Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
File:                     aNJK3cw9W3egmakHEiJSpHyPYxA.mft (raw, json)
Hash identifier:          W5cuBKCGTCDUSaBKVyx0554cOuyvLQmCOL81TDVrBgU=
Subject key identifier:   01:28:62:C5:69:A4:88:E0:0D:67:76:6D:92:76:92:E5:6D:BE:68:28
Authority key identifier: 68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10
Certificate issuer:       /CN=68d24addcc3d5b77a099a907122252a47c8f6310
Certificate serial:       019F927FDD64CC7CEAEC11EE836AD303119C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
Manifest number:          16BF
Signing time:             Fri 24 Jul 2026 05:01:20 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:20 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:20 +0000
Files and hashes:         1: 3YSDswVguWbvrvj4E3sCx_uL70g.roa (hash: ja7wL0FwxnohJuxFrehQHPScGACnDNS5Cog9I6ahHZE=)
                          2: 9NyFHYTj3seW0uDQ9d-qMgihTFQ.roa (hash: 2XDA2KE71Iz1cppVJlV/1O+Z0hd+0MetH5FlOTLgBBc=)
                          3: CqG9BYoqBVbUiaYPUEt4pjlBhyg.roa (hash: cvOnYEAZf07u8Yg8vFOi6MSfTj+LKt401Iv8GxS5fdw=)
                          4: aNJK3cw9W3egmakHEiJSpHyPYxA.crl (hash: pzZxBJvvx9xUXs1hNk1FdXUt380V19uWxGd0MkvKaFc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:dd:64:cc:7c:ea:ec:11:ee:83:6a:d3:03:11:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68d24addcc3d5b77a099a907122252a47c8f6310
        Validity
            Not Before: Jul 24 05:01:20 2026 GMT
            Not After : Jul 25 05:01:20 2026 GMT
        Subject: CN=012862c569a488e00d67766d927692e56dbe6828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ae:96:9e:82:62:91:3a:4d:fd:3a:8d:ea:b9:
                    dc:26:5d:81:81:81:3a:18:0b:d9:0a:7a:53:1b:29:
                    7d:a7:49:5b:8c:c9:aa:17:9f:7f:73:d2:cb:b0:c3:
                    be:14:c4:77:e1:2e:df:da:a0:e0:b6:14:39:2a:94:
                    41:0b:5b:67:44:e4:37:6c:f8:97:8e:d5:aa:70:30:
                    b6:dc:f4:3a:68:23:93:d8:f4:db:ef:d7:90:b8:ce:
                    29:ef:84:8e:f8:4d:5c:16:87:25:a0:98:55:1e:72:
                    39:a2:a2:64:26:30:7e:4c:18:e5:76:1d:d5:44:e6:
                    9d:70:d8:c2:62:b8:0a:71:e7:e5:6a:97:25:45:fb:
                    b6:d3:85:80:54:0d:ef:f9:d4:09:1e:e0:37:05:df:
                    da:8a:8d:ea:69:f3:2a:ad:3c:88:f2:a1:cb:c7:91:
                    25:5d:5e:d0:f8:ec:7f:e1:32:d5:28:24:7d:0f:39:
                    46:9f:f3:30:33:89:df:63:a9:05:8d:21:78:82:9b:
                    c0:53:cb:d6:d1:c6:ba:b8:7b:7a:2c:f5:3f:da:61:
                    b3:75:0d:32:00:63:c9:5c:f0:02:ad:51:16:cc:3e:
                    c5:b1:85:91:00:62:de:3a:ce:61:b8:23:a3:de:f6:
                    23:1b:38:d1:c5:8d:ff:a1:19:51:34:af:7b:62:e6:
                    a4:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:28:62:C5:69:A4:88:E0:0D:67:76:6D:92:76:92:E5:6D:BE:68:28
            X509v3 Authority Key Identifier:
                keyid:68:D2:4A:DD:CC:3D:5B:77:A0:99:A9:07:12:22:52:A4:7C:8F:63:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNJK3cw9W3egmakHEiJSpHyPYxA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/51a655-2735-49ef-80df-b316db5938ff/1/aNJK3cw9W3egmakHEiJSpHyPYxA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:06:f2:32:c5:61:cd:dc:94:1e:6a:33:54:ef:a7:07:bc:0e:
         b0:12:21:d9:74:f6:f2:c1:c9:97:17:b0:4d:5a:ce:39:e1:91:
         cc:0f:65:e7:18:82:ba:93:e2:63:dc:98:79:59:3e:56:6b:9c:
         98:9b:da:6f:cd:e7:33:cb:d9:05:dc:03:c7:f1:ba:0e:e3:09:
         c3:56:34:08:34:e6:79:06:5b:69:53:43:a1:4a:fe:5e:81:85:
         b6:c2:39:4e:0b:99:7a:75:25:55:48:1c:ce:b1:40:66:88:1f:
         66:e4:a9:9b:fd:63:9c:de:79:53:e9:73:64:8f:62:67:dc:c4:
         12:e4:3a:06:5f:5a:b7:09:15:17:30:bb:c0:e1:a2:f8:2f:36:
         e6:7b:a5:42:f3:e6:07:36:fe:a8:31:44:30:c8:ab:bc:4f:ed:
         be:9f:30:38:14:7c:1c:d1:2b:a6:9e:57:0f:9e:91:70:08:59:
         ae:4e:39:53:65:dc:84:4a:fb:d2:0c:ab:46:66:d7:45:32:b0:
         81:a7:76:89:5c:27:6e:71:51:8f:f7:fc:20:dd:4b:6b:66:6d:
         f9:6e:cc:29:ea:46:f6:9d:92:48:4d:ed:66:86:a7:ac:26:0e:
         77:8f:63:8a:71:a6:d0:2d:ce:62:9d:70:fa:a9:72:a4:66:f2:
         ba:cb:c1:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf91kzHzq7BHug2rTAxGcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZDI0YWRkY2MzZDViNzdhMDk5YTkwNzEyMjI1MmE0N2M4
ZjYzMTAwHhcNMjYwNzI0MDUwMTIwWhcNMjYwNzI1MDUwMTIwWjAzMTEwLwYDVQQD
EygwMTI4NjJjNTY5YTQ4OGUwMGQ2Nzc2NmQ5Mjc2OTJlNTZkYmU2ODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx66WnoJikTpN/TqN6rncJl2BgYE6
GAvZCnpTGyl9p0lbjMmqF59/c9LLsMO+FMR34S7f2qDgthQ5KpRBC1tnROQ3bPiX
jtWqcDC23PQ6aCOT2PTb79eQuM4p74SO+E1cFocloJhVHnI5oqJkJjB+TBjldh3V
ROadcNjCYrgKceflapclRfu204WAVA3v+dQJHuA3Bd/aio3qafMqrTyI8qHLx5El
XV7Q+Ox/4TLVKCR9DzlGn/MwM4nfY6kFjSF4gpvAU8vW0ca6uHt6LPU/2mGzdQ0y
AGPJXPACrVEWzD7FsYWRAGLeOs5huCOj3vYjGzjRxY3/oRlRNK97Yuak4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEoYsVppIjgDWd2bZJ2kuVtvmgoMB8GA1UdIwQY
MBaAFGjSSt3MPVt3oJmpBxIiUqR8j2MQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYt
YjMxNmRiNTkzOGZmLzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi81MWE2NTUtMjczNS00OWVmLTgwZGYtYjMxNmRiNTkzOGZm
LzEvYU5KSzNjdzlXM2VnbWFrSEVpSlNwSHlQWXhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQbyMsVh
zdyUHmozVO+nB7wOsBIh2XT28sHJlxewTVrOOeGRzA9l5xiCupPiY9yYeVk+Vmuc
mJvab83nM8vZBdwDx/G6DuMJw1Y0CDTmeQZbaVNDoUr+XoGFtsI5TguZenUlVUgc
zrFAZogfZuSpm/1jnN55U+lzZI9iZ9zEEuQ6Bl9atwkVFzC7wOGi+C825nulQvPm
Bzb+qDFEMMirvE/tvp8wOBR8HNErpp5XD56RcAhZrk45U2XchEr70gyrRmbXRTKw
gad2iVwnbnFRj/f8IN1La2Zt+W7MKepG9p2SSE3tZoanrCYOd49jinGm0C3OYp1w
+qlypGbyusvB3Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:20:10 2026 by rpki-client