Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
File:                     nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft (raw, json)
Hash identifier:          vAVa0poXebDSeyoAwj6pdjmYgKehVH2l+NwVNwjY1RE=
Subject key identifier:   F4:E8:DA:9E:F7:9A:23:A5:7A:44:6E:62:77:39:38:72:3C:C7:38:06
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Certificate issuer:       /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial:       019F927FA8F7E098E9EFCA60A0B1657C7C6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 05:01:07 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:07 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:07 +0000
Files and hashes:         1: 1-eiJaBH2kYrPZhQkGjIEcyrY7IM.roa (hash: gzeqOddWkamgLifKoDiz8pUqA/+BC13d2Fw5TMWD4jQ=)
                          2: Zq98Iidw2cw0Zo72hXFz8p4vmU0.roa (hash: QzQp2VEgOsKH9qFSE3tdbQaitBr0SbkYp6vIsvTA6fc=)
                          3: m2iSJFXrSMffknc75dt6nX4q_Ew.roa (hash: PpUMfeh4JgwhVE55OoPUjweIHDdfcBKVjcHcumEVNd8=)
                          4: nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl (hash: icn2glg8s6eyfq6JqGNYQ0MVsfEdPY/ptTZzi4nP2dw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:a8:f7:e0:98:e9:ef:ca:60:a0:b1:65:7c:7c:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
        Validity
            Not Before: Jul 24 05:01:07 2026 GMT
            Not After : Jul 25 05:01:07 2026 GMT
        Subject: CN=f4e8da9ef79a23a57a446e62773938723cc73806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:65:70:cb:7c:3f:65:8a:00:4d:4d:34:5a:
                    d8:06:f2:dc:2f:8f:b8:19:dd:c9:be:2b:de:f3:b5:
                    06:4f:83:64:05:5e:8f:e8:88:5c:67:0a:34:8b:72:
                    9d:43:2d:5a:be:55:0c:8b:2c:bd:3e:ee:38:20:fe:
                    ad:c1:b9:c4:50:82:f4:24:db:61:f6:cf:0c:f8:70:
                    f7:4a:6f:4e:13:20:49:16:a3:42:3c:be:0e:41:11:
                    a0:c2:a1:53:53:34:dc:4b:ba:b6:7e:21:6a:e7:70:
                    e6:f5:14:86:13:0b:fc:70:e6:16:8d:81:3e:e6:7d:
                    39:e3:e9:22:7e:d8:11:12:60:f6:88:f5:9a:6e:3b:
                    4d:5b:99:e2:a4:57:e6:c6:08:75:c7:d1:da:82:43:
                    59:32:be:4d:8e:7f:0a:86:ab:5d:63:7e:88:a2:b5:
                    d0:48:b1:58:71:a3:89:54:4f:b6:3e:f4:11:fc:48:
                    5c:55:6c:2f:db:f3:16:77:6b:2c:50:f3:6b:4a:26:
                    85:30:59:b6:a7:dd:b7:90:ca:42:56:f0:36:26:b2:
                    27:15:28:ec:92:52:45:53:4d:ca:dd:f4:ea:b1:32:
                    51:6f:b2:18:f3:c3:e5:44:25:9c:fb:39:5c:57:9c:
                    3d:b8:e8:03:0b:a3:f3:34:2a:63:a3:ed:a1:5d:7a:
                    86:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:E8:DA:9E:F7:9A:23:A5:7A:44:6E:62:77:39:38:72:3C:C7:38:06
            X509v3 Authority Key Identifier:
                keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f9:87:ad:5e:39:2b:66:a3:f4:80:4c:75:d7:8f:6b:8d:26:
         40:5f:63:e7:e0:48:2b:3b:59:bf:98:79:b7:15:4e:a1:11:bb:
         af:d1:0f:e0:56:4b:77:19:e3:c4:70:c2:09:2d:05:e0:c0:72:
         29:43:c9:df:db:1a:f1:3c:4c:51:43:30:c3:75:62:d3:cf:91:
         66:f9:d4:57:4a:cd:27:b7:ee:8c:31:ee:06:4b:76:cf:54:59:
         8c:0c:76:9b:28:c2:8d:5b:10:a0:90:e7:ac:d9:5b:71:9b:50:
         4a:c9:87:75:fc:9c:0b:f4:04:69:d5:26:9a:05:23:74:c3:a1:
         06:91:73:4e:a5:8b:70:13:71:d6:00:3e:3e:73:56:1d:1b:a2:
         35:26:68:0e:fb:53:1e:b1:b4:8c:a8:57:6e:dd:60:1a:c4:67:
         92:68:ad:1b:10:ed:fb:5b:cc:5b:ea:c1:b9:cd:f1:4f:76:77:
         9b:5b:2f:c5:83:12:17:ea:4a:da:ce:92:be:5b:49:a2:53:ef:
         45:62:88:fd:96:8f:84:a9:41:7a:c3:ac:d8:98:3f:6b:d6:58:
         7e:f5:2e:b1:12:75:a5:37:64:e2:2e:19:86:6a:3c:27:ae:7a:
         38:a9:2d:21:56:3f:79:c0:6a:43:1e:d9:19:11:50:26:d7:b0:
         00:a2:1a:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf6j34Jjp78pgoLFlfHxsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZGVkZjQ3ODIyYWVlMjdkYTI4ZDM0ZGFiMWZlN2EzYzYw
YTZhYWEwHhcNMjYwNzI0MDUwMTA3WhcNMjYwNzI1MDUwMTA3WjAzMTEwLwYDVQQD
EyhmNGU4ZGE5ZWY3OWEyM2E1N2E0NDZlNjI3NzM5Mzg3MjNjYzczODA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyZllcMt8P2WKAE1NNFrYBvLcL4+4
Gd3Jvive87UGT4NkBV6P6IhcZwo0i3KdQy1avlUMiyy9Pu44IP6twbnEUIL0JNth
9s8M+HD3Sm9OEyBJFqNCPL4OQRGgwqFTUzTcS7q2fiFq53Dm9RSGEwv8cOYWjYE+
5n054+kiftgREmD2iPWabjtNW5nipFfmxgh1x9HagkNZMr5Njn8KhqtdY36IorXQ
SLFYcaOJVE+2PvQR/EhcVWwv2/MWd2ssUPNrSiaFMFm2p923kMpCVvA2JrInFSjs
klJFU03K3fTqsTJRb7IY88PlRCWc+zlcV5w9uOgDC6PzNCpjo+2hXXqGJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTo2p73miOlekRuYnc5OHI8xzgGMB8GA1UdIwQY
MBaAFJ7e30eCKu4n2ijTTasf56PGCmqqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8xOGI2ZGEtYjAyZS00MGIxLTk3YWUt
ZDczOTkyOTIwMTlhLzEvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8xOGI2ZGEtYjAyZS00MGIxLTk3YWUtZDczOTkyOTIwMTlh
LzEvbnQ3ZlI0SXE3aWZhS05OTnF4X25vOFlLYXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI/mHrV45
K2aj9IBMddePa40mQF9j5+BIKztZv5h5txVOoRG7r9EP4FZLdxnjxHDCCS0F4MBy
KUPJ39sa8TxMUUMww3Vi08+RZvnUV0rNJ7fujDHuBkt2z1RZjAx2myjCjVsQoJDn
rNlbcZtQSsmHdfycC/QEadUmmgUjdMOhBpFzTqWLcBNx1gA+PnNWHRuiNSZoDvtT
HrG0jKhXbt1gGsRnkmitGxDt+1vMW+rBuc3xT3Z3m1svxYMSF+pK2s6SvltJolPv
RWKI/ZaPhKlBesOs2Jg/a9ZYfvUusRJ1pTdk4i4Zhmo8J656OKktIVY/ecBqQx7Z
GRFQJtewAKIa7w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:49:00 2026 by rpki-client