Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
File:                     RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft (raw, json)
Hash identifier:          qBWqQ7hnISP41vL1wLzrnGXTNgRKZO5eSGtwjfoj3TY=
Subject key identifier:   FA:21:6C:A1:DC:9B:88:69:34:31:FF:11:E9:8C:1F:55:4A:B1:3F:9A
Authority key identifier: 46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4
Certificate issuer:       /CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
Certificate serial:       019F93C8D1C32B5AA771A193BCEB85029F9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 11:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:39 +0000
Files and hashes:         1: 1-gvD7al892cvZ4RIDuyKy9oaP8E.roa (hash: 3YuUrQDhY5WtE8QXyn7md8vc7m27H9qU1hbbb54ZWaY=)
                          2: 5Lz9w0B7jrAzPI5acoujGxqoJpE.roa (hash: MZNW6RIYVz1iqV9FFYEQ74EZU6o1FnMQFNeyud+QFNQ=)
                          3: RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl (hash: ks2ZLWzaBc1DQyOeJK1YRM2IZkw4itHaBBCQejD5+lo=)
                          4: U7F_EGMPuOTUwMrEIvZDG6D8FL0.roa (hash: Msu3UEjWnFS+f8ETYG9dtK80xmHaVMz/zqoRDxDt/JM=)
                          5: Zd_S7TX7KyLf91f92bM72Q5m1hg.roa (hash: cE/CxwAeAo553C8FvYX71S7+9eLctivX+ScLAuru1fI=)
                          6: m2jS2YkNTUHRPi6h3Lkhe67p9k0.roa (hash: +y6I9Y8FOJyplIOWWLmZd1y7Nvbup46rof3V4cdi8+s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:d1:c3:2b:5a:a7:71:a1:93:bc:eb:85:02:9f:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d9a0a4b57a0eec7c4e52a119db4b1c656f4db4
        Validity
            Not Before: Jul 24 11:00:39 2026 GMT
            Not After : Jul 25 11:00:39 2026 GMT
        Subject: CN=fa216ca1dc9b88693431ff11e98c1f554ab13f9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:48:0f:ac:20:c7:58:6a:7e:23:28:ed:08:
                    80:67:9e:20:e2:d3:c5:3d:54:40:7f:6c:39:7e:af:
                    5a:05:b0:0a:1f:3e:90:f5:1f:00:e3:d7:fa:3d:06:
                    1c:70:e1:01:d7:8d:a3:bb:75:4e:f2:e2:11:04:22:
                    1c:04:ff:26:f7:40:e5:9c:20:d8:68:0b:44:eb:75:
                    b7:9e:da:e8:b1:a6:90:35:e3:c0:1a:90:f1:c1:82:
                    8d:5e:e1:33:8f:b4:0a:5e:7f:b6:0c:60:ec:cb:39:
                    37:da:31:8c:2d:d4:88:e6:85:c7:7b:6f:06:d9:da:
                    b9:14:89:cd:43:61:99:e9:ac:3c:bb:9e:54:d0:92:
                    00:05:05:48:3d:d7:c2:3d:59:f4:f6:d2:04:d0:eb:
                    36:ac:f4:27:3b:a6:0f:d4:8e:3b:31:bb:8a:44:7f:
                    9e:1f:31:b4:c3:e3:36:5d:2b:a6:7e:7d:d2:f7:fd:
                    b0:17:8e:15:78:d5:89:22:ca:ed:67:69:07:f5:93:
                    41:52:e0:a5:34:ce:50:b2:81:7f:6f:11:0e:9a:75:
                    6a:d6:40:89:01:a2:d8:e8:78:6e:63:97:e5:51:ba:
                    b0:f5:d4:45:9c:2e:9e:b6:64:f6:b2:e9:eb:02:d5:
                    e4:99:09:7b:df:57:68:73:a8:6c:d7:27:e4:cc:3b:
                    ab:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:21:6C:A1:DC:9B:88:69:34:31:FF:11:E9:8C:1F:55:4A:B1:3F:9A
            X509v3 Authority Key Identifier:
                keyid:46:D9:A0:A4:B5:7A:0E:EC:7C:4E:52:A1:19:DB:4B:1C:65:6F:4D:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/673b1d-6d14-4df5-99ad-2ee2b7295dff/1/RtmgpLV6Dux8TlKhGdtLHGVvTbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:9c:d0:69:17:4d:d7:ab:29:dd:d9:75:e6:18:44:0c:f7:27:
         95:08:9d:25:4a:b0:d7:1e:4f:ae:32:05:23:95:ed:ad:2b:49:
         c3:d5:0e:0f:9f:ea:f7:b4:af:57:43:5a:30:92:96:f1:5e:45:
         e4:a2:db:a7:15:5d:f1:ca:56:e7:14:90:03:8f:21:23:bc:55:
         a1:7e:39:21:76:4e:86:4c:94:e1:d0:20:81:f0:f1:1a:a7:61:
         39:71:f2:a3:d4:1f:89:d7:38:b3:7d:cf:3e:e4:ae:8f:af:95:
         a2:9a:a5:56:90:01:37:5e:0d:76:ae:b6:c1:c2:08:36:36:b8:
         34:ff:12:0e:be:c2:44:ee:a9:ba:49:6e:3d:06:11:90:2e:b3:
         45:ce:b3:31:d5:bd:e8:ce:a4:53:69:76:ae:10:74:bc:4b:cc:
         12:0a:fe:3d:c3:7e:0c:cc:fa:9a:b9:54:7e:ca:5a:4e:cf:4a:
         06:54:c9:cc:9b:21:e6:51:ff:96:b6:91:44:55:bd:c7:b5:a5:
         74:f1:c2:f5:12:51:19:6f:fd:a8:c9:46:5f:4b:14:53:a7:ea:
         ca:23:1f:39:7f:f6:84:df:2f:00:a4:1b:66:98:68:34:c8:03:
         49:d9:a9:8f:3b:d6:9a:73:40:a4:8f:67:fb:fd:2e:cd:fd:52:
         ad:15:5b:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyNHDK1qncaGTvOuFAp+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDlhMGE0YjU3YTBlZWM3YzRlNTJhMTE5ZGI0YjFjNjU2
ZjRkYjQwHhcNMjYwNzI0MTEwMDM5WhcNMjYwNzI1MTEwMDM5WjAzMTEwLwYDVQQD
EyhmYTIxNmNhMWRjOWI4ODY5MzQzMWZmMTFlOThjMWY1NTRhYjEzZjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh61ID6wgx1hqfiMo7QiAZ54g4tPF
PVRAf2w5fq9aBbAKHz6Q9R8A49f6PQYccOEB142ju3VO8uIRBCIcBP8m90DlnCDY
aAtE63W3ntrosaaQNePAGpDxwYKNXuEzj7QKXn+2DGDsyzk32jGMLdSI5oXHe28G
2dq5FInNQ2GZ6aw8u55U0JIABQVIPdfCPVn09tIE0Os2rPQnO6YP1I47MbuKRH+e
HzG0w+M2XSumfn3S9/2wF44VeNWJIsrtZ2kH9ZNBUuClNM5QsoF/bxEOmnVq1kCJ
AaLY6HhuY5flUbqw9dRFnC6etmT2sunrAtXkmQl731doc6hs1yfkzDur5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPohbKHcm4hpNDH/EemMH1VKsT+aMB8GA1UdIwQY
MBaAFEbZoKS1eg7sfE5SoRnbSxxlb020MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQt
MmVlMmI3Mjk1ZGZmLzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS82NzNiMWQtNmQxNC00ZGY1LTk5YWQtMmVlMmI3Mjk1ZGZm
LzEvUnRtZ3BMVjZEdXg4VGxLaEdkdExIR1Z2VGJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZpzQaRdN
16sp3dl15hhEDPcnlQidJUqw1x5PrjIFI5XtrStJw9UOD5/q97SvV0NaMJKW8V5F
5KLbpxVd8cpW5xSQA48hI7xVoX45IXZOhkyU4dAggfDxGqdhOXHyo9Qfidc4s33P
PuSuj6+VopqlVpABN14Ndq62wcIINja4NP8SDr7CRO6pukluPQYRkC6zRc6zMdW9
6M6kU2l2rhB0vEvMEgr+PcN+DMz6mrlUfspaTs9KBlTJzJsh5lH/lraRRFW9x7Wl
dPHC9RJRGW/9qMlGX0sUU6fqyiMfOX/2hN8vAKQbZphoNMgDSdmpjzvWmnNApI9n
+/0uzf1SrRVbRQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:23:38 2026 by rpki-client