Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
File:                     jZknGRkaiU0GjbqNChAG6f6tqmg.mft (raw, json)
Hash identifier:          DM652fQJU9Ygufa+VCWP9XB/xPQb0TigtQ+qN/MpRsg=
Subject key identifier:   59:F5:70:57:C4:78:49:07:62:56:46:AC:AE:54:0D:D8:7C:1D:35:E1
Authority key identifier: 8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68
Certificate issuer:       /CN=8d992719191a894d068dba8d0a1006e9feadaa68
Certificate serial:       019F927EEAE4F36804D7FD752D7879C34214
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
Manifest number:          0B78
Signing time:             Fri 24 Jul 2026 05:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:18 +0000
Files and hashes:         1: aNdGm0-pJsnHGAxPQWpGS1Kv5ZU.roa (hash: 5JOSX/QZCccK/gUOeYHPT0U61k8N4LEoiccIN7jDjPo=)
                          2: jZknGRkaiU0GjbqNChAG6f6tqmg.crl (hash: y/8xu+DPSO9ldoO7QucBUocI0DyK44BIdXqjraDd004=)
                          3: nyLvhleQEwhVmTGhN_O5OJ2dSNk.roa (hash: SjtdaWQXMJk13J5xCejsgWLSIcSxD709iSf13daT5JQ=)
                          4: yd8JpikDeAGL1RyToXLtaBhLXs0.roa (hash: WUNVyCqCAPZ5sr2QAi48VB7rmkpIF+duLJ03LhF4Vtc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7e:ea:e4:f3:68:04:d7:fd:75:2d:78:79:c3:42:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d992719191a894d068dba8d0a1006e9feadaa68
        Validity
            Not Before: Jul 24 05:00:18 2026 GMT
            Not After : Jul 25 05:00:18 2026 GMT
        Subject: CN=59f57057c4784907625646acae540dd87c1d35e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:56:47:19:c9:ee:fb:06:23:c7:74:51:79:c4:
                    5c:bf:07:48:6e:9e:12:53:a3:8e:8b:93:fd:d6:e2:
                    8a:54:4d:0e:a3:e5:de:04:e2:01:e7:fa:8c:f8:46:
                    53:dd:f1:4b:84:eb:97:66:16:a0:66:af:be:d8:bc:
                    72:4c:76:e2:c4:64:f8:eb:5e:c2:cb:ec:ef:ea:52:
                    4e:c4:ef:88:e6:99:41:f0:10:0a:de:01:49:22:03:
                    b0:6c:90:12:72:49:8c:b9:15:d2:ea:6a:f5:82:ca:
                    9a:c8:e7:df:4a:e9:4f:78:7e:ea:a9:61:e6:77:5b:
                    4f:7b:78:ec:d1:2c:6c:8f:9a:65:68:0b:c7:9e:51:
                    9e:d5:d4:d2:1c:7a:e9:6b:c3:93:e5:20:56:7c:05:
                    4a:7e:f2:cf:79:86:78:36:b8:88:a4:1f:10:79:73:
                    39:1c:92:19:61:75:13:83:38:22:b3:16:00:59:94:
                    97:ef:f1:9e:8f:cc:c3:43:1f:76:07:6b:72:f8:47:
                    09:52:d9:ac:13:6c:38:df:cd:0c:84:ec:1a:92:22:
                    7a:39:0e:16:28:b7:34:c1:9d:a8:01:a1:71:20:ce:
                    34:17:fc:82:a9:06:08:29:50:b3:15:8b:58:21:67:
                    48:98:48:54:04:08:88:0d:7a:0a:8f:3a:9c:95:7c:
                    66:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:F5:70:57:C4:78:49:07:62:56:46:AC:AE:54:0D:D8:7C:1D:35:E1
            X509v3 Authority Key Identifier:
                keyid:8D:99:27:19:19:1A:89:4D:06:8D:BA:8D:0A:10:06:E9:FE:AD:AA:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jZknGRkaiU0GjbqNChAG6f6tqmg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/79ed04-be11-4388-a66a-482ec7d6872e/1/jZknGRkaiU0GjbqNChAG6f6tqmg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:1d:fe:93:d0:f7:8f:57:42:71:46:59:fc:64:d5:b7:37:79:
         c5:83:9a:53:fb:a8:37:21:31:32:ad:75:eb:24:a1:32:34:d7:
         72:e2:80:9f:36:9f:1f:77:00:3b:1a:16:9b:4f:0a:e2:9c:90:
         fa:18:27:01:34:55:cc:b2:88:2e:1c:d6:de:60:1a:ed:53:21:
         52:24:46:22:02:a0:4f:c6:bc:91:53:7b:82:4f:03:d1:a7:d7:
         59:ab:69:50:dd:49:97:5e:16:8a:c1:d9:03:4a:99:47:b5:6c:
         92:f6:93:84:54:4e:fb:fb:bd:79:c5:35:77:c0:e0:fd:09:1d:
         49:87:62:c5:10:71:7d:9d:6a:92:ab:ba:51:20:28:dc:d0:ba:
         aa:80:92:36:c3:f0:ef:dd:fc:b0:a9:61:66:51:f4:c8:fc:a2:
         4e:81:8d:07:43:f6:e5:f6:20:75:cf:3d:17:a0:6c:05:02:fc:
         dd:09:46:f8:52:c6:ac:67:93:bb:af:f5:c8:03:22:6b:7b:4c:
         e9:18:1d:2a:77:53:8a:6a:2e:84:4d:ae:f8:86:d1:cb:92:ce:
         c1:19:9e:e5:4a:3f:b9:d5:b9:c6:71:29:66:63:13:7e:cb:c2:
         1d:07:97:c2:7f:7f:2b:d2:9c:85:a3:e2:74:2d:6b:b1:ec:47:
         f8:29:8c:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sfurk82gE1/11LXh5w0IUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkOTkyNzE5MTkxYTg5NGQwNjhkYmE4ZDBhMTAwNmU5ZmVh
ZGFhNjgwHhcNMjYwNzI0MDUwMDE4WhcNMjYwNzI1MDUwMDE4WjAzMTEwLwYDVQQD
Eyg1OWY1NzA1N2M0Nzg0OTA3NjI1NjQ2YWNhZTU0MGRkODdjMWQzNWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplZHGcnu+wYjx3RRecRcvwdIbp4S
U6OOi5P91uKKVE0Oo+XeBOIB5/qM+EZT3fFLhOuXZhagZq++2LxyTHbixGT4617C
y+zv6lJOxO+I5plB8BAK3gFJIgOwbJASckmMuRXS6mr1gsqayOffSulPeH7qqWHm
d1tPe3js0Sxsj5plaAvHnlGe1dTSHHrpa8OT5SBWfAVKfvLPeYZ4NriIpB8QeXM5
HJIZYXUTgzgisxYAWZSX7/Gej8zDQx92B2ty+EcJUtmsE2w4380MhOwakiJ6OQ4W
KLc0wZ2oAaFxIM40F/yCqQYIKVCzFYtYIWdImEhUBAiIDXoKjzqclXxmBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFn1cFfEeEkHYlZGrK5UDdh8HTXhMB8GA1UdIwQY
MBaAFI2ZJxkZGolNBo26jQoQBun+rapoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalprbkdSa2FpVTBHamJxTkNoQUc2ZjZ0cW1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS83OWVkMDQtYmUxMS00Mzg4LWE2NmEt
NDgyZWM3ZDY4NzJlLzEvalprbkdSa2FpVTBHamJxTkNoQUc2ZjZ0cW1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS83OWVkMDQtYmUxMS00Mzg4LWE2NmEtNDgyZWM3ZDY4NzJl
LzEvalprbkdSa2FpVTBHamJxTkNoQUc2ZjZ0cW1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbB3+k9D3
j1dCcUZZ/GTVtzd5xYOaU/uoNyExMq116yShMjTXcuKAnzafH3cAOxoWm08K4pyQ
+hgnATRVzLKILhzW3mAa7VMhUiRGIgKgT8a8kVN7gk8D0afXWatpUN1Jl14WisHZ
A0qZR7VskvaThFRO+/u9ecU1d8Dg/QkdSYdixRBxfZ1qkqu6USAo3NC6qoCSNsPw
7938sKlhZlH0yPyiToGNB0P25fYgdc89F6BsBQL83QlG+FLGrGeTu6/1yAMia3tM
6RgdKndTimouhE2u+IbRy5LOwRme5Uo/udW5xnEpZmMTfsvCHQeXwn9/K9KchaPi
dC1rsexH+CmMEQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:27:27 2026 by rpki-client