Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
File:                     MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft (raw, json)
Hash identifier:          jN9nwkg6uCSrmiYdqJHqWhXOGJa4s9HNzRUFkbsb60k=
Subject key identifier:   A9:84:AF:08:C4:34:F7:49:0F:62:82:ED:A8:B7:8E:69:50:98:55:0E
Authority key identifier: 31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6
Certificate issuer:       /CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
Certificate serial:       019FAAF52E844A29CCCF3663FBE209B58012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
Manifest number:          14B9
Signing time:             Tue 28 Jul 2026 23:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:22 +0000
Files and hashes:         1: 6JYQqrzS3UTPcgvWPbO4TgCoS3k.roa (hash: iOMk6cfEftH8+M5zAq6J+7nYiKbK2CplnfrSukCWdkM=)
                          2: KiViUlRdp1iVIBpAgxyCpxxK3gQ.roa (hash: Yk/aBj6tG6In28XxnbyhWgRKpfIGrGy/o9iiuy0VDDg=)
                          3: MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl (hash: r8MF2nQADJT7xeD0/a6W67ww9p5SdGmbuyOYxslgILw=)
                          4: aZwxLLe27uK7ns0bAgvQ0s7Mqt4.roa (hash: IJFNHlYozh1R/6V0WKyYnkoCMR+po4mStHpa7SQZbq4=)
                          5: qM92mL8g634Yh9KwZjRzI5vZ9l8.roa (hash: f+n6LoAwAduArbfX5BlVpkBMLZF56N90CkVkSMu7mrU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:2e:84:4a:29:cc:cf:36:63:fb:e2:09:b5:80:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d4ee4afff55e67444d47d49b512a8368bf9ef6
        Validity
            Not Before: Jul 28 23:00:22 2026 GMT
            Not After : Jul 29 23:00:22 2026 GMT
        Subject: CN=a984af08c434f7490f6282eda8b78e695098550e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4c:09:a2:48:65:ab:9b:04:9f:c8:2c:69:8a:
                    f1:90:af:3e:87:c9:01:9c:79:5b:f1:58:30:a4:67:
                    2e:76:58:92:b5:e7:28:a7:ec:79:ed:3b:7a:2c:e9:
                    71:cc:a6:dd:b5:c6:15:55:d7:08:75:20:2d:0c:7d:
                    f3:a5:2a:78:5f:ba:64:5d:a4:fd:ad:c8:d9:5a:fa:
                    d5:43:96:54:f2:65:bb:bc:34:8c:b4:83:0c:33:43:
                    01:70:b4:d0:d1:0e:b4:da:43:eb:a6:ce:2e:6d:37:
                    cd:e6:a0:07:3c:4f:c7:47:30:5e:23:73:50:88:4d:
                    c0:32:cb:5d:52:35:a4:e7:cb:58:e4:8e:05:db:52:
                    dc:d2:1b:1e:03:a2:bd:57:33:23:8c:f4:14:f4:db:
                    80:08:cc:c6:ec:64:b2:0d:e3:34:ea:c6:87:33:bb:
                    f1:6b:9b:ed:c0:d5:15:1a:89:18:b1:03:2b:7f:08:
                    75:11:29:c8:bc:e9:07:7a:a3:53:64:22:7f:99:63:
                    a1:a3:dc:19:04:5b:93:b1:0b:a3:27:46:e0:60:0e:
                    9a:d5:7f:9d:98:da:c3:c9:f7:85:3a:cc:d3:e3:ed:
                    00:2e:98:79:cd:c8:19:43:75:73:9c:82:ab:e1:68:
                    bc:9f:c2:2e:d3:ca:16:5e:9a:39:36:29:e8:73:8d:
                    44:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:84:AF:08:C4:34:F7:49:0F:62:82:ED:A8:B7:8E:69:50:98:55:0E
            X509v3 Authority Key Identifier:
                keyid:31:D4:EE:4A:FF:F5:5E:67:44:4D:47:D4:9B:51:2A:83:68:BF:9E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdTuSv_1XmdETUfUm1Eqg2i_nvY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e44dea-8d51-440a-bc02-bab576e20393/1/MdTuSv_1XmdETUfUm1Eqg2i_nvY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:e1:11:9c:00:48:cf:5e:a4:06:ae:9a:54:61:8a:5d:c0:7d:
         58:32:af:3a:4b:10:3a:8e:4f:40:d8:53:65:8e:73:b8:cc:82:
         bb:75:d1:c9:e6:e9:51:5a:dc:7a:c5:10:29:f4:6b:f5:93:b5:
         af:46:b9:4f:16:d6:ad:22:88:d1:8f:95:29:9a:04:c9:14:51:
         12:57:be:22:81:86:f0:a2:a6:44:7a:2f:0a:ab:2c:2e:32:d7:
         3a:65:cc:a3:b4:ea:bf:f5:4e:50:46:7f:c6:90:0f:71:2e:8f:
         7b:b7:bd:1e:39:1e:c8:d8:5e:4a:1c:00:af:f2:f7:e4:5b:88:
         4b:fb:be:ff:0e:ef:3e:00:74:2a:35:79:a1:9e:2f:a6:76:75:
         66:dd:16:9d:54:1b:3b:4c:61:58:61:12:3e:e9:d1:3e:78:03:
         e1:84:2d:0d:bf:bd:68:18:49:b7:dc:cb:30:68:28:81:ef:c2:
         dd:82:fa:02:f4:74:7c:f1:d5:b5:df:14:12:1f:17:0c:bc:53:
         d6:28:77:3f:d2:85:cd:b1:26:70:ef:7f:26:45:98:7f:c0:ce:
         34:71:14:dd:6a:35:0f:61:e0:6d:90:12:dd:54:69:f8:dc:28:
         d4:05:75:f6:f3:8d:2c:93:91:a8:e8:5f:cc:5f:f7:6d:e0:c1:
         b5:21:6e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:47:06 2026 by rpki-client