Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File:                     toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier:          xCrrOYFTtG+TAVFivnlodKHrpubB84x7/4UHAxZIuLo=
Subject key identifier:   C6:41:F9:54:C3:66:86:E7:18:B5:EE:4D:62:8A:16:44:9B:F6:ED:42
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer:       /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial:       019F90C809E10512F197D90B618BCE406CDA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 21:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:56 +0000
Files and hashes:         1: Jpz2_pjmoHdo-RmCR1hSGVo1EHM.roa (hash: z2PsPLaUE/pjgoZrk9x3ve1iWv9V87jouLdEBjFOK3I=)
                          2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: DQd69It3bHwqFC0dim/MGSLUBRGiYStwY6akgpACfqg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:09:e1:05:12:f1:97:d9:0b:61:8b:ce:40:6c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
        Validity
            Not Before: Jul 23 21:00:56 2026 GMT
            Not After : Jul 24 21:00:56 2026 GMT
        Subject: CN=c641f954c36686e718b5ee4d628a16449bf6ed42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:3c:e6:fc:a7:23:70:20:bd:92:d9:ee:8f:
                    fd:eb:d9:46:f5:87:74:35:3c:21:d9:31:19:d9:fe:
                    e0:05:c6:29:99:69:db:b3:ec:3c:c7:0f:b3:df:60:
                    6a:fc:10:83:4b:23:72:9c:1a:49:95:90:0f:0d:8e:
                    17:75:28:4a:21:f8:d2:83:dd:55:7c:74:4c:ae:24:
                    c8:4b:4f:05:49:ac:4a:77:28:27:1f:b1:45:b0:05:
                    da:00:96:b3:7b:40:ca:5a:3f:dd:fa:7c:af:1c:91:
                    8c:15:b4:41:f9:a9:a9:ed:84:c0:23:e7:7a:69:f0:
                    4a:f8:43:2e:b7:fb:89:8e:d9:2a:f6:cb:59:ae:1c:
                    ab:d0:6c:7c:43:b1:87:87:e6:70:f5:4c:47:fa:6b:
                    67:1f:7e:61:5d:ea:93:49:8d:a2:a3:aa:ac:29:a7:
                    09:bb:32:7b:01:77:32:7f:be:41:3e:13:b2:9c:df:
                    e1:9c:43:11:fe:1a:5d:bc:3e:bc:a9:f9:cc:08:56:
                    f0:55:49:ef:84:f5:60:33:55:71:96:98:0e:46:e3:
                    91:6f:d1:e8:82:af:3e:f0:d2:49:b2:3f:2d:70:f5:
                    a6:09:f8:d3:65:d4:9a:9b:3d:1a:5f:d5:2b:d2:a8:
                    26:6e:f5:88:91:09:7b:d2:3d:5d:6b:2b:a3:5b:1c:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:41:F9:54:C3:66:86:E7:18:B5:EE:4D:62:8A:16:44:9B:F6:ED:42
            X509v3 Authority Key Identifier:
                keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:66:c4:ff:5e:50:29:c4:8a:50:d9:54:b3:07:53:e3:1f:96:
         4b:6e:c3:44:f1:ae:a8:1b:3c:b7:3e:36:ae:74:95:4a:04:13:
         b6:83:c7:43:fc:d6:9e:3e:20:69:d7:4d:86:ca:24:04:5a:b8:
         48:b1:68:2d:90:eb:fd:2c:0c:15:51:77:29:1c:d7:0c:c4:2e:
         c3:f8:d2:27:98:26:45:97:2e:6b:22:5a:4f:6e:ac:83:2a:28:
         48:69:d5:34:d5:88:dc:8e:42:8d:d9:ac:8a:dd:a8:28:de:9e:
         22:b8:eb:e7:19:d4:84:c6:5b:cf:98:4b:c8:bb:cf:4b:d5:99:
         dc:f9:de:3b:f5:ec:fe:90:e5:c5:75:5e:fd:cc:ce:a4:ec:35:
         cd:2f:96:f7:0b:c6:70:00:68:0e:7e:2b:04:18:37:02:c4:90:
         1e:0b:99:98:e9:28:40:ca:c5:f6:e8:f2:cf:fd:6b:13:db:00:
         b5:ca:d4:78:b9:ee:a0:60:b9:a6:b5:00:75:6f:e8:21:da:74:
         e4:06:35:18:5f:c4:5d:3c:ac:9b:39:b2:d6:dd:ea:8a:aa:3f:
         8a:d8:33:eb:f3:0a:29:78:c1:54:56:b0:a7:97:92:19:ea:fe:
         1a:c2:9e:65:ce:c5:cb:99:9d:03:3d:8b:3c:0d:4f:a3:df:2f:
         54:f1:b8:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyAnhBRLxl9kLYYvOQGzaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2OGE5OTRlNDJlNjBkYTRmNGE1NDc1YjE1ZjVlMjc1MTZj
N2NmMTQwHhcNMjYwNzIzMjEwMDU2WhcNMjYwNzI0MjEwMDU2WjAzMTEwLwYDVQQD
EyhjNjQxZjk1NGMzNjY4NmU3MThiNWVlNGQ2MjhhMTY0NDliZjZlZDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnM85vynI3AgvZLZ7o/969lG9Yd0
NTwh2TEZ2f7gBcYpmWnbs+w8xw+z32Bq/BCDSyNynBpJlZAPDY4XdShKIfjSg91V
fHRMriTIS08FSaxKdygnH7FFsAXaAJaze0DKWj/d+nyvHJGMFbRB+amp7YTAI+d6
afBK+EMut/uJjtkq9stZrhyr0Gx8Q7GHh+Zw9UxH+mtnH35hXeqTSY2io6qsKacJ
uzJ7AXcyf75BPhOynN/hnEMR/hpdvD68qfnMCFbwVUnvhPVgM1VxlpgORuORb9Ho
gq8+8NJJsj8tcPWmCfjTZdSamz0aX9Ur0qgmbvWIkQl70j1dayujWxzwywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZB+VTDZobnGLXuTWKKFkSb9u1CMB8GA1UdIwQY
MBaAFLaKmU5C5g2k9KVHWxX14nUWx88UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUt
YmQzYmViY2RkZWIzLzEvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9mMzgwNGQtZThhZC00ZDA4LTk5MGUtYmQzYmViY2RkZWIz
LzEvdG9xWlRrTG1EYVQwcFVkYkZmWGlkUmJIenhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGbE/15Q
KcSKUNlUswdT4x+WS27DRPGuqBs8tz42rnSVSgQTtoPHQ/zWnj4gaddNhsokBFq4
SLFoLZDr/SwMFVF3KRzXDMQuw/jSJ5gmRZcuayJaT26sgyooSGnVNNWI3I5Cjdms
it2oKN6eIrjr5xnUhMZbz5hLyLvPS9WZ3PneO/Xs/pDlxXVe/czOpOw1zS+W9wvG
cABoDn4rBBg3AsSQHguZmOkoQMrF9ujyz/1rE9sAtcrUeLnuoGC5prUAdW/oIdp0
5AY1GF/EXTysmzmy1t3qiqo/itgz6/MKKXjBVFawp5eSGer+GsKeZc7Fy5mdAz2L
PA1Po98vVPG4tQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:52 2026 by rpki-client