Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
File:                     tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json)
Hash identifier:          i96wbjASc2vTXCP8E3rcQYiMt/Uol0wSn5xRjd8Q/w0=
Subject key identifier:   18:0E:34:6D:90:DD:AF:8E:FA:DF:D9:A1:E4:90:DB:29:B7:91:AA:FD
Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D
Certificate issuer:       /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
Certificate serial:       019FAB632860F4CAF1494A36635E2391AEE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
Manifest number:          11CE
Signing time:             Wed 29 Jul 2026 01:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:30 +0000
Files and hashes:         1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=)
                          2: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=)
                          3: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=)
                          4: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=)
                          5: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=)
                          6: t636B7CqAadftoFod7ybUNJhQPo.roa (hash: 181NFYC4u/sBirqlh2IrjbcRctznL7BS4orIUETkT5g=)
                          7: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: lM0DJsDTqhiudZWkW7Z/cC1eUhM2+/IenyAViqSJQGw=)
                          8: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=)
                          9: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=)
                          10: z-6izIL2te2yW3BZT-W-LC6HIiI.roa (hash: g0guTuEhCvQ3u37wIf97G7PMhPvKG3UAOrfC4DGjbl8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:28:60:f4:ca:f1:49:4a:36:63:5e:23:91:ae:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d
        Validity
            Not Before: Jul 29 01:00:30 2026 GMT
            Not After : Jul 30 01:00:30 2026 GMT
        Subject: CN=180e346d90ddaf8efadfd9a1e490db29b791aafd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:13:14:bc:f8:76:5e:98:92:85:ba:a6:5e:
                    2a:26:c4:f3:34:7c:fc:88:a9:de:41:9a:0c:b6:47:
                    88:60:1c:35:06:25:f2:a1:e7:cd:f8:bf:43:67:88:
                    71:21:90:c9:e9:c5:12:cd:08:d7:d5:13:27:13:31:
                    14:bb:19:25:f9:d7:6c:6c:76:70:91:7e:20:b2:3f:
                    39:46:87:1e:8a:e0:f5:60:bb:fb:48:9e:9a:b2:af:
                    0d:91:5e:3d:3a:d2:07:81:8d:94:fb:ca:2f:14:35:
                    74:72:b1:0b:77:7f:e0:25:fe:ba:4e:ce:c4:a5:07:
                    b5:05:81:f7:6f:e5:8f:6d:77:5d:d2:a1:f8:22:f5:
                    f1:5b:25:bc:22:aa:d6:21:c8:83:48:6a:eb:38:91:
                    0f:b3:24:b5:93:bc:43:27:b1:ab:37:37:a6:5b:6a:
                    85:63:24:ef:71:e5:19:5c:27:08:43:a5:25:f9:1c:
                    21:ed:95:bf:16:59:97:d6:88:74:c1:99:a7:a8:d7:
                    e1:30:9a:74:dd:ff:91:9f:f8:af:50:9a:92:40:13:
                    d7:3d:92:bc:85:2e:7f:cc:76:ca:5c:6a:4f:3b:b7:
                    13:5c:9c:86:90:6f:5e:86:11:c9:ba:7b:57:9c:2e:
                    b5:54:bd:60:65:8c:7a:4f:8a:56:64:f9:e6:8b:c2:
                    5f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0E:34:6D:90:DD:AF:8E:FA:DF:D9:A1:E4:90:DB:29:B7:91:AA:FD
            X509v3 Authority Key Identifier:
                keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:88:9d:9b:84:e6:97:e8:64:21:8b:bc:a7:dd:42:91:d2:6d:
         68:fd:98:aa:54:76:1c:c5:0c:09:0d:4f:ba:4d:e0:a5:a0:3a:
         ff:e5:68:37:5d:77:dd:fe:ff:7a:a9:6a:fc:a2:39:25:8d:95:
         ec:e0:b5:67:6a:1b:ef:cc:bf:2e:2e:f5:f7:4f:fe:24:d6:ae:
         70:a3:d3:40:48:1c:73:64:3a:22:8e:d5:0a:42:0c:47:18:28:
         85:aa:e4:aa:65:e4:99:e1:22:c9:91:99:17:f9:1c:6e:5c:a5:
         14:b0:0e:2f:e9:65:ba:c0:46:5d:31:70:1e:e6:98:e7:02:a2:
         52:2f:e6:41:fc:ec:29:9f:6f:22:7f:37:65:9f:8a:03:58:89:
         2d:9f:53:14:52:cc:cf:e9:92:5b:04:9a:fe:cb:3c:1d:b9:36:
         1b:84:49:88:b3:74:9f:8b:77:e3:af:2c:b4:a1:43:9c:82:3b:
         31:fd:20:98:77:fc:82:1e:71:af:c7:51:29:9c:73:00:87:81:
         46:3f:d5:3a:99:a7:ca:e8:a2:9d:e9:2c:1b:59:3b:ff:17:1f:
         48:57:e7:22:2a:ba:7b:4e:49:17:9c:2f:43:35:93:e1:76:8e:
         76:86:e0:f4:71:ac:18:94:e0:41:69:7c:76:24:20:52:cc:3e:
         aa:ca:af:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:40:44 2026 by rpki-client