Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
File:                     9JdnPHjvrl9r2AolrOPTw3GT54k.mft (raw, json)
Hash identifier:          yu15kw8RBQydwpITtKLyUr4iX03xFZBQPyw5qP+Vo60=
Subject key identifier:   B0:17:CE:03:3F:59:1F:E8:89:FA:8D:C3:7D:F4:2A:6A:45:53:B9:F1
Authority key identifier: F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89
Certificate issuer:       /CN=f497673c78efae5f6bd80a25ace3d3c37193e789
Certificate serial:       019F8FEBD69ECD74520E7E6DF78EF75E0121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
Manifest number:          19C5
Signing time:             Thu 23 Jul 2026 17:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:25 +0000
Files and hashes:         1: 9JdnPHjvrl9r2AolrOPTw3GT54k.crl (hash: bGuabVwtZloffLV9iWF9sxdcS2nrxuknVIlpl4khqEM=)
                          2: Gf4Y2IXrfbYCUuna8-5oBQzErx8.roa (hash: CBRZQkgyapVEnN+KlGzYptdXDl00PSWBvuMGdvm4uCg=)
                          3: Lnic-b8RKeW1rpPqbvXKHlom-ys.roa (hash: 2KTr1u+98H46S2uNewgTQPp+snCfpr8r+A46P3ahmR4=)
                          4: QgOgFw4UH1rEK_nYcUfssK2TyQQ.roa (hash: K9uUssgaA9Cw/QN8kWZlExQkvdqZ4stsO6RuK8HpBDo=)
                          5: TyGVkDRU5VuGCHmgtXtvADqB47k.roa (hash: zZ1WNsnAjF4PPiuPy/odw3fOv3vMdCoVvaWlx1hFRXc=)
                          6: qm1N6afKIHDIeVkklPLOLKGaS4s.roa (hash: ewBUJyCJZqBY4ReNaWU+ZIFZCEk2IZ7kEhQ4Bd+n260=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:d6:9e:cd:74:52:0e:7e:6d:f7:8e:f7:5e:01:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f497673c78efae5f6bd80a25ace3d3c37193e789
        Validity
            Not Before: Jul 23 17:00:25 2026 GMT
            Not After : Jul 24 17:00:25 2026 GMT
        Subject: CN=b017ce033f591fe889fa8dc37df42a6a4553b9f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:73:f1:f3:19:c4:99:8c:b3:7e:98:bc:dd:cc:
                    84:9c:28:67:42:e6:a8:9a:51:75:21:37:ca:0c:47:
                    e7:92:30:11:3b:46:30:14:fd:71:8f:19:a4:da:a3:
                    d4:0f:87:7c:d0:cd:da:94:4c:65:30:08:f3:71:17:
                    e2:7a:5a:8f:a1:9f:d1:80:46:0d:53:74:65:e6:69:
                    68:2c:7f:4f:51:a6:27:10:7e:63:79:1b:fa:83:38:
                    aa:88:05:47:11:59:70:83:50:92:2d:54:7f:11:f3:
                    72:dc:09:70:c4:47:ac:21:1d:cf:0e:e5:16:6e:46:
                    e1:d9:10:9a:34:98:17:bf:68:b2:30:6a:15:9c:b2:
                    b0:c1:6c:23:59:9b:d1:ae:eb:38:72:6e:6c:c7:eb:
                    5d:57:db:69:62:19:a6:a2:78:33:02:76:ac:eb:81:
                    d5:69:ea:11:23:a5:1d:a4:b4:ed:58:e0:06:ae:de:
                    e7:2d:1d:fe:f4:fa:e2:21:52:b4:24:48:44:6e:e8:
                    1a:39:45:2c:d2:94:bf:40:4b:2a:a9:a4:db:cd:ca:
                    3c:97:b9:73:c9:a7:42:1a:1e:0d:57:03:6e:ba:0a:
                    55:fc:9b:af:c7:07:61:b6:40:de:6a:a7:dc:d5:09:
                    58:48:1f:c8:af:c8:42:1b:9d:64:c8:26:ba:cb:a6:
                    1f:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:17:CE:03:3F:59:1F:E8:89:FA:8D:C3:7D:F4:2A:6A:45:53:B9:F1
            X509v3 Authority Key Identifier:
                keyid:F4:97:67:3C:78:EF:AE:5F:6B:D8:0A:25:AC:E3:D3:C3:71:93:E7:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9JdnPHjvrl9r2AolrOPTw3GT54k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/d13658-af7e-4d6e-82ef-6e0696fee8e6/1/9JdnPHjvrl9r2AolrOPTw3GT54k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f0:05:36:98:b8:c5:4a:97:01:56:68:a9:29:d5:3f:25:1e:
         4a:1d:0f:2e:8d:51:67:b4:cc:6d:e2:41:0d:e5:c4:64:f2:a6:
         9b:04:ac:fc:14:74:88:38:e3:3b:3a:6a:da:0f:9a:91:d6:02:
         80:94:6d:ff:70:21:61:78:50:78:50:a0:08:02:da:92:df:43:
         91:a6:95:1d:12:4e:f6:92:5a:70:46:17:58:16:01:5e:94:fc:
         56:bf:e9:75:23:f4:0e:d6:fd:3f:10:0e:d7:53:b0:79:dd:8f:
         6e:51:3a:f3:71:1c:54:af:06:39:50:e5:48:71:42:fa:d5:2d:
         30:66:61:de:66:dc:67:77:60:ae:90:ee:d0:7f:82:16:36:67:
         98:45:15:a9:49:f3:09:3a:87:37:ec:15:ee:6d:1c:ef:52:82:
         01:cb:87:f3:88:5f:a6:f4:2e:66:2c:9f:e1:ba:9f:44:f7:57:
         3b:01:6a:d7:50:e4:ef:21:15:39:8a:d0:6a:65:f1:be:3f:30:
         62:ff:53:b0:0a:78:6d:9f:b5:e5:89:f1:e5:3b:2b:f1:c6:d9:
         9e:b2:a1:31:70:fb:39:3f:16:5a:d4:20:84:40:fa:db:cb:2c:
         ff:8a:8b:2b:db:00:9e:dc:08:80:30:b4:44:db:1a:f2:22:ce:
         ea:93:83:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P69aezXRSDn5t9473XgEhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OTc2NzNjNzhlZmFlNWY2YmQ4MGEyNWFjZTNkM2MzNzE5
M2U3ODkwHhcNMjYwNzIzMTcwMDI1WhcNMjYwNzI0MTcwMDI1WjAzMTEwLwYDVQQD
EyhiMDE3Y2UwMzNmNTkxZmU4ODlmYThkYzM3ZGY0MmE2YTQ1NTNiOWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Px8xnEmYyzfpi83cyEnChnQuao
mlF1ITfKDEfnkjARO0YwFP1xjxmk2qPUD4d80M3alExlMAjzcRfielqPoZ/RgEYN
U3Rl5mloLH9PUaYnEH5jeRv6gziqiAVHEVlwg1CSLVR/EfNy3AlwxEesIR3PDuUW
bkbh2RCaNJgXv2iyMGoVnLKwwWwjWZvRrus4cm5sx+tdV9tpYhmmongzAnas64HV
aeoRI6UdpLTtWOAGrt7nLR3+9PriIVK0JEhEbugaOUUs0pS/QEsqqaTbzco8l7lz
yadCGh4NVwNuugpV/JuvxwdhtkDeaqfc1QlYSB/Ir8hCG51kyCa6y6YfUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLAXzgM/WR/oifqNw330KmpFU7nxMB8GA1UdIwQY
MBaAFPSXZzx4765fa9gKJazj08Nxk+eJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYt
NmUwNjk2ZmVlOGU2LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9kMTM2NTgtYWY3ZS00ZDZlLTgyZWYtNmUwNjk2ZmVlOGU2
LzEvOUpkblBIanZybDlyMkFvbHJPUFR3M0dUNTRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG/AFNpi4
xUqXAVZoqSnVPyUeSh0PLo1RZ7TMbeJBDeXEZPKmmwSs/BR0iDjjOzpq2g+akdYC
gJRt/3AhYXhQeFCgCALakt9DkaaVHRJO9pJacEYXWBYBXpT8Vr/pdSP0Dtb9PxAO
11Owed2PblE683EcVK8GOVDlSHFC+tUtMGZh3mbcZ3dgrpDu0H+CFjZnmEUVqUnz
CTqHN+wV7m0c71KCAcuH84hfpvQuZiyf4bqfRPdXOwFq11Dk7yEVOYrQamXxvj8w
Yv9TsAp4bZ+15Ynx5Tsr8cbZnrKhMXD7OT8WWtQghED628ss/4qLK9sAntwIgDC0
RNsa8iLO6pODNA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:27:08 2026 by rpki-client