a0:09:18:7c:52:41:
                    1f:3a:ed:69:5b:d2:99:2a:ae:d0:e1:76:66:87:10:
                    f9:07:e0:67:70:5d:cd:24:ea:28:86:df:07:02:ec:
                    80:57:e6:1a:9c:f8:af:40:a0:15:dd:53:0b:2a:24:
                    d6:08:94:10:aa:95:e4:86:f4:1a:17:aa:e3:e7:dd:
                    33:34:a1:55:c3:26:1a:b9:f8:4a:2d:ab:d8:4b:4b:
                    d5:d0:5b:be:7a:36:ab:ca:ff:4f:5a:8f:15:69:4d:
                    42:48:77:02:d7:9f:ad:85:5d:2a:71:66:51:48:89:
                    49:c1:f4:a1:b4:a9:45:13:4a:c4:4a:b3:21:20:7c:
                    e8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:37:49:AC:DF:93:E7:CF:10:82:B8:96:A5:7B:33:A6:14:FB:17:C2
            X509v3 Authority Key Identifier:
                keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:b7:5d:8a:89:e5:f7:60:f4:f9:10:00:d8:62:9a:d8:4e:c2:
         01:69:06:aa:42:c6:23:a0:07:b6:b2:48:d4:4e:65:10:7e:bc:
         1f:e1:21:17:8f:ad:18:89:0a:bb:b1:8b:46:d5:5e:26:bf:b3:
         41:c3:11:30:be:de:a5:84:94:91:11:17:0e:4e:30:ec:eb:d7:
         3e:02:d5:4e:57:f9:81:58:48:36:5b:82:10:41:e0:2d:bc:b6:
         0e:4d:42:7a:d8:65:22:59:ad:5e:6a:f7:33:87:1a:bf:e2:5c:
         d4:45:44:40:a8:37:91:b1:3d:d0:bd:3c:2a:c6:18:85:8f:9e:
         ab:20:0a:5a:66:d0:a2:a0:42:6a:dd:38:62:ae:a0:89:00:7a:
         f6:41:c6:a7:4c:00:fd:03:f4:b1:0c:7c:37:09:04:b7:0d:94:
         00:65:d8:b0:de:f0:39:b7:72:8c:4f:5c:53:18:54:47:02:ad:
         7c:a1:32:1a:34:d4:78:81:8d:52:85:08:76:f5:ac:10:14:52:
         ee:18:4f:59:7f:31:81:fb:18:a9:c8:a6:0f:43:52:9a:37:4a:
         99:24:65:6a:17:79:87:7a:84:0e:7c:08:7e:32:c8:0f:93:5c:
         22:b0:c2:cb:f7:39:3b:38:0c:60:51:c8:eb:0d:32:0e:52:02:
         20:73:a1:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:09:52 2026 by rpki-client