Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
File:                     5saSR1gKSIv0YbhL97iyrBN01cU.mft (raw, json)
Hash identifier:          dLLw4Rr/UGIb2d5ALPHl7ztlW/OTrjl1DFY6Tnlvy3g=
Subject key identifier:   2C:CC:EB:6A:2F:57:4F:E1:CF:44:08:C0:DA:45:D2:88:4F:26:46:C4
Authority key identifier: E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5
Certificate issuer:       /CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
Certificate serial:       019F91A3731D2A3FF2E0CC9FC45A073297AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
Manifest number:          19C6
Signing time:             Fri 24 Jul 2026 01:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:35 +0000
Files and hashes:         1: 5saSR1gKSIv0YbhL97iyrBN01cU.crl (hash: Rcz445V4lX4C8o7IMdPbMpN53IOhQVaFnGDzAIF1RVk=)
                          2: LmhXkywW8SZtjadhpE8Fh2dmVFk.roa (hash: 3kUhpGVlIpwz8/d0v3uW1Scy1KDzUlA94dFDDoXX/D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:73:1d:2a:3f:f2:e0:cc:9f:c4:5a:07:32:97:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6c69247580a488bf461b84bf7b8b2ac1374d5c5
        Validity
            Not Before: Jul 24 01:00:35 2026 GMT
            Not After : Jul 25 01:00:35 2026 GMT
        Subject: CN=2ccceb6a2f574fe1cf4408c0da45d2884f2646c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:c7:d3:b0:ac:f8:f1:e5:7c:63:81:66:04:36:
                    11:dd:40:6a:84:78:68:e0:60:73:ab:27:2c:3f:d4:
                    df:57:a4:4e:3e:4c:86:0b:07:a6:a5:ad:ca:3f:55:
                    30:03:5f:b2:b5:8b:fb:43:92:e0:a3:85:d1:89:ad:
                    0d:8a:fe:18:87:05:d4:1a:e7:62:90:f4:7a:cb:84:
                    d5:d8:be:b1:49:9f:8c:1c:70:9e:fa:2a:b0:0e:07:
                    9a:8c:6d:9b:73:b0:3e:69:c2:06:da:49:64:15:2a:
                    0f:2f:4a:08:74:10:73:39:78:fa:16:0e:95:1c:fe:
                    84:89:57:37:31:80:fe:9c:f5:55:7d:e2:6c:ae:94:
                    db:17:0d:67:b1:35:ec:1d:94:c6:dd:cb:49:3b:63:
                    76:1b:c2:03:2c:1c:65:f6:63:11:8f:2e:03:60:02:
                    3b:2c:59:4e:cf:4d:94:88:c2:d4:0f:bd:41:19:17:
                    e7:23:92:3f:e8:c9:d9:e0:8b:23:d6:11:65:2f:de:
                    e4:f1:53:bb:3c:2c:34:94:c5:9a:a1:bb:fe:65:47:
                    81:66:88:c2:a6:86:71:ee:90:90:5d:13:78:07:00:
                    af:9e:0a:75:b3:a1:79:30:8a:2b:f3:71:93:03:bc:
                    83:ec:3d:be:31:f3:19:b8:70:ba:3d:ae:23:08:09:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CC:EB:6A:2F:57:4F:E1:CF:44:08:C0:DA:45:D2:88:4F:26:46:C4
            X509v3 Authority Key Identifier:
                keyid:E6:C6:92:47:58:0A:48:8B:F4:61:B8:4B:F7:B8:B2:AC:13:74:D5:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5saSR1gKSIv0YbhL97iyrBN01cU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/33ba6c-befb-4deb-8998-527a9a4ee624/1/5saSR1gKSIv0YbhL97iyrBN01cU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a5:a4:72:15:17:54:47:e6:52:ee:41:ec:7e:3f:19:90:2f:
         8e:d6:11:6c:1b:06:a2:a9:42:d3:87:21:10:ad:ad:44:e8:4b:
         41:8a:59:09:0e:13:53:a2:b2:c9:a9:1f:fb:4f:73:a8:f6:69:
         d9:81:94:b2:4c:ac:7c:32:86:fa:39:94:5b:16:0f:09:3b:7f:
         21:89:39:2f:ab:c1:a6:34:cb:b8:41:9f:d1:08:92:77:46:53:
         4d:10:08:7f:17:c2:80:38:79:9e:ac:fd:96:4a:ec:20:39:99:
         2f:57:25:4b:bc:81:e4:e9:bd:6d:63:d7:60:94:0e:5f:45:37:
         1d:c1:84:31:ff:5c:91:2f:13:29:76:9f:f7:0e:1c:90:a5:a4:
         5c:9c:69:a0:0c:1a:58:d0:bf:00:2f:56:0d:4b:37:a9:10:cc:
         aa:28:3e:5c:32:09:59:f4:46:0e:3f:74:8e:1c:37:ab:ff:27:
         e4:42:d1:a4:e2:52:eb:80:1a:04:12:1c:40:0d:9c:47:9c:7f:
         9b:86:04:62:8e:bb:b7:99:b8:ff:eb:cc:d7:1c:0b:7a:86:cc:
         96:ae:75:d2:f8:29:7c:e7:dc:51:8c:a3:13:38:0b:58:02:6d:
         a1:af:c2:40:22:c5:84:89:0d:ee:95:45:39:34:d5:4e:b5:d2:
         5d:89:33:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro3MdKj/y4MyfxFoHMpevMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2YzY5MjQ3NTgwYTQ4OGJmNDYxYjg0YmY3YjhiMmFjMTM3
NGQ1YzUwHhcNMjYwNzI0MDEwMDM1WhcNMjYwNzI1MDEwMDM1WjAzMTEwLwYDVQQD
EygyY2NjZWI2YTJmNTc0ZmUxY2Y0NDA4YzBkYTQ1ZDI4ODRmMjY0NmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/MfTsKz48eV8Y4FmBDYR3UBqhHho
4GBzqycsP9TfV6ROPkyGCwempa3KP1UwA1+ytYv7Q5Lgo4XRia0Niv4YhwXUGudi
kPR6y4TV2L6xSZ+MHHCe+iqwDgeajG2bc7A+acIG2klkFSoPL0oIdBBzOXj6Fg6V
HP6EiVc3MYD+nPVVfeJsrpTbFw1nsTXsHZTG3ctJO2N2G8IDLBxl9mMRjy4DYAI7
LFlOz02UiMLUD71BGRfnI5I/6MnZ4Isj1hFlL97k8VO7PCw0lMWaobv+ZUeBZojC
poZx7pCQXRN4BwCvngp1s6F5MIor83GTA7yD7D2+MfMZuHC6Pa4jCAnRywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzM62ovV0/hz0QIwNpF0ohPJkbEMB8GA1UdIwQY
MBaAFObGkkdYCkiL9GG4S/e4sqwTdNXFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgt
NTI3YTlhNGVlNjI0LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zM2JhNmMtYmVmYi00ZGViLTg5OTgtNTI3YTlhNGVlNjI0
LzEvNXNhU1IxZ0tTSXYwWWJoTDk3aXlyQk4wMWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6WkchUX
VEfmUu5B7H4/GZAvjtYRbBsGoqlC04chEK2tROhLQYpZCQ4TU6Kyyakf+09zqPZp
2YGUskysfDKG+jmUWxYPCTt/IYk5L6vBpjTLuEGf0QiSd0ZTTRAIfxfCgDh5nqz9
lkrsIDmZL1clS7yB5Om9bWPXYJQOX0U3HcGEMf9ckS8TKXaf9w4ckKWkXJxpoAwa
WNC/AC9WDUs3qRDMqig+XDIJWfRGDj90jhw3q/8n5ELRpOJS64AaBBIcQA2cR5x/
m4YEYo67t5m4/+vM1xwLeobMlq510vgpfOfcUYyjEzgLWAJtoa/CQCLFhIkN7pVF
OTTVTrXSXYkzrw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:37:39 2026 by rpki-client