Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
File:                     Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft (raw, json)
Hash identifier:          3x3fvbu+X0Bmlus7KQD8pURigEj3dTfP3Z34s2c94JY=
Subject key identifier:   3B:40:C4:F0:88:58:37:9B:71:52:40:6A:6E:06:1D:AD:CB:F7:95:AD
Authority key identifier: 46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67
Certificate issuer:       /CN=46dc9b828aacec97114ddba6819e3024652c1867
Certificate serial:       019F935B85A57A01B4F80DE99971A70B1BB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:16 +0000
Files and hashes:         1: 4XiXh8_wXxHMXryb21gQu-Vo2ak.roa (hash: ZhzTAMyy8UUREXRxteZi8kS1/dlvGAHQtBtzgyRuz1Y=)
                          2: R2rXfyd0OXaVnfiV3CA9oe0qoxg.roa (hash: vVj2qBO4foAyQkAfmXKW438nMYRkk8Pl9+S1RCDweeM=)
                          3: Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl (hash: 8ggZS5atHaWqMSpbUU7fyV+SBisvEj75AUpdWja1rNQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:85:a5:7a:01:b4:f8:0d:e9:99:71:a7:0b:1b:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46dc9b828aacec97114ddba6819e3024652c1867
        Validity
            Not Before: Jul 24 09:01:16 2026 GMT
            Not After : Jul 25 09:01:16 2026 GMT
        Subject: CN=3b40c4f08858379b7152406a6e061dadcbf795ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:24:6a:e2:39:ed:26:f4:ad:e1:00:92:c1:59:
                    45:7c:72:60:a7:17:8a:1c:74:0a:52:a8:d2:d2:e4:
                    aa:6c:85:0c:7d:51:24:43:25:dd:f3:45:70:c3:08:
                    8c:79:14:f0:14:71:c3:52:c3:a2:d9:3b:f9:90:07:
                    cd:30:6d:bd:d8:ba:7d:06:e3:de:9c:65:e6:39:cf:
                    2b:36:24:bd:2e:6e:44:b8:68:d2:c3:8a:ec:c3:fc:
                    85:eb:02:00:e4:76:ee:09:14:1d:ed:ea:c8:cf:64:
                    55:8b:55:11:3d:a8:a1:b6:5c:b3:31:03:2a:3c:99:
                    a7:b0:f6:92:a9:1c:2c:05:13:6e:7e:64:e7:61:19:
                    1e:5d:9e:54:75:86:37:53:44:ae:26:98:57:10:85:
                    66:7f:d5:06:97:ac:c5:9e:4f:8e:06:3a:1d:6e:da:
                    b0:8d:18:6b:fa:d2:8a:4e:7e:3e:4b:d0:bf:61:13:
                    f0:84:ae:ba:be:43:bd:06:48:ef:39:f4:1c:1a:11:
                    c9:0f:c5:4c:fb:25:5f:e4:09:7b:fd:df:9d:a3:b2:
                    50:2c:4e:da:22:d5:06:3d:c5:b5:02:4b:2f:04:51:
                    39:4f:81:6e:38:7d:8d:3e:3d:7a:25:ac:1f:ec:28:
                    7c:fc:1d:a7:fe:21:30:2a:88:5f:4a:95:7f:10:f7:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:40:C4:F0:88:58:37:9B:71:52:40:6A:6E:06:1D:AD:CB:F7:95:AD
            X509v3 Authority Key Identifier:
                keyid:46:DC:9B:82:8A:AC:EC:97:11:4D:DB:A6:81:9E:30:24:65:2C:18:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rtybgoqs7JcRTdumgZ4wJGUsGGc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/Rtybgoqs7JcRTdumgZ4wJGUsGGc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:21:25:b8:a1:86:a8:b5:ed:3b:47:6d:ea:80:26:31:3d:9f:
         36:cd:59:06:e2:60:cb:69:78:6a:60:a7:ec:ce:d5:aa:56:f3:
         3c:62:a1:dc:71:bc:60:85:16:c9:7d:7f:4d:06:11:1e:8c:93:
         92:01:f4:ac:bd:2e:c1:e5:ac:06:14:dc:ca:47:db:e5:b3:3a:
         c2:0d:25:4c:09:5d:6f:f2:40:89:ca:d7:9a:c7:7a:c5:ae:6c:
         d0:c6:b0:1b:2b:04:e8:2d:f6:58:7a:68:d2:0a:8e:a0:2f:3f:
         74:02:ca:5e:6c:b1:82:b0:39:7f:41:ba:b0:e1:13:eb:c1:be:
         00:8a:d4:64:43:8d:15:54:74:e9:ff:e8:79:a4:ec:d4:fe:57:
         94:ce:19:ff:f8:67:db:6c:3c:92:b9:43:26:1b:cd:bd:1c:5a:
         fc:13:e8:e5:f5:a0:a6:b9:b8:1d:3b:ac:f7:64:97:64:58:42:
         bc:9f:f3:66:de:d9:18:68:ed:92:a3:ff:d2:60:a0:6a:c0:89:
         52:5f:cb:cf:e2:8f:a6:fd:e5:a9:1f:27:d8:96:f6:36:04:97:
         5a:55:b3:9e:18:f8:84:7e:48:c6:d0:12:66:81:ca:73:ce:2b:
         92:a3:89:e6:43:47:48:c1:54:52:e9:db:2b:6d:dc:2e:3c:d1:
         11:a9:f9:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW4WlegG0+A3pmXGnCxu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZGM5YjgyOGFhY2VjOTcxMTRkZGJhNjgxOWUzMDI0NjUy
YzE4NjcwHhcNMjYwNzI0MDkwMTE2WhcNMjYwNzI1MDkwMTE2WjAzMTEwLwYDVQQD
EygzYjQwYzRmMDg4NTgzNzliNzE1MjQwNmE2ZTA2MWRhZGNiZjc5NWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCRq4jntJvSt4QCSwVlFfHJgpxeK
HHQKUqjS0uSqbIUMfVEkQyXd80VwwwiMeRTwFHHDUsOi2Tv5kAfNMG292Lp9BuPe
nGXmOc8rNiS9Lm5EuGjSw4rsw/yF6wIA5HbuCRQd7erIz2RVi1URPaihtlyzMQMq
PJmnsPaSqRwsBRNufmTnYRkeXZ5UdYY3U0SuJphXEIVmf9UGl6zFnk+OBjodbtqw
jRhr+tKKTn4+S9C/YRPwhK66vkO9BkjvOfQcGhHJD8VM+yVf5Al7/d+do7JQLE7a
ItUGPcW1AksvBFE5T4FuOH2NPj16Jawf7Ch8/B2n/iEwKohfSpV/EPdy3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDtAxPCIWDebcVJAam4GHa3L95WtMB8GA1UdIwQY
MBaAFEbcm4KKrOyXEU3bpoGeMCRlLBhnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnR5YmdvcXM3SmNSVGR1bWdaNHdKR1VzR0djLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjIt
ZjhkNmQxYTc0YjFkLzEvUnR5YmdvcXM3SmNSVGR1bWdaNHdKR1VzR0djLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8yMTY2YTgtMzU3Yy00Y2Y2LWI2ZjItZjhkNmQxYTc0YjFk
LzEvUnR5YmdvcXM3SmNSVGR1bWdaNHdKR1VzR0djLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOSEluKGG
qLXtO0dt6oAmMT2fNs1ZBuJgy2l4amCn7M7VqlbzPGKh3HG8YIUWyX1/TQYRHoyT
kgH0rL0uweWsBhTcykfb5bM6wg0lTAldb/JAicrXmsd6xa5s0MawGysE6C32WHpo
0gqOoC8/dALKXmyxgrA5f0G6sOET68G+AIrUZEONFVR06f/oeaTs1P5XlM4Z//hn
22w8krlDJhvNvRxa/BPo5fWgprm4HTus92SXZFhCvJ/zZt7ZGGjtkqP/0mCgasCJ
Ul/Lz+KPpv3lqR8n2Jb2NgSXWlWznhj4hH5IxtASZoHKc84rkqOJ5kNHSMFUUunb
K23cLjzREan54Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:48:50 2026 by rpki-client