Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
File:                     1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft (raw, json)
Hash identifier:          a63BKzhfhr+8w9lqwz//dRbn0NzQ1mE5kRlCliRI6nw=
Subject key identifier:   93:C2:51:43:08:43:F9:74:4D:EB:78:35:D0:07:78:CE:75:61:FD:91
Authority key identifier: F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32
Certificate issuer:       /CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
Certificate serial:       019F8F7DE7B83D141C3A4145260B3925E66A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 15:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:20 +0000
Files and hashes:         1: 1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl (hash: 1yBJO7O7gslhGYg28JTOGgCQtaaKGtWIfCSLNliSy2o=)
                          2: CaPA7Wbe9cDl6wXe5894ncFK1jQ.roa (hash: P8wfVUsJaZ53GQVWp0JenO6tbrEXgFSMeFb1uzEMGrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7d:e7:b8:3d:14:1c:3a:41:45:26:0b:39:25:e6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f97f69ed26c2e4687dbab2e6c6cca88d17c4c332
        Validity
            Not Before: Jul 23 15:00:20 2026 GMT
            Not After : Jul 24 15:00:20 2026 GMT
        Subject: CN=93c251430843f9744deb7835d00778ce7561fd91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2c:3c:14:23:7a:d9:be:f8:0d:2f:8f:92:74:
                    b0:ae:b9:c8:a8:2a:fa:49:fa:3e:3d:3f:2c:b1:97:
                    f0:47:20:50:a1:91:e0:05:72:14:8c:8e:c6:b6:d5:
                    24:94:17:28:50:75:e9:33:a1:81:7f:9d:b1:9f:ef:
                    e1:4c:a5:70:b5:20:ff:f0:1c:87:db:21:2b:54:c1:
                    d0:d1:6e:07:b8:81:a3:b5:f9:65:f0:04:55:2f:6d:
                    ae:1c:17:a7:d9:17:c1:3c:cc:1e:11:50:4d:07:05:
                    a1:b8:4c:17:b0:64:ca:5f:57:35:b2:5c:84:a8:06:
                    2a:28:c5:1e:1d:21:0e:a5:d6:79:26:08:13:4f:7e:
                    e6:45:91:93:ed:c4:55:ed:09:6a:62:b1:58:8d:2b:
                    32:92:8d:56:05:bc:d5:40:b3:e1:59:1f:1e:a1:ea:
                    29:40:d1:b1:7b:93:07:35:de:08:1f:d7:b6:46:08:
                    de:52:92:37:28:dd:37:7a:8e:ae:14:5c:f7:a0:d0:
                    cc:c2:fb:08:3a:7d:b7:31:87:19:d6:f5:89:28:26:
                    bb:2b:ac:29:30:23:c2:9d:76:44:ee:af:ae:22:0e:
                    25:55:9d:c1:4c:60:16:40:6a:a4:1a:f1:a9:c3:23:
                    a7:78:12:02:06:f5:40:17:08:72:97:ba:e3:a0:39:
                    50:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C2:51:43:08:43:F9:74:4D:EB:78:35:D0:07:78:CE:75:61:FD:91
            X509v3 Authority Key Identifier:
                keyid:F9:7F:69:ED:26:C2:E4:68:7D:BA:B2:E6:C6:CC:A8:8D:17:C4:C3:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X9p7SbC5Gh9urLmxsyojRfEwzI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/32441e-5e9b-4a32-8cc4-1eb75bb68233/1/1-X9p7SbC5Gh9urLmxsyojRfEwzI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:8b:a8:a3:22:06:a0:12:d9:2b:8b:d5:0a:0c:c3:c7:59:06:
         ed:6b:68:c5:44:99:1e:47:50:4e:a5:d0:31:dc:86:e5:08:66:
         3e:a1:cd:ec:d7:73:7d:a2:8d:0f:ed:82:bf:76:56:bc:99:0b:
         db:f0:8c:9f:f3:aa:69:eb:49:cd:c5:ae:53:6d:0a:a8:46:0a:
         85:72:d1:85:c2:03:7d:03:39:f7:95:4e:c5:31:66:5d:0e:0a:
         21:14:35:67:1b:18:a9:14:79:7b:72:c8:1a:98:42:91:a0:c9:
         67:c3:f1:48:19:a5:79:d6:2e:40:9b:ee:59:0b:1f:7a:02:2f:
         40:3a:30:08:92:ba:1c:cb:a4:14:2a:fe:f6:b8:69:07:ca:9e:
         24:77:d8:76:57:61:d3:49:59:20:64:80:17:18:2e:51:70:dd:
         80:c5:e2:ce:a3:55:26:e1:ec:d0:f7:01:1f:b8:e3:56:f4:9f:
         31:54:b4:2e:46:b5:b5:77:e5:43:ed:0e:4e:d2:14:c2:1a:18:
         91:7c:0e:f3:24:51:81:2e:c4:ad:df:cd:85:5f:40:3f:fc:5d:
         bd:a0:44:80:2c:79:91:4c:d9:f8:40:75:0f:c1:79:f7:08:55:
         7f:20:df:07:ec:1e:1e:c0:f2:6e:a6:5a:6f:7b:61:6c:46:dd:
         99:2a:86:c8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+Pfee4PRQcOkFFJgs5JeZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5N2Y2OWVkMjZjMmU0Njg3ZGJhYjJlNmM2Y2NhODhkMTdj
NGMzMzIwHhcNMjYwNzIzMTUwMDIwWhcNMjYwNzI0MTUwMDIwWjAzMTEwLwYDVQQD
Eyg5M2MyNTE0MzA4NDNmOTc0NGRlYjc4MzVkMDA3NzhjZTc1NjFmZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryw8FCN62b74DS+PknSwrrnIqCr6
Sfo+PT8ssZfwRyBQoZHgBXIUjI7GttUklBcoUHXpM6GBf52xn+/hTKVwtSD/8ByH
2yErVMHQ0W4HuIGjtfll8ARVL22uHBen2RfBPMweEVBNBwWhuEwXsGTKX1c1slyE
qAYqKMUeHSEOpdZ5JggTT37mRZGT7cRV7QlqYrFYjSsyko1WBbzVQLPhWR8eoeop
QNGxe5MHNd4IH9e2RgjeUpI3KN03eo6uFFz3oNDMwvsIOn23MYcZ1vWJKCa7K6wp
MCPCnXZE7q+uIg4lVZ3BTGAWQGqkGvGpwyOneBICBvVAFwhyl7rjoDlQ3QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFJPCUUMIQ/l0Tet4NdAHeM51Yf2RMB8GA1UdIwQY
MBaAFPl/ae0mwuRofbqy5sbMqI0XxMMyMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1YOXA3U2JDNUdoOXVyTG14c3lvalJmRXd6SS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjYvMzI0NDFlLTVlOWItNGEzMi04Y2M0
LTFlYjc1YmI2ODIzMy8xLzEtWDlwN1NiQzVHaDl1ckxteHN5b2pSZkV3ekkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzY2LzMyNDQxZS01ZTliLTRhMzItOGNjNC0xZWI3NWJiNjgy
MzMvMS8xLVg5cDdTYkM1R2g5dXJMbXhzeW9qUmZFd3pJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV4uo
oyIGoBLZK4vVCgzDx1kG7WtoxUSZHkdQTqXQMdyG5QhmPqHN7NdzfaKND+2Cv3ZW
vJkL2/CMn/OqaetJzcWuU20KqEYKhXLRhcIDfQM595VOxTFmXQ4KIRQ1ZxsYqRR5
e3LIGphCkaDJZ8PxSBmledYuQJvuWQsfegIvQDowCJK6HMukFCr+9rhpB8qeJHfY
dldh00lZIGSAFxguUXDdgMXizqNVJuHs0PcBH7jjVvSfMVS0Lka1tXflQ+0OTtIU
whoYkXwO8yRRgS7Erd/NhV9AP/xdvaBEgCx5kUzZ+EB1D8F59whVfyDfB+weHsDy
bqZab3thbEbdmSqGyA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:02:02 2026 by rpki-client