Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
File:                     54O2KriupSB3DFdAS-d3H2eewLU.mft (raw, json)
Hash identifier:          IX/kDEPKy+MEWoV+D/O7mi5K9u4kS3cEz9jJSufY4TE=
Subject key identifier:   5A:50:AD:2F:13:E4:2A:05:96:22:9A:4B:B3:8F:69:9B:60:BE:F1:33
Authority key identifier: E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5
Certificate issuer:       /CN=e783b62ab8aea520770c57404be7771f679ec0b5
Certificate serial:       019F9022E0832249CA32119C971D215FEEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
Manifest number:          195C
Signing time:             Thu 23 Jul 2026 18:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:32 +0000
Files and hashes:         1: 54O2KriupSB3DFdAS-d3H2eewLU.crl (hash: 9a/38aiZFVYDLhF5ENX3wPyPncutY+nqMGyJZX3LYlg=)
                          2: 8ZwMCE0GKxtxHvWw4iCZk5ccrLQ.roa (hash: ihfIEbqwEULTE/OLIE3mqsVCssWQ6XBCkAGO8OC7UiQ=)
                          3: KM-isetfFQ48jT5UlKY2Mm7Ax0Y.asa (hash: 8i1NfCOqJ0Jq8VqPBEJyQbTSUD60u+xKuWbGsqyrU/A=)
                          4: Kn1fdpMjWnhcO_e1XOSq5Q_SqOo.roa (hash: ipV86oOkjGzli6pzk5Ar8vQYROabIbZnZILhX3gNwHo=)
                          5: P7qWrs2V2AQezp3eeUtgLDcatjI.roa (hash: 24DT/UvLaMHn12NZyYMSEhf55ywjNyUpSkfYVKDW1As=)
                          6: m9ne4AYiPOSdzaOHma0RPMHFIXo.roa (hash: CcdNSaFI+Idh1vG8DNWCzWCXN6GNcifanXez8Ab1HsA=)
                          7: slPUQzpAJ12Ih9Jzqnj5F0SKAxg.roa (hash: Nu5TAyzLPZcJp+J4t6JX8dbl8sGpnXq2tX6BxvM07Oo=)
                          8: yd0VNlAOh1ENu0y1pBAFD8ujbvw.roa (hash: bFUcyJVn75mPPcVkoj5xBq3tVwT0rV177XBSyfgCsxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:e0:83:22:49:ca:32:11:9c:97:1d:21:5f:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e783b62ab8aea520770c57404be7771f679ec0b5
        Validity
            Not Before: Jul 23 18:00:32 2026 GMT
            Not After : Jul 24 18:00:32 2026 GMT
        Subject: CN=5a50ad2f13e42a0596229a4bb38f699b60bef133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:93:f7:8f:c7:b7:d2:53:70:d0:59:d9:25:00:
                    4e:4e:96:b3:32:13:b8:f0:0c:ea:d8:aa:b8:61:c7:
                    5a:71:3c:01:73:fa:8e:2a:fc:34:d3:0d:e9:3d:bf:
                    c4:e2:bc:72:62:11:95:b4:9e:3f:20:75:45:cd:a9:
                    cb:d5:f0:d9:39:de:f6:a1:96:14:fb:f7:dd:9a:be:
                    85:71:8d:3e:d6:7d:32:38:4e:8d:7c:32:5e:13:c3:
                    18:47:a2:58:38:5c:4f:db:a1:fc:10:f6:51:4b:45:
                    65:6a:35:9a:16:d3:d9:1e:db:ca:ed:0a:12:f1:74:
                    d5:25:23:b1:d4:7b:c1:7d:97:2a:6b:1e:3e:4e:71:
                    db:a3:b5:4b:de:a4:52:f9:50:3a:35:34:d1:b4:81:
                    1a:e2:b8:3e:f6:86:de:f0:85:6e:cd:eb:cc:f3:25:
                    77:0a:67:5f:75:bc:57:99:27:59:c7:6f:d7:16:f8:
                    ad:f8:38:9e:84:0b:2a:f8:d7:59:6e:8c:9b:04:04:
                    92:88:50:1f:01:0b:81:c6:c7:9f:55:aa:5a:f2:3f:
                    ad:3a:95:bb:59:a4:28:b1:bd:4a:c6:7c:2f:d7:34:
                    16:e5:8f:20:b2:ad:da:80:33:1d:d5:01:4a:bb:1d:
                    87:01:72:25:cc:fe:f2:4e:f4:17:bc:17:1b:c5:50:
                    9c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:50:AD:2F:13:E4:2A:05:96:22:9A:4B:B3:8F:69:9B:60:BE:F1:33
            X509v3 Authority Key Identifier:
                keyid:E7:83:B6:2A:B8:AE:A5:20:77:0C:57:40:4B:E7:77:1F:67:9E:C0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/54O2KriupSB3DFdAS-d3H2eewLU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/fadb3f-dc96-4902-86eb-19df5b4d1014/1/54O2KriupSB3DFdAS-d3H2eewLU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:33:03:2c:e9:da:6c:36:3d:13:8a:e2:39:dc:0f:2a:00:6f:
         35:cf:c4:25:85:d1:9c:4b:8b:b3:d6:68:5f:5c:af:43:8b:a8:
         8e:f1:21:d5:ed:32:f5:00:a7:46:09:ab:84:05:3a:c3:11:2b:
         5f:e6:1c:d7:31:de:5a:e8:cb:68:16:12:41:40:13:e8:7a:0a:
         cf:5a:2b:f3:d7:1f:7d:54:81:d2:90:16:e8:f5:62:2b:02:9e:
         5c:0e:1c:37:b9:ea:1f:c6:23:12:14:fc:8f:3c:b9:dc:9c:dd:
         1f:19:28:b7:24:67:69:ff:86:0c:f3:71:bc:c5:58:18:57:90:
         d9:8e:b0:84:22:d2:2d:e3:72:4d:0a:81:8c:99:ee:35:39:03:
         12:a7:37:32:c7:b9:1a:67:8f:a5:4c:10:6d:51:e0:36:4b:a3:
         98:b5:75:74:70:3a:e3:be:b3:f7:af:ca:44:72:c0:97:18:97:
         0e:cf:50:fe:eb:d3:31:91:28:51:0d:07:d1:07:63:07:a8:b5:
         40:d6:15:ed:cc:f2:c9:42:39:03:b2:c0:73:48:74:84:5f:f3:
         17:95:33:4f:50:9e:ca:6a:b1:0c:0b:4d:d3:01:0a:23:27:49:
         b8:53:7f:ab:fc:b6:75:5f:9d:df:da:3d:f2:70:0c:60:74:0d:
         93:5e:40:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIuCDIknKMhGclx0hX+7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3ODNiNjJhYjhhZWE1MjA3NzBjNTc0MDRiZTc3NzFmNjc5
ZWMwYjUwHhcNMjYwNzIzMTgwMDMyWhcNMjYwNzI0MTgwMDMyWjAzMTEwLwYDVQQD
Eyg1YTUwYWQyZjEzZTQyYTA1OTYyMjlhNGJiMzhmNjk5YjYwYmVmMTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupP3j8e30lNw0FnZJQBOTpazMhO4
8Azq2Kq4YcdacTwBc/qOKvw00w3pPb/E4rxyYhGVtJ4/IHVFzanL1fDZOd72oZYU
+/fdmr6FcY0+1n0yOE6NfDJeE8MYR6JYOFxP26H8EPZRS0VlajWaFtPZHtvK7QoS
8XTVJSOx1HvBfZcqax4+TnHbo7VL3qRS+VA6NTTRtIEa4rg+9obe8IVuzevM8yV3
CmdfdbxXmSdZx2/XFvit+DiehAsq+NdZboybBASSiFAfAQuBxsefVapa8j+tOpW7
WaQosb1Kxnwv1zQW5Y8gsq3agDMd1QFKux2HAXIlzP7yTvQXvBcbxVCcYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpQrS8T5CoFliKaS7OPaZtgvvEzMB8GA1UdIwQY
MBaAFOeDtiq4rqUgdwxXQEvndx9nnsC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWIt
MTlkZjViNGQxMDE0LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mYWRiM2YtZGM5Ni00OTAyLTg2ZWItMTlkZjViNGQxMDE0
LzEvNTRPMktyaXVwU0IzREZkQVMtZDNIMmVld0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAljMDLOna
bDY9E4riOdwPKgBvNc/EJYXRnEuLs9ZoX1yvQ4uojvEh1e0y9QCnRgmrhAU6wxEr
X+Yc1zHeWujLaBYSQUAT6HoKz1or89cffVSB0pAW6PViKwKeXA4cN7nqH8YjEhT8
jzy53JzdHxkotyRnaf+GDPNxvMVYGFeQ2Y6whCLSLeNyTQqBjJnuNTkDEqc3Mse5
GmePpUwQbVHgNkujmLV1dHA6476z96/KRHLAlxiXDs9Q/uvTMZEoUQ0H0QdjB6i1
QNYV7czyyUI5A7LAc0h0hF/zF5UzT1CeymqxDAtN0wEKIydJuFN/q/y2dV+d39o9
8nAMYHQNk15Ahg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:49:27 2026 by rpki-client