Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
File:                     tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft (raw, json)
Hash identifier:          J2Lvg4hIqspwy7eOCVrhUhARFyWbMIwRYxtJipAt7F4=
Subject key identifier:   8D:2A:C0:5D:D6:C7:1C:75:85:71:43:1D:FA:90:A5:6A:38:4A:8C:AB
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Certificate issuer:       /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial:       019F92ECF2D75D7B6AC773C6868C917BA9AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 07:00:29 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:29 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:29 +0000
Files and hashes:         1: QCpTyIFdDljPGYT7m3LdB_-iQhI.roa (hash: xzvh7tbNPzo7Wi3VB2foK6QSDsmyv9TnvnUDyEsqDCQ=)
                          2: tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl (hash: DFscc7Dn2K3DZ1Gs0x5oi0DaT8Eah1MX+Rk5cH42jpg=)
                          3: tppuzkmN6jpfpZKIH0VQ644PPG0.roa (hash: 7pgb7H6ySxmjpEPHGA+SxPrWzMz3658+URBk5kcUvJ8=)
                          4: yui3OirtbU9wX3qbBKGwQyqzh9Y.roa (hash: fqr46XlOsOuVijyWcom8iBpcJwxvqaI+d67FIdr/YMM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ec:f2:d7:5d:7b:6a:c7:73:c6:86:8c:91:7b:a9:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
        Validity
            Not Before: Jul 24 07:00:29 2026 GMT
            Not After : Jul 25 07:00:29 2026 GMT
        Subject: CN=8d2ac05dd6c71c758571431dfa90a56a384a8cab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:31:2c:98:c8:9d:46:09:f4:8d:27:96:b4:55:
                    c9:20:9e:21:3e:94:d7:c4:56:f1:06:32:7a:70:0f:
                    3f:67:6d:81:9e:c7:0d:5a:2b:00:57:17:a0:a6:a9:
                    2b:98:fd:b5:f9:bd:36:cd:a7:af:3d:d4:78:93:f4:
                    b9:1a:82:49:9c:60:3c:6f:51:33:b9:58:ed:ac:c0:
                    fe:9a:cf:f4:1c:54:54:8d:8e:5b:fa:c3:e8:d0:b4:
                    7d:f7:0f:70:a0:fe:55:b7:d9:33:c1:fb:6b:81:6d:
                    32:08:75:29:4e:43:ab:4b:aa:cc:3a:49:ad:4a:b1:
                    25:0c:35:3c:9b:5d:c6:a6:91:7a:f4:27:63:55:82:
                    b5:e8:d1:e5:f0:b0:e1:82:0e:6d:dd:5f:71:e6:27:
                    0f:eb:ba:48:98:ec:2b:c7:63:31:1d:90:d0:9f:8e:
                    f5:b1:dd:a2:62:e3:9f:38:29:35:f5:db:40:bb:14:
                    2b:68:ff:b7:7c:46:24:46:93:a2:f3:71:d2:ae:06:
                    3b:30:70:f8:63:fc:eb:b7:68:6d:9f:e9:68:f5:f7:
                    32:f6:a3:bf:03:21:42:75:49:38:76:53:39:74:0d:
                    3b:00:e2:be:de:b7:52:9b:22:5f:bf:30:1f:48:ef:
                    23:9d:47:32:47:86:3a:bd:96:38:e2:f4:4f:9f:d4:
                    fa:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:2A:C0:5D:D6:C7:1C:75:85:71:43:1D:FA:90:A5:6A:38:4A:8C:AB
            X509v3 Authority Key Identifier:
                keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:97:43:51:e0:4d:b2:24:cd:4b:5b:ac:ff:8d:45:c7:93:74:
         2a:d2:da:48:8e:c9:c5:98:96:6c:e8:ac:2c:5a:7b:b5:03:88:
         5f:e6:0b:d0:19:fe:0f:5b:78:b7:ea:c6:50:ba:6e:2b:29:b5:
         28:2c:e3:47:58:b1:09:94:19:c1:6f:f4:1c:8d:2c:f5:a4:92:
         ac:73:e7:d4:e4:ad:31:76:15:f2:5a:a8:bf:f8:2e:d8:32:27:
         13:bd:70:32:73:a3:36:d4:f2:67:ff:c6:b2:73:9c:93:9f:52:
         55:87:97:e3:af:9e:82:5d:f5:4c:0c:44:52:e5:72:8c:ae:4a:
         98:76:83:ef:0e:ef:c1:90:27:73:0f:0d:79:c4:da:e3:29:02:
         b4:b7:c2:76:f1:da:47:69:a3:3e:de:fd:fb:13:83:14:82:28:
         93:e0:74:b1:3e:76:7b:e9:b8:dd:ef:8a:86:44:37:ac:74:8a:
         7f:c0:84:4c:db:54:20:f9:15:5a:87:2f:a1:78:df:2a:3b:05:
         70:38:db:6f:d4:e6:e0:23:98:48:88:8d:96:12:6c:79:0c:dd:
         ba:f0:a3:2e:1f:d1:1b:73:81:fd:ef:c5:f5:b7:85:bf:8a:0e:
         26:c7:fa:dd:0e:70:b7:b0:0c:0d:17:71:e9:d8:52:2c:b5:df:
         6f:bc:49:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7PLXXXtqx3PGhoyRe6mtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MzgwMDAwZmI3ZTQ1Zjg5NzYyNjFhNjk4ZDQxOGYwOGU4
ZDY3YzcwHhcNMjYwNzI0MDcwMDI5WhcNMjYwNzI1MDcwMDI5WjAzMTEwLwYDVQQD
Eyg4ZDJhYzA1ZGQ2YzcxYzc1ODU3MTQzMWRmYTkwYTU2YTM4NGE4Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TEsmMidRgn0jSeWtFXJIJ4hPpTX
xFbxBjJ6cA8/Z22BnscNWisAVxegpqkrmP21+b02zaevPdR4k/S5GoJJnGA8b1Ez
uVjtrMD+ms/0HFRUjY5b+sPo0LR99w9woP5Vt9kzwftrgW0yCHUpTkOrS6rMOkmt
SrElDDU8m13GppF69CdjVYK16NHl8LDhgg5t3V9x5icP67pImOwrx2MxHZDQn471
sd2iYuOfOCk19dtAuxQraP+3fEYkRpOi83HSrgY7MHD4Y/zrt2htn+lo9fcy9qO/
AyFCdUk4dlM5dA07AOK+3rdSmyJfvzAfSO8jnUcyR4Y6vZY44vRPn9T6uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI0qwF3Wxxx1hXFDHfqQpWo4SoyrMB8GA1UdIwQY
MBaAFLY4AAD7fkX4l2JhppjUGPCOjWfHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGpnQUFQdC1SZmlYWW1HbW1OUVk4STZOWjhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi82ZTRlNjgtODdhYS00NzhjLThlNWYt
ZTA2MTc2YWIyNGZiLzEvdGpnQUFQdC1SZmlYWW1HbW1OUVk4STZOWjhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi82ZTRlNjgtODdhYS00NzhjLThlNWYtZTA2MTc2YWIyNGZi
LzEvdGpnQUFQdC1SZmlYWW1HbW1OUVk4STZOWjhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg5dDUeBN
siTNS1us/41Fx5N0KtLaSI7JxZiWbOisLFp7tQOIX+YL0Bn+D1t4t+rGULpuKym1
KCzjR1ixCZQZwW/0HI0s9aSSrHPn1OStMXYV8lqov/gu2DInE71wMnOjNtTyZ//G
snOck59SVYeX46+egl31TAxEUuVyjK5KmHaD7w7vwZAncw8NecTa4ykCtLfCdvHa
R2mjPt79+xODFIIok+B0sT52e+m43e+KhkQ3rHSKf8CETNtUIPkVWocvoXjfKjsF
cDjbb9Tm4COYSIiNlhJseQzduvCjLh/RG3OB/e/F9beFv4oOJsf63Q5wt7AMDRdx
6dhSLLXfb7xJKg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:56 2026 by rpki-client