Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File:                     m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier:          HN+pLtsAHFUg/o1Kvzooluy+qCUCktSQ5AsJs6LRJ+I=
Subject key identifier:   34:BB:97:4A:E1:39:7E:A8:8E:C3:0A:FA:E3:35:92:97:58:3E:94:A4
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer:       /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial:       019F905A9831B41E8A896408A50678AC6373
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number:          195A
Signing time:             Thu 23 Jul 2026 19:01:24 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:24 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:24 +0000
Files and hashes:         1: cjkYRf3Yh9WpwKdD5YYzfaFNvWw.roa (hash: 3gq9vL58U08Go4S/2DXWUX5EoB3kYBslnaNgZp37wkE=)
                          2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: Oh0vDTTDAWm5Ehhrg7rxXNd0EHNBQ0CzWgHeYbbYlEA=)
                          3: msBIl7hzmZuQkbrJ6sui74p1Pgg.roa (hash: 1/8Tc8pewIiwrYAG9YY8GUqoXDl/4u6a8D5S98uRMyA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:98:31:b4:1e:8a:89:64:08:a5:06:78:ac:63:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
        Validity
            Not Before: Jul 23 19:01:24 2026 GMT
            Not After : Jul 24 19:01:24 2026 GMT
        Subject: CN=34bb974ae1397ea88ec30afae3359297583e94a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:3a:3c:bf:7f:3c:8f:c0:31:4c:9c:a0:67:76:
                    08:ca:bf:c1:d9:d3:92:49:96:cb:9e:b5:16:ed:b9:
                    1c:fa:eb:39:53:d0:17:28:1d:f2:df:e4:57:86:93:
                    53:f3:02:61:70:40:6f:91:b5:04:35:f2:ab:27:db:
                    c9:9a:7a:e3:2e:48:f3:d5:fa:97:80:15:01:a5:68:
                    9f:44:66:7a:a3:50:e1:b1:63:31:9f:f4:48:36:b1:
                    2f:30:73:a7:aa:3e:2f:8d:68:df:f3:89:ae:e6:32:
                    32:7b:97:8e:f2:8b:41:13:c3:ce:aa:7a:5f:27:5b:
                    fc:11:bb:1e:08:b3:a6:7c:e1:f6:08:eb:af:7a:fe:
                    ce:1a:be:e1:97:e3:0f:da:06:96:d5:0a:bd:9e:b4:
                    ae:09:d3:f0:c9:2d:38:3c:96:e9:71:d1:be:cf:b2:
                    9f:90:4b:1b:a8:d3:cf:4b:49:a7:77:94:0e:ff:63:
                    e4:de:6a:8d:01:27:db:fb:05:1f:7a:c2:8a:f7:a7:
                    69:41:c2:be:64:bd:25:ba:07:8f:66:c7:08:92:03:
                    52:7f:ed:64:97:c5:cf:61:e9:49:d8:c3:2f:72:6e:
                    4d:82:0e:29:3d:0e:14:c0:3a:96:44:87:66:23:36:
                    92:1a:0c:2c:03:87:31:29:e2:b3:18:7d:62:a0:4c:
                    b1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BB:97:4A:E1:39:7E:A8:8E:C3:0A:FA:E3:35:92:97:58:3E:94:A4
            X509v3 Authority Key Identifier:
                keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:aa:db:9b:f9:87:f8:85:b0:16:57:f8:fe:45:77:95:b8:76:
         ec:24:b4:eb:22:7d:b4:f8:8f:2e:cc:0d:09:1a:0d:8d:01:d4:
         e4:cf:26:78:f1:66:59:28:b4:0a:68:52:78:65:50:0d:3f:cb:
         3e:a0:b5:da:de:79:69:50:a0:a7:fd:5a:2d:93:3e:df:67:02:
         8c:76:3d:78:53:0d:a2:e7:ca:d3:8d:ae:b0:17:db:16:16:76:
         ae:99:92:42:e3:0a:39:7c:79:73:b0:37:3f:ba:77:c8:0a:67:
         45:1d:ce:f9:c4:57:df:e0:f2:49:aa:ef:f1:f6:8c:11:cb:2e:
         fe:93:da:1f:ee:db:29:a0:b4:5b:4c:18:62:f8:74:c0:80:29:
         bd:72:7e:d8:b3:84:95:85:66:af:2a:a1:28:e1:1f:4d:5a:83:
         6f:81:5f:68:78:36:af:0e:05:57:78:7e:7b:57:b6:18:7b:ce:
         4c:40:f7:cc:69:90:29:18:c3:02:a3:0d:df:a6:57:ce:7b:a6:
         2c:a2:2e:a3:12:e6:47:dd:00:7a:a1:fe:2c:b5:67:1c:03:91:
         bc:e3:a1:44:77:52:68:3e:c3:c3:cd:b2:65:19:39:b2:c9:4d:
         62:09:6c:b8:bc:6f:99:a6:f9:24:78:03:9a:da:ec:8b:d8:63:
         ca:f6:cf:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWpgxtB6KiWQIpQZ4rGNzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTMzN2JkMWE3YzVlZTljNTdhNzNiMGEzM2M2MTIxOWNk
MmE5Y2IwHhcNMjYwNzIzMTkwMTI0WhcNMjYwNzI0MTkwMTI0WjAzMTEwLwYDVQQD
EygzNGJiOTc0YWUxMzk3ZWE4OGVjMzBhZmFlMzM1OTI5NzU4M2U5NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6To8v388j8AxTJygZ3YIyr/B2dOS
SZbLnrUW7bkc+us5U9AXKB3y3+RXhpNT8wJhcEBvkbUENfKrJ9vJmnrjLkjz1fqX
gBUBpWifRGZ6o1DhsWMxn/RINrEvMHOnqj4vjWjf84mu5jIye5eO8otBE8POqnpf
J1v8EbseCLOmfOH2COuvev7OGr7hl+MP2gaW1Qq9nrSuCdPwyS04PJbpcdG+z7Kf
kEsbqNPPS0mnd5QO/2Pk3mqNASfb+wUfesKK96dpQcK+ZL0lugePZscIkgNSf+1k
l8XPYelJ2MMvcm5Ngg4pPQ4UwDqWRIdmIzaSGgwsA4cxKeKzGH1ioEyxTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS7l0rhOX6ojsMK+uM1kpdYPpSkMB8GA1UdIwQY
MBaAFJtTN70afF7pxXpzsKM8YSGc0qnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQt
MmVmNzE2NWIyMWI1LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQtMmVmNzE2NWIyMWI1
LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaqrbm/mH
+IWwFlf4/kV3lbh27CS06yJ9tPiPLswNCRoNjQHU5M8mePFmWSi0CmhSeGVQDT/L
PqC12t55aVCgp/1aLZM+32cCjHY9eFMNoufK042usBfbFhZ2rpmSQuMKOXx5c7A3
P7p3yApnRR3O+cRX3+DySarv8faMEcsu/pPaH+7bKaC0W0wYYvh0wIApvXJ+2LOE
lYVmryqhKOEfTVqDb4FfaHg2rw4FV3h+e1e2GHvOTED3zGmQKRjDAqMN36ZXznum
LKIuoxLmR90AeqH+LLVnHAORvOOhRHdSaD7Dw82yZRk5sslNYglsuLxvmab5JHgD
mtrsi9hjyvbPZg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:58:03 2026 by rpki-client