Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
File:                     mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft (raw, json)
Hash identifier:          eVVSHMg+//t0X70X0abhaPTluupfv4XJCTJg/ovmWVU=
Subject key identifier:   92:6C:8E:F1:80:C4:0A:69:98:73:D4:E2:B4:A7:A6:BF:88:1E:9A:DE
Authority key identifier: 99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58
Certificate issuer:       /CN=991b5422cd5578d4715ebe4c5097202523dd5658
Certificate serial:       019F91DA479E362177F662B9BED9BC60EF7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
Manifest number:          1850
Signing time:             Fri 24 Jul 2026 02:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:29 +0000
Files and hashes:         1: KEyhGh3u-Ad2U98qs53aKdB_GJc.roa (hash: jZXKizyeTSKszZt9XLRCfNj1B4xBpIyE3AIW1lpSBsI=)
                          2: mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl (hash: b5lwVrH5r6EojmymW9dBon3hJSBip0C/Y+rTDkNf6nA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:47:9e:36:21:77:f6:62:b9:be:d9:bc:60:ef:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=991b5422cd5578d4715ebe4c5097202523dd5658
        Validity
            Not Before: Jul 24 02:00:29 2026 GMT
            Not After : Jul 25 02:00:29 2026 GMT
        Subject: CN=926c8ef180c40a699873d4e2b4a7a6bf881e9ade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:6f:d5:4c:ee:ca:63:02:e0:a1:8b:ba:66:
                    b7:79:9a:8f:1c:3a:7f:49:b4:8d:ae:83:14:43:f5:
                    02:fc:a5:81:22:bb:92:f0:d9:32:b2:81:43:1c:6b:
                    2b:81:9d:7c:35:f1:07:6b:f2:1f:b4:cd:01:1d:4b:
                    b0:e3:eb:11:a2:83:57:fb:59:5f:7c:17:bf:a6:a2:
                    76:f0:5a:70:f0:a0:ec:50:42:30:90:9a:97:a1:a4:
                    cc:b7:53:24:e6:a4:2c:7a:94:94:0e:71:34:23:14:
                    8b:a0:21:11:ac:55:ea:4c:ec:ac:21:06:60:75:69:
                    1f:ab:47:6e:77:37:a9:c7:fa:5e:80:c5:90:7c:96:
                    a1:19:84:74:80:9c:3f:d3:8a:8d:73:69:12:b2:43:
                    b7:3c:2d:17:e6:dc:a4:f4:a0:8f:ac:1d:22:c0:0d:
                    86:e9:db:07:db:8a:49:ec:4b:aa:b0:ac:28:d9:6c:
                    96:b7:5e:b3:68:10:90:1e:5a:f7:30:34:ba:8a:1f:
                    f1:7f:dd:43:7f:9c:4f:12:10:dc:89:7f:89:f8:b1:
                    07:ed:07:82:53:a3:8e:47:52:08:df:a1:7f:b8:6e:
                    8a:e0:d6:fb:9a:33:75:8a:8d:47:7d:d7:6d:2e:c2:
                    f1:65:6d:d8:a9:05:d2:99:ad:af:77:43:64:f6:10:
                    e4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:6C:8E:F1:80:C4:0A:69:98:73:D4:E2:B4:A7:A6:BF:88:1E:9A:DE
            X509v3 Authority Key Identifier:
                keyid:99:1B:54:22:CD:55:78:D4:71:5E:BE:4C:50:97:20:25:23:DD:56:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRtUIs1VeNRxXr5MUJcgJSPdVlg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/5811c0-6dae-4dd4-987c-d46ffc501f36/1/mRtUIs1VeNRxXr5MUJcgJSPdVlg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:78:93:59:31:52:b3:ea:83:55:0d:1d:00:0f:d5:60:e3:a8:
         4f:aa:28:db:18:87:20:03:26:61:7d:35:81:d3:e1:e5:28:97:
         eb:be:3e:40:68:17:8f:98:64:04:38:d2:7f:ee:47:79:cc:b1:
         6d:d9:25:b7:78:ff:82:bf:f6:94:23:57:aa:47:08:1c:87:8a:
         ba:d7:b7:10:3e:26:c7:d1:ef:b3:1c:40:ff:d3:0a:43:9d:c7:
         84:7e:fe:36:d7:27:21:f5:69:47:54:38:57:13:01:09:81:aa:
         f3:03:85:f2:51:52:62:d3:83:c8:87:01:f3:bf:40:19:18:67:
         d6:71:66:88:47:a9:f8:60:9f:e2:7d:87:99:54:f6:af:b1:1f:
         57:91:19:c9:cc:9a:bc:80:fe:19:65:78:50:67:ca:b5:ea:71:
         b4:df:c4:94:15:89:20:e2:24:80:0f:68:ea:19:f5:97:7f:80:
         5e:ef:bf:28:c0:e4:a3:93:fa:db:b6:47:84:bb:7a:35:69:8e:
         91:11:21:df:b0:21:3d:f3:96:ab:0a:3e:61:e3:c6:68:99:4c:
         96:db:98:9d:0c:6f:bc:be:58:d3:57:94:ed:3c:fc:f9:99:04:
         89:c3:fa:55:9d:8d:49:86:02:7e:d0:b2:c5:73:9e:81:7c:a9:
         03:ab:13:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2keeNiF39mK5vtm8YO98MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MWI1NDIyY2Q1NTc4ZDQ3MTVlYmU0YzUwOTcyMDI1MjNk
ZDU2NTgwHhcNMjYwNzI0MDIwMDI5WhcNMjYwNzI1MDIwMDI5WjAzMTEwLwYDVQQD
Eyg5MjZjOGVmMTgwYzQwYTY5OTg3M2Q0ZTJiNGE3YTZiZjg4MWU5YWRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug9v1UzuymMC4KGLuma3eZqPHDp/
SbSNroMUQ/UC/KWBIruS8NkysoFDHGsrgZ18NfEHa/IftM0BHUuw4+sRooNX+1lf
fBe/pqJ28Fpw8KDsUEIwkJqXoaTMt1Mk5qQsepSUDnE0IxSLoCERrFXqTOysIQZg
dWkfq0dudzepx/pegMWQfJahGYR0gJw/04qNc2kSskO3PC0X5tyk9KCPrB0iwA2G
6dsH24pJ7EuqsKwo2WyWt16zaBCQHlr3MDS6ih/xf91Df5xPEhDciX+J+LEH7QeC
U6OOR1II36F/uG6K4Nb7mjN1io1HfddtLsLxZW3YqQXSma2vd0Nk9hDk4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJJsjvGAxAppmHPU4rSnpr+IHpreMB8GA1UdIwQY
MBaAFJkbVCLNVXjUcV6+TFCXICUj3VZYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2Mt
ZDQ2ZmZjNTAxZjM2LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy81ODExYzAtNmRhZS00ZGQ0LTk4N2MtZDQ2ZmZjNTAxZjM2
LzEvbVJ0VUlzMVZlTlJ4WHI1TVVKY2dKU1BkVmxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATniTWTFS
s+qDVQ0dAA/VYOOoT6oo2xiHIAMmYX01gdPh5SiX674+QGgXj5hkBDjSf+5Hecyx
bdklt3j/gr/2lCNXqkcIHIeKute3ED4mx9HvsxxA/9MKQ53HhH7+NtcnIfVpR1Q4
VxMBCYGq8wOF8lFSYtODyIcB879AGRhn1nFmiEep+GCf4n2HmVT2r7EfV5EZycya
vID+GWV4UGfKtepxtN/ElBWJIOIkgA9o6hn1l3+AXu+/KMDko5P627ZHhLt6NWmO
kREh37AhPfOWqwo+YePGaJlMltuYnQxvvL5Y01eU7Tz8+ZkEicP6VZ2NSYYCftCy
xXOegXypA6sTVg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:49 2026 by rpki-client