Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
File:                     F5WshDzYupAYj3MTZSu1YSmbKW8.mft (raw, json)
Hash identifier:          oV6xqAIlJnvKNt/Y/WBcQVBPRV39JVHkvZ0KQ8X5YVQ=
Subject key identifier:   2C:D9:50:B5:AD:AE:23:6A:A4:D7:99:41:B0:8D:8C:AB:DA:07:0D:91
Authority key identifier: 17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F
Certificate issuer:       /CN=1795ac843cd8ba90188f7313652bb561299b296f
Certificate serial:       019F9512880FFBDAD93A97341492FB56243A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
Manifest number:          19F9
Signing time:             Fri 24 Jul 2026 17:00:47 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:47 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:47 +0000
Files and hashes:         1: 4cPUtGs5z3WzM8Tbf3sj19g9kLM.roa (hash: mztLsdxtv2MnNRJ0kNvEbAIy95WSyZD1lkeM0IDqVSc=)
                          2: F5WshDzYupAYj3MTZSu1YSmbKW8.crl (hash: 8eGapMuuoukiE1/U1VGJODgfsZZWAet7wSM+FixHSCs=)
                          3: M32l6QcCzjNP1ZvVCiymNlZeu5M.roa (hash: 7yhUf6JrLXmGYFGl+/grMfR3bznSq0e/XMOFiemHb1Y=)
                          4: djYwV2YEd2ptt8Ib5gbwyt6_PJ0.roa (hash: EPuCK1qK8rFmB6GJAaNU9eGa1ttXRJS5gr+vN0RsIxc=)
                          5: qO1xGMDRTz1c6NG2XcRW45Jlxs0.roa (hash: lXx7crxtNnNAXWSdBnarR4QfhtaUFVtePQBiE/rqIY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:88:0f:fb:da:d9:3a:97:34:14:92:fb:56:24:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1795ac843cd8ba90188f7313652bb561299b296f
        Validity
            Not Before: Jul 24 17:00:47 2026 GMT
            Not After : Jul 25 17:00:47 2026 GMT
        Subject: CN=2cd950b5adae236aa4d79941b08d8cabda070d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:02:02:96:0c:a1:92:eb:c3:af:d3:6c:a6:
                    96:cd:8b:85:c4:43:73:f0:0b:8d:c1:9f:dc:cd:c6:
                    c5:31:9c:90:b2:33:ce:47:b0:97:0a:94:ad:3b:df:
                    56:b5:3a:a5:47:85:ad:90:a4:86:c3:9d:e7:d3:26:
                    3a:b8:90:a7:2f:b6:ed:31:92:a8:fd:28:36:38:b4:
                    51:ef:25:4f:fe:0b:e3:1c:78:ff:d4:be:91:38:c6:
                    7f:dd:42:e7:dd:ba:11:30:b2:a9:70:56:4f:fd:14:
                    8a:52:43:3b:5d:9e:59:e0:6c:4f:e0:ad:09:b0:aa:
                    e4:f4:e7:88:4d:71:db:4c:d2:58:7b:c8:42:04:46:
                    c3:48:6c:cd:42:0e:46:d9:39:6e:43:24:12:5c:8f:
                    8f:86:ef:09:fa:ab:38:bc:b9:4f:6c:2c:b6:b1:35:
                    45:09:13:26:83:f3:03:f5:5b:ed:78:da:5c:d6:73:
                    5d:14:a2:70:11:7f:63:34:74:4c:21:fe:39:cb:10:
                    25:42:11:77:31:20:4c:8a:c4:fa:94:64:11:58:e5:
                    1c:74:9e:fb:69:8e:30:ab:e6:46:08:e2:79:2e:5c:
                    54:32:c8:38:ff:44:21:c2:d3:66:6a:40:a3:04:6b:
                    cb:2c:c6:92:0b:a5:99:22:d6:3a:4b:0b:f7:5f:ec:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D9:50:B5:AD:AE:23:6A:A4:D7:99:41:B0:8D:8C:AB:DA:07:0D:91
            X509v3 Authority Key Identifier:
                keyid:17:95:AC:84:3C:D8:BA:90:18:8F:73:13:65:2B:B5:61:29:9B:29:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5WshDzYupAYj3MTZSu1YSmbKW8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/6683f4-3eec-4dcb-8787-731abc6f75ca/1/F5WshDzYupAYj3MTZSu1YSmbKW8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:1b:18:87:b9:e2:c4:c5:02:6c:54:0a:9b:e9:c5:5e:18:cc:
         6e:4d:ee:ca:60:66:0a:99:09:44:be:32:d2:53:b5:d1:17:59:
         3d:9b:eb:0e:e7:a5:c7:e2:86:03:40:b3:28:b0:3b:62:3f:61:
         a1:fb:86:54:d8:1e:98:f4:d2:ee:26:52:22:74:9e:94:f6:5d:
         77:2a:89:b1:87:af:e3:17:d3:9b:93:c5:cb:3f:d3:01:fc:1e:
         ff:c4:1a:e5:bd:11:4a:20:c4:54:0c:6d:cb:56:36:b4:66:73:
         10:35:dc:fd:85:9f:af:ab:8e:48:fb:2c:75:af:81:41:2c:3d:
         06:ab:b3:3d:b3:ea:2c:e7:47:32:08:51:06:c2:0f:4d:82:c4:
         07:4b:dc:2a:c1:07:52:28:f3:be:ac:50:bc:6c:64:f9:a5:85:
         f6:19:79:5e:f6:32:05:e4:8d:4f:61:d1:72:7f:81:0c:57:5b:
         72:76:45:ef:ef:e1:30:e6:ce:43:2b:03:12:2f:9b:d0:b1:9d:
         79:ad:06:07:29:62:0f:2f:77:9b:4a:73:46:5a:84:51:0f:c8:
         aa:b4:fe:4e:af:2f:ce:2d:61:b2:b2:5b:89:67:2d:92:ae:09:
         6e:71:65:f8:9e:6d:02:03:70:a3:73:b8:15:d0:fa:32:fd:d6:
         b0:11:61:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEogP+9rZOpc0FJL7ViQ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTVhYzg0M2NkOGJhOTAxODhmNzMxMzY1MmJiNTYxMjk5
YjI5NmYwHhcNMjYwNzI0MTcwMDQ3WhcNMjYwNzI1MTcwMDQ3WjAzMTEwLwYDVQQD
EygyY2Q5NTBiNWFkYWUyMzZhYTRkNzk5NDFiMDhkOGNhYmRhMDcwZDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWYCApYMoZLrw6/TbKaWzYuFxENz
8AuNwZ/czcbFMZyQsjPOR7CXCpStO99WtTqlR4WtkKSGw53n0yY6uJCnL7btMZKo
/Sg2OLRR7yVP/gvjHHj/1L6ROMZ/3ULn3boRMLKpcFZP/RSKUkM7XZ5Z4GxP4K0J
sKrk9OeITXHbTNJYe8hCBEbDSGzNQg5G2TluQyQSXI+Phu8J+qs4vLlPbCy2sTVF
CRMmg/MD9VvteNpc1nNdFKJwEX9jNHRMIf45yxAlQhF3MSBMisT6lGQRWOUcdJ77
aY4wq+ZGCOJ5LlxUMsg4/0QhwtNmakCjBGvLLMaSC6WZItY6Swv3X+xK6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCzZULWtriNqpNeZQbCNjKvaBw2RMB8GA1UdIwQY
MBaAFBeVrIQ82LqQGI9zE2UrtWEpmylvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODct
NzMxYWJjNmY3NWNhLzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS82NjgzZjQtM2VlYy00ZGNiLTg3ODctNzMxYWJjNmY3NWNh
LzEvRjVXc2hEell1cEFZajNNVFpTdTFZU21iS1c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlBsYh7ni
xMUCbFQKm+nFXhjMbk3uymBmCpkJRL4y0lO10RdZPZvrDuelx+KGA0CzKLA7Yj9h
ofuGVNgemPTS7iZSInSelPZddyqJsYev4xfTm5PFyz/TAfwe/8Qa5b0RSiDEVAxt
y1Y2tGZzEDXc/YWfr6uOSPssda+BQSw9BquzPbPqLOdHMghRBsIPTYLEB0vcKsEH
UijzvqxQvGxk+aWF9hl5XvYyBeSNT2HRcn+BDFdbcnZF7+/hMObOQysDEi+b0LGd
ea0GByliDy93m0pzRlqEUQ/IqrT+Tq8vzi1hsrJbiWctkq4JbnFl+J5tAgNwo3O4
FdD6Mv3WsBFhhA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:13:14 2026 by rpki-client