Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
File:                     PDULqC8_61ruKJOPvxsJweL9GbQ.mft (raw, json)
Hash identifier:          IgImEHlGyA81h50inEW4r4zpBFl6Psh+knLz1dSlaPQ=
Subject key identifier:   BB:24:27:D7:8A:03:3A:EB:F4:B7:F0:F7:D4:4F:9C:74:A9:E2:CB:AB
Authority key identifier: 3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4
Certificate issuer:       /CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
Certificate serial:       019FAC75EEDA5AB999D25246804DBFAB609E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 06:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:37 +0000
Files and hashes:         1: 3LaL7uXB-UYgWuSk1gGwpH4emtk.roa (hash: SZi8GiIOhAGOw0aZ9QVtTEgPlEhqv8CHu5L26uxGnTw=)
                          2: OKvF1jZUD1oQ8vjnPvKbRctzA_Y.roa (hash: TURUpo5c7V3B7eiBvFVs4P/z+qyI+1sdNbYu2NhorzE=)
                          3: Op5GYXPNrxg_HfwVEuFZeHOadM4.roa (hash: uIjeZZuq23pgTgw8/rbcHVuGWjLz/Rc1HlKQEVLAUp8=)
                          4: PDULqC8_61ruKJOPvxsJweL9GbQ.crl (hash: v4czQyhXzRHYWeLkDtuZcZJVWg9Un0T9h9dNb3NTP1I=)
                          5: kFJJEyTKADp1baTJnM1zkurd-AY.roa (hash: 6YWt+74Liha4YiPIKXVwr09uzTbyh63tPVdg3eh1Ecw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:ee:da:5a:b9:99:d2:52:46:80:4d:bf:ab:60:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c350ba82f3feb5aee28938fbf1b09c1e2fd19b4
        Validity
            Not Before: Jul 29 06:00:37 2026 GMT
            Not After : Jul 30 06:00:37 2026 GMT
        Subject: CN=bb2427d78a033aebf4b7f0f7d44f9c74a9e2cbab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7a:f0:19:56:54:ad:cf:c3:de:80:72:e3:a0:
                    c6:b6:7b:d0:01:f5:82:a3:0f:40:e9:6b:d0:4e:79:
                    10:59:d2:4e:cd:5b:38:5d:2a:ba:09:a5:41:87:98:
                    f1:13:38:5a:f2:9c:52:de:bd:5f:31:f8:ef:cd:79:
                    eb:58:f5:c8:79:f8:08:fa:3f:59:38:82:61:20:d5:
                    bc:b7:a8:26:93:fe:b0:87:59:99:4b:40:8b:0a:59:
                    ec:1f:81:cb:c6:8f:f4:3a:fe:0f:18:64:b6:58:05:
                    1e:8b:05:a6:b1:3e:34:f0:69:0f:36:63:e3:ba:69:
                    30:15:c7:1b:4c:10:fa:b7:0b:a4:57:d9:f4:b4:17:
                    0f:ef:cf:30:32:f8:5b:a4:61:a7:25:c0:cc:34:da:
                    c3:50:bb:79:7e:e5:1b:87:df:4e:7a:c2:d2:19:85:
                    41:25:4e:e7:bf:b4:42:0a:bc:43:18:a3:55:a8:57:
                    8e:1e:5a:3d:9a:7c:28:b1:2f:2e:12:1a:2e:98:7b:
                    0b:43:11:d5:c7:15:da:15:6f:0f:a2:9b:ef:6d:5d:
                    7e:22:ae:8f:d0:f5:5d:bc:20:c9:45:db:cc:0b:39:
                    6b:ff:95:9e:7c:df:1c:80:ec:df:8a:e4:34:6e:e6:
                    17:11:ba:b9:8e:ad:61:4d:1d:e1:af:64:c7:31:c4:
                    98:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:24:27:D7:8A:03:3A:EB:F4:B7:F0:F7:D4:4F:9C:74:A9:E2:CB:AB
            X509v3 Authority Key Identifier:
                keyid:3C:35:0B:A8:2F:3F:EB:5A:EE:28:93:8F:BF:1B:09:C1:E2:FD:19:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PDULqC8_61ruKJOPvxsJweL9GbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/64d7a9-cac3-4549-a7aa-61b7902ee204/1/PDULqC8_61ruKJOPvxsJweL9GbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:71:86:e2:26:01:4e:b4:6a:cd:de:4f:a6:7f:09:e5:f4:3b:
         88:0d:01:0f:cc:bb:18:65:45:a2:4e:38:81:6d:87:39:10:5e:
         d6:59:3c:64:4c:26:c5:9f:04:ab:26:21:6f:48:70:58:ae:1c:
         ea:7e:db:be:0b:2a:d4:55:5d:4a:04:d0:ee:6f:1f:e5:ff:a3:
         73:10:d6:5a:d8:5f:34:bb:ae:fc:df:76:08:11:36:cb:bf:24:
         1d:d8:1c:e1:1f:ce:54:2a:fa:87:f5:15:07:68:f8:74:c8:e4:
         3c:b8:d4:b2:02:da:b7:38:35:77:79:19:d9:38:33:0f:0d:ba:
         b5:7b:eb:ad:b3:e6:c9:d3:53:35:2d:01:f1:2f:aa:fb:ec:ca:
         00:67:65:9e:c6:f7:9e:47:67:1b:50:7b:db:10:95:92:27:63:
         81:b5:56:79:0e:69:76:73:73:19:7d:4d:69:03:e4:f4:79:28:
         13:8b:7f:39:82:c2:30:94:07:30:71:85:7b:19:52:37:08:2b:
         5e:82:c7:ae:50:c8:72:48:d2:89:f7:e7:98:1c:f9:87:68:c7:
         13:16:72:af:a3:ba:ee:bc:9f:6e:70:e1:5a:c3:d5:ed:20:c9:
         38:19:43:13:f7:2c:2f:f2:c7:c6:45:8e:c3:c8:a0:f1:27:1c:
         7d:b6:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:34 2026 by rpki-client