Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File:                     bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier:          qWRR/qSAr3x3YPsMpvs/OyOs7jP7/vii/y374S96UY8=
Subject key identifier:   30:55:A5:6C:12:9D:E9:A8:91:3D:0F:81:CB:96:13:D3:40:C7:53:D3
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer:       /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial:       019F92B5F2647265E4DF29C6C9D4EFD0BF40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 06:00:25 +0000
Manifest this update:     Fri 24 Jul 2026 06:00:25 +0000
Manifest next update:     Sat 25 Jul 2026 06:00:25 +0000
Files and hashes:         1: LEEO04PoylroqFY8moJTc81n18Y.roa (hash: VL5m4Xl6YVLRVrUOG2POhFSxcgEK6w8mouyfVI3KzkQ=)
                          2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: MxSmOGf0V9huXIXphJ/RcmpcGcfrM7cZVdpZex0UMZU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b5:f2:64:72:65:e4:df:29:c6:c9:d4:ef:d0:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
        Validity
            Not Before: Jul 24 06:00:25 2026 GMT
            Not After : Jul 25 06:00:25 2026 GMT
        Subject: CN=3055a56c129de9a8913d0f81cb9613d340c753d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:04:93:47:5e:9e:55:e3:04:25:e5:58:ca:ff:
                    b7:04:79:0d:10:f4:6c:ea:02:b2:43:64:0c:97:75:
                    e7:a9:0b:7c:ad:f4:b8:ed:b7:90:51:ec:fe:76:cb:
                    cb:78:44:a5:95:73:68:14:5d:10:6d:72:e9:82:e6:
                    c9:fe:4d:e5:85:ed:66:29:18:d9:53:fc:9f:51:52:
                    a8:3c:a4:93:8d:51:aa:ac:30:6a:bb:6c:b1:87:b9:
                    cd:13:bb:e8:41:74:f9:65:23:94:f3:cc:2b:e3:ba:
                    4f:d1:81:fd:e7:9d:7f:35:fc:34:f0:75:21:0f:46:
                    3f:b8:ef:5f:93:5b:0c:a1:f8:a2:aa:02:7e:7d:9d:
                    cb:d8:c7:38:ae:f2:02:86:6d:04:38:33:68:40:3d:
                    d6:d5:d4:95:10:3a:59:c9:7b:24:17:24:fa:51:d1:
                    b0:01:fa:2d:f3:54:6c:84:7d:17:23:4a:86:46:b9:
                    88:a9:27:5b:52:7d:63:1c:96:d3:9b:01:f3:4a:9d:
                    ac:49:e1:6b:82:4b:b1:94:97:cf:e9:4f:d0:2d:60:
                    80:d8:af:3b:60:c5:93:96:e6:7b:f5:dd:7b:a9:43:
                    01:bd:d2:d8:d1:79:e5:af:58:14:81:ec:5c:a0:30:
                    11:da:52:83:05:1a:45:93:d8:1c:b4:ad:07:da:b7:
                    3e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:55:A5:6C:12:9D:E9:A8:91:3D:0F:81:CB:96:13:D3:40:C7:53:D3
            X509v3 Authority Key Identifier:
                keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:77:c7:a5:d2:17:9a:c3:1e:72:59:51:82:19:c0:81:8c:e9:
         61:9f:6a:a3:90:94:07:a8:7d:69:03:fc:23:44:a6:ae:a1:83:
         0f:f3:7b:60:e2:7a:5b:91:31:9c:48:d6:bb:e4:06:dc:97:2c:
         1f:1f:e3:35:cc:57:85:22:9c:02:73:41:cd:4f:3b:50:80:8d:
         e8:db:2d:f2:6c:5e:5c:3a:aa:51:aa:ca:d4:f4:f1:83:94:8f:
         74:e0:e9:77:4e:32:4e:8b:af:0d:1e:26:c6:c7:ef:05:5a:8f:
         0d:8b:22:41:22:13:a4:98:b6:a9:99:9f:8f:b1:1a:6b:21:6f:
         4a:f6:a5:ef:a2:c2:17:69:ab:89:53:b8:4b:ee:41:4a:06:87:
         28:2a:a9:35:a2:ac:36:2f:33:02:89:31:68:e7:71:e8:67:90:
         16:40:79:91:4e:3a:6b:b9:9a:a6:cf:cc:68:b3:fe:7d:3b:68:
         f3:63:ff:b1:c0:3c:e8:ac:36:d7:6f:ac:bf:b9:d1:83:6b:5b:
         21:2c:de:22:78:d8:e8:ac:2d:92:1d:fc:26:b9:61:26:18:b3:
         f0:98:d7:aa:c3:62:25:9c:dc:a1:18:f2:b4:30:3f:b0:85:cd:
         0f:d0:12:f5:d6:e9:a0:a0:e1:09:36:da:93:21:36:98:08:f6:
         8d:27:43:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StfJkcmXk3ynGydTv0L9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjZGVjN2IyZTlmODY2ZWFjMzZiYzMxY2E0YzRmZjYyZDUz
ZGQxNjYwHhcNMjYwNzI0MDYwMDI1WhcNMjYwNzI1MDYwMDI1WjAzMTEwLwYDVQQD
EygzMDU1YTU2YzEyOWRlOWE4OTEzZDBmODFjYjk2MTNkMzQwYzc1M2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3QSTR16eVeMEJeVYyv+3BHkNEPRs
6gKyQ2QMl3XnqQt8rfS47beQUez+dsvLeESllXNoFF0QbXLpgubJ/k3lhe1mKRjZ
U/yfUVKoPKSTjVGqrDBqu2yxh7nNE7voQXT5ZSOU88wr47pP0YH9551/Nfw08HUh
D0Y/uO9fk1sMofiiqgJ+fZ3L2Mc4rvIChm0EODNoQD3W1dSVEDpZyXskFyT6UdGw
Afot81RshH0XI0qGRrmIqSdbUn1jHJbTmwHzSp2sSeFrgkuxlJfP6U/QLWCA2K87
YMWTluZ79d17qUMBvdLY0Xnlr1gUgexcoDAR2lKDBRpFk9gctK0H2rc+zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBVpWwSnemokT0PgcuWE9NAx1PTMB8GA1UdIwQY
MBaAFGzex7Lp+Gbqw2vDHKTE/2LVPdFmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDIt
NGU2N2JlNGU0MzJlLzEvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8wMTUwNGMtYzFjNi00NTY0LWE0MDItNGU2N2JlNGU0MzJl
LzEvYk43SHN1bjRadXJEYThNY3BNVF9ZdFU5MFdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmXfHpdIX
msMecllRghnAgYzpYZ9qo5CUB6h9aQP8I0SmrqGDD/N7YOJ6W5ExnEjWu+QG3Jcs
Hx/jNcxXhSKcAnNBzU87UICN6Nst8mxeXDqqUarK1PTxg5SPdODpd04yTouvDR4m
xsfvBVqPDYsiQSITpJi2qZmfj7EaayFvSval76LCF2mriVO4S+5BSgaHKCqpNaKs
Ni8zAokxaOdx6GeQFkB5kU46a7maps/MaLP+fTto82P/scA86Kw212+sv7nRg2tb
ISzeInjY6Kwtkh38JrlhJhiz8JjXqsNiJZzcoRjytDA/sIXND9AS9dbpoKDhCTba
kyE2mAj2jSdDpA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:44 2026 by rpki-client