Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
File:                     JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft (raw, json)
Hash identifier:          Qbzs+MAsOU+HxzHOtFHuJTTfHSaRVC2qqZCnK9J4xkw=
Subject key identifier:   CC:D7:76:3D:66:9F:CF:15:24:85:03:0B:38:95:7B:9C:A2:6A:02:D0
Authority key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Certificate issuer:       /CN=255876412d20fbb6cab823481782ac47703b4404
Certificate serial:       019F8ED97001A89D2F19FAC6FD37E55ABF9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
Manifest number:          069C
Signing time:             Thu 23 Jul 2026 12:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 12:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 12:00:42 +0000
Files and hashes:         1: 3ni1lXz0xo-b4HoXI3wRu6vJL-c.roa (hash: 7b3P7fNZC5J3JcfQvJqiC/2neHH6f8kadDw6/l3P8/Y=)
                          2: AmdO1jA2vkBtxkn2vv7Y1wu4dFM.roa (hash: wY1LZtovvbzyHM2W8YhMwLuam5z9V3nwmwDqM8gEEF4=)
                          3: BYtnuImtTGdi14Pvw9xlRKAL65k.roa (hash: hUoeJXbJ5fZg7WKvqap5HxU1pLmROBa7LXCxisf4SP4=)
                          4: CNFp8fRkRFtEQks7R0O2wgi6-xA.roa (hash: bXlKDyyKKGdmKBfoGxYPygp5JG45Ozo2FLYDRNT3VpM=)
                          5: HrFuB2F4P326FdIKDHmR_z_oGqs.roa (hash: d1+J0bs8Jd4Tmg8E7c67C6CZ18CYNi+0jZ3ouxTsd3M=)
                          6: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl (hash: cTz7Ivc05cYEG/TzSD15QewLUM/h1X1N3/9PN+EQfeU=)
                          7: YlYX0-EwdZ0RjwlcesbIkWVsVTo.roa (hash: 12tzR601qVt1Vj7EME9V9wBl6cqsNdP8VmiHIJgAu5Q=)
                          8: cNqycsZxVsHcATCP8JWqqaoM9SI.roa (hash: CX+xOUuMFEXPOxevDnRNct6cRUm/jc1q9b58M6PTWZo=)
                          9: gE3k0i8jHZvr5aE-wjNKPwzJxvE.roa (hash: CuCVWX3Bl6EYyE6nnbYJN+zyPfahHe62RUo//GoIy9o=)
                          10: lBlo6PUCc6IqER-nFwmpK7D7yqo.roa (hash: Z5uCFtdD3Jko3O/Znx9FA924V5ua0wn5UjLkJKE8KyE=)
                          11: qbksFEEwSTb2bBOnvyMaaJhR7Ss.roa (hash: qH3mt9TzRYD5CJqPjTYWZEejOSD69A/a1ZIdDauUkQo=)
                          12: urqr3QuscnM9Gexd4HqCzda04Hs.roa (hash: +eFtvrmvtLAGjqTjuO2JbNNCYDwjSBJV6qDXXX+HoPY=)
                          13: vsRZs78l22h0vnp-DI6scU3LKUA.roa (hash: 4WpHfFl6tIuHybFbUi60kzMtYBl55u5TXUCckR5iGfg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:70:01:a8:9d:2f:19:fa:c6:fd:37:e5:5a:bf:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=255876412d20fbb6cab823481782ac47703b4404
        Validity
            Not Before: Jul 23 12:00:42 2026 GMT
            Not After : Jul 24 12:00:42 2026 GMT
        Subject: CN=ccd7763d669fcf152485030b38957b9ca26a02d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:06:b3:17:74:05:19:7c:72:5e:50:e5:96:d4:
                    3c:88:ed:07:57:0c:b3:28:db:04:d6:b6:70:73:ae:
                    06:87:fd:9a:4a:dc:34:8b:00:54:9c:d5:82:2b:9d:
                    9f:b2:52:e0:32:83:42:4e:6e:65:02:87:3b:7d:d2:
                    e8:87:a7:42:40:1f:a6:50:2b:9f:0f:38:69:df:e3:
                    a2:6c:bd:db:f9:45:c0:89:58:ff:cc:4f:c8:32:ec:
                    b3:5d:1f:80:b9:03:9c:a8:60:94:ff:bd:b6:76:26:
                    0e:8e:48:2d:e9:c7:51:55:5c:e4:7f:65:62:42:12:
                    e4:5b:99:60:f9:f1:53:05:16:44:74:25:f9:47:54:
                    e2:2e:26:38:42:ee:c7:61:12:7b:5d:fe:74:b2:11:
                    09:ba:f9:fd:cc:b3:57:cf:76:10:b5:8a:96:47:5b:
                    a5:35:78:3a:9e:94:28:98:a5:9e:76:5c:66:f8:27:
                    e1:30:24:6a:87:df:19:b9:40:79:ba:b7:7f:cb:a5:
                    b0:47:b7:85:00:34:e5:93:fc:b5:e4:46:2e:b9:29:
                    0e:03:eb:5e:d7:af:69:04:59:25:0c:b7:ef:1a:fa:
                    57:66:b4:5c:74:59:34:22:ac:90:0a:27:bc:4a:b4:
                    73:13:4e:b6:be:e4:11:10:98:9c:bc:33:e1:30:2b:
                    f4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D7:76:3D:66:9F:CF:15:24:85:03:0B:38:95:7B:9C:A2:6A:02:D0
            X509v3 Authority Key Identifier:
                keyid:25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:d1:e3:54:54:04:37:5b:4f:6e:14:fc:b5:a5:af:20:fd:38:
         b7:62:1e:71:58:bf:3c:ac:a6:a1:7b:42:e0:93:f2:65:2e:1f:
         7a:0b:ca:6f:c2:44:b6:07:9b:78:a4:c3:2a:a6:c7:bc:29:a4:
         8d:6e:70:65:f0:91:bd:4b:fc:6b:ea:a1:73:84:50:27:84:5e:
         83:a8:29:60:ba:47:1c:09:c2:69:8a:98:83:5e:be:63:95:da:
         bf:2c:79:7f:32:91:3c:ff:2c:37:26:a7:69:b6:1c:af:43:36:
         59:cb:9a:e3:d4:01:24:2b:48:d4:de:ac:41:c3:f7:03:f0:13:
         2a:e7:f3:32:87:05:c5:44:90:dd:cf:2c:d5:44:bd:d3:7f:6e:
         0f:32:b6:e1:9f:b4:8d:4c:d0:74:25:0e:dc:c8:4f:86:d1:c2:
         a9:a6:60:b6:8e:b2:16:cb:3d:31:98:1d:d0:49:3e:68:83:2c:
         ee:13:70:24:15:07:a9:72:81:1f:3f:11:0b:ea:3f:36:21:8d:
         dd:12:04:93:39:08:b7:08:45:71:c2:77:52:fb:0a:cb:9b:40:
         1e:e4:f8:0f:b6:c1:8d:fb:02:a9:47:6f:11:f4:93:0a:0e:01:
         55:41:bd:19:3e:16:8f:1d:1e:76:94:3b:75:84:de:7f:a6:e5:
         a1:ae:ab:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2XABqJ0vGfrG/TflWr+aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NTg3NjQxMmQyMGZiYjZjYWI4MjM0ODE3ODJhYzQ3NzAz
YjQ0MDQwHhcNMjYwNzIzMTIwMDQyWhcNMjYwNzI0MTIwMDQyWjAzMTEwLwYDVQQD
EyhjY2Q3NzYzZDY2OWZjZjE1MjQ4NTAzMGIzODk1N2I5Y2EyNmEwMmQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygazF3QFGXxyXlDlltQ8iO0HVwyz
KNsE1rZwc64Gh/2aStw0iwBUnNWCK52fslLgMoNCTm5lAoc7fdLoh6dCQB+mUCuf
Dzhp3+OibL3b+UXAiVj/zE/IMuyzXR+AuQOcqGCU/722diYOjkgt6cdRVVzkf2Vi
QhLkW5lg+fFTBRZEdCX5R1TiLiY4Qu7HYRJ7Xf50shEJuvn9zLNXz3YQtYqWR1ul
NXg6npQomKWedlxm+CfhMCRqh98ZuUB5urd/y6WwR7eFADTlk/y15EYuuSkOA+te
169pBFklDLfvGvpXZrRcdFk0IqyQCie8SrRzE062vuQREJicvDPhMCv0NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMzXdj1mn88VJIUDCziVe5yiagLQMB8GA1UdIwQY
MBaAFCVYdkEtIPu2yrgjSBeCrEdwO0QEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEt
ODc2YzdmY2E0YjM0LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9kZDA2MmEtMTMxOS00MDE5LWE1NTEtODc2YzdmY2E0YjM0
LzEvSlZoMlFTMGctN2JLdUNOSUY0S3NSM0E3UkFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAedHjVFQE
N1tPbhT8taWvIP04t2IecVi/PKymoXtC4JPyZS4fegvKb8JEtgebeKTDKqbHvCmk
jW5wZfCRvUv8a+qhc4RQJ4Reg6gpYLpHHAnCaYqYg16+Y5Xavyx5fzKRPP8sNyan
abYcr0M2Wcua49QBJCtI1N6sQcP3A/ATKufzMocFxUSQ3c8s1US9039uDzK24Z+0
jUzQdCUO3MhPhtHCqaZgto6yFss9MZgd0Ek+aIMs7hNwJBUHqXKBHz8RC+o/NiGN
3RIEkzkItwhFccJ3UvsKy5tAHuT4D7bBjfsCqUdvEfSTCg4BVUG9GT4Wjx0edpQ7
dYTef6bloa6raA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:43:48 2026 by rpki-client