Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
File:                     rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft (raw, json)
Hash identifier:          v5rC/J8i+CiJx4yf68jkYDGh/KbRHcQ1xDx/2s7H4Go=
Subject key identifier:   94:6D:EA:DC:01:F8:5E:B2:DD:48:6A:49:EB:4F:F6:50:11:57:20:80
Authority key identifier: AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5
Certificate issuer:       /CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
Certificate serial:       019FAA88166B1572A577B84FCF06C336D646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 21:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:13 +0000
Files and hashes:         1: csk4BDz5s79i6tCuRhaWetkbfYE.roa (hash: y6UPDjUC5Ue0t7W29lJsgRf1Q1DAQIYmF8ZHDpBKink=)
                          2: rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl (hash: nqzIf4AucSUfe/NdzjYsCnCF2ElLt7XBej6oXK3BrLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:16:6b:15:72:a5:77:b8:4f:cf:06:c3:36:d6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae1ef3d626a754e43d07c700d0513c114b660ef5
        Validity
            Not Before: Jul 28 21:01:13 2026 GMT
            Not After : Jul 29 21:01:13 2026 GMT
        Subject: CN=946deadc01f85eb2dd486a49eb4ff65011572080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:cb:ff:5a:5f:58:df:2d:38:7c:99:cb:87:
                    bd:9e:19:82:f7:74:b0:cd:0b:49:b5:ee:ce:16:0d:
                    c6:d1:93:a6:84:0a:43:34:2b:ef:2c:2a:57:4d:cd:
                    f8:e4:df:d9:01:a0:df:18:a0:19:15:8e:99:36:e1:
                    19:a9:0e:c3:74:f0:27:9a:f6:09:cb:b5:4c:f7:02:
                    b0:d4:56:90:1a:60:f4:e0:dd:34:ca:70:16:d5:45:
                    e9:cb:d0:05:c5:e8:5d:57:0c:11:0e:1c:5e:6b:77:
                    6f:7b:31:31:c0:b7:f8:fa:77:c2:41:8b:5b:55:f6:
                    d6:42:24:ed:ec:80:df:8a:9c:14:91:4c:3e:dd:8e:
                    7d:58:96:9c:6a:61:94:dc:ea:08:6c:8c:49:91:1e:
                    eb:d6:51:30:5d:bd:ef:2f:a2:90:7c:53:6f:e1:ea:
                    18:1b:21:51:b8:62:0b:3b:06:50:34:36:dc:fb:ff:
                    b5:46:06:16:f8:80:20:2c:44:90:06:3f:41:9b:64:
                    67:14:3b:1d:12:ee:11:75:52:c4:1f:38:61:c5:3d:
                    d3:5b:90:98:72:4d:73:6b:b8:f2:9f:1a:de:d9:31:
                    68:62:79:a4:94:d7:9c:8f:4e:69:f7:28:b0:45:f9:
                    2a:32:c5:fb:03:74:a3:ba:60:10:09:20:8c:00:ba:
                    07:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6D:EA:DC:01:F8:5E:B2:DD:48:6A:49:EB:4F:F6:50:11:57:20:80
            X509v3 Authority Key Identifier:
                keyid:AE:1E:F3:D6:26:A7:54:E4:3D:07:C7:00:D0:51:3C:11:4B:66:0E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh7z1ianVOQ9B8cA0FE8EUtmDvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/afe9b8-e881-4462-a1ee-8e81d1350736/1/rh7z1ianVOQ9B8cA0FE8EUtmDvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:05:af:58:78:54:96:a0:4f:71:28:08:22:df:14:40:ec:91:
         b8:b7:f9:ca:02:4a:c2:1e:f6:48:4d:7a:83:7e:29:fe:8a:40:
         a5:9c:b1:33:b2:d4:c6:b9:9f:d5:c7:97:1a:0e:2f:1d:68:a5:
         3b:cb:e7:00:f2:41:2e:7e:0d:5d:7e:2f:71:a0:17:b2:21:e1:
         09:1f:7b:2f:c1:89:21:fb:94:19:ae:5b:94:a5:44:30:d6:8f:
         d7:9b:41:6e:43:2a:53:7f:cc:ef:f6:7b:99:08:88:a3:f8:c6:
         8f:e4:45:26:31:8c:30:be:e2:4e:9f:eb:2d:de:66:39:8b:77:
         2b:ed:b9:02:d7:9f:d6:4c:07:83:c2:47:ce:02:fd:23:58:f3:
         f0:f6:fa:72:db:b7:a3:2f:70:ea:73:86:66:bc:87:f5:a8:3d:
         01:2e:f6:fb:45:07:3f:3a:f6:c3:31:34:64:e7:a4:24:87:17:
         2e:77:06:2a:35:a3:52:33:8b:e3:87:65:39:00:41:7b:45:47:
         20:49:08:f6:46:93:b1:38:2b:bd:5c:7e:43:1a:98:7b:57:39:
         97:56:5e:f2:5a:1b:65:52:47:ac:f1:23:10:a3:7d:92:cd:11:
         58:ed:f4:0c:63:05:ce:29:2a:06:43:ba:f3:2d:c4:95:ec:c5:
         94:cc:5e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:04:55 2026 by rpki-client