Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File:                     1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier:          K5onNW9GCO4mYfz5Z7Af5l9m31P2C7VirkdpYW15hHg=
Subject key identifier:   86:C1:A1:9C:C5:E8:32:E8:C6:1A:B8:31:D6:27:D1:77:F3:F7:CE:8A
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer:       /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial:       019F91359CEE95E21B05F5EA9AF3B507AD6F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number:          14A8
Signing time:             Thu 23 Jul 2026 23:00:37 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:37 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:37 +0000
Files and hashes:         1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: jW5QbGANP+ZONhweAsr2kchlzcp/mc3bcR1YuznYI4E=)
                          2: HjhcNkYhwKAwsCXy5ZYGbpaMSLg.roa (hash: xX7UUwpJ+KfmGQzUw1STndVlg/7oKae9beZ2g3g7Y4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:9c:ee:95:e2:1b:05:f5:ea:9a:f3:b5:07:ad:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
        Validity
            Not Before: Jul 23 23:00:37 2026 GMT
            Not After : Jul 24 23:00:37 2026 GMT
        Subject: CN=86c1a19cc5e832e8c61ab831d627d177f3f7ce8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:3d:1d:38:94:ae:00:64:68:51:60:4a:53:
                    3d:29:22:ae:a7:f6:b6:37:9d:b5:65:a7:45:76:a5:
                    98:97:d6:03:79:76:67:4b:91:e2:de:17:e5:da:65:
                    1b:d9:ca:ed:9d:cd:2d:6d:05:41:a2:64:4a:4a:23:
                    d9:7b:b6:f5:e3:ce:24:f6:e4:55:b6:47:10:e6:12:
                    9d:e9:18:0f:90:b3:d7:a9:94:a6:2e:f7:43:3f:b2:
                    b6:56:a8:11:17:42:0c:ae:7b:b4:91:ca:37:b1:ed:
                    07:18:2c:5b:6e:6c:a0:7f:02:29:22:f8:f5:0d:f1:
                    8d:5a:ec:e1:5f:7b:99:d2:e7:99:64:51:1d:4f:5d:
                    0f:8e:76:45:63:8b:72:de:40:72:65:8a:45:80:b0:
                    8a:d7:d3:a6:b5:de:10:52:48:e6:ce:e7:3f:04:c6:
                    c9:32:47:74:62:24:e9:00:93:78:1c:e0:99:04:2a:
                    a9:77:2a:1f:d1:0d:d0:ae:a9:22:fc:3c:f4:c9:aa:
                    c0:a4:45:f8:9c:97:0b:20:a1:73:05:7f:93:96:b8:
                    35:6d:7c:92:f4:26:7f:05:27:0f:9a:df:15:d7:31:
                    c8:7b:6f:10:76:39:0b:e2:6b:f1:cd:bf:50:b7:cc:
                    a2:46:55:85:91:09:39:95:c4:14:95:df:3a:6b:57:
                    b8:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:C1:A1:9C:C5:E8:32:E8:C6:1A:B8:31:D6:27:D1:77:F3:F7:CE:8A
            X509v3 Authority Key Identifier:
                keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:4f:26:02:07:ec:54:3e:0b:d5:b7:3d:52:54:86:be:5e:36:
         d8:88:e6:b1:d1:13:08:93:c2:3b:98:8a:3d:9d:2a:45:b4:5a:
         44:59:3d:1d:9c:41:c7:85:1a:f7:cc:ef:e3:b7:cb:da:3f:c7:
         35:47:57:c2:2e:db:53:4c:09:c4:8f:60:74:d8:9f:e4:84:10:
         10:8e:cd:f7:fd:d8:74:fc:05:f1:97:42:f7:0e:6d:4b:a3:01:
         7e:65:22:4c:57:8d:53:4e:77:e5:f1:6f:5b:28:e3:e8:f0:dd:
         ac:73:b9:28:e4:2b:59:f6:c7:51:f1:35:86:3b:97:18:bc:98:
         62:c9:24:3f:fe:df:8a:38:1b:66:b4:af:21:66:4e:85:4b:89:
         a9:e0:f1:96:66:19:e5:97:c7:8d:d2:be:30:55:16:b3:ce:bf:
         ea:f9:82:8d:4c:8c:56:46:0f:af:ff:8d:98:1d:28:c1:f7:6d:
         91:5b:59:51:1c:c2:2e:98:09:40:d2:6b:46:36:7d:2d:76:d1:
         4a:09:49:c7:f7:ab:b6:92:06:fa:9a:3b:13:3d:b8:b2:34:0e:
         66:b8:0f:cc:1d:51:5f:52:b0:41:0c:fe:08:64:51:5c:d8:79:
         37:5f:21:50:99:3c:83:5f:5e:49:43:dc:b5:52:84:10:76:be:
         e0:2c:90:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNZzuleIbBfXqmvO1B61vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1OGNjODUwNmZlZGJiNTA2MWRlOTkyNWIwN2Q2NDk5MThh
MTk5MjYwHhcNMjYwNzIzMjMwMDM3WhcNMjYwNzI0MjMwMDM3WjAzMTEwLwYDVQQD
Eyg4NmMxYTE5Y2M1ZTgzMmU4YzYxYWI4MzFkNjI3ZDE3N2YzZjdjZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGI9HTiUrgBkaFFgSlM9KSKup/a2
N521ZadFdqWYl9YDeXZnS5Hi3hfl2mUb2crtnc0tbQVBomRKSiPZe7b1484k9uRV
tkcQ5hKd6RgPkLPXqZSmLvdDP7K2VqgRF0IMrnu0kco3se0HGCxbbmygfwIpIvj1
DfGNWuzhX3uZ0ueZZFEdT10PjnZFY4ty3kByZYpFgLCK19Omtd4QUkjmzuc/BMbJ
Mkd0YiTpAJN4HOCZBCqpdyof0Q3Qrqki/Dz0yarApEX4nJcLIKFzBX+Tlrg1bXyS
9CZ/BScPmt8V1zHIe28QdjkL4mvxzb9Qt8yiRlWFkQk5lcQUld86a1e40QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIbBoZzF6DLoxhq4MdYn0Xfz986KMB8GA1UdIwQY
MBaAFNWMyFBv7btQYd6ZJbB9ZJkYoZkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEt
YmIzZTgxOWYzZGRjLzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy80NmVmYjUtYzllNy00ZjA4LWJjNmEtYmIzZTgxOWYzZGRj
LzEvMVl6SVVHX3R1MUJoM3BrbHNIMWttUmlobVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWE8mAgfs
VD4L1bc9UlSGvl422IjmsdETCJPCO5iKPZ0qRbRaRFk9HZxBx4Ua98zv47fL2j/H
NUdXwi7bU0wJxI9gdNif5IQQEI7N9/3YdPwF8ZdC9w5tS6MBfmUiTFeNU0535fFv
Wyjj6PDdrHO5KOQrWfbHUfE1hjuXGLyYYskkP/7fijgbZrSvIWZOhUuJqeDxlmYZ
5ZfHjdK+MFUWs86/6vmCjUyMVkYPr/+NmB0owfdtkVtZURzCLpgJQNJrRjZ9LXbR
SglJx/ertpIG+po7Ez24sjQOZrgPzB1RX1KwQQz+CGRRXNh5N18hUJk8g19eSUPc
tVKEEHa+4CyQiw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:17:59 2026 by rpki-client