Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
File:                     m4FRrhZKW3grED3n98iolIkyrr8.mft (raw, json)
Hash identifier:          tNXf/me9z0c69nB3MvDzWP+ml6mvUr4nvIvF6PXwt7g=
Subject key identifier:   E5:AD:40:4A:C5:B0:6A:99:7E:2C:5C:7C:A7:AA:42:B6:BC:22:A2:FD
Authority key identifier: 9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF
Certificate issuer:       /CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
Certificate serial:       019F91DB03DEECDBC309F078D4CF89FDA8F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 02:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:17 +0000
Files and hashes:         1: 9LnJacci_erR2cZHVgN_5AemqSk.roa (hash: Su3buYvO3+g5Oi2bVgAQYC5BfjCnL0g2ZF/RyRer+zU=)
                          2: B8hP3lu4x-v6AGdd-NBMTGbKn60.roa (hash: J5ElDZLvmlw9NvMlGd8Bg3jT1oh60NlhHSd2q9Cwhys=)
                          3: EbW3NvEPl1oV2yNd4gPEWc6IX4k.roa (hash: 6sbRbAzpkVZnbmwGmFls1zgBgBPqZlTzKVvW2qe/0sQ=)
                          4: m4FRrhZKW3grED3n98iolIkyrr8.crl (hash: ztr5OEahlGm2OiHebC1L6YHY5LAzMUYt5PZ0rmXNE+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:03:de:ec:db:c3:09:f0:78:d4:cf:89:fd:a8:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b8151ae164a5b782b103de7f7c8a8948932aebf
        Validity
            Not Before: Jul 24 02:01:17 2026 GMT
            Not After : Jul 25 02:01:17 2026 GMT
        Subject: CN=e5ad404ac5b06a997e2c5c7ca7aa42b6bc22a2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:0a:7b:0c:3a:38:92:fb:7a:05:bb:24:24:bf:
                    3e:9a:a5:88:fa:23:7f:ff:8a:f0:8e:a4:82:ea:ba:
                    c9:51:23:2a:d9:40:cf:ba:40:c4:8f:c6:cb:9b:a0:
                    f8:df:c4:a9:2e:45:26:b7:68:57:6e:e0:76:d0:81:
                    c0:71:cb:35:58:3f:f3:92:a9:ce:6b:c8:86:a9:e0:
                    03:99:0e:6a:71:2b:42:34:4d:93:f1:87:12:24:ac:
                    b5:84:bb:91:be:fb:48:9f:99:1f:5a:00:0f:f4:88:
                    69:9b:a5:97:f4:8f:c8:4d:59:07:27:52:70:1b:af:
                    c3:68:ed:ff:d4:ef:4e:05:10:af:42:a5:50:50:12:
                    60:33:42:49:e2:4a:23:95:69:51:38:c1:d3:69:33:
                    93:5e:5b:e7:ae:61:7b:c8:ab:52:ed:e0:d5:29:f9:
                    1c:44:9c:90:0d:f5:93:70:fe:42:43:06:8e:d1:fa:
                    ad:c3:d6:79:91:30:d2:ac:59:81:7d:ba:54:0e:b0:
                    53:f7:02:86:12:43:00:70:5d:22:47:c4:0c:f5:f6:
                    9f:72:e0:3b:1b:41:52:c9:0b:9c:4e:e8:34:93:f4:
                    27:45:77:a2:f3:76:da:ac:56:5a:e7:50:b0:19:5f:
                    47:18:ca:0d:30:89:cf:ae:8f:e4:b1:c8:c2:bf:01:
                    c8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AD:40:4A:C5:B0:6A:99:7E:2C:5C:7C:A7:AA:42:B6:BC:22:A2:FD
            X509v3 Authority Key Identifier:
                keyid:9B:81:51:AE:16:4A:5B:78:2B:10:3D:E7:F7:C8:A8:94:89:32:AE:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m4FRrhZKW3grED3n98iolIkyrr8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/6b6d1f-5421-48b9-b7eb-da1fe9ebee8e/1/m4FRrhZKW3grED3n98iolIkyrr8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:69:15:e7:bd:8d:48:d4:fe:ba:3f:62:b8:75:5a:8e:2d:40:
         fb:5a:b4:5d:79:3e:0d:48:09:94:0c:a9:47:51:bc:0d:8c:b7:
         a7:56:54:cf:42:b3:cb:df:29:59:56:02:79:5a:94:a0:1a:d5:
         f2:17:c1:d1:53:78:d7:1f:8a:b9:0b:de:68:8d:59:07:72:ec:
         bc:3d:39:e5:b8:7d:ef:a2:01:87:bb:bc:fa:31:bc:fe:c8:4f:
         62:fc:e1:ea:d9:40:1b:4f:d3:4f:9d:6b:3a:86:84:24:66:f9:
         a4:0a:72:c7:e6:85:be:34:35:3d:e5:50:4e:44:04:07:62:b6:
         39:ab:1a:8d:15:54:08:71:7a:3e:8c:21:d1:37:bb:07:6e:d9:
         45:1e:61:16:d5:fd:5e:f3:af:6a:26:85:f5:dd:67:2d:2b:46:
         9e:ea:18:9c:27:a5:0b:9e:eb:36:5a:38:f4:6b:e0:49:f5:cb:
         cc:ea:d8:8f:3e:f6:58:a3:b0:c4:96:38:d0:fb:f7:97:ad:f0:
         b9:12:ae:06:52:2a:56:42:eb:ef:6a:e6:25:7f:52:8a:fa:09:
         16:51:b7:51:36:25:28:71:9d:4a:d1:fc:44:e3:ab:ee:d3:0a:
         4f:c7:2b:35:6a:22:1e:44:8a:9b:b2:20:73:31:c1:76:bb:a4:
         56:3b:27:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2wPe7NvDCfB41M+J/ajzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliODE1MWFlMTY0YTViNzgyYjEwM2RlN2Y3YzhhODk0ODkz
MmFlYmYwHhcNMjYwNzI0MDIwMTE3WhcNMjYwNzI1MDIwMTE3WjAzMTEwLwYDVQQD
EyhlNWFkNDA0YWM1YjA2YTk5N2UyYzVjN2NhN2FhNDJiNmJjMjJhMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Qp7DDo4kvt6BbskJL8+mqWI+iN/
/4rwjqSC6rrJUSMq2UDPukDEj8bLm6D438SpLkUmt2hXbuB20IHAccs1WD/zkqnO
a8iGqeADmQ5qcStCNE2T8YcSJKy1hLuRvvtIn5kfWgAP9Ihpm6WX9I/ITVkHJ1Jw
G6/DaO3/1O9OBRCvQqVQUBJgM0JJ4kojlWlROMHTaTOTXlvnrmF7yKtS7eDVKfkc
RJyQDfWTcP5CQwaO0fqtw9Z5kTDSrFmBfbpUDrBT9wKGEkMAcF0iR8QM9fafcuA7
G0FSyQucTug0k/QnRXei83barFZa51CwGV9HGMoNMInPro/kscjCvwHIYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOWtQErFsGqZfixcfKeqQra8IqL9MB8GA1UdIwQY
MBaAFJuBUa4WSlt4KxA95/fIqJSJMq6/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWIt
ZGExZmU5ZWJlZThlLzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC82YjZkMWYtNTQyMS00OGI5LWI3ZWItZGExZmU5ZWJlZThl
LzEvbTRGUnJoWktXM2dyRUQzbjk4aW9sSWt5cnI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWkV572N
SNT+uj9iuHVaji1A+1q0XXk+DUgJlAypR1G8DYy3p1ZUz0Kzy98pWVYCeVqUoBrV
8hfB0VN41x+KuQveaI1ZB3LsvD055bh976IBh7u8+jG8/shPYvzh6tlAG0/TT51r
OoaEJGb5pApyx+aFvjQ1PeVQTkQEB2K2OasajRVUCHF6Powh0Te7B27ZRR5hFtX9
XvOvaiaF9d1nLStGnuoYnCelC57rNlo49GvgSfXLzOrYjz72WKOwxJY40Pv3l63w
uRKuBlIqVkLr72rmJX9SivoJFlG3UTYlKHGdStH8ROOr7tMKT8crNWoiHkSKm7Ig
czHBdrukVjsn+A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:21:03 2026 by rpki-client