Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
File:                     StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft (raw, json)
Hash identifier:          i5/TIlvPZduYw8VdtJvgBJLxaOiPnwii7WTUZxoXBQA=
Subject key identifier:   08:70:3B:C8:D8:1B:AA:ED:A0:AD:EB:EB:60:F4:F5:79:B2:82:3A:53
Authority key identifier: 4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24
Certificate issuer:       /CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
Certificate serial:       019F927F4B1725D3A261A7FEA78891DF1455
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 05:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:43 +0000
Files and hashes:         1: StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl (hash: LtnPJTBhs+sbrseWHD3sBYcBR2Q4lYTK5XvsQIh+gL0=)
                          2: krwQ_58rpuR7vh46Z5jxUh2os1c.roa (hash: aD7W1qZcEisQdWcAvIDFWWzHQesvPWcQVTbTh9Rofrs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:4b:17:25:d3:a2:61:a7:fe:a7:88:91:df:14:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ad1e9185eaa8b5c71c89fabe6fbe2acf7ea9824
        Validity
            Not Before: Jul 24 05:00:43 2026 GMT
            Not After : Jul 25 05:00:43 2026 GMT
        Subject: CN=08703bc8d81baaeda0adebeb60f4f579b2823a53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:4f:d2:dd:f6:1d:e7:e6:86:1f:3b:8f:ed:81:
                    ca:c2:48:d9:42:1e:e9:f0:c4:2b:50:6b:f6:52:20:
                    05:81:e9:37:ba:1b:64:b7:b9:6a:b0:aa:69:5a:86:
                    87:9c:81:c7:2f:1c:ed:fe:62:0d:22:e8:03:92:75:
                    79:89:79:81:14:84:9d:4c:76:f9:1b:c0:0a:d2:50:
                    27:15:9f:ec:a0:36:70:1f:20:4f:ee:04:17:d0:48:
                    40:c6:65:0d:cf:91:f0:09:c5:67:26:99:bb:b1:7d:
                    14:17:ca:fd:85:c3:0b:1f:d9:6c:7d:00:67:07:9b:
                    24:43:17:99:4e:ca:d9:70:05:5b:d7:fb:00:ef:f3:
                    08:7b:16:3c:1c:e7:f5:ed:d6:27:af:cd:c2:de:11:
                    b8:cb:25:40:fd:0d:86:76:cb:0f:c7:ef:bb:25:9c:
                    93:24:bd:ce:80:b5:f1:27:44:9d:4c:35:14:d7:87:
                    3a:fc:05:23:ad:c2:d0:c8:a6:5d:3a:6c:b2:d1:ca:
                    a1:47:60:36:08:d2:8c:30:56:cd:f8:47:30:88:28:
                    34:44:44:6f:37:08:c8:04:aa:bb:18:e3:5b:9b:74:
                    1c:12:5e:5e:45:d6:40:71:d0:1a:00:49:16:c3:46:
                    77:02:ab:43:b8:5f:bb:c2:c2:bb:1c:8e:d4:b2:fb:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:70:3B:C8:D8:1B:AA:ED:A0:AD:EB:EB:60:F4:F5:79:B2:82:3A:53
            X509v3 Authority Key Identifier:
                keyid:4A:D1:E9:18:5E:AA:8B:5C:71:C8:9F:AB:E6:FB:E2:AC:F7:EA:98:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/StHpGF6qi1xxyJ-r5vvirPfqmCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b1cb4-96a9-4ed2-bd93-c38669b37b9e/1/StHpGF6qi1xxyJ-r5vvirPfqmCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:95:de:b4:60:9e:96:19:c6:35:86:1c:31:68:4f:dc:9f:ef:
         15:85:c2:22:29:06:d7:d2:07:0c:7f:5e:f0:a4:da:84:ab:3e:
         8c:50:44:7b:2b:c6:8d:03:ae:59:db:60:ca:29:4b:fc:5c:f3:
         97:6e:86:ec:b1:9e:87:77:86:48:34:21:1f:e7:5f:ff:1c:87:
         9a:75:80:90:d3:10:91:8e:42:fe:64:46:1c:5f:68:6b:ad:c1:
         77:4f:45:86:5b:0c:61:e7:a7:34:90:2f:68:71:1a:06:b7:27:
         ed:96:3a:db:4b:1a:a3:b7:bd:da:8d:06:7f:26:6f:a6:a1:23:
         15:22:56:84:ac:a5:6b:eb:73:6c:cc:8d:b8:27:da:a8:b5:25:
         2e:a8:d0:ce:31:e2:f1:a2:c6:4f:82:a1:2a:92:e9:80:f3:b5:
         f9:30:98:e1:91:c8:ef:97:c5:1a:14:4f:7d:a2:71:bb:58:55:
         6e:bc:c0:b1:3a:09:9c:4b:d8:0c:60:97:4d:62:c8:d5:2d:a7:
         84:8a:cc:e2:89:8a:02:db:62:8f:ad:72:05:75:aa:b3:93:0b:
         64:62:d1:b5:62:01:82:77:ae:28:67:2d:8a:8b:d3:4a:b0:1c:
         73:ec:b5:e8:c0:fe:e2:b1:19:28:ae:ac:57:45:73:d4:64:ee:
         91:98:97:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf0sXJdOiYaf+p4iR3xRVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZDFlOTE4NWVhYThiNWM3MWM4OWZhYmU2ZmJlMmFjZjdl
YTk4MjQwHhcNMjYwNzI0MDUwMDQzWhcNMjYwNzI1MDUwMDQzWjAzMTEwLwYDVQQD
EygwODcwM2JjOGQ4MWJhYWVkYTBhZGViZWI2MGY0ZjU3OWIyODIzYTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwk/S3fYd5+aGHzuP7YHKwkjZQh7p
8MQrUGv2UiAFgek3uhtkt7lqsKppWoaHnIHHLxzt/mINIugDknV5iXmBFISdTHb5
G8AK0lAnFZ/soDZwHyBP7gQX0EhAxmUNz5HwCcVnJpm7sX0UF8r9hcMLH9lsfQBn
B5skQxeZTsrZcAVb1/sA7/MIexY8HOf17dYnr83C3hG4yyVA/Q2GdssPx++7JZyT
JL3OgLXxJ0SdTDUU14c6/AUjrcLQyKZdOmyy0cqhR2A2CNKMMFbN+EcwiCg0RERv
NwjIBKq7GONbm3QcEl5eRdZAcdAaAEkWw0Z3AqtDuF+7wsK7HI7Usvu8DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhwO8jYG6rtoK3r62D09XmygjpTMB8GA1UdIwQY
MBaAFErR6Rheqotcccifq+b74qz36pgkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMt
YzM4NjY5YjM3YjllLzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8zYjFjYjQtOTZhOS00ZWQyLWJkOTMtYzM4NjY5YjM3Yjll
LzEvU3RIcEdGNnFpMXh4eUotcjV2dmlyUGZxbUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ5XetGCe
lhnGNYYcMWhP3J/vFYXCIikG19IHDH9e8KTahKs+jFBEeyvGjQOuWdtgyilL/Fzz
l26G7LGeh3eGSDQhH+df/xyHmnWAkNMQkY5C/mRGHF9oa63Bd09FhlsMYeenNJAv
aHEaBrcn7ZY620sao7e92o0GfyZvpqEjFSJWhKyla+tzbMyNuCfaqLUlLqjQzjHi
8aLGT4KhKpLpgPO1+TCY4ZHI75fFGhRPfaJxu1hVbrzAsToJnEvYDGCXTWLI1S2n
hIrM4omKAttij61yBXWqs5MLZGLRtWIBgneuKGctiovTSrAcc+y16MD+4rEZKK6s
V0Vz1GTukZiXew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:53:58 2026 by rpki-client