Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
File:                     1SGSgT0i76BLy7JOC_D-NNjfukg.mft (raw, json)
Hash identifier:          pgAYPnFLOXKA/Da6OSqhGq9XNWJQ5ur+icR4ucOAB54=
Subject key identifier:   7B:AD:0E:8B:12:0E:8A:34:DB:1A:36:12:DC:C4:FD:96:34:DC:83:0E
Authority key identifier: D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48
Certificate issuer:       /CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
Certificate serial:       019F8FECCAE01CDDC5C0AC7FC70DD159E154
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
Manifest number:          05E8
Signing time:             Thu 23 Jul 2026 17:01:28 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:28 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:28 +0000
Files and hashes:         1: 1SGSgT0i76BLy7JOC_D-NNjfukg.crl (hash: sbNtgMZ06QEzlfSg2PWHNxiITWuFeVIWPes3lqn0aEI=)
                          2: irsd6se3UI4Vehs4kcliozefsFU.roa (hash: fTkE3KDW/GsXrLu5wWzp0YdBO44h0Y6GslfTVrGJEkU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:ca:e0:1c:dd:c5:c0:ac:7f:c7:0d:d1:59:e1:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d52192813d22efa04bcbb24e0bf0fe34d8dfba48
        Validity
            Not Before: Jul 23 17:01:28 2026 GMT
            Not After : Jul 24 17:01:28 2026 GMT
        Subject: CN=7bad0e8b120e8a34db1a3612dcc4fd9634dc830e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4b:19:4a:7e:f5:d4:42:e1:bd:9e:2c:1a:20:
                    53:74:36:65:ef:82:8f:4a:56:15:72:67:bf:07:1f:
                    b9:cb:11:e6:28:8a:15:97:76:f1:bf:8c:f6:e7:6c:
                    52:b7:a3:e9:d2:b1:d9:a1:4a:de:24:01:b2:09:a1:
                    aa:80:02:63:fd:50:96:ce:0b:c8:99:cd:84:5e:19:
                    f2:65:97:9f:dd:8e:fd:c3:19:2e:b2:57:a2:5a:a6:
                    d9:cd:20:1b:78:5e:30:1a:d2:ed:30:87:66:98:bc:
                    80:bd:d8:53:1f:8f:ef:52:de:54:86:6b:6d:48:46:
                    e1:8a:71:04:23:75:a4:af:22:44:d7:0a:fc:e4:ea:
                    47:18:5e:05:e9:88:63:7d:f3:53:d9:e8:d2:c6:44:
                    1c:73:09:de:7a:90:bb:b9:ad:97:d0:23:42:ac:11:
                    72:1a:09:c6:e3:49:e6:9c:41:c7:37:96:cc:14:44:
                    bd:4e:6a:56:bc:59:9e:ce:21:fa:f1:e5:9f:16:a3:
                    f3:34:c1:ac:c2:10:38:b6:cb:d1:0d:95:0d:8f:bc:
                    86:7b:00:cf:cd:b0:0d:86:47:6a:bb:af:e0:30:f7:
                    dd:e3:64:39:69:e4:20:3c:66:e1:93:2f:c8:41:79:
                    dd:95:e6:73:96:94:7b:49:33:55:d9:4a:da:41:6e:
                    b1:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:AD:0E:8B:12:0E:8A:34:DB:1A:36:12:DC:C4:FD:96:34:DC:83:0E
            X509v3 Authority Key Identifier:
                keyid:D5:21:92:81:3D:22:EF:A0:4B:CB:B2:4E:0B:F0:FE:34:D8:DF:BA:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SGSgT0i76BLy7JOC_D-NNjfukg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/af4879-05de-4268-9ad2-d8c44d604bc2/1/1SGSgT0i76BLy7JOC_D-NNjfukg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:86:98:6a:7e:0e:c2:f1:87:8b:c8:3e:24:02:d6:e5:3c:22:
         ef:ce:70:8f:d4:96:f6:96:59:0c:cb:3c:d3:ed:c0:78:94:8d:
         3d:fb:4a:bd:1a:ed:c4:74:53:58:a7:ea:59:94:14:a2:18:72:
         6c:23:3c:e2:c6:e8:52:9a:7e:ba:28:87:07:ba:7f:81:dc:05:
         ae:89:a2:82:a9:30:8b:5d:69:dc:14:38:2a:3c:ea:1f:a7:35:
         26:76:e7:b0:7e:14:39:b4:ef:1c:74:30:5e:af:0c:1d:ef:fd:
         07:5e:92:e3:06:6c:54:7c:35:18:39:e7:29:55:6d:09:bc:f1:
         db:50:44:fb:4a:f6:50:a5:d8:e7:63:25:95:88:df:40:b7:59:
         a4:2e:fe:f1:53:ff:7d:b0:7d:4f:76:64:2a:a1:08:50:a6:89:
         2d:2f:7b:c0:da:9d:12:cf:a4:e6:e9:47:4b:e0:c8:0d:93:17:
         97:bf:60:d5:f0:8a:4b:4a:1a:9a:a5:a8:8a:2a:9b:fb:81:21:
         f4:0a:34:c6:01:5f:9b:bf:6f:2c:38:15:21:28:b5:da:ad:b4:
         49:f4:59:0e:b2:3b:6e:4b:d0:dc:03:2d:8f:54:89:71:35:7f:
         64:92:8e:26:e0:18:0a:94:19:4e:33:2b:c9:fb:78:83:a2:f2:
         48:e4:94:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7MrgHN3FwKx/xw3RWeFUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MjE5MjgxM2QyMmVmYTA0YmNiYjI0ZTBiZjBmZTM0ZDhk
ZmJhNDgwHhcNMjYwNzIzMTcwMTI4WhcNMjYwNzI0MTcwMTI4WjAzMTEwLwYDVQQD
Eyg3YmFkMGU4YjEyMGU4YTM0ZGIxYTM2MTJkY2M0ZmQ5NjM0ZGM4MzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApksZSn711ELhvZ4sGiBTdDZl74KP
SlYVcme/Bx+5yxHmKIoVl3bxv4z252xSt6Pp0rHZoUreJAGyCaGqgAJj/VCWzgvI
mc2EXhnyZZef3Y79wxkusleiWqbZzSAbeF4wGtLtMIdmmLyAvdhTH4/vUt5Uhmtt
SEbhinEEI3WkryJE1wr85OpHGF4F6YhjffNT2ejSxkQccwneepC7ua2X0CNCrBFy
GgnG40nmnEHHN5bMFES9TmpWvFmeziH68eWfFqPzNMGswhA4tsvRDZUNj7yGewDP
zbANhkdqu6/gMPfd42Q5aeQgPGbhky/IQXndleZzlpR7STNV2UraQW6xDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHutDosSDoo02xo2EtzE/ZY03IMOMB8GA1UdIwQY
MBaAFNUhkoE9Iu+gS8uyTgvw/jTY37pIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDIt
ZDhjNDRkNjA0YmMyLzEvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hZjQ4NzktMDVkZS00MjY4LTlhZDItZDhjNDRkNjA0YmMy
LzEvMVNHU2dUMGk3NkJMeTdKT0NfRC1OTmpmdWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIaYan4O
wvGHi8g+JALW5Twi785wj9SW9pZZDMs80+3AeJSNPftKvRrtxHRTWKfqWZQUohhy
bCM84sboUpp+uiiHB7p/gdwFromigqkwi11p3BQ4KjzqH6c1JnbnsH4UObTvHHQw
Xq8MHe/9B16S4wZsVHw1GDnnKVVtCbzx21BE+0r2UKXY52MllYjfQLdZpC7+8VP/
fbB9T3ZkKqEIUKaJLS97wNqdEs+k5ulHS+DIDZMXl79g1fCKS0oamqWoiiqb+4Eh
9Ao0xgFfm79vLDgVISi12q20SfRZDrI7bkvQ3AMtj1SJcTV/ZJKOJuAYCpQZTjMr
yft4g6LySOSUaA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:13 2026 by rpki-client