Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
File:                     c90olFaK69Ba1kMtU89w4s14jm4.mft (raw, json)
Hash identifier:          wu4pmf1YdHHxDPJqrqahUP7egbI2JLdNXqr69LNrAz0=
Subject key identifier:   F9:5B:50:13:E6:C7:E0:B6:EB:3D:1D:1E:4E:DF:FA:BB:A4:73:42:1D
Authority key identifier: 73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E
Certificate issuer:       /CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
Certificate serial:       019FAC08D7E11689D30D9A074703920BB6B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
Manifest number:          19D5
Signing time:             Wed 29 Jul 2026 04:01:28 +0000
Manifest this update:     Wed 29 Jul 2026 04:01:28 +0000
Manifest next update:     Thu 30 Jul 2026 04:01:28 +0000
Files and hashes:         1: c90olFaK69Ba1kMtU89w4s14jm4.crl (hash: 9PlntuAbqNfBaODJRkIcvlMlfV3FsBrD98IpCRkn4SE=)
                          2: tz2e93GZ_VkXqwiin5UrF6tTl-E.roa (hash: fs9g5+VLu3OTriRVnlbcf2rwqdoNP2oMRyLa0WT622w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:d7:e1:16:89:d3:0d:9a:07:47:03:92:0b:b6:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73dd2894568aebd05ad6432d53cf70e2cd788e6e
        Validity
            Not Before: Jul 29 04:01:28 2026 GMT
            Not After : Jul 30 04:01:28 2026 GMT
        Subject: CN=f95b5013e6c7e0b6eb3d1d1e4edffabba473421d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:b3:ea:dd:73:8c:a6:b6:55:38:0e:a4:0f:86:
                    4f:f5:c9:36:f0:fb:f6:a8:0c:e1:8a:20:70:91:d2:
                    4c:22:3a:ea:c8:9c:b6:60:7f:58:e8:0b:f3:7d:99:
                    31:30:3c:b0:96:a1:d8:e6:10:35:4e:bd:73:89:45:
                    64:bc:69:04:2c:f4:d6:6c:93:21:40:2c:d2:7b:75:
                    34:76:8e:1f:0f:d4:94:dc:df:39:41:e7:df:ba:3c:
                    e8:74:f2:a5:be:e7:bf:68:40:33:36:2d:a3:90:38:
                    c5:39:07:bb:d1:e7:31:a2:ad:59:6d:52:e0:81:47:
                    de:5c:9e:08:61:63:8b:ce:eb:73:39:42:77:ac:64:
                    05:a6:6e:26:76:0e:48:03:82:44:7b:36:42:1e:26:
                    91:d4:f8:a7:5b:1c:5b:26:83:c0:b8:2f:81:1c:44:
                    c2:04:3e:b2:d5:b0:69:22:02:9b:3e:dd:01:a3:05:
                    f5:2f:6d:ad:1f:53:d2:0c:a7:e2:66:c3:c9:9b:67:
                    5d:f1:12:bd:52:82:8c:e5:62:5f:50:44:41:61:a8:
                    25:a0:03:13:b1:74:74:94:fa:c0:a5:25:70:c0:fb:
                    83:59:ea:5d:e7:3b:55:f4:78:6c:82:e1:3e:81:cf:
                    07:62:8e:d2:9f:15:54:cb:96:59:18:f3:dd:c0:38:
                    90:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5B:50:13:E6:C7:E0:B6:EB:3D:1D:1E:4E:DF:FA:BB:A4:73:42:1D
            X509v3 Authority Key Identifier:
                keyid:73:DD:28:94:56:8A:EB:D0:5A:D6:43:2D:53:CF:70:E2:CD:78:8E:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c90olFaK69Ba1kMtU89w4s14jm4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a1d20e-50a2-44dc-b1e8-a67dca8a088c/1/c90olFaK69Ba1kMtU89w4s14jm4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:bb:69:1f:2d:2b:18:57:47:f6:55:1c:b0:f6:34:8a:38:30:
         0f:11:4e:87:a8:8f:a3:c3:66:fc:0a:fc:f2:b2:07:cc:65:2d:
         78:17:8d:d7:82:41:57:bb:2c:e0:47:20:6b:03:01:c8:39:83:
         8d:77:a9:a6:b2:21:95:16:23:8e:ea:8f:c7:55:ed:d3:3e:72:
         89:d2:01:60:bc:b1:a3:70:5a:59:41:5c:ec:2b:52:b5:be:13:
         0d:e9:bb:95:5e:4c:40:20:3c:26:27:44:aa:99:5f:b1:c8:2b:
         0f:c9:e9:07:13:73:53:7e:d1:55:ce:8e:3a:a1:35:f2:30:f5:
         af:40:52:f2:4d:b7:85:b5:7d:5e:e4:66:61:75:6f:9f:d4:f9:
         80:fb:11:1d:ea:a0:e3:b1:55:65:19:af:a2:51:47:d5:d4:00:
         fe:9b:f1:37:57:37:a3:7d:91:7b:fa:bc:bb:09:92:84:1b:82:
         eb:55:9e:04:ec:8e:1d:d6:6e:f3:86:71:57:e6:88:65:45:4f:
         5c:1b:51:57:e7:e0:d0:76:d9:89:ba:0b:3e:48:dc:8e:64:a9:
         90:98:d5:fc:3c:02:9c:d9:1f:65:a3:29:92:b2:05:8f:08:8e:
         18:c6:ae:e7:2b:4b:af:27:94:4a:0a:1d:88:27:29:15:54:2a:
         bb:d9:10:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:36:48 2026 by rpki-client