Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File:                     h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier:          s3sVG2Soa13MMB1YVja37c6nsN00CUlrI/WvhNn06WQ=
Subject key identifier:   C9:E7:C6:A5:94:FC:8E:2C:51:1A:00:4D:3B:C7:77:88:27:BB:0F:85
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer:       /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial:       019FA82BB39E664633FD7C1F2093DBD7F9D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 10:01:03 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:03 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:03 +0000
Files and hashes:         1: FSldjgXBXjGAUbFoSQDG1x2p2L4.roa (hash: /VsBntJD9ML7jEL3eLR/WzuhrYccqcvoqHnzK+4UGMQ=)
                          2: GPHtNa1LkpB1FfVw6cVLTB-Gb4s.roa (hash: +gGd31Ly+y7j9QhhSu4Pmao5tnZqyFoc+P7uPTb1vzs=)
                          3: RsPq-Q75oYdBP6d7MT59xlgY-HQ.roa (hash: Hb85y/nsx1XdLTmRRWMyt3fqQ9P1nyZYPAXbyIk10J0=)
                          4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: SzTSMBKprOejGpJGQ2U4SBn7ey9Kg/kbW56BI4X/mXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:b3:9e:66:46:33:fd:7c:1f:20:93:db:d7:f9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
        Validity
            Not Before: Jul 28 10:01:03 2026 GMT
            Not After : Jul 29 10:01:03 2026 GMT
        Subject: CN=c9e7c6a594fc8e2c511a004d3bc7778827bb0f85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:8b:31:7c:3b:1a:ac:f5:bf:a1:e6:ae:21:67:
                    8e:d6:2b:b4:15:8d:64:13:b5:64:57:01:07:26:51:
                    3c:e4:bb:f5:dd:d6:bb:3d:4e:f6:07:25:2f:47:63:
                    26:83:56:4d:f1:54:37:55:a0:01:7a:7b:7b:af:2a:
                    97:06:c6:a0:99:73:44:7a:f4:5e:08:00:79:31:5f:
                    2f:6c:80:f2:ba:17:7d:81:f7:01:10:42:77:41:da:
                    37:44:cd:73:cb:02:45:d7:3a:a4:0e:c6:ee:d8:06:
                    39:bd:e5:e6:21:54:7b:02:57:a4:be:bc:d8:27:f6:
                    99:c4:6d:ab:48:b8:df:25:0c:f4:5d:6e:88:a5:dc:
                    9b:6b:21:1b:9b:fe:c5:b5:d5:6f:73:fe:0b:86:d1:
                    fc:b7:60:87:35:9f:ef:21:8a:05:9b:b6:da:9e:ce:
                    ae:97:6b:30:2b:10:2c:9d:98:31:9e:ae:dd:a5:e1:
                    02:71:d3:f1:96:4c:4c:30:53:7d:16:89:b7:0c:c5:
                    4e:f2:d8:5b:25:c1:a7:0d:95:4a:f7:9c:d4:ec:c5:
                    e4:5f:cb:97:0e:7c:d3:39:ea:39:74:b2:59:ae:3b:
                    1a:14:48:e8:24:b7:9c:ab:c0:5e:00:dc:69:83:9a:
                    3d:f7:93:bc:6a:07:67:c8:eb:b0:43:00:56:a5:03:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E7:C6:A5:94:FC:8E:2C:51:1A:00:4D:3B:C7:77:88:27:BB:0F:85
            X509v3 Authority Key Identifier:
                keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:55:3d:a2:b7:8d:dc:d5:41:00:07:77:a8:d0:0f:ed:fe:a4:
         18:e1:b1:dc:27:cd:ea:1f:c0:e1:fc:89:cb:c4:bc:ec:ce:21:
         fa:40:63:03:12:ae:3c:59:4b:3e:96:aa:8e:51:3c:c4:b2:c3:
         e0:24:bb:70:18:92:90:55:36:79:b4:28:2b:08:5b:73:b2:60:
         19:6e:3b:81:73:62:fd:95:3d:81:63:5d:99:58:bd:73:e7:9f:
         f3:88:76:af:5b:3d:21:f7:f4:c3:d6:94:75:c5:63:40:8e:53:
         0c:cb:0b:94:1d:56:ff:51:4d:4b:5a:e9:bb:2b:3b:52:9a:53:
         09:d4:84:50:e7:5c:e4:d5:1f:95:8a:9c:9d:83:38:cb:f9:b0:
         61:9d:e5:e9:1f:f6:95:82:e7:94:98:e0:ea:32:2a:86:43:3e:
         fc:8c:87:aa:f4:20:54:9e:9c:8b:51:3e:76:f2:17:59:f5:dc:
         1e:1d:57:23:74:14:ba:a8:9b:1b:c0:8a:c4:ff:3a:4d:d5:8c:
         32:85:41:39:99:f0:40:9d:3a:fe:e1:b5:e3:eb:c3:2c:40:83:
         11:c4:dc:d8:b4:01:d0:e4:d6:a5:21:d4:8a:20:7e:55:0c:79:
         d8:e2:fc:d2:7f:54:5f:3e:a6:16:4b:46:86:80:59:b6:34:c3:
         dd:e3:56:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:06:08 2026 by rpki-client