Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
File:                     5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft (raw, json)
Hash identifier:          gbdzvHlRt+l/0nJ4y5CH+m0eYhWxx1R/0BQvftmPKpA=
Subject key identifier:   11:7A:99:0B:BE:CB:C2:E0:12:5D:E1:40:0B:94:36:78:D4:EE:B5:04
Authority key identifier: E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA
Certificate issuer:       /CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
Certificate serial:       019F9090877AAB3B00DC5DBAC5B80FEDD0DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
Manifest number:          19C4
Signing time:             Thu 23 Jul 2026 20:00:18 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:18 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:18 +0000
Files and hashes:         1: 5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl (hash: wQoemGEgTmtmOO3TllM1yNWsZB+2/sC01SA3MBfxERI=)
                          2: D-nOivgDEJq8rd7vPKuj8pDOBgk.roa (hash: LETov+Lua4j/yR4BxAv5AEPXeMZW4Mrk93BjXgjlueY=)
                          3: NU0cGjRVpPRghvrftP7NKEqaYpE.roa (hash: OQpewaLDtT6aP1Ts9cf7FFERM+J53ay0SxaVxOPiWcM=)
                          4: oIlmIdhnbzjLtp43rh2MsVavMNM.roa (hash: 7e7qFe3v2vD4PgMioz1gtUGPm4Gu4u7HGY/wOowK1Y0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:87:7a:ab:3b:00:dc:5d:ba:c5:b8:0f:ed:d0:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e733b2eab7e234687be97f8c35d6e6cc3e2dfcba
        Validity
            Not Before: Jul 23 20:00:18 2026 GMT
            Not After : Jul 24 20:00:18 2026 GMT
        Subject: CN=117a990bbecbc2e0125de1400b943678d4eeb504
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:ec:23:80:9b:db:d7:b3:aa:b7:94:cf:e4:
                    6c:fc:c1:92:af:5c:d6:7e:1b:c4:c2:d8:34:d9:2d:
                    4d:61:47:05:61:4a:9e:75:79:a7:42:fc:6b:d2:25:
                    a4:dd:e3:13:cc:49:a2:dc:82:a6:6e:88:ac:56:28:
                    ea:e6:3a:75:83:41:a5:45:36:d1:99:d6:c2:02:66:
                    c2:ad:7b:81:db:99:dc:70:98:4c:70:4d:26:29:c3:
                    48:e2:33:12:c4:60:7d:e2:d7:f3:5f:32:13:e8:aa:
                    c2:8c:9a:b6:e6:78:a6:b7:c1:c7:be:35:18:cf:c9:
                    bf:5e:8a:ba:10:9a:7f:d3:77:f1:a4:09:aa:9a:18:
                    20:6e:c4:40:00:fc:21:c1:64:1c:64:f9:63:94:ba:
                    b8:7f:9c:0e:0b:8e:d0:67:2d:aa:ff:44:05:74:39:
                    63:b3:fe:3f:ff:1b:b9:58:fd:9a:1b:85:4a:f1:a7:
                    41:27:3b:52:d7:ae:c7:00:c8:80:1d:2b:5e:d8:90:
                    62:8c:dc:a7:23:c7:9d:78:9a:06:5a:a0:ff:78:e3:
                    47:f2:fb:d4:68:b0:98:6b:4e:52:fb:e8:b4:51:13:
                    9b:4f:e2:2b:9d:de:43:86:19:b1:76:e2:4a:e5:d6:
                    ed:e4:40:2c:29:f0:be:12:ba:ea:a6:52:53:20:38:
                    ed:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7A:99:0B:BE:CB:C2:E0:12:5D:E1:40:0B:94:36:78:D4:EE:B5:04
            X509v3 Authority Key Identifier:
                keyid:E7:33:B2:EA:B7:E2:34:68:7B:E9:7F:8C:35:D6:E6:CC:3E:2D:FC:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zOy6rfiNGh76X-MNdbmzD4t_Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9360f5-1deb-4b43-a32f-ac44bc569a78/1/5zOy6rfiNGh76X-MNdbmzD4t_Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:cc:14:bc:23:da:76:95:aa:a4:84:04:3d:5d:db:bb:76:8b:
         21:02:52:c7:ec:c9:bb:b9:14:c2:53:2a:98:1f:e7:5c:3f:d4:
         d6:35:45:fb:55:cd:df:95:f4:44:64:53:e9:e7:62:8f:0e:23:
         23:10:9e:05:ca:0e:88:65:ba:99:f9:5b:c0:bf:91:77:22:b1:
         0a:bf:72:aa:5a:03:f1:f8:f3:07:aa:f3:63:67:ad:b4:fa:85:
         69:ee:c7:f5:04:db:8d:86:d7:3d:02:1e:68:ae:c4:96:86:d5:
         bb:e3:02:40:ff:44:f8:57:4c:d2:44:c5:d3:e9:5a:32:dc:1e:
         e8:44:b4:9a:58:4b:78:99:b1:68:9a:fe:09:50:18:ee:04:41:
         cf:a3:7b:67:10:2f:c3:30:c2:b8:2a:3f:40:43:66:0d:7d:98:
         fe:28:4e:e5:d2:e0:40:2d:66:27:f5:2b:1b:cb:ac:78:a4:ff:
         c3:b7:b0:8d:f2:67:9e:64:58:75:54:33:0b:79:2c:e7:81:88:
         7b:95:7c:82:90:01:9a:be:2f:c0:f2:fe:38:12:d8:a5:bc:9e:
         1c:cf:a9:9f:7c:09:a1:2f:0e:58:87:72:0c:56:75:d2:0f:bf:
         ae:1a:44:a0:7f:70:85:bf:f3:7b:25:82:59:63:67:7a:93:17:
         72:bd:6e:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkId6qzsA3F26xbgP7dDeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3MzNiMmVhYjdlMjM0Njg3YmU5N2Y4YzM1ZDZlNmNjM2Uy
ZGZjYmEwHhcNMjYwNzIzMjAwMDE4WhcNMjYwNzI0MjAwMDE4WjAzMTEwLwYDVQQD
EygxMTdhOTkwYmJlY2JjMmUwMTI1ZGUxNDAwYjk0MzY3OGQ0ZWViNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4jsI4Cb29ezqreUz+Rs/MGSr1zW
fhvEwtg02S1NYUcFYUqedXmnQvxr0iWk3eMTzEmi3IKmboisVijq5jp1g0GlRTbR
mdbCAmbCrXuB25nccJhMcE0mKcNI4jMSxGB94tfzXzIT6KrCjJq25nimt8HHvjUY
z8m/Xoq6EJp/03fxpAmqmhggbsRAAPwhwWQcZPljlLq4f5wOC47QZy2q/0QFdDlj
s/4//xu5WP2aG4VK8adBJztS167HAMiAHSte2JBijNynI8edeJoGWqD/eONH8vvU
aLCYa05S++i0URObT+Irnd5DhhmxduJK5dbt5EAsKfC+ErrqplJTIDjtnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBF6mQu+y8LgEl3hQAuUNnjU7rUEMB8GA1UdIwQY
MBaAFOczsuq34jRoe+l/jDXW5sw+Lfy6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYt
YWM0NGJjNTY5YTc4LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS85MzYwZjUtMWRlYi00YjQzLWEzMmYtYWM0NGJjNTY5YTc4
LzEvNXpPeTZyZmlOR2g3NlgtTU5kYm16RDR0X0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccwUvCPa
dpWqpIQEPV3bu3aLIQJSx+zJu7kUwlMqmB/nXD/U1jVF+1XN35X0RGRT6edijw4j
IxCeBcoOiGW6mflbwL+RdyKxCr9yqloD8fjzB6rzY2ettPqFae7H9QTbjYbXPQIe
aK7ElobVu+MCQP9E+FdM0kTF0+laMtwe6ES0mlhLeJmxaJr+CVAY7gRBz6N7ZxAv
wzDCuCo/QENmDX2Y/ihO5dLgQC1mJ/UrG8useKT/w7ewjfJnnmRYdVQzC3ks54GI
e5V8gpABmr4vwPL+OBLYpbyeHM+pn3wJoS8OWIdyDFZ10g+/rhpEoH9whb/zeyWC
WWNnepMXcr1uPw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:59 2026 by rpki-client