Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
File:                     15eF3mLc-eeTC6vXsdOcWFPRlE8.mft (raw, json)
Hash identifier:          bHFexRfzAUFQgieRs04JnlDx6N71q0rKesDBripGu4A=
Subject key identifier:   75:74:3A:0B:4C:26:D3:76:DF:F3:9F:C8:76:EE:CC:70:87:5A:DC:E5
Authority key identifier: D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F
Certificate issuer:       /CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
Certificate serial:       019FA82BB07A4B00D0F8EB052226D1927AF2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
Manifest number:          19E3
Signing time:             Tue 28 Jul 2026 10:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:03 +0000
Files and hashes:         1: 15eF3mLc-eeTC6vXsdOcWFPRlE8.crl (hash: Nc+OQH+AS8nri021YEXEC0RzM7xhdfrJQmQoqAjE7tA=)
                          2: 5S25SMI8E9JaR6e1K9PJzYPwzq0.roa (hash: NJujagGkJiaBOJNgPviLVr7Rb2pzjvY77Oqt5qKgVjY=)
                          3: PHmeAWFFkKXBgymR37GK6QvhrCY.roa (hash: /Zgxh895ZAIwexVdKt7yfvsXzhRHS6wWMCxO8hY8aNA=)
                          4: QrcFbOR4DAAMYD0DDghoqF2GSfM.roa (hash: QGtHb51hChbBqYUnbm9bBQhfbbGCgb2yzMdOBCNMB48=)
                          5: k9s4R_RCGnHtZOrjWKzCzH64VJE.roa (hash: SxnRh57fnfNIfp40e+jDqO9RBa+XdPWJgmj+azEX9xQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:b0:7a:4b:00:d0:f8:eb:05:22:26:d1:92:7a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d79785de62dcf9e7930babd7b1d39c5853d1944f
        Validity
            Not Before: Jul 28 10:01:03 2026 GMT
            Not After : Jul 29 10:01:03 2026 GMT
        Subject: CN=75743a0b4c26d376dff39fc876eecc70875adce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:64:2b:58:43:35:82:18:28:6d:05:12:08:6f:
                    39:17:72:58:ac:20:e6:66:f4:d4:2a:20:e8:03:24:
                    14:ba:58:a3:16:fa:6b:28:de:07:a0:93:45:4c:e3:
                    b1:5d:8e:62:8c:ca:7c:cf:e3:5b:f9:d7:db:33:6a:
                    ec:ee:5c:af:e6:3f:16:18:6f:de:ec:94:09:ff:96:
                    8b:f0:38:dd:f3:7c:ed:49:1e:07:47:46:38:d4:fa:
                    e8:5f:4e:4e:93:1b:18:ed:8c:55:76:f8:a6:de:5b:
                    a2:eb:e2:83:4e:18:9d:b5:3a:7e:ae:66:b5:c1:e0:
                    e7:6e:ac:e3:79:63:52:c7:e0:da:f5:98:3e:81:57:
                    8b:57:88:10:b4:00:a7:aa:7d:bf:f8:ab:f9:b6:fa:
                    a3:75:be:49:e2:00:07:16:fb:e0:7b:60:a9:2b:2c:
                    b4:1f:07:54:e1:08:f0:47:b2:a9:00:31:8a:9e:4a:
                    84:c2:92:35:7d:7f:4c:fb:1e:ad:19:b9:f5:cf:5c:
                    d3:2c:79:c0:9e:4f:ec:f8:f9:af:66:c6:33:6f:89:
                    74:37:51:4c:fd:fa:6d:93:2a:d1:5a:84:74:7e:dc:
                    ca:e3:91:51:08:8f:f1:67:c5:a4:4f:04:5b:a3:75:
                    90:c9:0d:f5:d0:40:0b:26:94:75:8d:2a:5e:90:5a:
                    9e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:74:3A:0B:4C:26:D3:76:DF:F3:9F:C8:76:EE:CC:70:87:5A:DC:E5
            X509v3 Authority Key Identifier:
                keyid:D7:97:85:DE:62:DC:F9:E7:93:0B:AB:D7:B1:D3:9C:58:53:D1:94:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15eF3mLc-eeTC6vXsdOcWFPRlE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/7f9728-9559-4263-bcfa-75855db7151f/1/15eF3mLc-eeTC6vXsdOcWFPRlE8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:4d:60:11:bb:41:12:29:de:c8:64:6f:88:c7:94:8e:40:92:
         70:00:a7:a0:b1:b6:44:4f:c4:0a:38:35:9a:c2:c4:e8:12:6c:
         3d:ed:6d:8c:5c:e2:8a:7f:2d:fe:7e:cd:14:31:11:57:d5:0e:
         57:50:89:a8:1e:9a:dd:28:ea:fe:79:68:b2:47:60:15:63:1c:
         d7:68:81:2e:e7:af:aa:c6:6f:98:00:80:6e:2e:f8:04:57:08:
         39:00:9f:31:74:b3:28:3f:83:70:1d:d5:ec:45:1e:ce:78:ec:
         a3:92:66:ca:be:17:2f:41:77:f0:a7:f8:9f:7d:b1:8c:1c:ba:
         ce:f0:93:a2:f2:cf:1a:ff:19:02:09:d5:89:ce:cd:bb:28:4e:
         b9:77:9b:54:97:ea:ff:ff:40:48:dd:1f:84:ae:af:35:a3:65:
         1e:01:e8:2c:b7:e2:60:82:75:c2:4d:d5:c5:bf:7d:00:fe:f7:
         c6:9c:63:7c:9b:b0:ad:d7:cd:a4:02:2f:0b:a9:f3:49:9c:8f:
         72:8a:fc:cb:0a:a6:34:0a:3c:9e:1d:af:12:72:c6:2c:ff:c2:
         7b:ea:00:1e:ac:c1:44:54:59:ba:e0:5d:0c:65:a1:9f:78:de:
         e6:fe:a3:a5:f4:0d:d2:a3:54:59:92:71:55:15:7a:e7:67:b0:
         ea:c4:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:13:44 2026 by rpki-client