Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
File:                     pByW6THu5BuJnWLH24NjNEajxCs.mft (raw, json)
Hash identifier:          8wuWrPJS7vlAq8xAfcusKj8eQHqMeb0Bf3kde4WmUTM=
Subject key identifier:   42:38:7B:61:16:0B:54:17:77:B5:1B:7A:18:94:B9:01:93:BD:65:B9
Authority key identifier: A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B
Certificate issuer:       /CN=a41c96e931eee41b899d62c7db83633446a3c42b
Certificate serial:       019FAAF56508A1B0D9985E9BE9E9A3006C95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 23:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:36 +0000
Files and hashes:         1: 08erSysabwz5oeBdP8PLy755AHA.asa (hash: RIOLOsPK24oYYh42JNS8I14+Rr+oEV6iLUu+Usr4/PY=)
                          2: Ug2vF1vgPHmEqRhi6uOzDzFa8k4.roa (hash: J3X4+yL+W+OJhZWrAFHs4AhqGxikLkSzill4Qp4q87Q=)
                          3: pByW6THu5BuJnWLH24NjNEajxCs.crl (hash: x7G+VhM9pEMAiJfkeR1MllqlObtvoOIne0CCxN9VUmc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:65:08:a1:b0:d9:98:5e:9b:e9:e9:a3:00:6c:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a41c96e931eee41b899d62c7db83633446a3c42b
        Validity
            Not Before: Jul 28 23:00:36 2026 GMT
            Not After : Jul 29 23:00:36 2026 GMT
        Subject: CN=42387b61160b541777b51b7a1894b90193bd65b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:18:ba:a6:68:05:88:2f:7c:c7:54:d7:a4:81:
                    b8:f0:25:0f:6d:71:7e:9a:e4:79:de:b8:66:ff:81:
                    07:09:0e:35:d2:66:ed:6c:28:6c:a5:ef:b3:54:55:
                    6c:ee:ac:72:fe:09:b9:9a:89:dd:9e:f7:7e:65:cc:
                    6b:7c:b1:28:bd:30:d6:7b:a3:7c:c7:f9:01:3f:61:
                    a1:6f:35:58:78:22:0e:79:21:fb:80:c4:d1:2e:47:
                    e1:1f:bf:3d:db:76:41:d8:46:5a:0d:e2:a0:bf:3e:
                    68:09:0c:94:c1:2c:bc:c3:5c:df:ea:0c:59:a0:6e:
                    00:c2:a8:12:82:18:eb:b5:a3:b4:08:50:41:26:31:
                    40:4d:08:7e:72:64:92:bd:84:3c:ff:15:71:99:08:
                    c8:69:57:5a:c4:57:e3:c7:11:0c:c1:c9:b5:08:4c:
                    35:89:c7:5f:0c:f2:3e:65:53:fc:38:ee:1b:4e:fd:
                    ad:57:6c:5e:25:85:2d:40:5d:13:c7:55:b1:e6:9f:
                    0d:35:99:c8:1f:1a:56:e5:77:09:a3:d2:8d:f3:c5:
                    71:8a:ba:02:91:99:3d:c4:db:a9:20:e5:29:c1:36:
                    3b:30:ca:69:dd:e5:7d:40:36:fb:d6:56:93:84:f6:
                    27:f9:c2:5a:22:8b:63:58:3a:7d:f4:e2:bb:2c:1f:
                    0a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:38:7B:61:16:0B:54:17:77:B5:1B:7A:18:94:B9:01:93:BD:65:B9
            X509v3 Authority Key Identifier:
                keyid:A4:1C:96:E9:31:EE:E4:1B:89:9D:62:C7:DB:83:63:34:46:A3:C4:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pByW6THu5BuJnWLH24NjNEajxCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/6bdd74-8cd0-4cc4-8b67-f83e3c71efcb/1/pByW6THu5BuJnWLH24NjNEajxCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:7c:dd:cb:e0:30:d7:31:09:58:03:26:0c:41:b6:e3:e8:93:
         d5:1f:f9:22:d9:2c:47:a0:4f:4b:79:b7:45:f8:9b:08:14:48:
         a2:c8:54:32:5e:23:21:65:dc:bd:09:d6:16:ff:13:ee:47:04:
         ff:e6:1e:12:b7:3c:3a:b9:8c:47:65:08:c7:9f:d7:e1:3f:d8:
         9a:17:de:7f:b8:93:80:1f:39:c0:60:14:1c:3c:9a:92:4a:8b:
         9a:a6:9f:da:2e:be:81:f0:9d:f6:da:e2:ba:75:31:4c:5c:4a:
         92:9d:d0:2f:a8:0b:d5:1a:57:83:ba:cd:44:e6:07:2e:8e:cb:
         d6:93:00:6c:1c:57:df:3f:f3:b0:5b:57:70:a8:4a:3d:bf:89:
         4d:b5:7b:76:89:61:93:84:df:77:29:63:5a:b1:c3:6a:e1:11:
         d5:97:b0:ae:fd:b2:8e:97:27:b0:ac:e0:00:37:4f:d1:23:ce:
         82:a9:c1:e3:97:26:19:a2:9c:67:8d:f3:8b:c8:d2:52:7e:30:
         fd:1b:c8:a0:63:dc:55:49:42:f9:fa:ba:11:1c:b6:9a:d2:c4:
         9d:8b:19:7a:34:38:16:23:64:16:42:fe:72:dc:c7:b6:4e:88:
         de:4d:27:22:d8:dc:19:51:0b:f3:52:28:7b:97:f9:29:52:41:
         2e:db:de:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:43:34 2026 by rpki-client