Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          XgvFwaWInJExDY9t1s9Ge57NSPPAcNlKLSZTqP+tBqg=
Subject key identifier:   E6:AB:9E:69:8E:67:75:93:4F:5C:7E:81:5F:FB:C4:B3:39:D6:BA:70
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       019F92B6268DF83B2C8FA79CFC5363A881E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          19DE
Signing time:             Fri 24 Jul 2026 06:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:38 +0000
Files and hashes:         1: 41oXR0Dcl8hEJOhB0K8Qrklv49c.roa (hash: TTWK0RRIlbuhKut+ATLmSdEPI+QN808VYnN7Vid5qyQ=)
                          2: Dv951AUIUaLuX0MPAgSurBs_Q4o.roa (hash: 3zxZnskXEXOtDhz+ouG2z/QdauveqbNwr6CiV/4QdDc=)
                          3: K9WiUPnzKMk0kTn3YOAAeGsJ3EI.roa (hash: dUaZk3IlcqCI85S/6UCtSKIbamHpI107QQx2h8oykGA=)
                          4: LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa (hash: /x4igD0ebKYVQZig1vtn+O0OtoMkLAFpYnPG8GiLvWI=)
                          5: U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa (hash: QBCXbXwqQu101TJcQB50Hnn/s+aowNHvXExjcnPeLEI=)
                          6: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: 7nBgYmQ3JVjmIACv843sCfwaBiTfdSDgk4APaYYn6KU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:26:8d:f8:3b:2c:8f:a7:9c:fc:53:63:a8:81:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Jul 24 06:00:38 2026 GMT
            Not After : Jul 25 06:00:38 2026 GMT
        Subject: CN=e6ab9e698e6775934f5c7e815ffbc4b339d6ba70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:8e:60:c1:f5:b3:c2:e6:41:3e:4d:60:a6:
                    38:f1:c8:a4:c7:d6:87:a7:20:ba:6a:e5:35:02:c7:
                    35:4d:93:0b:d6:9b:ac:ef:b9:32:f2:e4:f5:b6:f6:
                    86:e8:07:a6:29:e3:fe:1f:50:ac:bc:c3:c6:18:6b:
                    a6:0a:86:61:ce:dd:17:e4:43:1f:38:c9:69:3b:41:
                    4d:0e:f2:76:04:c5:8c:9f:82:b4:2a:54:24:9c:eb:
                    04:51:52:e8:a2:17:d3:f2:34:54:f4:62:91:6e:0b:
                    47:f8:f7:6a:3a:e5:1e:62:ce:e7:3f:f7:ba:f6:4e:
                    a3:d9:2a:d2:04:92:0b:93:44:55:f0:54:72:3c:19:
                    66:57:e4:ab:a5:75:85:02:24:bc:8b:e3:24:65:9d:
                    e4:47:ef:1c:d3:a0:cb:42:2a:f2:c5:f0:f5:31:a0:
                    4a:46:3f:74:70:7d:95:04:e5:0b:44:17:a5:36:7c:
                    3b:39:0d:9e:d1:ef:19:26:af:b8:9d:06:da:f4:d4:
                    f3:de:57:5b:27:6d:e3:c7:a4:f5:b6:9c:ae:24:be:
                    5e:24:9f:85:95:e7:c9:00:74:46:63:29:c2:d1:0f:
                    7b:44:90:cd:c6:5d:22:29:ba:65:48:b9:31:13:e3:
                    60:06:07:f8:15:b8:c0:c8:96:36:ac:e5:ef:3c:d2:
                    30:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:AB:9E:69:8E:67:75:93:4F:5C:7E:81:5F:FB:C4:B3:39:D6:BA:70
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:6f:c3:19:72:a9:20:5b:85:a3:b4:1a:d6:fe:78:e9:00:ce:
         38:f5:f3:2d:26:3e:18:9e:1d:22:39:d4:a4:52:90:21:46:66:
         6a:1b:7a:a5:6c:c4:99:49:50:c5:9e:72:2d:b0:df:4b:a0:b7:
         90:4d:b6:1c:5d:9a:19:d2:fd:e8:63:8f:b4:af:be:ff:ba:ca:
         ce:c4:25:9c:ef:65:e3:1c:b8:1f:1d:d7:24:07:1f:16:52:47:
         bc:84:1f:94:48:29:fe:f6:09:57:8b:8d:80:b2:86:6a:d9:d6:
         b2:c0:bf:e2:23:f0:ab:b0:cb:5a:2a:87:24:55:8b:8e:6c:3b:
         3e:68:a1:05:e7:bc:d2:8e:b9:9e:6a:c5:57:d2:8e:30:65:6b:
         55:3e:65:ce:24:02:09:cc:f1:1b:c3:cb:9c:de:39:7e:9f:da:
         41:3f:bc:c7:9a:8a:d2:ee:42:9f:6d:31:ee:20:ea:cf:5a:fc:
         2c:13:91:9c:28:2d:5c:25:e7:2c:64:c5:9e:99:0f:73:44:c0:
         9e:52:6c:ae:d0:2e:d4:aa:da:a6:04:42:37:7f:5c:3f:1c:13:
         3f:fc:50:c2:56:ab:4f:f1:64:94:23:05:72:7c:6b:21:fb:df:
         d7:65:2d:44:66:02:0c:6b:f8:3c:f8:5a:d8:0a:4f:ef:87:86:
         b5:f1:5e:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StiaN+Dssj6ec/FNjqIHmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl
ZTRiYzEwHhcNMjYwNzI0MDYwMDM4WhcNMjYwNzI1MDYwMDM4WjAzMTEwLwYDVQQD
EyhlNmFiOWU2OThlNjc3NTkzNGY1YzdlODE1ZmZiYzRiMzM5ZDZiYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCeOYMH1s8LmQT5NYKY48cikx9aH
pyC6auU1Asc1TZML1pus77ky8uT1tvaG6AemKeP+H1CsvMPGGGumCoZhzt0X5EMf
OMlpO0FNDvJ2BMWMn4K0KlQknOsEUVLoohfT8jRU9GKRbgtH+PdqOuUeYs7nP/e6
9k6j2SrSBJILk0RV8FRyPBlmV+SrpXWFAiS8i+MkZZ3kR+8c06DLQiryxfD1MaBK
Rj90cH2VBOULRBelNnw7OQ2e0e8ZJq+4nQba9NTz3ldbJ23jx6T1tpyuJL5eJJ+F
lefJAHRGYynC0Q97RJDNxl0iKbplSLkxE+NgBgf4FbjAyJY2rOXvPNIwiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOarnmmOZ3WTT1x+gV/7xLM51rpwMB8GA1UdIwQY
MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt
ZDdiOGViNDYwOGUyLzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy
LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALm/DGXKp
IFuFo7Qa1v546QDOOPXzLSY+GJ4dIjnUpFKQIUZmaht6pWzEmUlQxZ5yLbDfS6C3
kE22HF2aGdL96GOPtK++/7rKzsQlnO9l4xy4Hx3XJAcfFlJHvIQflEgp/vYJV4uN
gLKGatnWssC/4iPwq7DLWiqHJFWLjmw7PmihBee80o65nmrFV9KOMGVrVT5lziQC
CczxG8PLnN45fp/aQT+8x5qK0u5Cn20x7iDqz1r8LBORnCgtXCXnLGTFnpkPc0TA
nlJsrtAu1KrapgRCN39cPxwTP/xQwlarT/FklCMFcnxrIfvf12UtRGYCDGv4PPha
2ApP74eGtfFecg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:47:17 2026 by rpki-client