Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File:                     TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier:          RJRw3NZDHbxnoAh3GwggEdzNOZhzU00zJT9KKqkjuqE=
Subject key identifier:   7E:E7:E0:FF:79:1A:33:5C:08:8E:32:01:F3:D2:29:0C:F5:CB:12:CC
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer:       /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial:       019FABD157039A623CFE2383284D81DD6C67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 03:00:50 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:50 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:50 +0000
Files and hashes:         1: JZQkADNXuVdgoYFqB8dJihxFMqw.roa (hash: v2lJ8edD4J6npHAAgT5bKgjMcgZZ0T4RA8FIeChON/I=)
                          2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: /YUXpdGn2QGZr6prPh7Ih+heQf1SiU8/yFQFYOdFNNs=)
                          3: Y4syH6UzjjHJV7JuJcxsHndTEBM.roa (hash: JfIRoO3yinIldqjXRJFR4+uBQRShxpVbREXLMon+oyc=)
                          4: _hFABtqDrMHoR6yceaa4n6HnFLY.roa (hash: RUYxYGOzRDiabfY65jWe0OVYiku/zny/wdDlEwYqRXU=)
                          5: nAZ9GYyRtDryRUMqgM2oxm7bnsw.roa (hash: Curfm/lqD1xZHwiMDPx7ObFQjKY3PZ5mZYaISZH60CE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:57:03:9a:62:3c:fe:23:83:28:4d:81:dd:6c:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
        Validity
            Not Before: Jul 29 03:00:50 2026 GMT
            Not After : Jul 30 03:00:50 2026 GMT
        Subject: CN=7ee7e0ff791a335c088e3201f3d2290cf5cb12cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2d:c5:b2:af:f6:37:ba:12:57:af:12:98:3f:
                    06:4a:90:9e:e8:f0:f0:b0:58:66:35:30:07:59:fb:
                    78:72:94:dc:69:c7:a1:3f:5e:20:0e:c4:bc:0e:97:
                    a8:36:83:2f:96:b3:18:61:da:a6:80:d9:1c:26:fb:
                    bf:b9:b3:df:b6:f9:57:20:d2:ef:f0:65:a9:69:97:
                    6c:83:19:04:17:b8:85:ff:86:e4:e3:ee:82:77:91:
                    73:27:f0:50:8c:5c:47:5d:08:41:63:8c:7b:cf:4b:
                    86:fa:a1:49:d5:d9:73:23:8c:1d:33:20:d5:9d:a6:
                    46:b5:29:c9:12:29:c2:9b:fb:17:5a:cc:a3:e3:4a:
                    29:db:e7:bf:20:28:63:17:c1:09:60:0a:de:1a:10:
                    88:bb:50:61:f3:8d:79:69:62:e1:ee:0f:b0:c8:11:
                    bc:df:74:12:1c:98:bd:05:f9:a1:56:bb:e5:0b:1f:
                    81:e4:5b:e0:ad:bc:b6:da:ef:f6:cd:09:e4:5f:dc:
                    de:12:05:c6:9b:21:dc:4a:b5:a5:85:e6:38:04:19:
                    bb:82:97:7b:47:be:42:d2:3a:51:e9:97:18:38:0a:
                    5f:91:fa:d3:c7:af:d1:71:91:5c:e6:95:c3:d4:03:
                    92:c1:be:ee:ba:b8:f9:07:55:be:bf:fb:8f:9f:51:
                    1d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E7:E0:FF:79:1A:33:5C:08:8E:32:01:F3:D2:29:0C:F5:CB:12:CC
            X509v3 Authority Key Identifier:
                keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:b0:e0:6c:d7:1f:f9:45:36:6f:d6:c4:ad:29:20:0d:b9:0d:
         ee:12:44:ec:e5:85:f1:4f:72:47:fd:ab:00:62:cf:21:c3:23:
         ab:3c:41:ed:3c:97:4f:a1:82:bd:e3:be:02:8b:44:d9:d8:4a:
         21:83:61:99:fb:e5:2a:46:cd:a5:7a:02:29:b4:8a:74:ca:bc:
         81:3c:48:7d:c9:89:28:be:68:48:f2:31:b3:85:47:4e:ac:3e:
         e2:00:0a:1f:65:83:d6:2e:d5:6a:9e:d1:85:27:55:39:1b:e1:
         92:33:48:79:fb:db:53:35:3a:e5:72:6f:2c:ed:29:d8:b3:88:
         ec:fe:25:24:dd:8a:ba:40:c8:3c:05:74:37:30:ef:0b:43:3c:
         54:0a:04:4d:0b:ef:de:9d:40:0d:98:73:9e:a4:2c:8f:17:bf:
         e1:be:aa:46:3c:4b:60:b0:8a:26:aa:ec:bd:af:7b:83:b3:52:
         7a:d5:96:dd:20:72:a6:12:d0:ce:f4:b0:a7:07:e9:f7:ef:0b:
         80:85:a7:42:eb:f4:98:33:75:ef:ae:6d:e1:68:62:db:61:86:
         69:e3:8b:16:5a:40:b5:84:f6:9b:a0:5f:71:27:df:bf:c1:83:
         1f:dc:2b:de:57:ce:09:3f:0e:83:b8:17:6c:24:dc:72:6d:a6:
         4f:a8:e1:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:16:30 2026 by rpki-client