Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File:                     r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier:          vNOia15UzC4CiZwyN5L4/L5trBcwkdPV85KEpQE00TU=
Subject key identifier:   33:6C:CC:ED:05:97:D7:64:3C:63:1D:F7:D0:22:25:FC:7D:75:18:CE
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer:       /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial:       019FA7BE0FE9954DF70D8B877CE16C53F915
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 08:01:18 +0000
Manifest this update:     Tue 28 Jul 2026 08:01:18 +0000
Manifest next update:     Wed 29 Jul 2026 08:01:18 +0000
Files and hashes:         1: 9_t5TVeIhW460bTs9V3TIpSlosE.asa (hash: NnKf3WDH/05W6UmMSXvkEUGlbKvRwlxrj788KWGZ/NM=)
                          2: Lh1w2stJ270Gej9xnTdwoInIgKA.roa (hash: o+GwhLAcoD1EMh7vyC4YZpvJmieyScRxzeQPPXDHKzo=)
                          3: mXT_95G0hHnwfzwy9GHCGff03us.roa (hash: MURLfvQpANHzg+d3efhUAoTh/8FNUBv5Zb/aAOYp3OU=)
                          4: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: Kx60GajAwpJk4nqi/9Xu42NUyLBaYb9Xpr3Bj86yUj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:be:0f:e9:95:4d:f7:0d:8b:87:7c:e1:6c:53:f9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
        Validity
            Not Before: Jul 28 08:01:18 2026 GMT
            Not After : Jul 29 08:01:18 2026 GMT
        Subject: CN=336ccced0597d7643c631df7d02225fc7d7518ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e4:98:8f:40:39:0d:65:ff:32:8b:9d:db:b8:
                    c2:98:39:b5:97:73:3b:0f:58:97:f6:85:54:90:55:
                    da:44:75:6c:c5:59:54:9c:de:76:ab:88:bf:5a:63:
                    de:c4:b6:c0:61:6d:fd:ec:f4:e0:46:57:5f:72:03:
                    2f:4c:35:79:22:45:0b:81:fe:4a:ac:40:a4:32:d2:
                    ee:1c:93:c7:b2:98:98:2e:e2:1b:31:f8:bf:69:8b:
                    21:2d:8b:c8:9e:2f:82:d5:01:bd:e8:ee:6f:90:98:
                    4a:0c:d0:2c:d4:ee:db:e0:73:08:12:68:2a:b6:ce:
                    66:6c:88:f2:ba:72:87:83:ef:55:ec:24:23:63:e6:
                    6f:01:37:fa:b9:9f:3d:7e:54:34:6d:a4:52:d4:d4:
                    18:ef:fe:cc:64:f2:e1:a7:5d:a7:84:52:08:45:31:
                    36:8e:21:c9:61:f3:a4:da:1b:9a:fb:71:f3:9b:f9:
                    98:57:02:3e:55:29:02:82:f3:82:08:8e:be:37:f8:
                    41:51:f7:ea:8b:ad:01:14:4d:28:10:a9:4b:9c:2d:
                    12:bb:c9:0f:f6:9c:0b:8f:5a:e2:e4:b1:9d:45:cd:
                    52:42:4f:dd:9e:d9:58:2c:e9:57:b9:f9:bb:0f:6b:
                    7f:16:ce:01:c9:5f:82:86:7f:17:b1:96:63:a4:89:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6C:CC:ED:05:97:D7:64:3C:63:1D:F7:D0:22:25:FC:7D:75:18:CE
            X509v3 Authority Key Identifier:
                keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:cb:0a:6c:0d:88:5e:e6:b9:09:11:42:5a:f8:f7:db:fb:a9:
         82:ab:42:29:34:4c:e1:66:f1:2e:0d:f5:17:e0:01:f2:8f:6e:
         78:36:ce:1a:e2:d8:55:7d:3e:45:61:06:aa:27:17:a4:57:90:
         ab:14:ef:4c:97:ec:ef:c8:0a:19:af:c5:a8:1f:ee:c8:de:ab:
         b1:e4:80:02:38:65:48:3a:89:ba:7a:9a:05:99:d7:c7:c2:c1:
         42:99:91:69:cb:a6:f8:db:48:53:74:14:ae:f4:24:50:99:dc:
         4e:d8:a2:86:18:2f:ec:ec:96:85:8c:9d:f7:40:34:9d:ee:e2:
         ed:3e:20:fa:b1:0c:c8:1c:0b:10:97:0d:7d:3c:5f:1d:26:c3:
         05:1e:62:0a:96:35:6d:ae:b9:e5:a2:3e:2a:f6:40:1d:dd:dd:
         b8:c5:c0:d0:b3:e7:32:d4:5f:26:ff:96:2e:41:d2:93:11:16:
         5b:e8:14:59:18:46:28:c4:fa:5d:9f:74:a5:b9:c4:68:ef:6a:
         b8:1b:a7:bf:09:f3:2b:7a:55:bb:6e:b6:7e:b6:a4:27:ed:61:
         a0:7f:d0:f1:ed:af:db:38:4c:a0:62:df:18:10:3a:07:5f:86:
         74:40:27:99:21:6a:70:b3:71:96:0c:04:a5:b9:ed:14:90:81:
         f6:1f:b9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:55:54 2026 by rpki-client