Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
File:                     1ROHJRLx8tA3tAHCYDyomU5yHlU.mft (raw, json)
Hash identifier:          eF9GC6UWq/g0zgnoGmK/1Fbplxkr7/b72b4l82a4C94=
Subject key identifier:   D4:DD:0A:73:AB:7A:63:69:EA:63:4A:DA:28:E2:DC:AA:93:99:91:0C
Authority key identifier: D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55
Certificate issuer:       /CN=d513872512f1f2d037b401c2603ca8994e721e55
Certificate serial:       019FAC763B2B2AAA92AD48C5D1C0CABF752F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
Manifest number:          19E1
Signing time:             Wed 29 Jul 2026 06:00:57 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:57 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:57 +0000
Files and hashes:         1: 1ROHJRLx8tA3tAHCYDyomU5yHlU.crl (hash: fQZi4FauAHM90fHA1FeW7Gi6thgKa0knJlJuFoepkvI=)
                          2: QpYzfBnkNKh1yttKF2r35caalhE.roa (hash: ErOSkBHWiEYZj20zKnAchEbhylp7yOAjTawscXS8Sqw=)
                          3: VI84dAQT7kBRBItG-CpBi1i7u2o.roa (hash: PcXRGeOwzKCNST2FKMw8zsw2WTFr5u++h/7gasiKs04=)
                          4: j60o4dW09KsfcomsLl91WfS5uIs.roa (hash: orsN4oeQS9rxzvmJ709FrlKbBIl59zacw9FKE6EQoA8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:3b:2b:2a:aa:92:ad:48:c5:d1:c0:ca:bf:75:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d513872512f1f2d037b401c2603ca8994e721e55
        Validity
            Not Before: Jul 29 06:00:57 2026 GMT
            Not After : Jul 30 06:00:57 2026 GMT
        Subject: CN=d4dd0a73ab7a6369ea634ada28e2dcaa9399910c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:7b:01:ae:43:55:c8:65:a3:9d:14:1c:17:1a:
                    5a:e2:1d:3f:9a:eb:86:57:d5:8e:3b:5e:53:aa:b0:
                    a5:a3:3b:fe:30:5d:78:3a:48:11:fb:36:eb:a9:4e:
                    1f:f5:1a:eb:08:40:65:79:73:83:a2:b2:f4:63:dd:
                    d4:84:97:99:3e:0a:51:a2:4e:f9:fe:7b:84:bb:38:
                    c3:a7:89:7a:0a:d8:88:8d:a3:8f:cd:8c:70:7b:e4:
                    6c:b4:9b:fe:73:d9:6c:23:1a:8a:2b:b9:2b:9a:45:
                    6d:c5:4a:13:d6:a0:c7:0d:2e:59:ed:08:b3:7d:44:
                    bd:57:ae:67:ac:9f:46:10:b5:fd:f7:3c:63:a4:50:
                    f5:cd:0c:4a:42:1d:d9:34:0e:d3:2e:d7:de:41:2f:
                    25:3f:c1:38:46:99:18:3c:ff:4c:f8:b6:a0:73:81:
                    17:ba:85:8d:4b:a1:a9:2b:9b:ae:ad:65:5f:6b:ce:
                    c9:a0:2b:65:88:28:fa:67:bc:ac:1c:16:de:1e:f4:
                    a6:bb:fd:0d:ad:57:b2:9f:8f:62:d3:6b:bb:5a:d0:
                    cb:7f:11:f2:89:2a:6c:d7:3e:f2:6b:d1:5b:9e:9b:
                    c9:eb:47:3c:d8:d1:6f:10:cb:b7:e2:5f:40:69:87:
                    2b:9b:17:75:5a:14:b7:98:bb:0e:d5:6a:87:f6:3f:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DD:0A:73:AB:7A:63:69:EA:63:4A:DA:28:E2:DC:AA:93:99:91:0C
            X509v3 Authority Key Identifier:
                keyid:D5:13:87:25:12:F1:F2:D0:37:B4:01:C2:60:3C:A8:99:4E:72:1E:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1ROHJRLx8tA3tAHCYDyomU5yHlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/a7ddf6-2394-48d3-bfa1-6d655cd94468/1/1ROHJRLx8tA3tAHCYDyomU5yHlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:db:fe:6c:2b:65:41:20:b2:18:76:04:3d:9e:d6:7f:c2:26:
         c6:7f:36:d4:12:67:bd:39:b6:54:53:54:9c:18:f0:3f:ce:c1:
         db:fb:26:48:3c:1c:49:a2:38:4d:0e:4b:93:e9:30:64:90:73:
         80:c3:2a:78:b0:bb:37:a6:47:89:c2:9a:73:5d:e9:4f:82:41:
         0d:34:36:fd:e1:38:91:88:a3:c0:98:83:34:81:20:7a:99:bd:
         c0:60:8e:69:c9:ce:34:a2:db:db:a8:67:93:ed:0a:a5:88:a3:
         d4:a9:06:69:c0:38:68:57:bf:3b:f5:c9:c8:35:4b:f8:22:2b:
         64:ef:ee:3a:a3:ee:0d:91:a7:67:6a:4f:5c:8e:f1:c8:5d:d6:
         b1:d6:2f:e5:81:14:ec:c5:13:eb:5a:fe:ee:ea:4a:ad:ec:8b:
         4d:94:fa:d8:a1:55:ee:06:11:1d:e0:1f:1c:22:8f:78:90:49:
         d3:3f:c8:92:9c:c7:dd:42:71:42:9e:8c:01:f2:77:69:1b:cc:
         31:50:80:4b:27:3f:69:e7:21:95:27:42:b0:76:9c:20:03:36:
         1d:70:a0:4e:0e:c8:8d:df:a8:c8:96:18:71:f3:94:dd:f2:08:
         3b:38:b6:76:56:22:70:00:10:ee:b7:2e:09:e8:08:b2:b1:56:
         31:04:fc:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:19:36 2026 by rpki-client