Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
File:                     fruIjyuZ3ply4kRuugWKuOLNez8.mft (raw, json)
Hash identifier:          5+cuntVkx3047IKKyYa5lXaouoaFZGHd/i7Dx7F07wI=
Subject key identifier:   2B:50:1C:6B:90:14:90:B8:70:BE:0E:F0:BD:5C:7C:2A:E9:8B:12:37
Authority key identifier: 7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F
Certificate issuer:       /CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
Certificate serial:       019F93245B6117DB0ABE3A0F2E06BCE63A93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
Manifest number:          19CF
Signing time:             Fri 24 Jul 2026 08:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 08:01:01 +0000
Files and hashes:         1: 1-aCnSCh2k6EoO6v8K8YGH6-ZFag.roa (hash: TXqm016RQPYqrirzt4ClgfgwS79aUK1qbegI6yBDVqc=)
                          2: fruIjyuZ3ply4kRuugWKuOLNez8.crl (hash: L/wSVwWB9pRRHOQH6lU3Ys1fNy36s7x/fFdspWaGU8k=)
                          3: uhXgdMnU2sK7rATt-_JTycGnweE.roa (hash: oOHRvsricrI0IDhV5HO6fjuBbrjUqImOQ3QUZQn7MEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:5b:61:17:db:0a:be:3a:0f:2e:06:bc:e6:3a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ebb888f2b99de9972e2446eba058ab8e2cd7b3f
        Validity
            Not Before: Jul 24 08:01:01 2026 GMT
            Not After : Jul 25 08:01:01 2026 GMT
        Subject: CN=2b501c6b901490b870be0ef0bd5c7c2ae98b1237
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:c1:63:1f:ae:c2:d0:d1:15:dd:50:fb:c4:
                    be:28:13:4a:a2:d8:b1:a8:ab:ee:b9:c2:88:0d:d2:
                    af:56:4c:d5:7d:37:bd:64:e4:7d:4e:79:37:20:77:
                    ac:2e:c2:9f:d8:9e:ba:b4:1f:4c:66:81:63:66:63:
                    7a:56:70:42:50:ed:20:f8:df:0a:4a:6e:fb:38:ab:
                    6a:1d:e3:a5:bf:49:64:a0:42:91:3a:ea:49:a2:a3:
                    f7:e2:4d:3d:36:4f:2c:8a:9b:1b:a9:8b:74:88:17:
                    76:a5:40:53:03:02:d3:79:5a:ed:2a:a2:09:df:4a:
                    31:e2:65:5f:dc:e3:27:65:14:04:51:2d:80:74:db:
                    03:06:c2:e8:17:40:de:fd:1b:09:4f:3b:1f:ea:d2:
                    3d:3e:f0:c4:38:d0:4d:7e:69:ad:87:4b:37:f2:53:
                    3c:cc:82:51:48:97:41:68:dd:cf:05:65:24:e0:e7:
                    64:50:d7:5a:c7:68:24:53:6c:ed:c7:a7:ed:e7:47:
                    36:74:11:22:78:01:b5:2a:ef:2e:06:0e:36:e3:f2:
                    8e:f9:21:ff:12:c9:aa:01:ba:7b:6d:1a:27:c5:4c:
                    99:ed:30:5d:1b:37:ff:80:5a:99:09:e9:35:87:a1:
                    51:5d:36:4d:a8:ad:10:11:70:93:ba:f7:88:fe:a1:
                    f9:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:50:1C:6B:90:14:90:B8:70:BE:0E:F0:BD:5C:7C:2A:E9:8B:12:37
            X509v3 Authority Key Identifier:
                keyid:7E:BB:88:8F:2B:99:DE:99:72:E2:44:6E:BA:05:8A:B8:E2:CD:7B:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fruIjyuZ3ply4kRuugWKuOLNez8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e1b34a-f388-4ddd-92cd-e1c0a4d04917/1/fruIjyuZ3ply4kRuugWKuOLNez8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:41:94:09:49:e7:77:6f:c5:e8:ff:dc:97:62:79:e0:58:77:
         3c:bc:94:3a:fb:48:c1:25:d4:b8:16:34:b1:be:a1:8d:31:fd:
         d1:7c:d5:29:bc:25:a3:9a:e8:45:84:23:5f:c8:87:be:19:9f:
         1c:2b:13:89:a2:7d:58:21:65:16:db:29:c3:7b:7f:ff:c2:ca:
         93:9a:13:22:a8:c1:8f:83:fe:42:77:be:38:cd:da:ae:e5:20:
         7b:a0:26:2d:7f:6e:1a:f8:fe:fd:db:d8:71:44:8d:fa:f4:55:
         b5:fa:3b:4b:d9:1c:74:97:27:17:80:13:52:d2:e0:c2:9a:cd:
         2c:56:ca:f8:04:a1:ef:0b:e9:60:f2:82:74:0d:09:e1:02:8c:
         96:79:81:25:cf:74:2f:f7:81:9c:b9:e7:9b:d6:cc:a6:9b:35:
         d8:16:bf:88:fd:7e:eb:1e:5e:d8:c5:b7:74:77:ab:07:c2:6d:
         4e:e4:01:cb:9e:89:92:34:d6:15:38:bf:26:37:db:9b:d0:d7:
         61:34:26:91:c3:1f:ab:e1:ce:2f:68:a1:2e:23:95:ec:52:86:
         06:8b:33:c7:4b:cd:2a:56:1f:44:94:83:c5:c4:43:a7:4c:59:
         39:bf:b6:76:b2:03:53:a4:c5:e6:fa:15:80:46:f1:22:e7:ca:
         e8:2d:93:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJFthF9sKvjoPLga85jqTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYmI4ODhmMmI5OWRlOTk3MmUyNDQ2ZWJhMDU4YWI4ZTJj
ZDdiM2YwHhcNMjYwNzI0MDgwMTAxWhcNMjYwNzI1MDgwMTAxWjAzMTEwLwYDVQQD
EygyYjUwMWM2YjkwMTQ5MGI4NzBiZTBlZjBiZDVjN2MyYWU5OGIxMjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqbBYx+uwtDRFd1Q+8S+KBNKotix
qKvuucKIDdKvVkzVfTe9ZOR9Tnk3IHesLsKf2J66tB9MZoFjZmN6VnBCUO0g+N8K
Sm77OKtqHeOlv0lkoEKROupJoqP34k09Nk8sipsbqYt0iBd2pUBTAwLTeVrtKqIJ
30ox4mVf3OMnZRQEUS2AdNsDBsLoF0De/RsJTzsf6tI9PvDEONBNfmmth0s38lM8
zIJRSJdBaN3PBWUk4OdkUNdax2gkU2ztx6ft50c2dBEieAG1Ku8uBg424/KO+SH/
EsmqAbp7bRonxUyZ7TBdGzf/gFqZCek1h6FRXTZNqK0QEXCTuveI/qH5/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCtQHGuQFJC4cL4O8L1cfCrpixI3MB8GA1UdIwQY
MBaAFH67iI8rmd6ZcuJEbroFirjizXs/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnJ1SWp5dVozcGx5NGtSdXVnV0t1T0xOZXo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9lMWIzNGEtZjM4OC00ZGRkLTkyY2Qt
ZTFjMGE0ZDA0OTE3LzEvZnJ1SWp5dVozcGx5NGtSdXVnV0t1T0xOZXo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9lMWIzNGEtZjM4OC00ZGRkLTkyY2QtZTFjMGE0ZDA0OTE3
LzEvZnJ1SWp5dVozcGx5NGtSdXVnV0t1T0xOZXo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACUGUCUnn
d2/F6P/cl2J54Fh3PLyUOvtIwSXUuBY0sb6hjTH90XzVKbwlo5roRYQjX8iHvhmf
HCsTiaJ9WCFlFtspw3t//8LKk5oTIqjBj4P+Qne+OM3aruUge6AmLX9uGvj+/dvY
cUSN+vRVtfo7S9kcdJcnF4ATUtLgwprNLFbK+ASh7wvpYPKCdA0J4QKMlnmBJc90
L/eBnLnnm9bMpps12Ba/iP1+6x5e2MW3dHerB8JtTuQBy56JkjTWFTi/Jjfbm9DX
YTQmkcMfq+HOL2ihLiOV7FKGBoszx0vNKlYfRJSDxcRDp0xZOb+2drIDU6TF5voV
gEbxIufK6C2T9w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:05 2026 by rpki-client