Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
File:                     T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft (raw, json)
Hash identifier:          67a/9IXc900BdxtV8dYWmeC7XRgaA8UL2ixgQN6Hq58=
Subject key identifier:   1A:61:22:BC:16:07:B6:EE:B4:34:9D:A3:68:8D:F5:FB:3B:40:99:92
Authority key identifier: 4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A
Certificate issuer:       /CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
Certificate serial:       019F8ED9894391F27DE4DFFE200DC8BC23AC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
Manifest number:          C9
Signing time:             Thu 23 Jul 2026 12:00:48 +0000
Manifest this update:     Thu 23 Jul 2026 12:00:48 +0000
Manifest next update:     Fri 24 Jul 2026 12:00:48 +0000
Files and hashes:         1: T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl (hash: /imOD2lU2urAzrAnMnUM4RdN8MYgzMqxQmeroUi4bD0=)
                          2: Yw4KeJZQd4fDI6XgNROc612klZ8.roa (hash: ksqJ6JeWEi7OT1uotIS0TGh2mFny8Jt60myfEmkHw/w=)
                          3: uU9s_hgnyGbwJP-PZge6doa0Dj0.roa (hash: IozYYJrZLQXcxcMBB1MOmIfAjaC0gRCqNhs5hWCQTC4=)
                          4: wZtpSjAJt4SmvvP0YnSsE7TQrWE.roa (hash: 5MBdGENxe3OadAvEH+VeBbaYBKVIJ8gWBwpRTn1w1GM=)
                          5: yclqX8OxwLUeoLNmUdSazDYDII4.roa (hash: Rr2Lk5K8PcJhPAAwTj/NBcChacy1opQ3AXffZPPG+hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:89:43:91:f2:7d:e4:df:fe:20:0d:c8:bc:23:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4b2aab1d67f6d4c058392b9137bd03228f7d2a
        Validity
            Not Before: Jul 23 12:00:48 2026 GMT
            Not After : Jul 24 12:00:48 2026 GMT
        Subject: CN=1a6122bc1607b6eeb4349da3688df5fb3b409992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d0:0f:eb:be:99:28:4f:40:7c:d8:82:78:bc:
                    6b:63:a3:b3:3e:4b:2c:a7:81:1a:ff:b9:23:32:3d:
                    34:ab:ea:25:b0:3b:9a:c0:1d:0f:56:a0:22:ab:3d:
                    e2:7f:75:86:58:8d:66:7a:33:32:63:eb:1d:0f:b3:
                    ae:3e:04:ae:f3:b2:83:7e:42:4f:a1:aa:5e:d8:6b:
                    2c:f0:5e:e0:5d:9c:a6:0b:f8:ef:b1:75:1d:16:5a:
                    61:e6:ca:79:a3:4d:74:5c:2f:d2:5a:ee:80:47:e9:
                    ea:c6:28:65:3c:6c:23:42:55:26:25:63:3a:09:a6:
                    d5:74:1f:39:6d:55:41:18:17:e1:ac:e8:a6:f0:10:
                    c1:f0:d7:37:1e:d6:f4:35:ae:f0:d3:64:f0:fb:12:
                    67:48:b7:74:c0:44:f4:5e:84:ff:48:d6:ac:fd:36:
                    1c:fe:ba:0c:0f:3e:99:1e:45:4e:4b:26:29:dd:db:
                    3c:03:b8:43:fa:05:47:bd:97:4f:b1:97:67:e8:9c:
                    a5:e8:a0:30:27:7e:2d:a4:dc:b4:84:a8:ec:e6:62:
                    95:8f:55:3e:19:57:4c:f2:c7:d8:7e:ee:10:84:c9:
                    c8:eb:10:8b:79:55:ca:82:f7:f8:f5:e9:50:53:e0:
                    98:7c:f9:43:72:6a:9d:6b:16:12:00:c7:04:58:69:
                    e3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:61:22:BC:16:07:B6:EE:B4:34:9D:A3:68:8D:F5:FB:3B:40:99:92
            X509v3 Authority Key Identifier:
                keyid:4F:4B:2A:AB:1D:67:F6:D4:C0:58:39:2B:91:37:BD:03:22:8F:7D:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0sqqx1n9tTAWDkrkTe9AyKPfSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/080e92-fffe-47d9-a6e2-c238eae0663b/1/T0sqqx1n9tTAWDkrkTe9AyKPfSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:22:41:f1:d5:43:b4:92:ae:22:cd:3c:34:3e:a3:d6:de:54:
         e3:51:a3:4a:02:86:c2:ff:67:85:ac:9f:5d:23:5a:1d:3d:10:
         ad:e0:d5:4e:8b:f8:f2:56:ec:b7:0f:05:c1:54:31:c8:34:89:
         7b:77:6a:05:4e:79:dc:9f:5f:dd:c0:f9:bb:89:7d:e7:ce:02:
         ca:93:42:9f:9c:22:d6:38:c9:f4:43:68:39:0c:ac:15:09:76:
         54:3d:aa:ce:d3:10:0b:57:23:df:9d:43:68:2f:89:e6:42:a1:
         f2:24:01:50:df:ae:71:b0:7b:b2:d7:31:3e:43:bb:d0:18:ed:
         67:57:63:59:b7:9a:dc:d1:b1:89:a0:82:ae:fd:7d:15:90:87:
         77:2f:88:d1:a1:f8:9e:a3:e4:d1:8d:10:2c:1b:9f:b2:06:10:
         dc:9e:73:b7:11:df:5e:ea:97:69:48:63:6a:8b:b5:1e:47:b3:
         ba:27:91:90:2d:d5:3a:f6:e5:34:e6:be:b0:79:41:f4:82:84:
         d9:d7:75:eb:4b:aa:4f:29:73:e1:2e:12:a4:e2:5b:30:da:c8:
         ee:bd:85:fb:fa:50:2d:e5:d1:56:b7:be:63:7a:d2:1b:c5:87:
         92:88:ff:b8:24:e8:60:6c:02:cd:b8:9a:2a:99:e1:57:a3:e2:
         83:75:b5:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2YlDkfJ95N/+IA3IvCOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmNGIyYWFiMWQ2N2Y2ZDRjMDU4MzkyYjkxMzdiZDAzMjI4
ZjdkMmEwHhcNMjYwNzIzMTIwMDQ4WhcNMjYwNzI0MTIwMDQ4WjAzMTEwLwYDVQQD
EygxYTYxMjJiYzE2MDdiNmVlYjQzNDlkYTM2ODhkZjVmYjNiNDA5OTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtAP676ZKE9AfNiCeLxrY6OzPkss
p4Ea/7kjMj00q+olsDuawB0PVqAiqz3if3WGWI1mejMyY+sdD7OuPgSu87KDfkJP
oape2Gss8F7gXZymC/jvsXUdFlph5sp5o010XC/SWu6AR+nqxihlPGwjQlUmJWM6
CabVdB85bVVBGBfhrOim8BDB8Nc3Htb0Na7w02Tw+xJnSLd0wET0XoT/SNas/TYc
/roMDz6ZHkVOSyYp3ds8A7hD+gVHvZdPsZdn6Jyl6KAwJ34tpNy0hKjs5mKVj1U+
GVdM8sfYfu4QhMnI6xCLeVXKgvf49elQU+CYfPlDcmqdaxYSAMcEWGnjNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBphIrwWB7butDSdo2iN9fs7QJmSMB8GA1UdIwQY
MBaAFE9LKqsdZ/bUwFg5K5E3vQMij30qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDBzcXF4MW45dFRBV0RrcmtUZTlBeUtQZlNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8wODBlOTItZmZmZS00N2Q5LWE2ZTIt
YzIzOGVhZTA2NjNiLzEvVDBzcXF4MW45dFRBV0RrcmtUZTlBeUtQZlNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8wODBlOTItZmZmZS00N2Q5LWE2ZTItYzIzOGVhZTA2NjNi
LzEvVDBzcXF4MW45dFRBV0RrcmtUZTlBeUtQZlNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaCJB8dVD
tJKuIs08ND6j1t5U41GjSgKGwv9nhayfXSNaHT0QreDVTov48lbstw8FwVQxyDSJ
e3dqBU553J9f3cD5u4l9584CypNCn5wi1jjJ9ENoOQysFQl2VD2qztMQC1cj351D
aC+J5kKh8iQBUN+ucbB7stcxPkO70BjtZ1djWbea3NGxiaCCrv19FZCHdy+I0aH4
nqPk0Y0QLBufsgYQ3J5ztxHfXuqXaUhjaou1HkezuieRkC3VOvblNOa+sHlB9IKE
2dd160uqTylz4S4SpOJbMNrI7r2F+/pQLeXRVre+Y3rSG8WHkoj/uCToYGwCzbia
KpnhV6Pig3W1HA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:41:04 2026 by rpki-client