Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
File:                     YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft (raw, json)
Hash identifier:          KkejJcLmlxZNw5O4yofUZegpw1HZpt8txECyCGYR9NE=
Subject key identifier:   BC:1A:A6:99:E6:EA:E5:C7:70:6D:60:8F:B9:CB:63:6E:A2:89:40:48
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Certificate issuer:       /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial:       019F95129C7FAD014F89E1C648D804C7DFB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 17:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:52 +0000
Files and hashes:         1: OgWEvpt9l3fjUZPTGCjCIeBKF7g.roa (hash: ERaqLzlMb64hRM2SkbR4/skAX7oKEBTPX2o20Ce35C4=)
                          2: YNe4buptuJ7UBEwKBogeIyq80jg.roa (hash: NkTj5ifZYkof4P8g9p6OTOx3j64mOVFXyYQzcr25aXA=)
                          3: YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl (hash: jD5LgOuyxQJQdUJbar+UYovslwOQTT337fSQ7lEP28I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:9c:7f:ad:01:4f:89:e1:c6:48:d8:04:c7:df:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
        Validity
            Not Before: Jul 24 17:00:52 2026 GMT
            Not After : Jul 25 17:00:52 2026 GMT
        Subject: CN=bc1aa699e6eae5c7706d608fb9cb636ea2894048
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:73:68:4f:5e:1b:ea:bf:6a:62:65:49:b8:23:
                    55:15:2a:f0:87:10:78:0a:28:15:5b:e6:43:80:95:
                    41:95:a3:91:87:56:3b:da:85:64:ff:2b:d2:52:fe:
                    89:d9:09:60:47:3c:e9:a7:0c:72:64:25:c1:ea:29:
                    16:1e:74:a4:71:85:91:74:89:37:3e:a5:00:f1:29:
                    dc:4b:c9:ed:4e:ca:56:e4:35:15:76:b2:73:eb:d6:
                    3d:78:ed:fa:a4:2b:73:0d:ac:3f:bb:d7:00:af:78:
                    45:c6:0c:76:de:4f:9f:55:9a:a8:b2:fb:5e:ad:45:
                    ec:7a:78:92:92:6c:d3:d7:89:65:ee:9f:f3:99:1d:
                    38:b7:ae:9c:5e:0e:b0:40:26:ae:c8:4f:8e:b5:8a:
                    93:e7:93:71:2e:8c:9e:62:44:3c:51:7b:50:38:c0:
                    13:78:6b:91:52:6a:44:57:48:fa:3b:fa:10:42:9a:
                    52:87:95:ba:cb:2e:7c:49:60:09:69:4f:6e:1c:e2:
                    93:e9:f8:8e:eb:fc:cc:b2:f5:dc:0d:c2:50:1e:8d:
                    76:6c:82:cd:f9:0c:ac:3d:10:57:d8:24:79:97:fc:
                    20:e1:4f:f0:a3:e5:92:50:36:74:cd:99:a4:a2:3e:
                    50:ab:06:ec:dd:e9:ac:c8:ba:96:dc:41:ab:4b:eb:
                    6b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:1A:A6:99:E6:EA:E5:C7:70:6D:60:8F:B9:CB:63:6E:A2:89:40:48
            X509v3 Authority Key Identifier:
                keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:2b:83:8f:5b:e0:7f:e4:11:9d:98:ec:b3:a0:c3:17:af:e9:
         be:d5:c8:04:fa:0c:ec:9c:87:bd:b5:97:a7:21:0c:6f:40:3a:
         8f:ba:c6:3c:f1:56:b3:12:34:1e:3c:5f:3e:36:41:90:a6:a7:
         d4:f4:63:03:b3:4b:09:ab:b1:aa:7b:89:e7:44:47:45:b7:0c:
         8c:d5:1c:72:e3:18:97:ad:e5:aa:b8:d8:19:5d:1f:51:6d:aa:
         85:d6:18:88:a2:50:9f:39:fa:1e:ae:b2:80:4a:96:bd:c7:8d:
         7f:f5:db:6d:83:72:07:03:9a:66:d0:69:d8:04:b7:4d:11:8a:
         28:15:76:5b:0d:e5:1a:e2:c7:a9:3f:31:36:56:c1:4e:ff:44:
         3c:11:de:64:d6:37:a0:96:b6:da:9a:d4:bd:86:2f:97:c9:d6:
         e8:9d:5d:43:18:78:99:a2:28:0f:c9:18:70:75:57:43:16:21:
         5a:40:c8:db:2c:65:e5:5e:4e:f0:b7:1f:84:ca:ed:9e:f1:3e:
         7e:05:2d:7e:02:1d:ae:5a:58:b6:f9:63:d5:46:10:b3:04:12:
         12:52:60:d9:0c:69:a4:93:c1:c2:f8:b4:ce:42:0f:80:00:ff:
         5c:61:79:5b:bd:7b:a9:28:b6:8a:86:e8:38:ed:2e:d1:20:03:
         b6:87:c6:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEpx/rQFPieHGSNgEx9+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWE4Mzg1YTE0ZmQ5OTY3OTc4YWU3ZjA2ZWM0ZGQ1MjIy
OWE0NGEwHhcNMjYwNzI0MTcwMDUyWhcNMjYwNzI1MTcwMDUyWjAzMTEwLwYDVQQD
EyhiYzFhYTY5OWU2ZWFlNWM3NzA2ZDYwOGZiOWNiNjM2ZWEyODk0MDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXNoT14b6r9qYmVJuCNVFSrwhxB4
CigVW+ZDgJVBlaORh1Y72oVk/yvSUv6J2QlgRzzppwxyZCXB6ikWHnSkcYWRdIk3
PqUA8SncS8ntTspW5DUVdrJz69Y9eO36pCtzDaw/u9cAr3hFxgx23k+fVZqosvte
rUXseniSkmzT14ll7p/zmR04t66cXg6wQCauyE+OtYqT55NxLoyeYkQ8UXtQOMAT
eGuRUmpEV0j6O/oQQppSh5W6yy58SWAJaU9uHOKT6fiO6/zMsvXcDcJQHo12bILN
+QysPRBX2CR5l/wg4U/wo+WSUDZ0zZmkoj5Qqwbs3emsyLqW3EGrS+trGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwappnm6uXHcG1gj7nLY26iiUBIMB8GA1UdIwQY
MBaAFGDqg4WhT9mWeXiufwbsTdUiKaRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEt
ZjU0NTc3ZjdjYzBmLzEvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEtZjU0NTc3ZjdjYzBm
LzEvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCuDj1vg
f+QRnZjss6DDF6/pvtXIBPoM7JyHvbWXpyEMb0A6j7rGPPFWsxI0HjxfPjZBkKan
1PRjA7NLCauxqnuJ50RHRbcMjNUccuMYl63lqrjYGV0fUW2qhdYYiKJQnzn6Hq6y
gEqWvceNf/XbbYNyBwOaZtBp2AS3TRGKKBV2Ww3lGuLHqT8xNlbBTv9EPBHeZNY3
oJa22prUvYYvl8nW6J1dQxh4maIoD8kYcHVXQxYhWkDI2yxl5V5O8LcfhMrtnvE+
fgUtfgIdrlpYtvlj1UYQswQSElJg2QxppJPBwvi0zkIPgAD/XGF5W717qSi2iobo
OO0u0SADtofGtg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:26:16 2026 by rpki-client