Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
File:                     1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft (raw, json)
Hash identifier:          2kRl68q/XycXeZaveWJ083z/hW8US5XJBhH+6qZYG78=
Subject key identifier:   DF:A5:0D:6A:0C:9D:F3:2D:FB:48:EB:1B:E4:5B:5F:A7:D4:D1:25:3B
Authority key identifier: D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8
Certificate issuer:       /CN=d695cb86586cbfd2462afa052c96a25c162830a8
Certificate serial:       019FA97545829C698D47F2D5AFEC77E65184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
Manifest number:          19DB
Signing time:             Tue 28 Jul 2026 16:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:02 +0000
Files and hashes:         1: 1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl (hash: isCfCZux5GDLKtM4xKtGSqwrCaOnSa+a7Y9KQCycA7I=)
                          2: 26QbXt6b5zHilNs1q7yDX1cYMsk.roa (hash: Tt6aUkRO9JUaW0NjcmeQVqAa3xnUCz7lJRJu/2xB7IE=)
                          3: Ezcrtmwo4iwn5JbCMNVESXorExE.asa (hash: QvhpQm5ictpOGI0Idhy4A39NC9Kpsm0fYAvwcjaUI04=)
                          4: ML7UkJFE6LlihRpTm5h-PoqRSVs.roa (hash: g+qfBPw45UpoVjFRiQZEbaH4MwvqddJi1qo+sHrhaFE=)
                          5: eU7ipBheHWkpemRqitvR9YpXrt4.asa (hash: jtdQZM+91cfrM18Rhgx+NL45kKIXn9gnr1VUiwGfKOM=)
                          6: lGdnHQ9JzbcCAf7aCdi2AtQWylc.roa (hash: /SsAkMvFx9VtM23+Xr14ddTXFb4dIacWZgb2bJ1bpX4=)
                          7: sk3Ng7M09_merP38zbn6ZinhfyY.asa (hash: Hg4VBYh1/4iAG5ztUnRTsrSfK7i/9u4qOnxuxq++vNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:45:82:9c:69:8d:47:f2:d5:af:ec:77:e6:51:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d695cb86586cbfd2462afa052c96a25c162830a8
        Validity
            Not Before: Jul 28 16:01:02 2026 GMT
            Not After : Jul 29 16:01:02 2026 GMT
        Subject: CN=dfa50d6a0c9df32dfb48eb1be45b5fa7d4d1253b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:46:3e:c6:34:d1:27:6e:98:07:56:94:9b:1e:
                    cf:f3:22:28:5f:9d:bc:ea:64:aa:3e:c4:b4:51:9a:
                    d6:79:cc:70:83:a2:a5:da:38:55:ca:41:dd:98:4d:
                    87:59:60:eb:04:87:1c:2b:61:c8:aa:d0:11:e1:8d:
                    03:04:b8:4b:f6:f8:27:f9:32:2f:a1:91:12:68:14:
                    f1:0b:d1:dd:0f:6a:e4:e6:04:43:b4:ab:6d:c5:9f:
                    12:3a:75:1a:5d:0c:87:f3:a6:b0:09:0b:8a:b7:0d:
                    78:9e:e0:19:74:e4:29:52:df:b3:35:d8:1a:f7:2b:
                    28:0a:02:3e:5d:cc:ec:67:55:5a:db:9e:3e:21:0c:
                    4b:44:93:f5:dd:7d:dc:4a:cb:a8:11:c2:03:bf:b8:
                    b3:66:48:b1:dc:2d:cb:bf:09:16:30:4e:1a:b0:1e:
                    37:66:97:49:6e:27:95:86:dd:51:ae:bf:bd:a6:45:
                    2e:ed:76:a9:86:06:71:3a:b1:9c:a1:5b:8d:fa:73:
                    a2:46:56:dd:c2:1b:4b:52:3c:f7:cb:5c:e8:95:98:
                    92:33:f1:bd:a7:51:0a:bd:53:6a:23:03:bf:14:dc:
                    3d:ce:59:2f:eb:b0:97:89:6a:01:49:b5:a9:38:79:
                    86:59:79:ed:25:38:22:46:8e:e2:c9:f0:68:1f:84:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A5:0D:6A:0C:9D:F3:2D:FB:48:EB:1B:E4:5B:5F:A7:D4:D1:25:3B
            X509v3 Authority Key Identifier:
                keyid:D6:95:CB:86:58:6C:BF:D2:46:2A:FA:05:2C:96:A2:5C:16:28:30:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1pXLhlhsv9JGKvoFLJaiXBYoMKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3dbfeb-b2e2-4816-9ba9-a5cd81b5e00b/1/1pXLhlhsv9JGKvoFLJaiXBYoMKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f2:ad:c1:23:e1:c1:5e:fa:e7:f6:e5:c7:99:11:8e:3a:2c:
         4a:41:c0:d6:39:e9:79:35:00:8e:25:be:fa:8c:64:f0:34:b4:
         b3:ce:c5:82:fe:3d:b9:a6:19:41:4f:82:56:36:f8:07:fa:b6:
         37:af:dc:3d:e3:c1:57:e3:a7:7a:7b:6c:a2:a2:84:b1:97:ce:
         f0:5a:c5:3d:6b:40:68:b7:d9:d1:12:67:64:50:03:23:99:b1:
         0a:2d:4d:82:5e:5d:26:77:10:17:db:8d:1c:51:ca:56:72:0a:
         62:af:1b:6b:39:14:f0:b3:0f:77:86:ce:29:2c:e2:09:36:46:
         d4:b1:de:03:d3:98:3e:a8:62:7f:d2:0f:fa:bb:17:4b:42:91:
         91:e1:cf:7b:bc:c3:b0:11:ad:64:87:41:1b:5c:2b:de:a8:fa:
         44:10:12:48:aa:56:96:3d:4c:aa:3c:87:5d:44:65:f6:82:6d:
         90:5b:01:e1:2a:58:a3:09:54:c7:ee:3e:d7:98:67:a9:0c:4e:
         24:57:29:bd:f3:db:66:0f:8a:78:09:5a:ed:d0:a2:79:0a:c9:
         86:55:c5:8b:5b:29:32:28:ce:71:8b:12:e9:6f:74:73:be:7c:
         a6:3e:7a:41:e0:48:b8:9d:f0:ff:a7:30:39:49:ed:1e:11:ca:
         9e:78:8e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:38:32 2026 by rpki-client