Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          Q8grOxG35p5wC8ypefcuEgIhxBQ1rBvUISua7maIREY=
Subject key identifier:   70:60:58:BE:96:EC:C5:C5:F8:85:05:EE:59:73:8D:4E:24:2B:DE:DB
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       019FAA1A10427D190928F7753DFAC39616FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          1490
Signing time:             Tue 28 Jul 2026 19:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:02 +0000
Files and hashes:         1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
                          2: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
                          3: o_KgOnMxvvekvBuPyEEYSnKNWEc.roa (hash: mk2PcWlp1oVsxXXBvuzmUNaWlANp8uf/qu/yWtEPDuk=)
                          4: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: Dqu0yaBH7SCqEGyetS4gVL/Vvyi+q77l4Ox0nIhe5bg=)
                          5: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
                          6: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:10:42:7d:19:09:28:f7:75:3d:fa:c3:96:16:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Jul 28 19:01:02 2026 GMT
            Not After : Jul 29 19:01:02 2026 GMT
        Subject: CN=706058be96ecc5c5f88505ee59738d4e242bdedb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2f:fc:23:f2:e7:59:da:31:50:25:52:66:10:
                    36:f1:96:0a:a9:aa:a9:cb:e6:68:fc:e7:bc:36:a0:
                    a5:e6:f0:66:d3:0c:64:c9:be:59:89:50:32:39:a6:
                    b3:e4:4b:24:3d:09:48:96:40:0d:d9:1d:ad:e3:0e:
                    ba:3f:47:22:b7:d6:79:fe:9c:a5:ef:09:f7:93:b3:
                    db:6d:74:42:13:06:7a:8f:62:9b:32:83:fa:05:32:
                    c2:08:74:35:bb:fa:10:06:66:85:79:c1:7e:37:22:
                    31:2e:61:ea:38:cd:02:97:c4:99:27:b8:2a:9f:3d:
                    63:94:8d:04:40:bd:1b:d4:14:1b:a8:9d:82:ad:ca:
                    43:61:d8:4b:9c:c0:b6:e3:e3:3f:20:76:fb:54:10:
                    62:f4:d2:9c:74:93:f6:b3:40:0d:f7:ea:d3:3f:f5:
                    ed:87:e9:2f:ec:d1:41:13:c9:db:eb:9d:fb:83:90:
                    b7:ae:c7:f8:0c:6a:ef:ed:00:3e:3f:26:ff:83:64:
                    24:bd:2b:e6:ef:5f:63:bf:58:68:ae:bc:66:17:a3:
                    a6:44:0e:45:b0:d2:52:5b:dd:e1:9a:ff:e3:a5:d6:
                    fb:c1:64:59:86:df:46:88:2e:02:f5:1a:ed:f8:d0:
                    5b:a4:d2:e8:84:4c:db:93:58:5e:17:31:b6:71:d2:
                    d1:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:60:58:BE:96:EC:C5:C5:F8:85:05:EE:59:73:8D:4E:24:2B:DE:DB
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:7c:dd:4e:17:2d:3d:c8:87:41:47:21:22:89:ba:9a:65:fc:
         e3:d5:9f:8e:ac:9b:01:40:41:ca:cc:5f:4c:42:dd:25:87:c9:
         27:96:43:f7:7b:2a:eb:43:de:84:b9:63:65:be:d8:9c:a1:e2:
         26:39:73:24:04:d6:21:56:d1:3c:bb:33:4d:bc:c0:b3:70:3c:
         99:76:09:52:ba:7b:91:e1:f8:12:e8:cd:70:4c:4e:7c:6c:96:
         5b:64:0e:4d:86:ba:bd:6d:37:cd:4c:70:5b:52:1f:e5:94:99:
         03:5c:ab:54:3b:f2:dd:5b:41:d8:14:33:57:fe:5c:a9:bb:48:
         22:7f:69:8a:48:be:e2:7b:2f:18:2b:2a:5f:6c:72:ce:00:36:
         bb:19:cd:fe:54:d0:84:7e:f9:f6:fc:b5:32:05:e1:f9:6a:87:
         27:67:2f:9f:72:c5:33:6c:8d:45:94:33:e3:7d:47:51:c6:d7:
         d4:50:45:d4:d0:95:27:c9:1b:29:a3:36:d1:a2:7f:0d:e8:c2:
         0c:31:f6:f4:94:17:c6:6f:e6:b0:e9:3a:87:8e:69:6c:a0:90:
         8e:ce:d2:f3:00:c0:14:b6:13:48:ab:1e:59:18:30:78:58:dd:
         18:af:d3:96:1f:bf:ac:5e:d3:95:43:d7:e0:be:b4:85:c1:ef:
         51:68:6f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:44:11 2026 by rpki-client