Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File:                     rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier:          ubte9DwKKoRnMzResumH5sUBZoONiwFslc2AJssuam8=
Subject key identifier:   07:12:69:D4:B6:3F:F1:39:77:AB:B6:2F:49:74:7C:B5:3C:DF:37:D3
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer:       /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial:       019FAA50FC2BA3CF29F6651C2A52EB47D3B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number:          19E8
Signing time:             Tue 28 Jul 2026 20:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 20:01:01 +0000
Files and hashes:         1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=)
                          2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=)
                          3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=)
                          4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=)
                          5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=)
                          6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=)
                          7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=)
                          8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: GW5f08XIZ/V/922a/ea6TOXPe6p1i8v/Uwc73BIDn/M=)
                          9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=)
                          10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:fc:2b:a3:cf:29:f6:65:1c:2a:52:eb:47:d3:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
        Validity
            Not Before: Jul 28 20:01:01 2026 GMT
            Not After : Jul 29 20:01:01 2026 GMT
        Subject: CN=071269d4b63ff13977abb62f49747cb53cdf37d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:40:0c:d3:52:8e:9b:1e:2e:6f:df:b4:a7:
                    ba:c7:5d:33:18:f6:be:a1:24:b6:22:ae:00:ca:e3:
                    a5:02:c0:e8:ab:84:f0:ce:cd:fe:43:00:63:0c:8b:
                    02:65:b3:c5:13:28:af:be:b6:bd:80:97:21:a5:a7:
                    dd:28:08:d2:b8:03:3a:40:a4:ea:4a:f1:16:c5:77:
                    c6:35:23:ea:94:4e:9e:2a:ab:33:09:23:02:04:88:
                    f2:83:a6:32:bb:d2:45:ec:04:50:ff:e2:72:7f:6c:
                    1b:56:c6:43:29:76:51:6a:6d:0d:55:89:b9:0a:b2:
                    90:29:c4:16:96:d2:09:57:2d:93:5d:4e:4d:48:d9:
                    f9:6a:c4:4f:fb:d1:42:16:a6:93:1c:99:09:db:d3:
                    7d:dc:d3:57:32:c1:0a:fe:2e:6e:15:bd:4a:f8:3c:
                    45:92:d8:c6:10:bb:ad:cb:b9:c3:8d:64:63:82:f7:
                    da:dc:d9:67:7a:db:b0:93:db:98:48:c5:d6:9b:05:
                    81:39:42:b0:f8:04:78:b8:8a:cf:e6:f4:15:f4:d6:
                    aa:96:b0:5a:51:0f:cd:ec:e8:47:99:2f:82:be:29:
                    0d:f1:8b:5d:dc:f2:7e:33:a1:f8:92:12:d9:7a:d2:
                    65:62:b2:58:bf:0c:92:35:3b:0d:1b:a9:a8:e6:df:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:12:69:D4:B6:3F:F1:39:77:AB:B6:2F:49:74:7C:B5:3C:DF:37:D3
            X509v3 Authority Key Identifier:
                keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:88:89:91:67:db:7f:08:d7:a4:d1:6a:bb:87:79:05:0d:73:
         b9:f8:58:64:4d:21:62:bd:08:ec:93:ee:c5:cb:ef:77:d0:9b:
         46:68:95:9e:ba:7c:a9:2b:cd:2d:84:80:50:6d:19:45:2a:f1:
         44:34:66:06:d5:64:54:74:07:0d:13:51:31:b2:7d:80:d9:89:
         ef:ec:db:68:ba:d4:b3:1a:45:0f:f2:cb:30:10:15:19:43:28:
         4f:1a:ab:65:e4:8d:1f:8b:f4:09:8c:6f:13:98:59:7c:95:d3:
         f0:80:0f:e4:15:ca:42:0c:d9:7c:35:22:35:c6:9f:42:ee:ce:
         4d:00:14:f3:14:7f:ae:83:05:96:af:db:20:63:04:b7:70:92:
         8d:17:28:47:3e:08:b6:54:2c:a7:26:d5:c7:9e:78:17:4d:e6:
         8d:9c:bd:e0:d3:6c:7b:5f:b5:8f:9b:36:3d:3e:4e:4d:5b:cc:
         f9:3a:a6:5e:96:aa:36:26:62:22:2f:56:17:4e:0f:d6:df:7a:
         71:0a:5b:29:0b:ae:3e:d2:4c:46:e8:71:f8:87:9f:d7:d9:35:
         5a:49:b1:8b:e8:c1:cc:38:35:94:aa:a3:ed:80:77:d6:51:f6:
         de:e6:4f:19:ce:2e:3a:ec:20:a2:68:cf:6d:91:3d:7b:85:34:
         f3:9f:96:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:55:13 2026 by rpki-client