Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
File:                     kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft (raw, json)
Hash identifier:          IP4RUsyC6bjTxUHtBewblPGIm4nDtVx2IFdEGU5+EOc=
Subject key identifier:   05:AB:37:2F:B8:57:DC:86:D0:0F:86:FC:E0:0D:8D:FD:BB:D1:CB:D4
Authority key identifier: 91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66
Certificate issuer:       /CN=9126b19f0e954dcf5816fdf371694b784dd7f366
Certificate serial:       019F93C9093726E2BD1594641A7A50A1F742
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
Manifest number:          195A
Signing time:             Fri 24 Jul 2026 11:00:53 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:53 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:53 +0000
Files and hashes:         1: f_NbFcXhsPWXIxa4Q-RL2lQE9H8.roa (hash: r4M7joZLYltcoMhevwH4wLr16D2gCWd/Vhwm8RHpnDM=)
                          2: kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl (hash: 0WbdG3CqaMryAD9SCHo4OiL9HDMK0RHUAj1u1iw5mr8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:09:37:26:e2:bd:15:94:64:1a:7a:50:a1:f7:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9126b19f0e954dcf5816fdf371694b784dd7f366
        Validity
            Not Before: Jul 24 11:00:53 2026 GMT
            Not After : Jul 25 11:00:53 2026 GMT
        Subject: CN=05ab372fb857dc86d00f86fce00d8dfdbbd1cbd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:20:62:24:11:c2:01:74:4e:16:15:59:85:e1:
                    e9:81:c8:bf:9c:1c:17:1f:95:3b:21:6e:5c:52:1b:
                    2a:57:20:a8:6c:e4:4c:30:43:54:04:9e:7f:1e:d7:
                    28:65:61:65:8e:b7:43:e7:10:08:8c:80:5d:34:50:
                    d4:bd:5d:75:a4:27:6b:80:45:90:b4:61:31:65:7f:
                    0c:2f:ce:7d:23:cd:b8:eb:83:49:70:8d:40:82:49:
                    1d:a8:ef:2a:6f:90:24:a5:9e:33:16:e8:fd:61:49:
                    56:c3:a5:4e:96:52:94:bd:1a:5c:76:9f:7a:51:0b:
                    bc:4c:6c:88:c8:1b:29:cc:a0:bf:91:a1:a9:1d:4d:
                    86:c8:18:20:dc:d5:c8:d9:42:24:e8:89:48:7e:1f:
                    d4:01:d1:a9:64:c3:fe:bf:b1:70:6e:bb:dc:ec:59:
                    b0:be:00:e6:01:c4:8d:72:4a:bc:a9:66:be:cc:1e:
                    64:61:97:f4:7a:d6:dd:2f:38:e4:d0:2b:b5:e6:87:
                    6c:83:96:7e:a5:5b:89:15:6b:94:9c:51:ef:76:81:
                    c4:33:7d:b1:dc:9d:ba:d7:07:fc:80:22:82:76:88:
                    2d:dd:84:df:2b:63:3f:ad:67:78:b4:d5:49:e7:1d:
                    8d:da:6b:2f:62:57:cc:22:ec:49:14:ad:81:63:aa:
                    07:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AB:37:2F:B8:57:DC:86:D0:0F:86:FC:E0:0D:8D:FD:BB:D1:CB:D4
            X509v3 Authority Key Identifier:
                keyid:91:26:B1:9F:0E:95:4D:CF:58:16:FD:F3:71:69:4B:78:4D:D7:F3:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kSaxnw6VTc9YFv3zcWlLeE3X82Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/074853-21ee-42d9-b3b5-d2ecb6473b23/1/kSaxnw6VTc9YFv3zcWlLeE3X82Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:03:38:0c:6f:59:de:91:87:4f:e8:02:ff:e5:dd:67:09:78:
         55:51:5b:b7:d1:bc:a4:d9:19:7f:3d:9c:61:1c:10:e4:e9:25:
         fc:37:9d:63:79:48:54:ed:97:47:09:96:d9:2b:15:76:aa:23:
         3c:08:21:60:f5:44:29:4a:20:64:62:da:ee:37:8e:b7:2a:74:
         ca:29:b4:66:92:9b:96:9c:5d:cf:2f:d6:07:2a:55:dc:45:d5:
         dc:52:d8:4f:0e:f3:de:7a:55:2c:58:c5:3c:99:34:d8:27:95:
         b9:3d:16:21:2b:af:85:56:11:00:4c:f7:45:3d:4e:86:56:9e:
         18:31:d7:4c:0a:40:10:96:95:f2:5d:4e:97:29:0d:8b:06:60:
         c4:15:37:15:37:fb:33:2e:cf:b8:c2:80:f8:b6:d9:50:4e:62:
         90:22:ba:d7:ee:7c:c1:fe:8d:3b:e0:af:aa:ee:33:42:7b:68:
         30:51:d7:53:86:81:87:20:8a:a2:20:9c:64:92:03:c5:c9:e1:
         fa:54:a7:ae:34:2e:35:6d:ca:3f:4a:ef:f3:37:15:79:bf:0e:
         87:9e:22:52:04:53:5b:1a:7b:76:7a:8d:7f:f5:8c:90:a7:d3:
         f9:99:4a:51:14:98:01:0a:5c:91:90:b7:12:72:98:8c:ac:69:
         89:fa:95:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyQk3JuK9FZRkGnpQofdCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxMjZiMTlmMGU5NTRkY2Y1ODE2ZmRmMzcxNjk0Yjc4NGRk
N2YzNjYwHhcNMjYwNzI0MTEwMDUzWhcNMjYwNzI1MTEwMDUzWjAzMTEwLwYDVQQD
EygwNWFiMzcyZmI4NTdkYzg2ZDAwZjg2ZmNlMDBkOGRmZGJiZDFjYmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyBiJBHCAXROFhVZheHpgci/nBwX
H5U7IW5cUhsqVyCobORMMENUBJ5/HtcoZWFljrdD5xAIjIBdNFDUvV11pCdrgEWQ
tGExZX8ML859I82464NJcI1AgkkdqO8qb5AkpZ4zFuj9YUlWw6VOllKUvRpcdp96
UQu8TGyIyBspzKC/kaGpHU2GyBgg3NXI2UIk6IlIfh/UAdGpZMP+v7Fwbrvc7Fmw
vgDmAcSNckq8qWa+zB5kYZf0etbdLzjk0Cu15odsg5Z+pVuJFWuUnFHvdoHEM32x
3J261wf8gCKCdogt3YTfK2M/rWd4tNVJ5x2N2msvYlfMIuxJFK2BY6oHuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAWrNy+4V9yG0A+G/OANjf270cvUMB8GA1UdIwQY
MBaAFJEmsZ8OlU3PWBb983FpS3hN1/NmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUt
ZDJlY2I2NDczYjIzLzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8wNzQ4NTMtMjFlZS00MmQ5LWIzYjUtZDJlY2I2NDczYjIz
LzEva1NheG53NlZUYzlZRnYzemNXbExlRTNYODJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACwM4DG9Z
3pGHT+gC/+XdZwl4VVFbt9G8pNkZfz2cYRwQ5Okl/DedY3lIVO2XRwmW2SsVdqoj
PAghYPVEKUogZGLa7jeOtyp0yim0ZpKblpxdzy/WBypV3EXV3FLYTw7z3npVLFjF
PJk02CeVuT0WISuvhVYRAEz3RT1OhlaeGDHXTApAEJaV8l1OlykNiwZgxBU3FTf7
My7PuMKA+LbZUE5ikCK61+58wf6NO+Cvqu4zQntoMFHXU4aBhyCKoiCcZJIDxcnh
+lSnrjQuNW3KP0rv8zcVeb8Oh54iUgRTWxp7dnqNf/WMkKfT+ZlKURSYAQpckZC3
EnKYjKxpifqVqg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:02:32 2026 by rpki-client