Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
File:                     Y9krglYVmJTSubJfTYWYbBcnI8M.mft (raw, json)
Hash identifier:          NBs6fQaOYYk3U7hiVFVj85wCANB+Og3peYsVkISev+w=
Subject key identifier:   71:0F:5E:35:EF:79:8E:C1:1D:99:C4:3E:36:69:C5:AE:5E:59:0F:E7
Authority key identifier: 63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3
Certificate issuer:       /CN=63d92b8256159894d2b9b25f4d85986c172723c3
Certificate serial:       019F921195B937CA7B1014740E4D20ED462E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
Manifest number:          1191
Signing time:             Fri 24 Jul 2026 03:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:53 +0000
Files and hashes:         1: 1-K_7lWF7x2JD5CuVFElsT4jaLrQ.roa (hash: PKDin6Um4bSNTv37OWWtMgZ7JZ9EcI4/Ix0ai+0uf0w=)
                          2: Y9krglYVmJTSubJfTYWYbBcnI8M.crl (hash: ftU16ht47xZjeKSWtiZKdQKIYluLvkwCNJStDU5Jp5w=)
                          3: xFnp4xhF4j51ZyapByot5v2VVNM.roa (hash: nHijCQmyGonC7rxNnLaWT4q1K25yNVP8EcOiDNsgLp4=)
                          4: xrTDRH7W_ATocCsWo-qnqpB60jc.roa (hash: rcqIWslEK1fTssayqywxJbPZu5Bp13nM9n6B2zco1Xg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:95:b9:37:ca:7b:10:14:74:0e:4d:20:ed:46:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63d92b8256159894d2b9b25f4d85986c172723c3
        Validity
            Not Before: Jul 24 03:00:53 2026 GMT
            Not After : Jul 25 03:00:53 2026 GMT
        Subject: CN=710f5e35ef798ec11d99c43e3669c5ae5e590fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:37:d8:ac:a6:2e:5c:b8:aa:bd:8d:23:67:1b:
                    be:33:d9:af:38:fc:8c:77:eb:8d:95:2d:46:11:87:
                    2a:e8:e7:8a:b9:7e:67:cf:80:50:3b:67:c8:b0:9e:
                    8d:51:83:ab:d3:64:d7:b9:c2:3d:3b:7a:b7:1d:5b:
                    4c:c7:aa:83:77:2a:7d:60:69:61:81:87:52:a6:19:
                    98:15:4a:04:ef:d2:97:0f:ce:7b:74:1f:96:47:1c:
                    44:d6:0f:ac:4c:7e:90:4f:32:3e:a9:a4:3b:0e:f6:
                    ef:74:55:bd:f3:ce:af:f6:5e:e0:cf:73:b1:9e:8a:
                    d3:5b:6a:e6:88:66:a3:c5:cb:bd:a6:48:00:71:de:
                    79:44:25:a7:a6:e9:b8:98:2d:90:83:7a:24:d7:0f:
                    f2:0c:05:cb:e0:62:f4:a3:62:0d:06:9d:5a:21:76:
                    ac:f3:1b:98:43:8f:34:34:eb:f8:4f:f9:55:3f:8e:
                    51:2b:87:1d:dd:20:77:29:d0:80:b8:d9:69:c2:48:
                    68:24:2c:ab:b9:4e:33:f0:97:2a:16:cb:2e:80:3e:
                    cd:cf:c6:eb:94:7c:86:9c:b3:98:2c:4f:32:59:15:
                    ae:d9:f6:fd:c8:b5:96:f7:9e:81:c6:b9:17:ff:21:
                    9e:39:34:38:e4:b1:75:ea:51:e3:8a:3c:23:9a:88:
                    60:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:0F:5E:35:EF:79:8E:C1:1D:99:C4:3E:36:69:C5:AE:5E:59:0F:E7
            X509v3 Authority Key Identifier:
                keyid:63:D9:2B:82:56:15:98:94:D2:B9:B2:5F:4D:85:98:6C:17:27:23:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y9krglYVmJTSubJfTYWYbBcnI8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/26d917-8c91-45ab-8442-e4e52ac0fefe/1/Y9krglYVmJTSubJfTYWYbBcnI8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:f0:fc:94:ef:65:fa:68:90:79:4a:7e:1a:71:be:44:21:a4:
         fe:78:9b:f0:f2:d5:95:6a:dd:8a:41:79:71:b2:0a:f4:e7:e6:
         a0:bc:d2:59:ea:a3:4c:b2:f9:7c:93:00:ab:26:44:9e:ed:2b:
         56:c1:d1:61:a6:4b:94:fd:7b:57:5e:29:15:e0:12:06:7d:e8:
         27:51:cc:cf:90:e0:10:9b:2f:69:a8:c0:67:7c:aa:17:60:b4:
         82:cf:2f:61:05:57:0d:42:0c:e9:c4:bc:54:41:46:eb:6c:c1:
         74:c7:da:51:45:4e:5f:ff:9a:92:d5:b1:95:6b:49:8f:de:39:
         83:c5:70:db:6f:00:69:97:33:27:8e:bc:38:71:32:a3:2d:79:
         03:7f:04:76:c9:00:ba:e4:50:70:4e:f2:9a:ac:94:42:f4:dd:
         7c:11:6c:2c:e5:ca:96:00:e4:0e:14:1e:0c:b8:5e:5b:91:51:
         f8:28:11:dc:76:9c:94:2b:b7:fa:19:07:2a:22:43:9e:63:01:
         33:00:23:24:e0:af:dc:da:3f:6d:01:96:5f:c4:8a:08:9c:e3:
         9e:99:a0:64:29:12:39:d5:e7:82:f0:7f:75:46:21:5c:fd:bc:
         13:cf:25:7b:01:d3:cc:41:15:bd:e3:13:e5:34:ad:c4:c9:8b:
         a8:ed:2d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEZW5N8p7EBR0Dk0g7UYuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZDkyYjgyNTYxNTk4OTRkMmI5YjI1ZjRkODU5ODZjMTcy
NzIzYzMwHhcNMjYwNzI0MDMwMDUzWhcNMjYwNzI1MDMwMDUzWjAzMTEwLwYDVQQD
Eyg3MTBmNWUzNWVmNzk4ZWMxMWQ5OWM0M2UzNjY5YzVhZTVlNTkwZmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojfYrKYuXLiqvY0jZxu+M9mvOPyM
d+uNlS1GEYcq6OeKuX5nz4BQO2fIsJ6NUYOr02TXucI9O3q3HVtMx6qDdyp9YGlh
gYdSphmYFUoE79KXD857dB+WRxxE1g+sTH6QTzI+qaQ7DvbvdFW9886v9l7gz3Ox
norTW2rmiGajxcu9pkgAcd55RCWnpum4mC2Qg3ok1w/yDAXL4GL0o2INBp1aIXas
8xuYQ480NOv4T/lVP45RK4cd3SB3KdCAuNlpwkhoJCyruU4z8JcqFssugD7Nz8br
lHyGnLOYLE8yWRWu2fb9yLWW956BxrkX/yGeOTQ45LF16lHjijwjmohgAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEPXjXveY7BHZnEPjZpxa5eWQ/nMB8GA1UdIwQY
MBaAFGPZK4JWFZiU0rmyX02FmGwXJyPDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDIt
ZTRlNTJhYzBmZWZlLzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8yNmQ5MTctOGM5MS00NWFiLTg0NDItZTRlNTJhYzBmZWZl
LzEvWTlrcmdsWVZtSlRTdWJKZlRZV1liQmNuSThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABfD8lO9l
+miQeUp+GnG+RCGk/nib8PLVlWrdikF5cbIK9OfmoLzSWeqjTLL5fJMAqyZEnu0r
VsHRYaZLlP17V14pFeASBn3oJ1HMz5DgEJsvaajAZ3yqF2C0gs8vYQVXDUIM6cS8
VEFG62zBdMfaUUVOX/+aktWxlWtJj945g8Vw228AaZczJ468OHEyoy15A38EdskA
uuRQcE7ymqyUQvTdfBFsLOXKlgDkDhQeDLheW5FR+CgR3HaclCu3+hkHKiJDnmMB
MwAjJOCv3No/bQGWX8SKCJzjnpmgZCkSOdXngvB/dUYhXP28E88lewHTzEEVveMT
5TStxMmLqO0tdg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:45:48 2026 by rpki-client