Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
File:                     pPhDYAPTdgICa2VTF1XKj80xvtI.mft (raw, json)
Hash identifier:          yrqqklzwh9aqb13fbfMV8lU6zqte0SM3KyeUBNFQzFg=
Subject key identifier:   C7:85:90:90:B1:7E:6B:FE:E3:7F:46:49:0D:40:78:F6:E4:21:45:67
Authority key identifier: A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2
Certificate issuer:       /CN=a4f8436003d37602026b65531755ca8fcd31bed2
Certificate serial:       019FACAC962E52C1D5DB769C8396B79F68BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
Manifest number:          19F4
Signing time:             Wed 29 Jul 2026 07:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:19 +0000
Files and hashes:         1: 1ZJlssHe1cqgH6uhHrvZ5q1B_44.roa (hash: a7NHnkscG6OzvwBm8NXSANt6871rXlNEhgTw4CrzMQc=)
                          2: MH0ePkGiqUNJj92Th9uz7ESBLuY.roa (hash: zEMC++4x++17MQ2QaYX26EoR6rGR9XCEMskuWanLEDo=)
                          3: TL6-YQoL6bM9YzZkFooupL9SKZc.roa (hash: fDKbKxnCCglM7bDeEH0JDX6y2HKlL0aR2oegXj3HyjY=)
                          4: ZSy9I3udyb1w0usAvKavWUhYUuM.roa (hash: NjrlIizcsmC5vnXJgYJk87Yv2k+U89uwtXh718Ex2Oo=)
                          5: lilRXnQbhAs_T-urB33KZ2t0KZQ.roa (hash: U6hwfDfpC6+pNA9h6WSEbMtCWXO/blanxBm4f8SHiVE=)
                          6: pPhDYAPTdgICa2VTF1XKj80xvtI.crl (hash: xRAfdyoRcCUutUZUjTufPEsbtrvFzcLPMoIBqJsVpWk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:96:2e:52:c1:d5:db:76:9c:83:96:b7:9f:68:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4f8436003d37602026b65531755ca8fcd31bed2
        Validity
            Not Before: Jul 29 07:00:19 2026 GMT
            Not After : Jul 30 07:00:19 2026 GMT
        Subject: CN=c7859090b17e6bfee37f46490d4078f6e4214567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:de:29:dc:ee:ae:fc:fe:69:e2:99:8f:10:
                    4d:0d:fb:35:00:7e:6c:5c:8d:f6:93:5c:a2:76:2c:
                    f7:db:23:28:09:c5:2c:1e:52:34:4c:e3:68:63:d8:
                    45:9e:8e:5d:53:46:51:15:ba:6e:f1:a3:08:34:65:
                    04:10:5c:0f:b1:94:d6:63:52:67:51:99:a7:61:ee:
                    dd:4f:b4:49:c5:7f:d1:e3:fb:de:c0:d4:6e:b3:22:
                    e7:d6:75:39:fa:c7:2b:c0:1d:b6:7e:d8:bf:d9:e3:
                    3e:e9:74:78:f5:b7:02:ad:df:fc:9f:a7:a3:83:e6:
                    c0:e6:08:b3:26:b3:79:8d:d8:6b:0e:d3:a4:51:7e:
                    f7:b5:70:a3:b0:96:e3:9d:67:86:33:d9:4b:66:61:
                    eb:00:8d:bb:ab:be:3c:b3:c4:6f:74:25:3a:78:a6:
                    2a:b3:f7:94:ab:8e:77:d2:a2:64:cc:ff:aa:38:83:
                    b6:4d:d3:2b:d7:ba:51:fe:50:9d:ef:6b:b9:e8:a7:
                    51:ad:09:03:70:3b:53:e0:f7:2c:78:26:00:12:27:
                    6b:4f:4e:49:d8:3d:44:ad:8d:2f:31:88:94:19:e7:
                    95:93:30:f8:79:13:75:c1:f5:ed:6c:c2:20:5e:dc:
                    dd:34:1b:91:c8:78:96:cc:2e:04:05:6e:d6:ed:58:
                    f2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:85:90:90:B1:7E:6B:FE:E3:7F:46:49:0D:40:78:F6:E4:21:45:67
            X509v3 Authority Key Identifier:
                keyid:A4:F8:43:60:03:D3:76:02:02:6B:65:53:17:55:CA:8F:CD:31:BE:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pPhDYAPTdgICa2VTF1XKj80xvtI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/515608-5012-4a40-b324-27bf83cded6b/1/pPhDYAPTdgICa2VTF1XKj80xvtI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:71:bc:9b:5c:af:7b:8a:25:69:cf:78:63:84:e0:23:d2:68:
         16:f8:0a:3f:5f:e6:92:cd:7a:a2:d9:d0:e9:72:75:72:a9:41:
         af:ee:fe:f1:1d:39:09:8b:58:81:ed:10:91:36:23:ea:72:a4:
         64:00:fe:80:e0:57:d1:d7:62:af:3c:5f:80:7d:84:a2:98:45:
         5f:ee:5e:50:09:44:81:e7:c2:89:d0:fe:f9:cf:55:dc:49:4d:
         78:18:af:19:80:eb:54:7a:09:47:99:98:c7:ee:23:38:d3:55:
         4a:72:54:8d:f9:d1:14:5d:be:e2:45:ae:b6:82:a8:52:32:6f:
         c0:47:55:66:53:4e:49:cc:3a:ae:9b:f2:df:f3:61:59:2a:72:
         9e:7b:36:15:09:2e:f0:bf:0e:2a:0b:33:ed:1f:11:20:33:d1:
         5a:9b:fb:f7:e6:3e:e4:47:e7:b1:38:58:24:6f:66:5a:eb:d0:
         69:3a:f7:95:de:5d:c6:6d:38:2a:87:03:b7:84:a0:ad:66:d7:
         8c:37:80:09:d2:0f:1a:8c:c3:4d:aa:ca:8e:9c:63:84:c5:0d:
         44:cd:40:af:7d:a5:f0:c4:ac:9d:79:3c:83:ed:3d:1b:ac:4c:
         fa:b2:14:d8:44:98:9b:fb:43:95:d1:af:06:2c:fd:49:ac:30:
         d6:73:a0:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:10:15 2026 by rpki-client