Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File:                     p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier:          el1RNm0j94NS6n9H8VHnIKu0uxiOBvPAoJB0fXDmKcU=
Subject key identifier:   76:49:CD:90:77:9A:50:E4:20:9C:15:AD:92:66:8D:87:A4:4C:29:E8
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer:       /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial:       019F92B6A7CA783DD7E86E25C9CB051EAA8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 06:01:11 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:11 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:11 +0000
Files and hashes:         1: 6Xsm7GtWPf6sxisdeJuLCo-3tLo.roa (hash: xdyBNDU6Kuc/zF3hUM0jBGfeZpAD6Qr+9Bqu74wdbek=)
                          2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: iksrm+nwu2TJEZ+8sA+u/dUQjxjPFPseF/Mbx/tMOOk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:a7:ca:78:3d:d7:e8:6e:25:c9:cb:05:1e:aa:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
        Validity
            Not Before: Jul 24 06:01:11 2026 GMT
            Not After : Jul 25 06:01:11 2026 GMT
        Subject: CN=7649cd90779a50e4209c15ad92668d87a44c29e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1c:f5:2a:1c:5e:45:76:19:0d:53:92:a6:d3:
                    37:50:6c:f4:82:61:49:14:7b:d7:22:6a:e0:9b:73:
                    0e:ef:ea:f3:ba:8f:e8:44:83:b2:c5:ba:32:ce:d3:
                    81:19:11:33:e3:5b:92:0d:5d:7b:6f:87:7c:28:9d:
                    78:5c:a8:22:e7:b2:91:ed:04:7a:6b:0d:80:22:82:
                    a2:b7:d1:27:ca:a8:b5:d3:6c:1e:3c:2c:9a:ac:92:
                    6b:43:45:20:3c:23:22:bd:ae:aa:28:5f:4e:56:e9:
                    dd:4c:84:66:35:d7:41:79:f6:dc:22:c7:5f:75:55:
                    91:b1:24:b4:7b:a0:ab:17:ad:f2:0a:d0:61:09:c8:
                    d1:03:78:36:4b:92:77:f8:a4:fa:7c:18:24:7c:42:
                    33:14:b0:93:10:e4:34:b3:09:bf:ed:c2:54:fc:53:
                    19:ae:7d:01:49:fb:3f:b9:f4:f1:84:4e:f6:4e:c0:
                    7b:f8:ce:13:da:71:8a:50:ad:c4:13:cb:73:11:0a:
                    65:5a:b0:08:c2:71:70:0a:db:15:2c:48:66:96:6c:
                    0b:ed:44:34:b3:b8:68:39:43:76:a0:78:ff:b3:e1:
                    b3:61:10:4b:58:90:dc:a4:d5:f4:a4:45:f1:c4:af:
                    64:a7:29:8f:ca:8c:b0:ee:ed:5d:71:73:12:99:f1:
                    bf:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:49:CD:90:77:9A:50:E4:20:9C:15:AD:92:66:8D:87:A4:4C:29:E8
            X509v3 Authority Key Identifier:
                keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c0:8b:92:e9:2a:0a:4d:90:8f:06:60:55:31:a8:af:8e:59:
         d7:c4:54:d2:f0:a0:0d:f1:ab:f8:86:9e:55:64:23:d9:be:e4:
         ed:45:64:7e:2a:f2:17:7e:41:20:1d:d5:f2:15:c6:96:92:c6:
         88:8b:10:43:ac:b4:8e:d6:07:1c:53:50:bb:de:5d:67:d7:ae:
         cd:77:67:ff:7a:0e:3c:48:f2:e1:67:23:b0:f3:bb:03:21:ab:
         89:a5:a5:26:41:73:b9:76:8f:0b:4c:18:dd:1f:61:47:47:2e:
         13:a8:f0:73:cd:04:fa:35:08:ee:dd:66:4e:04:d4:c2:a5:b3:
         e8:12:cc:39:25:f2:d0:a4:7d:8d:64:be:18:3e:1b:24:ee:d0:
         cc:a1:03:91:aa:fa:f1:2e:95:33:9d:81:9a:d7:2e:ce:d2:15:
         57:59:c9:4b:9f:1e:55:95:4f:35:e8:c8:fe:78:ec:2f:5d:d7:
         e6:88:1d:4c:77:fd:76:f4:0c:d1:5f:bc:e0:54:e8:24:a5:69:
         98:5c:da:b5:7e:9b:f8:0d:57:6f:0e:2d:30:f1:62:7f:8a:c8:
         f3:48:10:f7:02:41:22:c4:44:0a:9f:66:db:ea:a2:2f:7b:5a:
         89:58:84:fe:35:fe:63:47:6e:39:76:6f:c0:58:87:56:2d:75:
         1b:ff:b6:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StqfKeD3X6G4lycsFHqqKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2
Y2ZkNGMwHhcNMjYwNzI0MDYwMTExWhcNMjYwNzI1MDYwMTExWjAzMTEwLwYDVQQD
Eyg3NjQ5Y2Q5MDc3OWE1MGU0MjA5YzE1YWQ5MjY2OGQ4N2E0NGMyOWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxz1KhxeRXYZDVOSptM3UGz0gmFJ
FHvXImrgm3MO7+rzuo/oRIOyxboyztOBGREz41uSDV17b4d8KJ14XKgi57KR7QR6
aw2AIoKit9Enyqi102wePCyarJJrQ0UgPCMiva6qKF9OVundTIRmNddBefbcIsdf
dVWRsSS0e6CrF63yCtBhCcjRA3g2S5J3+KT6fBgkfEIzFLCTEOQ0swm/7cJU/FMZ
rn0BSfs/ufTxhE72TsB7+M4T2nGKUK3EE8tzEQplWrAIwnFwCtsVLEhmlmwL7UQ0
s7hoOUN2oHj/s+GzYRBLWJDcpNX0pEXxxK9kpymPyoyw7u1dcXMSmfG/3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHZJzZB3mlDkIJwVrZJmjYekTCnoMB8GA1UdIwQY
MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt
YTk1OGJmNWFjYmVhLzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh
LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmcCLkukq
Ck2QjwZgVTGor45Z18RU0vCgDfGr+IaeVWQj2b7k7UVkfiryF35BIB3V8hXGlpLG
iIsQQ6y0jtYHHFNQu95dZ9euzXdn/3oOPEjy4WcjsPO7AyGriaWlJkFzuXaPC0wY
3R9hR0cuE6jwc80E+jUI7t1mTgTUwqWz6BLMOSXy0KR9jWS+GD4bJO7QzKEDkar6
8S6VM52BmtcuztIVV1nJS58eVZVPNejI/njsL13X5ogdTHf9dvQM0V+84FToJKVp
mFzatX6b+A1Xbw4tMPFif4rI80gQ9wJBIsRECp9m2+qiL3taiViE/jX+Y0duOXZv
wFiHVi11G/+2Pg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:13:54 2026 by rpki-client