Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
File:                     2TpU8C9J9FrV1z5VUdCWGBvOP24.mft (raw, json)
Hash identifier:          R2CJ4h2/odRMRPX9lpt6GWVSUQiT8Iw7Tcf9DJkl1tY=
Subject key identifier:   5B:EA:F9:AE:B5:25:F7:07:6C:7A:99:DE:A9:EC:AE:46:D0:C4:B0:12
Authority key identifier: D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E
Certificate issuer:       /CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
Certificate serial:       019F905A6E16E134CCD0253ABA9B85BD1F68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
Manifest number:          0DF8
Signing time:             Thu 23 Jul 2026 19:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:12 +0000
Files and hashes:         1: 1G4F8tXp79ck76MYvh4RlTMuH0c.roa (hash: mb1DMb5KSFZKad2RaZrc43nShfqVDrfZ7CG1uLPdIWU=)
                          2: 2TpU8C9J9FrV1z5VUdCWGBvOP24.crl (hash: MogG+mYJ3S+QQggRbUBilPqndzNzRUOKLCqXFfm+aAY=)
                          3: K4ChUKDGfS1YyMU8Q16MEHIO7v0.roa (hash: AE88NPyeMZ5WGmqlJ6UtvoVeIiD9FWjIxyupVfERLqA=)
                          4: fuVacSwj9CSAPi4gbx8EVKVYNDo.roa (hash: 3y2BI8DZlsnE4UgzQ99YWVZzq7ewclwDcUiHEWS1oXE=)
                          5: uYzu2dMQ5_tuSd4HkpHbhuWYkvg.roa (hash: Yo3o6eFVt7LwYw/qBIDLsPZ6WwLjW5OHybSEQ/0IkB8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:6e:16:e1:34:cc:d0:25:3a:ba:9b:85:bd:1f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d93a54f02f49f45ad5d73e5551d096181bce3f6e
        Validity
            Not Before: Jul 23 19:01:12 2026 GMT
            Not After : Jul 24 19:01:12 2026 GMT
        Subject: CN=5beaf9aeb525f7076c7a99dea9ecae46d0c4b012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d1:db:fa:e8:3c:65:5d:c1:ca:27:be:ee:4c:
                    2e:ea:42:d8:dc:51:3e:55:40:5d:8a:03:1d:56:b2:
                    a2:c1:65:54:57:b8:44:00:c3:a3:de:83:a2:15:6a:
                    6c:b7:6d:96:13:ba:65:37:ea:a3:37:92:0f:1f:34:
                    16:0d:b9:fa:76:c0:c5:c3:c5:f2:ee:2a:ee:e7:84:
                    63:c6:fb:01:8f:d0:81:7a:c3:fd:fb:b3:aa:3a:8e:
                    97:4d:ed:64:85:cf:53:94:c8:d6:4b:f0:bc:7c:66:
                    be:21:2c:37:f8:67:69:00:8f:4a:56:2e:6c:5f:4b:
                    30:99:cd:35:08:01:9e:88:7c:56:47:e3:57:a5:3c:
                    2d:ab:cb:65:bc:2f:ac:c6:88:48:01:bb:fd:8d:07:
                    67:b6:df:b2:71:ff:c7:25:6b:f9:49:ed:d3:76:66:
                    f7:f0:c1:bb:71:c2:34:53:99:64:72:33:c4:31:e0:
                    8b:a2:a4:7e:89:38:f3:eb:6b:cf:c7:38:a0:74:47:
                    d2:46:74:e7:e9:2f:05:d9:5f:52:ee:5d:09:6a:1b:
                    e2:d6:2c:e8:b5:03:f7:ad:74:b0:53:48:a3:e6:fe:
                    e2:1b:75:75:fe:30:9e:67:29:d4:f0:a7:ac:4f:30:
                    bb:79:8d:eb:48:4e:bf:92:24:db:b2:7e:e1:85:da:
                    51:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EA:F9:AE:B5:25:F7:07:6C:7A:99:DE:A9:EC:AE:46:D0:C4:B0:12
            X509v3 Authority Key Identifier:
                keyid:D9:3A:54:F0:2F:49:F4:5A:D5:D7:3E:55:51:D0:96:18:1B:CE:3F:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2TpU8C9J9FrV1z5VUdCWGBvOP24.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/15fff4-966b-4e0a-abac-05d58f0cb88c/1/2TpU8C9J9FrV1z5VUdCWGBvOP24.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:fb:0d:f0:32:62:ca:ae:df:8a:2b:da:37:e1:5a:9c:a8:14:
         b3:a3:24:02:76:a6:63:f2:5b:60:1d:3a:d4:b5:ea:d8:0d:b7:
         5b:b4:24:24:f6:84:92:8a:61:21:5a:3c:37:9f:9d:d9:7b:80:
         c8:6f:6b:72:ba:a5:b8:37:c8:64:e4:98:09:ed:91:01:d8:51:
         78:22:ff:5d:78:8c:45:e3:a7:cb:ed:6b:90:5f:53:04:6c:7c:
         0e:86:db:73:8b:92:e6:74:57:36:4b:c6:09:3f:08:6e:f4:b0:
         20:c2:da:bf:f1:52:df:eb:96:8a:d5:40:55:4d:e0:48:2a:18:
         2c:f9:74:73:1a:a9:b2:7a:52:1d:75:a2:ef:cd:c1:da:30:5f:
         12:5c:ea:63:08:0c:07:c8:2e:39:b8:76:74:05:be:87:93:31:
         05:6d:45:90:7a:8d:77:50:d5:cc:5a:32:71:3e:a7:92:cb:17:
         17:d7:ec:af:9c:39:ad:83:7e:26:a5:a6:42:29:6a:fa:a7:52:
         64:b7:1b:af:99:dc:a1:25:9b:c2:cd:91:c3:6d:d9:4e:5d:21:
         41:b0:35:d1:bc:52:7c:95:6c:1b:20:d9:25:b8:fb:3a:11:4c:
         4d:c9:5b:4e:9d:5b:59:b6:5b:6a:b5:b1:94:8a:76:a7:22:bc:
         a2:19:da:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWm4W4TTM0CU6upuFvR9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5M2E1NGYwMmY0OWY0NWFkNWQ3M2U1NTUxZDA5NjE4MWJj
ZTNmNmUwHhcNMjYwNzIzMTkwMTEyWhcNMjYwNzI0MTkwMTEyWjAzMTEwLwYDVQQD
Eyg1YmVhZjlhZWI1MjVmNzA3NmM3YTk5ZGVhOWVjYWU0NmQwYzRiMDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNHb+ug8ZV3Byie+7kwu6kLY3FE+
VUBdigMdVrKiwWVUV7hEAMOj3oOiFWpst22WE7plN+qjN5IPHzQWDbn6dsDFw8Xy
7iru54RjxvsBj9CBesP9+7OqOo6XTe1khc9TlMjWS/C8fGa+ISw3+GdpAI9KVi5s
X0swmc01CAGeiHxWR+NXpTwtq8tlvC+sxohIAbv9jQdntt+ycf/HJWv5Se3Tdmb3
8MG7ccI0U5lkcjPEMeCLoqR+iTjz62vPxzigdEfSRnTn6S8F2V9S7l0Jahvi1izo
tQP3rXSwU0ij5v7iG3V1/jCeZynU8KesTzC7eY3rSE6/kiTbsn7hhdpRBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFvq+a61JfcHbHqZ3qnsrkbQxLASMB8GA1UdIwQY
MBaAFNk6VPAvSfRa1dc+VVHQlhgbzj9uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMt
MDVkNThmMGNiODhjLzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xNWZmZjQtOTY2Yi00ZTBhLWFiYWMtMDVkNThmMGNiODhj
LzEvMlRwVThDOUo5RnJWMXo1VlVkQ1dHQnZPUDI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6fsN8DJi
yq7fiivaN+FanKgUs6MkAnamY/JbYB061LXq2A23W7QkJPaEkophIVo8N5+d2XuA
yG9rcrqluDfIZOSYCe2RAdhReCL/XXiMReOny+1rkF9TBGx8Dobbc4uS5nRXNkvG
CT8IbvSwIMLav/FS3+uWitVAVU3gSCoYLPl0cxqpsnpSHXWi783B2jBfElzqYwgM
B8guObh2dAW+h5MxBW1FkHqNd1DVzFoycT6nkssXF9fsr5w5rYN+JqWmQilq+qdS
ZLcbr5ncoSWbws2Rw23ZTl0hQbA10bxSfJVsGyDZJbj7OhFMTclbTp1bWbZbarWx
lIp2pyK8ohnaQg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:32:37 2026 by rpki-client