Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
File:                     Xx_UTMxUtc6zp5yzeUucZq62fkk.mft (raw, json)
Hash identifier:          DTaqvA/s3trKtrrWwk2u84vZMK6BiLOHcyoUSRG3rpQ=
Subject key identifier:   DB:10:23:A1:6F:64:1E:65:18:F9:75:64:F2:55:BD:5A:CB:41:4C:BE
Authority key identifier: 5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49
Certificate issuer:       /CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
Certificate serial:       019F93C9624506E3CADE32152B35DE9E43C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
Manifest number:          19C5
Signing time:             Fri 24 Jul 2026 11:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:16 +0000
Files and hashes:         1: 1WtXs1JyVc4equpJq3X_jQs-X4A.roa (hash: C80ZT3P64b9mGbmYCrezfK8RYn0nr8Lw+tLeUK5lzgI=)
                          2: Xx_UTMxUtc6zp5yzeUucZq62fkk.crl (hash: 8EmrNqEsNhN+cjWpOstWeOmrH3exBeAgzvmAdFAwSt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:62:45:06:e3:ca:de:32:15:2b:35:de:9e:43:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1fd44ccc54b5ceb3a79cb3794b9c66aeb67e49
        Validity
            Not Before: Jul 24 11:01:16 2026 GMT
            Not After : Jul 25 11:01:16 2026 GMT
        Subject: CN=db1023a16f641e6518f97564f255bd5acb414cbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:30:4f:47:ff:c7:6b:2c:de:72:5e:04:0f:
                    58:37:4a:70:ed:61:f7:0c:14:80:a1:d6:28:3a:9e:
                    36:45:e8:8e:11:12:ef:6e:aa:ff:9c:24:dc:53:ef:
                    41:a7:c9:37:8b:1d:56:e4:fa:1e:50:97:36:9d:3a:
                    b9:6c:0e:f7:6a:aa:10:93:5c:ae:a8:8d:7f:88:6a:
                    b3:f5:11:45:f2:7d:6b:70:a7:c3:47:ba:f6:1d:6a:
                    3c:2a:0a:cc:bf:05:86:72:d9:87:ed:62:39:e7:88:
                    5d:d9:f6:39:56:16:91:8d:36:b4:f5:82:59:9a:89:
                    46:17:8a:e5:7a:0c:16:44:39:0c:ad:09:dd:7e:8e:
                    ce:d2:d8:3b:b5:9f:61:80:3e:47:89:71:a3:87:6d:
                    d5:34:c4:e8:ff:df:87:a2:b6:2e:fb:57:1d:2e:ca:
                    e8:d3:bf:b6:d5:83:69:a6:b7:6d:c8:34:5b:e9:45:
                    53:1d:44:ba:a8:72:63:d8:86:14:88:48:04:63:99:
                    6d:dc:eb:e5:95:a2:ad:f9:35:ed:93:c2:c3:63:71:
                    18:9c:86:a6:80:c7:78:de:df:9b:64:a2:f3:18:0c:
                    7e:7c:c5:ee:a4:fd:65:60:ca:d4:f8:cb:fc:ce:fa:
                    37:a3:7c:0d:b6:6d:ef:62:76:8d:a2:96:a6:31:bb:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:10:23:A1:6F:64:1E:65:18:F9:75:64:F2:55:BD:5A:CB:41:4C:BE
            X509v3 Authority Key Identifier:
                keyid:5F:1F:D4:4C:CC:54:B5:CE:B3:A7:9C:B3:79:4B:9C:66:AE:B6:7E:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx_UTMxUtc6zp5yzeUucZq62fkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/aa2a44-3b3e-4b0f-a153-a486be3569a7/1/Xx_UTMxUtc6zp5yzeUucZq62fkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9d:59:e4:8b:33:98:80:a2:29:f6:04:39:4d:a7:77:fc:fd:
         4d:3b:62:86:d8:61:7e:ad:9e:13:56:dc:1c:65:bd:8f:3f:15:
         d4:cf:f8:7c:31:33:12:7b:01:71:68:18:57:ee:cc:7d:1f:32:
         fa:26:ef:5d:24:59:d3:88:49:24:08:a2:52:b9:9b:21:91:02:
         55:51:69:fd:bc:34:fe:7b:37:87:ff:0e:d7:f2:ec:5e:15:60:
         5c:bc:97:df:6f:6d:c6:28:ad:64:41:df:af:a6:09:08:ce:d0:
         d7:24:08:7d:29:8f:a7:ed:29:c7:01:fc:bc:cf:e5:bc:6b:3f:
         ae:43:df:6e:cf:72:ac:3b:86:17:e2:b0:93:97:f1:6b:45:f4:
         24:2f:38:22:a9:03:4b:48:54:bf:be:a8:54:90:ae:4c:be:6a:
         5a:00:93:d1:78:5a:e9:0a:73:6e:98:c9:ad:87:30:69:c4:13:
         c3:b5:a6:2f:b5:84:a1:d1:53:17:0a:ae:97:78:fb:1f:30:33:
         5a:4c:4d:e3:d9:1f:41:87:e0:55:8b:a3:ad:37:28:6e:d6:9a:
         fa:41:e8:a7:44:28:ae:a3:86:0f:77:a1:85:41:d3:92:1c:c8:
         83:b6:f2:3d:af:d9:36:6a:75:51:b2:e3:6b:19:4c:e0:0a:ea:
         58:17:8b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyWJFBuPK3jIVKzXenkPCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmMWZkNDRjY2M1NGI1Y2ViM2E3OWNiMzc5NGI5YzY2YWVi
NjdlNDkwHhcNMjYwNzI0MTEwMTE2WhcNMjYwNzI1MTEwMTE2WjAzMTEwLwYDVQQD
EyhkYjEwMjNhMTZmNjQxZTY1MThmOTc1NjRmMjU1YmQ1YWNiNDE0Y2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEAwT0f/x2ss3nJeBA9YN0pw7WH3
DBSAodYoOp42ReiOERLvbqr/nCTcU+9Bp8k3ix1W5PoeUJc2nTq5bA73aqoQk1yu
qI1/iGqz9RFF8n1rcKfDR7r2HWo8KgrMvwWGctmH7WI554hd2fY5VhaRjTa09YJZ
molGF4rlegwWRDkMrQndfo7O0tg7tZ9hgD5HiXGjh23VNMTo/9+HorYu+1cdLsro
07+21YNpprdtyDRb6UVTHUS6qHJj2IYUiEgEY5lt3OvllaKt+TXtk8LDY3EYnIam
gMd43t+bZKLzGAx+fMXupP1lYMrU+Mv8zvo3o3wNtm3vYnaNopamMbuCSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsQI6FvZB5lGPl1ZPJVvVrLQUy+MB8GA1UdIwQY
MBaAFF8f1EzMVLXOs6ecs3lLnGautn5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMt
YTQ4NmJlMzU2OWE3LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hYTJhNDQtM2IzZS00YjBmLWExNTMtYTQ4NmJlMzU2OWE3
LzEvWHhfVVRNeFV0YzZ6cDV5emVVdWNacTYyZmtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATp1Z5Isz
mICiKfYEOU2nd/z9TTtihthhfq2eE1bcHGW9jz8V1M/4fDEzEnsBcWgYV+7MfR8y
+ibvXSRZ04hJJAiiUrmbIZECVVFp/bw0/ns3h/8O1/LsXhVgXLyX329txiitZEHf
r6YJCM7Q1yQIfSmPp+0pxwH8vM/lvGs/rkPfbs9yrDuGF+Kwk5fxa0X0JC84IqkD
S0hUv76oVJCuTL5qWgCT0Xha6QpzbpjJrYcwacQTw7WmL7WEodFTFwqul3j7HzAz
WkxN49kfQYfgVYujrTcobtaa+kHop0QorqOGD3ehhUHTkhzIg7byPa/ZNmp1UbLj
axlM4ArqWBeLCw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:18:43 2026 by rpki-client