Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
File:                     0GmJqc1r0vLDwN7GCKKL49O6ToE.mft (raw, json)
Hash identifier:          bBzsG/T+RoQyRfrNFFjt49TScsosDbCAHplixwr3vtg=
Subject key identifier:   34:F7:61:62:8A:68:1B:58:D2:88:23:CE:57:51:99:89:8D:CD:28:23
Authority key identifier: D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81
Certificate issuer:       /CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
Certificate serial:       019F92B6A6BAF91F75024FDB11FF5E17D444
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
Manifest number:          19C5
Signing time:             Fri 24 Jul 2026 06:01:11 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:11 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:11 +0000
Files and hashes:         1: 0GmJqc1r0vLDwN7GCKKL49O6ToE.crl (hash: GDuQ4Wfda5Jpn/2v7iXQt1dRtUuvsLPmQcT37ZeWF6g=)
                          2: wsFDs0k_i43xFHAOdnBr2BMkzX0.roa (hash: TtkJrd9Ep6l68yC5CkOYpRhWIjpFiNmgnjq9PKBAW0Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:a6:ba:f9:1f:75:02:4f:db:11:ff:5e:17:d4:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d06989a9cd6bd2f2c3c0dec608a28be3d3ba4e81
        Validity
            Not Before: Jul 24 06:01:11 2026 GMT
            Not After : Jul 25 06:01:11 2026 GMT
        Subject: CN=34f761628a681b58d28823ce575199898dcd2823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ce:2c:cd:af:1a:53:a1:6b:ed:2e:8e:77:3e:
                    c6:d2:10:da:51:00:44:50:d4:d4:53:58:84:85:8c:
                    19:bf:17:f2:60:0c:86:47:65:f2:b2:81:a3:f6:d5:
                    cb:b1:78:55:4b:50:6f:c8:c7:9d:91:d5:63:33:9e:
                    c5:a6:ea:70:3a:81:b8:f3:e7:08:a8:ea:ea:a9:78:
                    c6:75:34:7f:38:ad:b0:be:6c:5c:c6:c1:3d:fb:4e:
                    bf:e1:31:50:67:f0:4e:1a:0b:54:00:9c:5d:a4:7e:
                    88:99:bc:f0:64:23:fc:87:2d:65:30:bf:73:73:56:
                    26:f8:47:1c:2e:1b:e9:1a:cb:72:fc:09:a5:a2:a5:
                    97:3c:82:58:b2:90:4a:cc:e6:01:bb:41:76:46:2d:
                    c6:76:5b:56:bd:fb:eb:31:80:c6:62:25:41:df:0f:
                    d5:23:48:f9:98:05:0e:2a:ad:35:04:fa:6c:b2:d7:
                    51:4e:1b:fb:8f:4d:91:4e:81:24:95:aa:71:a4:25:
                    52:a9:26:fd:83:13:c5:87:f5:65:3a:8f:f3:31:de:
                    f2:87:15:9c:5b:87:b5:36:50:6e:ae:ef:62:d1:73:
                    a1:7f:e7:ba:5e:aa:b9:99:a1:74:7a:b0:77:8b:92:
                    7b:bb:bd:42:18:d6:19:74:2c:9a:77:d0:d7:cb:5d:
                    05:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F7:61:62:8A:68:1B:58:D2:88:23:CE:57:51:99:89:8D:CD:28:23
            X509v3 Authority Key Identifier:
                keyid:D0:69:89:A9:CD:6B:D2:F2:C3:C0:DE:C6:08:A2:8B:E3:D3:BA:4E:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0GmJqc1r0vLDwN7GCKKL49O6ToE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/5e6fd3-67ef-45ab-a420-4877fc59d319/1/0GmJqc1r0vLDwN7GCKKL49O6ToE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:80:29:0e:dc:04:47:74:c5:75:3b:94:00:59:42:ef:57:55:
         2d:0a:f5:21:99:5a:71:36:11:a3:7d:05:50:7a:38:31:e4:da:
         92:a3:c3:de:6c:34:7f:23:54:d7:5d:bb:37:aa:67:8d:e3:b7:
         a9:0e:a4:5f:47:4d:b8:7c:37:0e:bf:95:79:92:61:32:83:10:
         12:99:9b:36:23:08:7f:b6:ec:59:21:cb:e7:63:b6:d6:1c:eb:
         37:f9:49:23:e7:9e:55:c9:45:4c:53:e8:f7:d4:4b:52:b6:3e:
         a8:fa:28:1e:9e:6d:70:3b:f7:d3:0d:14:1f:ef:6c:c0:0d:ba:
         32:fc:d2:ce:55:6b:61:b7:96:b7:d5:d2:64:72:06:90:e7:ed:
         fc:99:5f:bb:c9:ea:1a:e9:2b:e0:db:b8:76:ac:2a:70:ac:6a:
         f7:81:d9:1d:c8:a8:0c:aa:94:ba:8a:9b:ff:a8:84:21:02:07:
         63:da:a1:bb:5d:ae:c7:7b:6b:b8:7c:7c:b4:16:13:3e:2b:98:
         7f:ba:0e:2f:fd:de:12:19:26:8b:29:3d:dc:96:97:e5:49:47:
         0e:03:32:51:ca:c4:5f:b3:de:c0:b7:da:96:86:6e:dc:65:fe:
         8d:56:17:44:80:3c:1c:2f:7a:2e:79:81:75:c4:5b:e0:30:af:
         f9:a6:69:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Stqa6+R91Ak/bEf9eF9REMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNjk4OWE5Y2Q2YmQyZjJjM2MwZGVjNjA4YTI4YmUzZDNi
YTRlODEwHhcNMjYwNzI0MDYwMTExWhcNMjYwNzI1MDYwMTExWjAzMTEwLwYDVQQD
EygzNGY3NjE2MjhhNjgxYjU4ZDI4ODIzY2U1NzUxOTk4OThkY2QyODIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos4sza8aU6Fr7S6Odz7G0hDaUQBE
UNTUU1iEhYwZvxfyYAyGR2XysoGj9tXLsXhVS1BvyMedkdVjM57FpupwOoG48+cI
qOrqqXjGdTR/OK2wvmxcxsE9+06/4TFQZ/BOGgtUAJxdpH6ImbzwZCP8hy1lML9z
c1Ym+EccLhvpGsty/AmloqWXPIJYspBKzOYBu0F2Ri3GdltWvfvrMYDGYiVB3w/V
I0j5mAUOKq01BPpsstdRThv7j02RToEklapxpCVSqSb9gxPFh/VlOo/zMd7yhxWc
W4e1NlBuru9i0XOhf+e6Xqq5maF0erB3i5J7u71CGNYZdCyad9DXy10FrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT3YWKKaBtY0ogjzldRmYmNzSgjMB8GA1UdIwQY
MBaAFNBpianNa9Lyw8Dexgiii+PTuk6BMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC81ZTZmZDMtNjdlZi00NWFiLWE0MjAt
NDg3N2ZjNTlkMzE5LzEvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC81ZTZmZDMtNjdlZi00NWFiLWE0MjAtNDg3N2ZjNTlkMzE5
LzEvMEdtSnFjMXIwdkxEd043R0NLS0w0OU82VG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIApDtwE
R3TFdTuUAFlC71dVLQr1IZlacTYRo30FUHo4MeTakqPD3mw0fyNU1127N6pnjeO3
qQ6kX0dNuHw3Dr+VeZJhMoMQEpmbNiMIf7bsWSHL52O21hzrN/lJI+eeVclFTFPo
99RLUrY+qPooHp5tcDv30w0UH+9swA26MvzSzlVrYbeWt9XSZHIGkOft/Jlfu8nq
Gukr4Nu4dqwqcKxq94HZHcioDKqUuoqb/6iEIQIHY9qhu12ux3truHx8tBYTPiuY
f7oOL/3eEhkmiyk93JaX5UlHDgMyUcrEX7PewLfaloZu3GX+jVYXRIA8HC96LnmB
dcRb4DCv+aZpZA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:58:35 2026 by rpki-client