Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
File:                     bYvF0sabkWFcyibbtupwV3A24m0.mft (raw, json)
Hash identifier:          m844rxty4aLtfviyN3D1OTFLuPmTUMTVT+JStx3ZYgo=
Subject key identifier:   D1:4E:79:27:AF:DE:BB:0A:1B:27:6A:FE:8B:02:08:16:54:11:04:CD
Authority key identifier: 6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D
Certificate issuer:       /CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
Certificate serial:       019F8ED95D1ABF752FF3B91C2AAD01D1B876
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
Manifest number:          1190
Signing time:             Thu 23 Jul 2026 12:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 12:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 12:00:37 +0000
Files and hashes:         1: bYvF0sabkWFcyibbtupwV3A24m0.crl (hash: BtVDVcgBXKXZCU10fneOs596vP7iCvIV4ORMcEs5L5A=)
                          2: iNHmZBm96p22r1v1NNf0vUA5CNU.roa (hash: W3eGIa/whnFHaDnHwnO2+GYR1xjT6RdNQB1XA+AY4TQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:5d:1a:bf:75:2f:f3:b9:1c:2a:ad:01:d1:b8:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d8bc5d2c69b91615cca26dbb6ea70577036e26d
        Validity
            Not Before: Jul 23 12:00:37 2026 GMT
            Not After : Jul 24 12:00:37 2026 GMT
        Subject: CN=d14e7927afdebb0a1b276afe8b020816541104cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:4d:b9:8d:d9:0b:43:3b:8a:99:6e:a2:b6:
                    c2:17:a0:90:49:57:84:00:1a:5b:5e:4d:da:2a:29:
                    2f:53:ce:99:c6:81:e2:2e:6e:30:66:0e:47:ba:56:
                    b2:b4:9b:4e:48:16:3d:00:f8:b1:05:22:be:67:25:
                    4d:3f:36:36:e5:7d:8c:1a:28:d7:5d:3c:55:3b:b7:
                    90:2a:f9:87:82:58:2f:d8:d6:ae:e3:04:e4:f8:ea:
                    95:49:80:3f:20:fa:d0:dc:79:5f:28:99:c5:b4:88:
                    af:d9:7a:6a:24:3f:97:6f:5f:3a:e4:83:1f:a0:ec:
                    1d:62:7b:58:df:1d:79:4b:5c:5d:3b:d1:23:1a:bc:
                    46:4a:ce:c6:c8:8b:bd:36:9c:11:e0:d6:be:eb:00:
                    bb:b2:a0:a4:92:98:7f:ab:d7:ef:dc:ed:b2:5c:6a:
                    28:72:19:f9:11:26:d7:3e:1d:bd:dc:6b:94:fe:91:
                    e7:d5:9c:9b:70:66:5f:ac:e7:47:72:62:61:86:48:
                    ec:92:89:25:09:9b:ea:c4:f0:2e:89:c6:8f:0d:ce:
                    72:b3:94:0b:37:e6:d1:aa:cd:c3:a8:82:ba:31:1d:
                    01:0f:b0:25:6a:2b:9b:29:e8:c3:05:78:e9:4a:5f:
                    a3:37:6b:5f:e9:55:55:11:70:1c:da:7b:14:bc:0f:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:4E:79:27:AF:DE:BB:0A:1B:27:6A:FE:8B:02:08:16:54:11:04:CD
            X509v3 Authority Key Identifier:
                keyid:6D:8B:C5:D2:C6:9B:91:61:5C:CA:26:DB:B6:EA:70:57:70:36:E2:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYvF0sabkWFcyibbtupwV3A24m0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/03e196-fc28-43ad-bd51-71c296d4969f/1/bYvF0sabkWFcyibbtupwV3A24m0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:4d:5b:1a:44:1f:60:60:87:7b:b4:a0:51:c7:61:eb:ef:eb:
         e7:d5:78:0e:ac:c8:26:5b:9f:ea:26:a0:f8:f6:ed:b3:44:1a:
         c5:19:3d:a4:7d:65:e4:19:de:18:c2:70:3e:fa:49:1b:31:c9:
         be:30:32:1b:dd:5a:b2:82:84:ac:52:26:45:62:91:c2:f7:12:
         7e:b4:e5:0d:c4:8c:03:cd:b0:f1:62:d7:15:46:84:61:9c:22:
         d0:ac:fa:f0:3e:cf:9f:0e:9e:ad:f9:68:56:7f:2b:6d:bb:5b:
         02:ca:36:3b:71:9e:46:c2:2a:89:35:9d:15:74:65:c7:c3:8c:
         bd:ba:cf:86:90:d0:18:6c:5d:34:a5:b9:77:9e:0e:68:45:dd:
         4d:54:34:70:89:40:e2:6c:74:88:3c:b8:9b:2e:fa:d1:0e:42:
         18:7b:3a:28:f0:3a:f0:a4:db:11:7c:59:e6:62:4b:34:49:1d:
         78:02:57:7a:d7:10:5f:c1:8d:9f:fc:70:71:08:0b:3f:12:ac:
         f9:5e:cd:27:e9:6b:32:4e:07:4c:3d:1d:f4:a5:cb:7c:a7:a8:
         28:f3:e1:2a:cb:ec:88:2b:cf:dc:25:b6:cc:dd:90:6f:19:e6:
         cd:66:9f:64:43:d3:ed:a1:92:b8:8b:75:44:ca:7d:81:e9:1e:
         5e:ab:43:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2V0av3Uv87kcKq0B0bh2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkOGJjNWQyYzY5YjkxNjE1Y2NhMjZkYmI2ZWE3MDU3NzAz
NmUyNmQwHhcNMjYwNzIzMTIwMDM3WhcNMjYwNzI0MTIwMDM3WjAzMTEwLwYDVQQD
EyhkMTRlNzkyN2FmZGViYjBhMWIyNzZhZmU4YjAyMDgxNjU0MTEwNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtehNuY3ZC0M7ipluorbCF6CQSVeE
ABpbXk3aKikvU86ZxoHiLm4wZg5HulaytJtOSBY9APixBSK+ZyVNPzY25X2MGijX
XTxVO7eQKvmHglgv2Nau4wTk+OqVSYA/IPrQ3HlfKJnFtIiv2XpqJD+Xb1865IMf
oOwdYntY3x15S1xdO9EjGrxGSs7GyIu9NpwR4Na+6wC7sqCkkph/q9fv3O2yXGoo
chn5ESbXPh293GuU/pHn1ZybcGZfrOdHcmJhhkjskoklCZvqxPAuicaPDc5ys5QL
N+bRqs3DqIK6MR0BD7AlaiubKejDBXjpSl+jN2tf6VVVEXAc2nsUvA9onwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFOeSev3rsKGydq/osCCBZUEQTNMB8GA1UdIwQY
MBaAFG2LxdLGm5FhXMom27bqcFdwNuJtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEt
NzFjMjk2ZDQ5NjlmLzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wM2UxOTYtZmMyOC00M2FkLWJkNTEtNzFjMjk2ZDQ5Njlm
LzEvYll2RjBzYWJrV0ZjeWliYnR1cHdWM0EyNG0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfE1bGkQf
YGCHe7SgUcdh6+/r59V4DqzIJluf6iag+Pbts0QaxRk9pH1l5BneGMJwPvpJGzHJ
vjAyG91asoKErFImRWKRwvcSfrTlDcSMA82w8WLXFUaEYZwi0Kz68D7Pnw6erflo
Vn8rbbtbAso2O3GeRsIqiTWdFXRlx8OMvbrPhpDQGGxdNKW5d54OaEXdTVQ0cIlA
4mx0iDy4my760Q5CGHs6KPA68KTbEXxZ5mJLNEkdeAJXetcQX8GNn/xwcQgLPxKs
+V7NJ+lrMk4HTD0d9KXLfKeoKPPhKsvsiCvP3CW2zN2QbxnmzWafZEPT7aGSuIt1
RMp9gekeXqtDXQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:04:28 2026 by rpki-client