Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
File:                     Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft (raw, json)
Hash identifier:          4TAXIYYPbOZeLK5RbOBRhPP002w4jj6XFvPUSf0lo+A=
Subject key identifier:   39:D9:6D:B4:2C:AF:13:98:21:3A:C6:F3:2B:F0:DD:59:8A:38:49:CF
Authority key identifier: 4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
Certificate issuer:       /CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Certificate serial:       019F943765AE09D6B8D6AF5721976D841B43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
Manifest number:          05B3
Signing time:             Fri 24 Jul 2026 13:01:26 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:26 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:26 +0000
Files and hashes:         1: E3Ps_1Y0RPyTuff7vspqXs8HJd0.roa (hash: SDa/tg7mYNNs8Ig1oDFyYQAMW6ncyRIYSQRc76ZseiQ=)
                          2: Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl (hash: QACkTQdo1JQUSsX47bBezPFf/Qdq8CnstHP8Smj/3Dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:65:ae:09:d6:b8:d6:af:57:21:97:6d:84:1b:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
        Validity
            Not Before: Jul 24 13:01:26 2026 GMT
            Not After : Jul 25 13:01:26 2026 GMT
        Subject: CN=39d96db42caf1398213ac6f32bf0dd598a3849cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:10:c1:72:bb:c1:9f:22:ed:f6:cb:f0:b1:d1:
                    9e:84:c4:e5:41:d7:0c:b8:7d:3d:41:ad:5b:92:4a:
                    a4:6a:f4:09:4e:3f:21:e1:a0:f9:4c:e1:dd:f9:8c:
                    7a:f9:8a:a6:a1:a9:f7:ce:b5:02:e2:2b:53:fb:7c:
                    23:96:56:75:db:37:3a:58:76:a9:40:b6:75:fd:38:
                    34:b2:84:61:0b:b2:b0:ae:49:6a:31:32:3d:a6:3b:
                    fb:1a:a7:41:dd:9e:6b:8d:49:03:b2:0b:e3:cc:2e:
                    d2:2a:e7:8b:92:08:83:de:96:2a:60:e9:3a:2d:e9:
                    c1:d0:3e:3d:0a:3d:07:75:54:02:76:14:ce:df:45:
                    42:46:1b:a9:9f:20:4a:91:3b:5d:6d:5a:32:0f:b8:
                    59:d2:ca:18:be:00:81:37:04:89:78:74:7b:06:41:
                    88:7c:80:21:c4:10:13:37:90:05:d0:fa:87:68:67:
                    bf:e7:91:cf:e9:71:f2:73:11:59:b1:41:0a:76:9a:
                    03:c5:f4:20:c3:16:b8:96:07:05:0c:b9:cc:ca:95:
                    4f:c4:67:33:5c:5f:82:73:4d:04:b2:16:3e:0a:1f:
                    29:25:aa:66:73:db:b4:07:5c:f5:ea:c8:d0:66:1a:
                    9d:37:c6:f8:20:46:55:97:80:bc:5b:a6:43:cc:26:
                    ac:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D9:6D:B4:2C:AF:13:98:21:3A:C6:F3:2B:F0:DD:59:8A:38:49:CF
            X509v3 Authority Key Identifier:
                keyid:4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:11:c0:c3:2d:39:33:d2:61:39:d7:3b:51:b9:f6:d0:9a:17:
         d2:ba:92:77:c6:19:ec:ca:26:9f:8d:81:3a:1c:97:ce:14:e2:
         fe:c7:56:a3:71:1e:68:e5:d9:c9:fa:77:1a:94:29:ae:63:90:
         fc:ce:80:ca:f0:72:8c:ef:5f:cb:e7:6e:5c:09:2d:0c:4f:46:
         b6:f0:63:e4:fe:13:2c:0c:7a:19:e5:91:eb:89:34:3e:57:8b:
         ec:15:da:ba:92:a7:4e:d3:1f:09:aa:fd:6b:7d:6f:19:4a:d4:
         63:f9:e6:e6:63:45:9f:f5:ab:50:1c:9d:92:fb:38:62:97:2c:
         fa:85:0b:af:2a:41:55:07:2c:0a:59:18:2c:e2:bd:81:c1:6e:
         e1:56:32:d2:aa:2a:b3:59:e1:59:a2:a5:f2:a0:2c:c0:49:e5:
         8a:39:2f:0a:43:c2:ba:17:39:84:50:42:91:48:3b:6e:09:75:
         72:ca:8f:b2:81:04:d6:3c:76:7f:46:7d:1a:78:4b:07:f2:35:
         da:e1:e8:d9:97:52:b6:29:34:97:52:7e:dc:09:b2:24:f3:95:
         ae:4a:77:68:55:dc:09:36:c0:76:0b:15:c9:54:db:bf:31:c7:
         f5:d2:01:fc:e9:3d:35:57:92:a4:04:ee:9b:cf:b2:37:a9:1e:
         dd:e7:c3:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN2WuCda41q9XIZdthBtDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYmY2YjM3Yjk0Zjk1YjQ5MDVjZjhjNmEyMWQ4ODAzZWFi
ZmE3N2UwHhcNMjYwNzI0MTMwMTI2WhcNMjYwNzI1MTMwMTI2WjAzMTEwLwYDVQQD
EygzOWQ5NmRiNDJjYWYxMzk4MjEzYWM2ZjMyYmYwZGQ1OThhMzg0OWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxDBcrvBnyLt9svwsdGehMTlQdcM
uH09Qa1bkkqkavQJTj8h4aD5TOHd+Yx6+Yqmoan3zrUC4itT+3wjllZ12zc6WHap
QLZ1/Tg0soRhC7KwrklqMTI9pjv7GqdB3Z5rjUkDsgvjzC7SKueLkgiD3pYqYOk6
LenB0D49Cj0HdVQCdhTO30VCRhupnyBKkTtdbVoyD7hZ0soYvgCBNwSJeHR7BkGI
fIAhxBATN5AF0PqHaGe/55HP6XHycxFZsUEKdpoDxfQgwxa4lgcFDLnMypVPxGcz
XF+Cc00EshY+Ch8pJapmc9u0B1z16sjQZhqdN8b4IEZVl4C8W6ZDzCas2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnZbbQsrxOYITrG8yvw3VmKOEnPMB8GA1UdIwQY
MBaAFE6/aze5T5W0kFz4xqIdiAPqv6d+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2Yt
ZTdlNzRkYjcyMWQyLzEvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9hMjE3MmQtYjY1MS00M2RhLThhY2YtZTdlNzRkYjcyMWQy
LzEvVHI5ck43bFBsYlNRWFBqR29oMklBLXFfcDM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRHAwy05
M9JhOdc7Ubn20JoX0rqSd8YZ7Momn42BOhyXzhTi/sdWo3EeaOXZyfp3GpQprmOQ
/M6AyvByjO9fy+duXAktDE9GtvBj5P4TLAx6GeWR64k0PleL7BXaupKnTtMfCar9
a31vGUrUY/nm5mNFn/WrUBydkvs4Ypcs+oULrypBVQcsClkYLOK9gcFu4VYy0qoq
s1nhWaKl8qAswEnlijkvCkPCuhc5hFBCkUg7bgl1csqPsoEE1jx2f0Z9GnhLB/I1
2uHo2ZdStik0l1J+3AmyJPOVrkp3aFXcCTbAdgsVyVTbvzHH9dIB/Ok9NVeSpATu
m8+yN6ke3efDkg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:27:06 2026 by rpki-client