Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
File:                     _OoI6EId8vJFx8szPudqFKiILUo.mft (raw, json)
Hash identifier:          t0TNqUDmuQA0U8bxc3i8VayPiIn5LmKU4tn7zwyUw4w=
Subject key identifier:   62:4A:47:DB:8E:14:E0:96:DE:C5:FB:CF:C2:B8:01:E3:25:BB:42:2F
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Certificate issuer:       /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial:       019FAA198519C0FA09F5355464758E8B372A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 19:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:26 +0000
Files and hashes:         1: 102NyqwI6NUjHs7bCvz-B7agUdM.roa (hash: 5hj0xFAny5+vtgd3t6VT//Hd2v6CocMrOduYjNO+NI4=)
                          2: 1nVHIu-5n51i9XhRUguwo5Agsgg.roa (hash: gfFsI93bvHGfawYL3os2AP8o+JuPoCqZf2VysVyBfmc=)
                          3: LAOAzix8Zi6Y7eROUhiHseM7d1U.roa (hash: Qhgem+rCCIPGj27tJdRK6lacEFlZtLP66ADVBe3CFfA=)
                          4: _OoI6EId8vJFx8szPudqFKiILUo.crl (hash: +xwlxpHqQACQssPs6gWLjCBE0+Ifo+yc1D2iOuKIhYE=)
                          5: vtzoMlVsaR1SjsCwCY3vHw4SD88.roa (hash: l1imowCkVJ1ojfww3ZUzrxP/ubYhQS8cf2hc3Hjykbs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:85:19:c0:fa:09:f5:35:54:64:75:8e:8b:37:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
        Validity
            Not Before: Jul 28 19:00:26 2026 GMT
            Not After : Jul 29 19:00:26 2026 GMT
        Subject: CN=624a47db8e14e096dec5fbcfc2b801e325bb422f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:8b:1d:8f:14:86:23:ea:05:66:2c:ba:4c:
                    e1:b8:51:d6:bd:23:70:02:db:a7:d2:0d:a1:0e:c0:
                    55:bd:2b:d8:12:cb:b7:dc:61:4c:54:46:80:db:07:
                    93:c3:ce:b6:8a:c4:a2:0a:44:65:57:1e:82:e8:42:
                    04:68:35:62:8d:a2:ec:87:ed:e0:6a:a7:a2:b2:55:
                    dd:e8:4c:ca:4a:3a:5e:4e:fe:ec:02:02:38:c5:f3:
                    6a:de:f2:36:ea:63:df:b4:8d:c2:22:59:1b:41:dc:
                    cf:fd:89:da:cf:5e:92:61:0b:66:96:2b:dc:6e:3f:
                    12:88:78:17:c6:d0:ae:a9:47:84:20:fd:c6:5b:88:
                    1d:aa:1f:2a:3e:7f:70:d2:95:c4:c9:bf:dc:f0:54:
                    f5:96:3c:32:f6:37:79:60:10:a7:85:7e:91:ab:84:
                    06:01:ae:7d:da:4d:d1:1a:4a:dd:d9:d2:f5:df:f9:
                    60:6c:4c:20:a4:d1:02:1c:bb:78:d0:33:9e:d3:d2:
                    01:e9:35:d9:c2:2b:11:3f:8e:d8:62:dc:bb:f8:fe:
                    57:c6:7f:30:c4:aa:bb:ab:fe:50:e1:be:f4:28:f1:
                    af:cc:85:01:cb:8d:88:dd:b0:4d:05:a4:9d:b9:48:
                    0e:b7:8f:61:19:44:1c:c2:8b:8a:87:21:3d:01:be:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:4A:47:DB:8E:14:E0:96:DE:C5:FB:CF:C2:B8:01:E3:25:BB:42:2F
            X509v3 Authority Key Identifier:
                keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:91:4e:4d:ed:76:0b:51:00:2b:79:34:69:2f:7c:33:e2:98:
         02:f7:7f:95:ad:a3:ca:b4:f8:56:05:45:9a:a3:9a:ee:86:5f:
         2e:46:75:15:3c:90:6d:1f:86:6a:7c:bd:bb:2f:c4:8a:94:80:
         a9:85:89:73:e6:44:34:06:bc:e3:1e:f8:fd:44:9b:96:2a:5f:
         e1:d5:a2:b8:15:3f:2b:b0:ec:0a:c0:dc:3d:95:d3:72:b3:1b:
         22:fd:e3:53:c3:1f:fa:a3:e5:4a:69:23:b7:75:18:5e:da:d8:
         c3:c2:8b:0c:64:22:37:22:68:61:17:e6:4a:7f:85:54:0e:be:
         29:41:e1:06:9c:fa:d0:ea:db:3d:91:d0:85:f6:16:f1:e2:f2:
         9a:bd:5e:44:71:f5:94:b6:f7:3d:c4:16:bb:8c:de:57:90:15:
         24:95:71:f5:54:08:34:1a:62:0a:03:23:a4:ff:49:e1:e8:66:
         80:b2:c0:27:34:8c:43:93:8e:49:77:11:56:e9:75:e4:c3:9f:
         fd:34:03:10:40:a4:69:39:0a:0c:65:bb:5e:98:28:8e:f6:b8:
         69:4a:6c:46:83:e8:e6:35:e0:da:b9:20:4a:d1:03:a4:14:34:
         49:50:60:9b:6a:15:f3:b3:0c:f0:8f:7c:50:c2:78:53:12:64:
         2b:01:2a:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:42:51 2026 by rpki-client