Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File:                     acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier:          Fa+V+0kYXTCaQ+T1QPMtMcXv3CsrUeag/dczwRzjazo=
Subject key identifier:   AA:44:DC:1A:CC:28:C6:B5:B6:A3:29:DF:6D:D4:42:0C:1D:CF:78:81
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer:       /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial:       019F9091259E1CD6550AF61F5A3E72ECCDDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 20:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:59 +0000
Files and hashes:         1: 8yAZGDwl6Q5NdW6_5msXiHDy6v0.roa (hash: hTQqJteeaF5ZjxlYrkjPbZjafNKCCRD7RpYTaq51+Q4=)
                          2: WHR6l1Q5Ar0v18AKFt90RxwkrKo.roa (hash: WNLKDaJxOe6Uz6jgAOWxAF+kTRgHf8gZjh0RxUla/9E=)
                          3: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: kPHt+qUrXt1M6s1W9wCKfnqiA6KhIJAFo3Qdc64RA4g=)
                          4: gKFSZ12cdmISn4h5sbRx_f8ayV0.roa (hash: EtpOpvk7x1JOKFPhiQBQKjgaBtJnr2gJBSccIdWGROA=)
                          5: yNU-ToeAL7NXOOz9_-FlFzYfpBA.roa (hash: TjYy4/mDVjYziy+CeletARV0PQ6H5KzIho/639xxwbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:25:9e:1c:d6:55:0a:f6:1f:5a:3e:72:ec:cd:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
        Validity
            Not Before: Jul 23 20:00:59 2026 GMT
            Not After : Jul 24 20:00:59 2026 GMT
        Subject: CN=aa44dc1acc28c6b5b6a329df6dd4420c1dcf7881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:75:39:6d:27:c5:f0:70:ea:47:db:0e:05:a1:
                    98:04:04:04:29:70:42:6f:03:30:6e:a7:a4:99:94:
                    24:79:96:a5:88:9c:4a:99:8e:ab:68:1a:b1:f1:74:
                    27:b5:ed:c2:e0:ad:92:62:ec:49:9b:c1:51:06:fd:
                    94:4a:d1:65:d1:46:65:6d:f5:37:af:01:44:4d:e4:
                    b0:3c:32:9c:6c:85:a2:55:07:74:0d:d2:52:0c:f9:
                    b3:ff:57:b3:2c:d3:f2:d5:2c:5d:53:f0:ec:e0:7c:
                    5b:66:7a:c7:0b:c2:72:66:98:67:8d:0d:47:eb:7b:
                    38:cb:4b:58:58:87:58:46:63:60:7b:e1:85:07:44:
                    d1:1c:39:d8:cf:ef:5a:82:7d:70:03:f6:96:6b:a7:
                    e8:74:3c:8c:15:cd:f9:6e:de:10:56:87:3a:5f:06:
                    5a:2b:9b:dc:ba:a3:18:0e:48:2e:1a:4c:7b:80:64:
                    d2:37:66:f6:ee:b5:ce:d2:50:7a:68:6f:96:6b:89:
                    aa:ec:e1:17:ee:a4:9f:2d:ba:74:4e:e0:89:2e:65:
                    fc:56:ce:4a:1c:bf:71:49:b7:8f:14:61:e5:02:fb:
                    2a:d1:68:be:fc:58:d7:98:1c:5f:e2:9d:8e:ae:46:
                    09:7a:c5:94:3a:ba:98:57:2b:e4:23:8e:ef:5b:dd:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:44:DC:1A:CC:28:C6:B5:B6:A3:29:DF:6D:D4:42:0C:1D:CF:78:81
            X509v3 Authority Key Identifier:
                keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:87:8e:2c:c2:fe:94:41:30:33:11:9c:81:90:43:f7:dd:04:
         6e:bb:4c:0f:14:c7:0b:f5:97:8d:41:b3:9f:1b:51:19:75:a9:
         65:91:b7:d3:1d:7f:d1:db:1b:06:10:70:ce:dc:33:84:a1:ea:
         7e:ba:86:d0:4e:aa:5f:91:31:9b:3e:dc:ca:7f:94:6c:51:d1:
         74:05:80:af:ea:a1:76:69:52:48:32:45:55:6d:eb:3e:07:b5:
         e3:c9:0c:42:74:06:78:0f:1c:a6:86:83:0f:64:84:30:ab:3c:
         78:58:c1:f1:be:72:e4:d6:cc:39:a8:89:39:a4:dd:8c:dd:6b:
         49:53:cf:95:59:37:3e:33:6f:8b:52:49:13:dc:c5:89:4a:b2:
         e9:81:43:7b:b3:95:0a:aa:88:b5:32:d7:d0:19:1a:85:10:2f:
         5e:8e:0f:3f:e9:55:8b:ca:a2:6e:f1:3b:7e:17:08:f0:9c:b2:
         27:45:fe:95:01:c1:17:b7:7e:98:50:28:4c:ec:64:83:50:f6:
         b8:3a:b4:94:17:dc:b8:c3:f1:77:2c:14:97:3f:34:8e:70:ea:
         62:60:ba:64:98:31:3a:0f:2d:76:56:e2:65:b7:82:cc:dd:5f:
         68:9e:c1:66:d4:f9:51:20:8d:5d:05:17:09:ac:03:75:83:82:
         d5:82:79:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkSWeHNZVCvYfWj5y7M3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjYwNzIzMjAwMDU5WhcNMjYwNzI0MjAwMDU5WjAzMTEwLwYDVQQD
EyhhYTQ0ZGMxYWNjMjhjNmI1YjZhMzI5ZGY2ZGQ0NDIwYzFkY2Y3ODgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHU5bSfF8HDqR9sOBaGYBAQEKXBC
bwMwbqekmZQkeZaliJxKmY6raBqx8XQnte3C4K2SYuxJm8FRBv2UStFl0UZlbfU3
rwFETeSwPDKcbIWiVQd0DdJSDPmz/1ezLNPy1SxdU/Ds4HxbZnrHC8JyZphnjQ1H
63s4y0tYWIdYRmNge+GFB0TRHDnYz+9agn1wA/aWa6fodDyMFc35bt4QVoc6XwZa
K5vcuqMYDkguGkx7gGTSN2b27rXO0lB6aG+Wa4mq7OEX7qSfLbp0TuCJLmX8Vs5K
HL9xSbePFGHlAvsq0Wi+/FjXmBxf4p2OrkYJesWUOrqYVyvkI47vW91twQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpE3BrMKMa1tqMp323UQgwdz3iBMB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgoeOLML+
lEEwMxGcgZBD990EbrtMDxTHC/WXjUGznxtRGXWpZZG30x1/0dsbBhBwztwzhKHq
frqG0E6qX5Exmz7cyn+UbFHRdAWAr+qhdmlSSDJFVW3rPge148kMQnQGeA8cpoaD
D2SEMKs8eFjB8b5y5NbMOaiJOaTdjN1rSVPPlVk3PjNvi1JJE9zFiUqy6YFDe7OV
CqqItTLX0BkahRAvXo4PP+lVi8qibvE7fhcI8JyyJ0X+lQHBF7d+mFAoTOxkg1D2
uDq0lBfcuMPxdywUlz80jnDqYmC6ZJgxOg8tdlbiZbeCzN1faJ7BZtT5USCNXQUX
CawDdYOC1YJ5Mw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:43:00 2026 by rpki-client