Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
File:                     Mh__9QM6eQGj6fJ19txujqD5O4o.mft (raw, json)
Hash identifier:          3lWLo3Q/ioqNhtJJ2Zpc+qe4AqITKm2S08R2KzhE8s4=
Subject key identifier:   6B:85:8D:4D:A8:2F:A6:C7:8F:5A:04:34:3E:62:C2:EF:16:7F:FE:17
Authority key identifier: 32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A
Certificate issuer:       /CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
Certificate serial:       019F8F477085C9D6EC3FCEA0C944EF5C40F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
Manifest number:          185A
Signing time:             Thu 23 Jul 2026 14:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:51 +0000
Files and hashes:         1: 3Q7_GkdVY3UrWG6hnKogPdwlTMA.roa (hash: /esAa54gtGHxOcqdkkMygDWuDj7d6Mjd5bQs/BpC4NA=)
                          2: Mh__9QM6eQGj6fJ19txujqD5O4o.crl (hash: IvbdLCqC07AKPT6vdw992ANc3SpdpknxDt1crbQqPNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:70:85:c9:d6:ec:3f:ce:a0:c9:44:ef:5c:40:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=321ffff5033a7901a3e9f275f6dc6e8ea0f93b8a
        Validity
            Not Before: Jul 23 14:00:51 2026 GMT
            Not After : Jul 24 14:00:51 2026 GMT
        Subject: CN=6b858d4da82fa6c78f5a04343e62c2ef167ffe17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0a:14:38:6a:19:e0:2c:dd:7b:5d:e8:bf:f1:
                    ce:41:54:35:96:bd:48:76:f5:e6:7b:ba:f5:af:20:
                    40:de:16:4e:c0:7b:34:64:7b:5a:76:98:f2:3d:70:
                    82:9c:de:4b:61:e3:4f:57:65:ba:43:2c:bb:e7:e7:
                    c1:b8:00:f6:b2:51:47:fa:6d:2a:c7:e8:79:5b:9e:
                    1d:f5:94:64:24:41:3e:03:47:8e:dc:5c:55:e3:eb:
                    a7:65:79:c3:a5:24:63:30:00:c8:6b:13:cb:16:e2:
                    22:64:19:61:23:00:56:f4:d7:a4:a7:ff:58:07:8d:
                    9e:34:e9:d1:1c:b0:6a:a8:cb:d9:35:ea:b4:3e:84:
                    3e:28:aa:70:44:8f:8d:74:35:03:2c:90:ff:c9:98:
                    c3:f5:b9:81:c3:7f:19:9b:d1:9b:f9:e3:aa:6b:eb:
                    5c:00:8d:25:2e:26:74:a8:b3:94:81:f6:f5:34:34:
                    9e:b9:66:36:4f:66:f0:38:1b:1b:d5:fc:7e:9f:6f:
                    5d:5c:c5:bc:a0:ee:b8:8c:60:6e:8e:ce:f6:04:03:
                    f5:19:1c:0e:eb:9e:8d:e4:e0:08:80:d4:8b:75:73:
                    a2:fe:3b:29:e9:4b:25:d5:6c:ac:f6:d2:2b:1d:6b:
                    52:80:40:52:af:27:0a:c7:26:6f:6e:28:08:8a:a4:
                    f5:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:85:8D:4D:A8:2F:A6:C7:8F:5A:04:34:3E:62:C2:EF:16:7F:FE:17
            X509v3 Authority Key Identifier:
                keyid:32:1F:FF:F5:03:3A:79:01:A3:E9:F2:75:F6:DC:6E:8E:A0:F9:3B:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mh__9QM6eQGj6fJ19txujqD5O4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0f4d1a-e4b6-49c6-a50d-d1e30a5cac88/1/Mh__9QM6eQGj6fJ19txujqD5O4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:10:db:b0:ea:06:f6:6b:eb:68:ad:0c:41:80:ec:91:89:4a:
         72:b5:29:b0:00:7d:6e:3e:25:d7:1a:bf:33:7b:30:a3:4d:9a:
         c1:8c:de:6b:3c:d1:1b:2b:10:18:59:12:9e:98:d7:c8:dd:64:
         b8:d3:11:ef:6e:61:58:63:99:e7:37:72:3d:a7:e6:8b:d8:cf:
         5d:c1:3b:05:c1:85:8e:50:25:66:ce:b5:8b:06:e6:73:db:b3:
         cf:98:cb:36:cc:be:03:2f:eb:4d:58:26:4c:8a:ea:79:75:70:
         81:cf:55:b7:f6:ed:a4:77:d3:5e:05:8f:aa:04:f6:45:64:05:
         a2:d2:25:f5:83:bf:f0:03:fc:7e:40:8b:2c:c2:c8:b3:0b:23:
         b3:4e:fc:54:ba:bc:c4:35:3c:1d:cf:74:c4:9e:06:be:69:0f:
         2a:e5:23:9c:1f:0d:e8:1e:48:c7:c8:d9:fd:0b:a1:e6:aa:ae:
         c4:67:28:3d:25:3d:a8:f5:34:91:8e:b0:17:cd:97:d8:62:5f:
         b9:9e:d6:d5:8a:fb:bd:d6:0a:95:43:8b:68:02:16:d7:e9:99:
         e6:68:f0:00:4b:b6:e7:6d:d9:c8:48:82:df:ae:25:1a:d6:bf:
         42:0b:84:4e:e5:5a:fa:16:32:a9:1c:08:1b:c5:32:21:0a:a3:
         22:ef:43:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PR3CFydbsP86gyUTvXED0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMWZmZmY1MDMzYTc5MDFhM2U5ZjI3NWY2ZGM2ZThlYTBm
OTNiOGEwHhcNMjYwNzIzMTQwMDUxWhcNMjYwNzI0MTQwMDUxWjAzMTEwLwYDVQQD
Eyg2Yjg1OGQ0ZGE4MmZhNmM3OGY1YTA0MzQzZTYyYzJlZjE2N2ZmZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlQoUOGoZ4Czde13ov/HOQVQ1lr1I
dvXme7r1ryBA3hZOwHs0ZHtadpjyPXCCnN5LYeNPV2W6Qyy75+fBuAD2slFH+m0q
x+h5W54d9ZRkJEE+A0eO3FxV4+unZXnDpSRjMADIaxPLFuIiZBlhIwBW9Nekp/9Y
B42eNOnRHLBqqMvZNeq0PoQ+KKpwRI+NdDUDLJD/yZjD9bmBw38Zm9Gb+eOqa+tc
AI0lLiZ0qLOUgfb1NDSeuWY2T2bwOBsb1fx+n29dXMW8oO64jGBujs72BAP1GRwO
656N5OAIgNSLdXOi/jsp6Usl1Wys9tIrHWtSgEBSrycKxyZvbigIiqT1JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuFjU2oL6bHj1oEND5iwu8Wf/4XMB8GA1UdIwQY
MBaAFDIf//UDOnkBo+nydfbcbo6g+TuKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8wZjRkMWEtZTRiNi00OWM2LWE1MGQt
ZDFlMzBhNWNhYzg4LzEvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8wZjRkMWEtZTRiNi00OWM2LWE1MGQtZDFlMzBhNWNhYzg4
LzEvTWhfXzlRTTZlUUdqNmZKMTl0eHVqcUQ1TzRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnBDbsOoG
9mvraK0MQYDskYlKcrUpsAB9bj4l1xq/M3swo02awYzeazzRGysQGFkSnpjXyN1k
uNMR725hWGOZ5zdyPafmi9jPXcE7BcGFjlAlZs61iwbmc9uzz5jLNsy+Ay/rTVgm
TIrqeXVwgc9Vt/btpHfTXgWPqgT2RWQFotIl9YO/8AP8fkCLLMLIswsjs078VLq8
xDU8Hc90xJ4GvmkPKuUjnB8N6B5Ix8jZ/Quh5qquxGcoPSU9qPU0kY6wF82X2GJf
uZ7W1Yr7vdYKlUOLaAIW1+mZ5mjwAEu2523ZyEiC364lGta/QguETuVa+hYyqRwI
G8UyIQqjIu9DMg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:53 2026 by rpki-client