Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
File:                     1-d-A98aS6G081rdV0Gz3zpwTf_I.mft (raw, json)
Hash identifier:          TSpHJu4SaglQqv8yNnv3q6PpWf8VGKLFqQyVNGEZicM=
Subject key identifier:   8E:49:50:82:80:CD:25:9F:35:D0:98:56:7C:03:7A:62:B3:60:A3:62
Authority key identifier: F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2
Certificate issuer:       /CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
Certificate serial:       019F902373561922C03D76A0EFC69B85596E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 18:01:10 +0000
Manifest this update:     Thu 23 Jul 2026 18:01:10 +0000
Manifest next update:     Fri 24 Jul 2026 18:01:10 +0000
Files and hashes:         1: 1-d-A98aS6G081rdV0Gz3zpwTf_I.crl (hash: 3yL34Xfy4cM7hXQVyCs97dMaWO5kv0VKbVZ+POsbvPs=)
                          2: DoWhtMhiJd62u67yTypXkNyKc54.roa (hash: rOFqk1lXAk5Zo2qrvR0lJblhfPY81qij2Skbo2/XBYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:73:56:19:22:c0:3d:76:a0:ef:c6:9b:85:59:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9df80f7c692e86d3cd6b755d06cf7ce9c137ff2
        Validity
            Not Before: Jul 23 18:01:10 2026 GMT
            Not After : Jul 24 18:01:10 2026 GMT
        Subject: CN=8e49508280cd259f35d098567c037a62b360a362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9e:78:eb:d6:80:46:69:7f:de:c6:ec:a7:4e:
                    c9:44:ba:8c:05:c6:fb:fb:84:93:bc:7d:aa:e7:b8:
                    7a:6c:34:ae:c6:e8:70:5a:2c:f2:65:be:d7:d8:54:
                    a2:a6:76:c6:86:40:49:4c:14:13:25:10:7d:37:02:
                    ef:15:c2:3d:74:15:af:a6:87:9c:65:b0:9f:01:01:
                    2a:f1:31:c6:c3:bd:87:94:08:b4:06:82:ca:c1:f8:
                    3c:6c:95:27:de:d1:ef:38:0c:aa:e6:9c:0d:99:f0:
                    bc:94:8c:20:bc:70:e6:63:c1:5b:84:b5:a0:94:38:
                    7b:da:dc:ce:95:42:c8:36:d0:47:a7:e9:c9:ee:dd:
                    f3:3e:0a:db:8c:41:22:c5:c7:1e:47:c0:d7:86:45:
                    41:e3:0b:e9:80:17:a1:45:84:1c:93:01:51:60:a9:
                    40:d2:2d:2b:4a:9f:88:42:78:0e:b7:c6:f6:ae:8f:
                    7a:54:e8:ce:94:17:cd:05:3e:29:43:ec:6a:13:bf:
                    1a:28:58:49:f2:8d:f9:4a:86:30:b9:d2:6a:b1:02:
                    f6:c7:0d:2e:52:df:14:79:38:4d:18:65:8a:46:62:
                    46:f9:50:de:0d:63:72:c6:66:34:24:9f:d1:8a:79:
                    82:40:87:89:ec:d8:67:42:80:a8:d8:66:11:e6:6b:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:49:50:82:80:CD:25:9F:35:D0:98:56:7C:03:7A:62:B3:60:A3:62
            X509v3 Authority Key Identifier:
                keyid:F9:DF:80:F7:C6:92:E8:6D:3C:D6:B7:55:D0:6C:F7:CE:9C:13:7F:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-d-A98aS6G081rdV0Gz3zpwTf_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/671ee4-ad81-454f-965f-62a4e675eaeb/1/1-d-A98aS6G081rdV0Gz3zpwTf_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:56:f8:b1:94:91:3b:81:4e:a5:ec:dc:d9:a5:ac:f9:1e:e3:
         3f:73:47:3e:f1:f6:f7:10:22:69:b7:8a:26:b1:73:27:8a:cd:
         f7:81:88:a3:ea:ce:66:a2:74:d0:5a:cc:9e:f7:01:c4:54:bf:
         57:c7:39:60:1e:a9:2a:61:a7:5c:af:8e:a5:e7:d6:72:de:7c:
         ad:92:9d:45:3d:7e:3c:fc:dd:25:93:33:ff:9b:e7:1c:68:2f:
         43:f1:d1:c2:65:48:27:1b:1b:6f:40:ea:16:e7:65:f6:27:45:
         ca:f1:06:5b:c3:c8:4f:1c:df:5c:74:a5:fc:4f:b2:51:6c:25:
         2d:97:3c:8a:23:92:4d:bd:2a:21:c1:95:09:33:57:d1:a4:e8:
         7e:b6:f6:27:52:aa:ec:bc:f2:cd:c9:78:3a:95:54:cf:ce:15:
         0b:58:cd:22:0e:a9:94:99:38:57:fe:f4:3a:31:11:16:27:74:
         45:8c:84:c9:f6:65:43:54:2a:f7:93:7e:d3:5c:7c:6b:52:64:
         cb:c1:4c:4f:94:26:d6:03:19:0f:2c:9f:74:1d:56:76:00:cd:
         8e:68:5d:9a:2e:0b:05:8c:20:e7:d2:85:17:b3:0f:33:1c:79:
         5e:33:22:f3:be:e0:2a:f6:3f:77:69:2d:26:df:4d:66:53:27:
         64:89:b5:6a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+QI3NWGSLAPXag78abhVluMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5ZGY4MGY3YzY5MmU4NmQzY2Q2Yjc1NWQwNmNmN2NlOWMx
MzdmZjIwHhcNMjYwNzIzMTgwMTEwWhcNMjYwNzI0MTgwMTEwWjAzMTEwLwYDVQQD
Eyg4ZTQ5NTA4MjgwY2QyNTlmMzVkMDk4NTY3YzAzN2E2MmIzNjBhMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4p5469aARml/3sbsp07JRLqMBcb7
+4STvH2q57h6bDSuxuhwWizyZb7X2FSipnbGhkBJTBQTJRB9NwLvFcI9dBWvpoec
ZbCfAQEq8THGw72HlAi0BoLKwfg8bJUn3tHvOAyq5pwNmfC8lIwgvHDmY8FbhLWg
lDh72tzOlULINtBHp+nJ7t3zPgrbjEEixcceR8DXhkVB4wvpgBehRYQckwFRYKlA
0i0rSp+IQngOt8b2ro96VOjOlBfNBT4pQ+xqE78aKFhJ8o35SoYwudJqsQL2xw0u
Ut8UeThNGGWKRmJG+VDeDWNyxmY0JJ/RinmCQIeJ7NhnQoCo2GYR5mv/NQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI5JUIKAzSWfNdCYVnwDemKzYKNiMB8GA1UdIwQY
MBaAFPnfgPfGkuhtPNa3VdBs986cE3/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1kLUE5OGFTNkcwODFyZFYwR3ozenB3VGZfSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTcvNjcxZWU0LWFkODEtNDU0Zi05NjVm
LTYyYTRlNjc1ZWFlYi8xLzEtZC1BOThhUzZHMDgxcmRWMEd6M3pwd1RmX0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzU3LzY3MWVlNC1hZDgxLTQ1NGYtOTY1Zi02MmE0ZTY3NWVh
ZWIvMS8xLWQtQTk4YVM2RzA4MXJkVjBHejN6cHdUZl9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnlb4
sZSRO4FOpezc2aWs+R7jP3NHPvH29xAiabeKJrFzJ4rN94GIo+rOZqJ00FrMnvcB
xFS/V8c5YB6pKmGnXK+OpefWct58rZKdRT1+PPzdJZMz/5vnHGgvQ/HRwmVIJxsb
b0DqFudl9idFyvEGW8PITxzfXHSl/E+yUWwlLZc8iiOSTb0qIcGVCTNX0aTofrb2
J1Kq7Lzyzcl4OpVUz84VC1jNIg6plJk4V/70OjERFid0RYyEyfZlQ1Qq95N+01x8
a1Jky8FMT5Qm1gMZDyyfdB1WdgDNjmhdmi4LBYwg59KFF7MPMxx5XjMi877gKvY/
d2ktJt9NZlMnZIm1ag==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:19:50 2026 by rpki-client