Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
File:                     rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json)
Hash identifier:          P1j0MiiZRI0GXdY+EXGf8GPGuIzxYdgzImdyJCuyjSw=
Subject key identifier:   1C:78:ED:66:D8:F8:E0:A4:B4:6E:D2:78:C1:60:A3:9B:35:34:BC:30
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Certificate issuer:       /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial:       019FA97536AD4ADEA335A01798E87B17C1F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
Manifest number:          19F1
Signing time:             Tue 28 Jul 2026 16:00:58 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:58 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:58 +0000
Files and hashes:         1: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=)
                          2: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=)
                          3: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=)
                          4: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=)
                          5: Ym_r5R7AgsPIh7eaekC6oldM6_k.roa (hash: MQ13sclCLXk6CekwcrbM2XLxGacYKR6i5DDlylJjh8w=)
                          6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=)
                          7: kz88XGl4i-o90qHpgWaNT6qB9F4.roa (hash: iFw0bXeL0s+Rwtq0iRLlZLd1+3x1hxhmoVT6WC3MudE=)
                          8: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: RgH8xLtr5gK+T/bNmAZkOuWprVsECXvc9RihsLyfJ7A=)
                          9: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=)
                          10: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:36:ad:4a:de:a3:35:a0:17:98:e8:7b:17:c1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
        Validity
            Not Before: Jul 28 16:00:58 2026 GMT
            Not After : Jul 29 16:00:58 2026 GMT
        Subject: CN=1c78ed66d8f8e0a4b46ed278c160a39b3534bc30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:02:a1:e7:bc:d5:15:9c:1f:65:8a:83:44:
                    25:61:11:f8:ee:25:c5:3c:2e:c7:13:40:a9:8f:43:
                    70:0e:f2:cd:77:7b:74:ad:f5:8f:05:40:a6:77:f3:
                    6f:d1:0e:74:12:88:53:b7:3c:63:1c:9d:3f:24:92:
                    30:f6:38:6c:3f:e0:59:0e:58:bb:40:54:31:ca:d1:
                    7c:d3:50:3d:0e:ae:b0:2a:67:a3:47:2a:84:17:40:
                    12:cd:1d:e8:ab:78:54:fb:52:d0:f8:eb:b2:5e:0b:
                    2f:ad:24:05:36:0f:e4:ed:a1:f5:1f:04:57:ac:c0:
                    3f:2e:96:f5:9d:3a:a0:09:c6:1d:69:b6:6e:96:1a:
                    8f:b2:1a:c2:c4:49:cf:c1:61:c2:50:6c:e4:bd:f2:
                    10:f1:76:73:84:89:f7:e3:2c:a0:0e:49:64:3f:4a:
                    41:f2:f8:d0:e1:37:1d:11:28:98:e6:9d:2d:a0:95:
                    7d:b5:a9:ff:58:21:c2:0e:f9:a5:3c:3e:3a:e5:f0:
                    63:3a:d5:93:e2:49:4f:ab:71:d4:f3:37:21:a9:70:
                    b1:69:b7:83:b9:04:72:b2:ae:4e:7d:eb:51:f0:50:
                    f0:31:42:55:98:f0:df:f2:cc:84:c8:d2:5b:0d:0d:
                    c7:5c:f3:98:ec:0f:e1:94:7c:1a:03:d2:8f:85:2e:
                    17:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:78:ED:66:D8:F8:E0:A4:B4:6E:D2:78:C1:60:A3:9B:35:34:BC:30
            X509v3 Authority Key Identifier:
                keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:f9:9f:79:3d:42:29:d7:05:91:09:72:1a:98:af:6e:04:34:
         31:a9:c0:6c:b7:00:69:ea:ef:bc:5c:7a:4f:1c:62:6b:5f:b8:
         ed:b1:59:8a:20:8f:e5:c7:29:7d:ab:37:36:e9:7b:86:a7:1a:
         d3:94:ce:e4:41:8c:16:50:e4:e6:90:d3:34:b7:28:5b:02:ec:
         e4:63:9c:e3:1e:e2:1c:33:78:12:99:10:9b:26:52:04:f5:fb:
         01:c1:1c:d2:70:65:22:c6:e4:0d:ae:22:e6:45:75:cb:1a:39:
         8e:4d:98:51:9e:ac:43:b5:18:6c:a8:91:83:ca:45:1a:98:eb:
         ee:2d:61:26:5c:d4:4c:47:5b:cf:54:bb:1c:23:9d:e2:b0:2e:
         a2:f3:ae:96:7a:88:66:b2:a3:fb:94:48:99:48:9e:46:d4:84:
         9e:da:a1:40:d7:f8:25:12:75:c6:0b:6e:6e:fc:6d:8d:e1:89:
         c7:48:02:13:7a:4c:80:41:fe:93:94:df:6a:21:f7:30:89:a3:
         f4:39:a0:15:59:b3:47:47:bd:77:9d:a2:e5:f3:ca:b5:03:4d:
         26:bf:f6:44:e0:05:17:6f:23:ed:81:38:bb:ca:20:d3:b6:65:
         4d:07:ee:f3:aa:0a:e3:0e:a6:8a:bc:09:f5:90:85:a9:85:15:
         81:3a:1a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:08 2026 by rpki-client