Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
File:                     btA5KsdmC9FGD6HVAx0YQNAblBI.mft (raw, json)
Hash identifier:          +cCy21WSSZZsrccD4ae4VCEfy3nssYa37R6QIUFtNMQ=
Subject key identifier:   9C:5E:38:06:83:82:AB:BD:1A:12:DA:64:E0:D7:BF:72:24:68:97:CA
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Certificate issuer:       /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial:       019FAA1A668A50461CBD4302999BE898B3D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
Manifest number:          19D9
Signing time:             Tue 28 Jul 2026 19:01:24 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:24 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:24 +0000
Files and hashes:         1: 2S62mTmjDl4px8NNmk9NduukcXk.roa (hash: xYOYC1MdsFxurlcP8/NupJrR7Rlh58ssFzFiALiUCRE=)
                          2: 84qtyRzdn5we4xBoW1LVDrbiPAw.roa (hash: JOwq7LPQbha4BiSwQqjqrt8Dw3BVTVdv+eQ1EbJP8Xk=)
                          3: amzi7HtQV9_v7w8hHHWKukbKI-U.roa (hash: cjyKi8MyZ6FA0LhuL8RVz7jOZxAcNj3RS515aaG3koA=)
                          4: btA5KsdmC9FGD6HVAx0YQNAblBI.crl (hash: uce5+noih1yk5ZgBqFd+WuoOMf5N/DJ7GxoFJkSD81g=)
                          5: jpyJdp9pVbvs1-8_fIYxVhnl96o.roa (hash: oOtfLMrxKeo2H6VS8YJdihkaYbP5cIULyDJARVZSWVQ=)
                          6: x-Z6tL-vvX_mJLHlb9B7x-d3eps.roa (hash: zHvZuxQOM2V/TXUiqeY3qlcrNS+y8gi7iI41siwUvv0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:66:8a:50:46:1c:bd:43:02:99:9b:e8:98:b3:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
        Validity
            Not Before: Jul 28 19:01:24 2026 GMT
            Not After : Jul 29 19:01:24 2026 GMT
        Subject: CN=9c5e38068382abbd1a12da64e0d7bf72246897ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7d:39:7a:17:2b:d3:e1:9d:26:2a:ee:f1:56:
                    76:93:74:da:72:c1:7d:c0:5b:0e:96:3d:40:b3:43:
                    e1:89:84:a0:05:35:de:10:6f:22:1f:a6:d5:f2:2f:
                    f2:1a:00:d6:36:3f:87:bb:06:fb:a4:9e:ea:8e:87:
                    45:b5:27:61:31:39:a0:29:26:dc:53:ba:71:c4:4c:
                    bb:7a:4e:c7:d3:54:81:a3:00:1d:a8:27:42:c0:b8:
                    88:aa:ba:b5:ee:ed:ce:5a:63:cd:91:19:11:ba:28:
                    09:9e:cc:82:b3:e6:6c:44:24:e6:ff:9a:ad:48:e7:
                    fc:0e:20:4c:3c:70:3c:f1:b2:a1:64:c9:0c:05:78:
                    55:6e:8b:93:bf:86:0b:b6:d6:0c:8e:16:46:7b:b5:
                    31:5b:08:4f:36:12:0a:5c:35:0f:c4:14:34:14:ab:
                    2a:79:cc:92:ba:11:87:ac:82:5d:70:cd:4b:4d:58:
                    8a:d9:59:67:d4:67:f5:32:97:73:36:7a:ea:21:09:
                    1e:5d:70:7c:9f:96:26:44:48:72:7d:96:57:c7:4e:
                    98:84:3b:4c:57:de:78:1d:53:1b:45:bb:45:06:e6:
                    08:b2:78:15:2a:5a:0c:85:a8:18:41:21:a6:2e:bc:
                    35:06:82:f3:72:e5:79:19:dc:38:5e:05:a7:13:8d:
                    eb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:5E:38:06:83:82:AB:BD:1A:12:DA:64:E0:D7:BF:72:24:68:97:CA
            X509v3 Authority Key Identifier:
                keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:da:65:9a:4a:0c:91:52:7d:4d:3d:0f:c7:3c:60:12:c7:ed:
         2a:76:05:e3:65:f9:1a:12:f0:2e:3e:c1:c7:5a:17:87:b4:0c:
         f3:27:ce:f6:04:75:10:52:90:f4:81:8f:8b:de:0b:bd:a4:39:
         67:58:fe:d3:f1:3b:9b:aa:c4:be:7f:74:11:91:5d:c9:cb:da:
         89:20:d9:7b:f8:5c:af:77:69:f3:68:d0:b0:c9:b6:fa:74:58:
         87:5e:fb:cb:f3:da:9a:04:c5:a1:88:a8:ef:f6:04:03:92:55:
         c8:c4:b6:31:75:ad:af:ca:9e:55:79:0f:32:1f:31:7a:e7:9e:
         e2:20:97:77:18:41:f7:de:8d:14:30:47:3b:6a:5a:cd:7a:0b:
         fd:15:5c:0c:75:e0:06:a2:99:44:e7:bd:83:57:f1:d5:94:50:
         e4:37:50:b6:d7:9d:a5:54:d8:bd:75:6b:8d:4d:5d:cb:e7:df:
         73:9d:18:05:b6:74:97:1d:1e:ab:cb:62:88:80:86:d7:02:88:
         2f:59:ce:bc:50:d7:5c:21:c3:69:b4:e6:b5:b2:e7:4d:0f:10:
         1e:b6:69:70:bc:ac:aa:6e:0c:e5:8a:dc:28:40:94:e2:90:81:
         1c:85:8e:7c:66:d9:2d:21:20:44:8d:93:1a:bb:c0:11:d7:b8:
         2f:17:af:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:36:11 2026 by rpki-client