Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
File:                     1-Zq-RfIfEuS4AvMJREwkdZAA688.mft (raw, json)
Hash identifier:          xuzdIFwJoKREE3QZBOe4k5xprUDMR27/TffgEngnlC4=
Subject key identifier:   EE:DB:BE:DC:07:79:F5:FC:F9:B3:E8:3B:72:6B:83:BE:09:97:D7:2C
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Certificate issuer:       /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial:       019FA93E2B932AED28D59DC76F250D42A20B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 15:00:51 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:51 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:51 +0000
Files and hashes:         1: 1-Zq-RfIfEuS4AvMJREwkdZAA688.crl (hash: ewzJnYHRdkXfjodHYY3qijtYauWWZXKgPe6Su0vEtN4=)
                          2: jcfKGbQz1qnhTGap3aNlvjbY_PE.roa (hash: U5EqxnRh9X9yMHUKWkXGl9r7bwjPH+bTHFfUvq5SIl4=)
                          3: t8JuvA_vhb4W5m-qqwK3zHuGsyA.roa (hash: FDUw+pc8vLRfzGQdAP47yUYCrzZ18DAW4vtpi+PI2Qo=)
                          4: uUrqBhh3OXly7eOQWNASPejUHp8.asa (hash: RetXR2CIKbeJVmkMUmUQ4OnKEpmaGDtgHyAAr0pvXgE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:2b:93:2a:ed:28:d5:9d:c7:6f:25:0d:42:a2:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
        Validity
            Not Before: Jul 28 15:00:51 2026 GMT
            Not After : Jul 29 15:00:51 2026 GMT
        Subject: CN=eedbbedc0779f5fcf9b3e83b726b83be0997d72c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:ab:f4:5d:62:1d:b4:eb:3c:1e:40:90:76:
                    e8:69:bb:5e:8f:df:5a:90:fd:fd:93:12:27:3e:fe:
                    02:f8:35:97:24:48:a1:f4:f0:35:e3:d1:ea:31:7e:
                    7f:d7:43:73:31:da:01:ff:c4:cb:3c:21:c5:9c:ea:
                    c8:8e:00:3d:f6:b9:31:7f:7e:27:d6:46:a0:8c:53:
                    e1:3b:00:da:7f:18:0b:1e:da:49:35:5a:12:06:c1:
                    1e:0c:48:83:0d:21:62:b6:51:35:5a:52:a4:e6:4c:
                    47:f3:58:75:c4:14:75:8a:a5:90:05:c5:c7:8e:ba:
                    5a:4f:97:2b:b7:5b:a3:67:27:6c:d3:2b:99:bc:46:
                    e6:4a:54:f6:20:aa:98:7d:76:1b:30:53:2a:1c:4d:
                    ad:23:71:8b:70:56:9e:1c:70:b0:2f:2d:0d:d8:fe:
                    d6:2e:81:0a:05:d0:bc:14:1d:8c:55:3d:29:0a:69:
                    70:2a:da:58:9e:66:ca:fa:91:74:b6:ce:93:71:07:
                    b4:04:de:51:66:ae:6b:6a:c6:43:a7:36:42:fe:fb:
                    ff:4f:a5:a3:05:50:30:50:c2:32:4c:3d:11:3a:04:
                    61:06:16:04:73:80:2a:85:f9:ff:ff:04:a3:43:35:
                    c2:60:ea:a0:c6:4a:71:ca:8c:96:49:a1:55:4a:18:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:DB:BE:DC:07:79:F5:FC:F9:B3:E8:3B:72:6B:83:BE:09:97:D7:2C
            X509v3 Authority Key Identifier:
                keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f7:71:bd:5c:df:a3:1d:6f:95:7a:3a:8f:66:42:26:29:56:
         b2:ba:b3:a5:cc:5a:a7:1d:4a:a8:3b:bd:e4:3c:88:66:cf:30:
         84:88:29:b9:e1:9b:d4:57:d6:0d:b4:d2:30:8d:1d:31:27:f1:
         0e:09:1f:a2:c8:cc:a6:de:e6:24:ac:21:fc:ff:46:93:dc:2e:
         29:a5:d4:69:ce:05:ab:24:e5:f8:af:cb:ca:57:c3:e3:f7:4a:
         a1:dd:25:d0:af:d1:fd:30:80:39:07:af:5c:d2:e1:76:94:79:
         5a:0c:22:80:db:9d:53:ee:a6:66:f0:a9:d0:20:1b:2d:40:9a:
         43:1d:cf:50:f4:09:e3:f9:b9:1e:f3:1c:e4:7c:43:90:fb:64:
         71:0f:ca:a2:22:a2:63:51:de:95:3c:71:24:c9:cb:3a:12:cc:
         82:21:0c:a0:ce:0d:36:b7:9d:66:4b:98:83:0c:75:c7:0b:9b:
         18:d0:23:3b:98:07:a5:64:82:7c:40:9f:1b:86:9d:9a:83:2f:
         9e:38:59:01:ec:da:a2:73:ae:7d:ed:4d:28:d8:01:73:29:54:
         26:8e:c6:00:3f:d4:8a:7a:e2:26:e8:e0:b0:1c:6a:84:13:50:
         60:54:02:52:10:b3:a6:42:13:6f:ea:ba:e1:f3:37:72:98:e8:
         52:da:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:11:00 2026 by rpki-client