Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
File:                     L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft (raw, json)
Hash identifier:          /4rAZ0QRqTU499JDl9WhpglnLszH9RnIcPqK062y0E0=
Subject key identifier:   39:46:A2:85:F3:C8:1C:D4:44:37:57:54:A3:68:EB:B9:C4:8C:91:86
Authority key identifier: 2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B
Certificate issuer:       /CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
Certificate serial:       019F916D0715F344DB649893345ED3994F67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 00:01:09 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:09 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:09 +0000
Files and hashes:         1: L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl (hash: RPoE7+RAt6iWvs1MzFxdmReO5nxclMaMvzqPyXV8D4c=)
                          2: W6FjOnvEDK4nIE1NTMn5BVz3fuM.roa (hash: 3HTrKjjRsVy1cVU/H1CFW3GVw/q8a/eXNoo6L1gCpFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:07:15:f3:44:db:64:98:93:34:5e:d3:99:4f:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f95a0589b2846ebfc7366c06c644b46a2d8d32b
        Validity
            Not Before: Jul 24 00:01:09 2026 GMT
            Not After : Jul 25 00:01:09 2026 GMT
        Subject: CN=3946a285f3c81cd444375754a368ebb9c48c9186
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:4a:7f:40:5f:84:a2:4e:43:ca:fd:2e:41:
                    20:df:a0:9a:3d:c7:a5:7a:bc:39:06:23:7b:c4:82:
                    32:e8:51:1f:a7:57:67:1c:73:76:a4:28:c5:6c:20:
                    7d:a0:5d:6f:7e:9e:45:11:ef:ef:3e:32:f0:49:ea:
                    01:be:43:32:d1:85:19:8f:90:2c:71:38:d3:b2:b4:
                    db:a5:cf:c8:71:7a:00:50:d4:1f:02:89:c7:b9:56:
                    75:2f:6b:50:5a:ec:35:b3:5e:25:5d:8c:f9:68:05:
                    5d:b8:79:07:4e:4e:1c:75:53:f7:52:38:cc:6d:05:
                    45:72:21:0a:b7:3e:eb:14:e1:d1:18:78:40:52:79:
                    4c:3d:9e:df:fd:77:50:a4:db:55:ca:8b:fc:4c:be:
                    1b:83:d1:aa:f8:5d:01:2a:f4:3e:ad:80:0f:7b:d6:
                    c2:ac:15:45:fb:ec:bf:f9:03:40:32:b0:d0:26:a7:
                    bf:f0:d5:e4:2f:7b:66:7a:5e:66:69:c5:fd:55:f0:
                    fb:99:26:7e:40:b8:05:42:bb:01:53:5f:1a:1e:26:
                    05:ec:32:f6:fe:fb:bb:f9:b9:93:5b:a6:2d:ca:8a:
                    c2:7a:60:bf:36:26:a9:c0:a6:f5:3f:1d:43:88:ba:
                    a6:04:08:a8:1b:0c:fd:fe:d8:29:09:ed:3d:cb:e0:
                    12:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:46:A2:85:F3:C8:1C:D4:44:37:57:54:A3:68:EB:B9:C4:8C:91:86
            X509v3 Authority Key Identifier:
                keyid:2F:95:A0:58:9B:28:46:EB:FC:73:66:C0:6C:64:4B:46:A2:D8:D3:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5WgWJsoRuv8c2bAbGRLRqLY0ys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/d6a552-e035-4721-9ecf-93fe5bf6daff/1/L5WgWJsoRuv8c2bAbGRLRqLY0ys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:35:ca:a9:4f:4d:e1:7c:0e:f7:bb:75:3b:76:2e:1c:b6:da:
         eb:a2:f5:75:8c:d9:88:6a:28:ef:9a:69:f7:29:ff:ea:9c:10:
         b0:8a:60:24:ab:d9:0c:84:22:e6:79:66:5c:3f:50:db:fc:27:
         c1:b6:8c:89:5d:71:08:d7:22:60:f8:33:8e:66:de:ef:91:77:
         cb:2f:a8:5c:09:ad:c4:3d:cc:03:33:21:98:87:0d:e5:9d:42:
         9f:4c:83:c5:37:f3:db:8c:26:39:38:ec:db:01:e3:8d:8f:09:
         f9:70:70:71:7a:81:c2:95:d5:cc:24:c8:27:d8:3a:57:b7:52:
         77:59:e8:dd:9e:e3:a4:75:61:92:3b:0f:20:bd:54:9a:31:d6:
         20:73:ad:2b:52:0e:7f:b1:86:46:cc:cd:a4:48:3b:39:2f:b5:
         c2:5e:66:48:6f:bb:17:52:34:95:63:11:22:a1:d5:a7:a8:70:
         1d:86:df:98:3d:17:3b:fd:25:3e:6d:b6:77:01:18:36:cf:be:
         fa:a6:8b:3d:4d:c5:a1:6d:14:ae:fa:13:f6:c2:a0:35:98:da:
         ad:1d:e5:59:d7:00:72:16:23:c0:17:71:00:ac:aa:e9:d4:d9:
         9f:af:f1:d0:b3:f8:c3:47:cd:79:e8:32:6a:52:96:ef:4d:d8:
         ca:a1:5d:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbQcV80TbZJiTNF7TmU9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmOTVhMDU4OWIyODQ2ZWJmYzczNjZjMDZjNjQ0YjQ2YTJk
OGQzMmIwHhcNMjYwNzI0MDAwMTA5WhcNMjYwNzI1MDAwMTA5WjAzMTEwLwYDVQQD
EygzOTQ2YTI4NWYzYzgxY2Q0NDQzNzU3NTRhMzY4ZWJiOWM0OGM5MTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf1Kf0BfhKJOQ8r9LkEg36CaPcel
erw5BiN7xIIy6FEfp1dnHHN2pCjFbCB9oF1vfp5FEe/vPjLwSeoBvkMy0YUZj5As
cTjTsrTbpc/IcXoAUNQfAonHuVZ1L2tQWuw1s14lXYz5aAVduHkHTk4cdVP3UjjM
bQVFciEKtz7rFOHRGHhAUnlMPZ7f/XdQpNtVyov8TL4bg9Gq+F0BKvQ+rYAPe9bC
rBVF++y/+QNAMrDQJqe/8NXkL3tmel5macX9VfD7mSZ+QLgFQrsBU18aHiYF7DL2
/vu7+bmTW6YtyorCemC/NiapwKb1Px1DiLqmBAioGwz9/tgpCe09y+ASSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDlGooXzyBzURDdXVKNo67nEjJGGMB8GA1UdIwQY
MBaAFC+VoFibKEbr/HNmwGxkS0ai2NMrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2Yt
OTNmZTViZjZkYWZmLzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9kNmE1NTItZTAzNS00NzIxLTllY2YtOTNmZTViZjZkYWZm
LzEvTDVXZ1dKc29SdXY4YzJiQWJHUkxScUxZMHlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjXKqU9N
4XwO97t1O3YuHLba66L1dYzZiGoo75pp9yn/6pwQsIpgJKvZDIQi5nlmXD9Q2/wn
wbaMiV1xCNciYPgzjmbe75F3yy+oXAmtxD3MAzMhmIcN5Z1Cn0yDxTfz24wmOTjs
2wHjjY8J+XBwcXqBwpXVzCTIJ9g6V7dSd1no3Z7jpHVhkjsPIL1UmjHWIHOtK1IO
f7GGRszNpEg7OS+1wl5mSG+7F1I0lWMRIqHVp6hwHYbfmD0XO/0lPm22dwEYNs++
+qaLPU3FoW0UrvoT9sKgNZjarR3lWdcAchYjwBdxAKyq6dTZn6/x0LP4w0fNeegy
alKW703YyqFdbw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:13:49 2026 by rpki-client