Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
File:                     fsZaHc-CJefxC-IN3eHiFugAtnw.mft (raw, json)
Hash identifier:          EdTySD+xIgOg+ku8wFrxt/BJJce1QZZHoDoPIQhx6Oo=
Subject key identifier:   B2:49:C4:B7:6A:55:60:97:C8:2D:9B:AC:98:FC:50:A0:BA:D1:AE:70
Authority key identifier: 7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C
Certificate issuer:       /CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
Certificate serial:       019F9323F4884451B1A0AB76E838E6150CB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
Manifest number:          19F6
Signing time:             Fri 24 Jul 2026 08:00:34 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:34 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:34 +0000
Files and hashes:         1: cA7qo8b7Nox5Eg3ETDI0GHB8bQo.roa (hash: hqs/XnPjGsbh3NQlfcv5MT/Lsf4omMXxdpDxcmlIJnY=)
                          2: fsZaHc-CJefxC-IN3eHiFugAtnw.crl (hash: z6TYwUMoPO5DFdFh2PnfdeGYkJbm0WpHtwdfn2DbDeo=)
                          3: gPVJ3frT2a_JfPP9EGZIsKgy1a0.roa (hash: QLrbnotwwaeckUxd194yTQbnltlzcloRQasYTwXYSI4=)
                          4: t39MjWfTSh6lD0VDLJOty1Ne3_4.roa (hash: 4oSYhOJIx4nvL1oEMJgfU3qa/OGBgGIUrJiUyXDl/Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:f4:88:44:51:b1:a0:ab:76:e8:38:e6:15:0c:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ec65a1dcf8225e7f10be20ddde1e216e800b67c
        Validity
            Not Before: Jul 24 08:00:34 2026 GMT
            Not After : Jul 25 08:00:34 2026 GMT
        Subject: CN=b249c4b76a556097c82d9bac98fc50a0bad1ae70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d3:d7:52:d8:de:9d:3c:f5:8f:28:27:f6:a4:
                    46:e1:4a:bc:b9:0e:28:a8:1b:30:71:80:d9:e3:72:
                    2a:64:e6:cc:f4:d4:c1:95:c1:3b:ce:61:d2:92:65:
                    c9:f1:c7:cd:a9:db:57:29:de:55:e0:4d:f7:d1:52:
                    f1:61:bb:5a:9d:b4:fa:10:70:eb:3f:d1:de:e4:87:
                    44:8b:72:05:08:9f:fa:b3:05:79:b9:8e:47:0d:40:
                    10:d7:0d:cf:ff:cb:bf:10:ce:85:1d:3b:c2:10:04:
                    78:b7:59:2e:cc:5c:a6:c6:10:ed:2e:e7:9e:9e:14:
                    db:bf:e1:77:aa:39:92:3b:de:56:20:2d:ff:34:fd:
                    7f:16:be:b3:89:e8:14:b2:90:44:fc:fd:a5:b8:d9:
                    6b:f3:8e:a8:36:0c:60:e7:eb:e1:df:cd:e1:c8:55:
                    1f:1f:3f:a4:2f:c5:03:60:34:c2:37:95:6a:d2:46:
                    4a:21:4d:de:b0:c7:5d:d7:2a:cb:cf:43:df:20:d8:
                    9a:ed:e0:b6:aa:8b:bd:85:cd:d9:84:67:cf:fe:87:
                    23:cb:fc:6b:7e:76:74:66:0e:bd:03:d5:af:f6:f1:
                    7a:03:1b:62:e4:57:4a:d7:7c:fd:2e:61:fb:11:fb:
                    ef:a2:af:fe:c0:b0:7d:77:ed:b9:4c:d5:a4:71:ec:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:49:C4:B7:6A:55:60:97:C8:2D:9B:AC:98:FC:50:A0:BA:D1:AE:70
            X509v3 Authority Key Identifier:
                keyid:7E:C6:5A:1D:CF:82:25:E7:F1:0B:E2:0D:DD:E1:E2:16:E8:00:B6:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsZaHc-CJefxC-IN3eHiFugAtnw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8e7785-9451-46fb-b244-7d9b8230537e/1/fsZaHc-CJefxC-IN3eHiFugAtnw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:7d:ca:06:df:e1:4b:e6:d7:50:6e:b5:c6:5f:98:4f:71:9d:
         cc:da:b3:8a:86:fc:f2:e9:98:64:07:68:28:31:01:ba:f8:b2:
         ac:0d:99:98:83:7b:86:ae:cf:14:52:d2:05:d5:d9:99:fb:46:
         c5:c7:92:af:c8:49:8c:71:52:7f:5d:b2:c1:cc:a0:99:51:6e:
         14:0b:d7:c8:f5:a4:75:45:19:89:18:a7:7f:5b:21:c8:eb:0e:
         49:7f:be:fc:99:4b:c1:34:c9:5b:a7:5d:25:49:05:82:73:74:
         8c:4c:fe:b0:f2:2b:29:ee:39:1d:2d:64:74:1a:17:20:43:24:
         68:63:b1:72:14:16:1d:0b:17:21:32:0b:20:25:6d:49:9d:4c:
         2c:db:d9:50:59:ab:b8:f6:46:34:89:4d:84:ae:7a:56:79:48:
         f6:6a:fa:2b:c8:48:75:b3:70:48:75:b4:ec:22:db:fc:c6:69:
         62:4f:34:24:97:f9:b4:7b:4c:c9:3a:2a:76:fb:57:68:a0:d8:
         7e:36:07:99:94:bf:03:a2:db:34:32:8c:50:d5:d9:fc:49:b4:
         2a:f6:62:a2:70:7e:98:d1:57:bd:cb:2b:11:1b:22:3b:51:a8:
         3e:df:fb:7d:ad:b1:57:b8:ee:f1:22:9f:11:81:9a:f4:9b:43:
         60:59:f4:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI/SIRFGxoKt26DjmFQyxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlYzY1YTFkY2Y4MjI1ZTdmMTBiZTIwZGRkZTFlMjE2ZTgw
MGI2N2MwHhcNMjYwNzI0MDgwMDM0WhcNMjYwNzI1MDgwMDM0WjAzMTEwLwYDVQQD
EyhiMjQ5YzRiNzZhNTU2MDk3YzgyZDliYWM5OGZjNTBhMGJhZDFhZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2dPXUtjenTz1jygn9qRG4Uq8uQ4o
qBswcYDZ43IqZObM9NTBlcE7zmHSkmXJ8cfNqdtXKd5V4E330VLxYbtanbT6EHDr
P9He5IdEi3IFCJ/6swV5uY5HDUAQ1w3P/8u/EM6FHTvCEAR4t1kuzFymxhDtLuee
nhTbv+F3qjmSO95WIC3/NP1/Fr6ziegUspBE/P2luNlr846oNgxg5+vh383hyFUf
Hz+kL8UDYDTCN5Vq0kZKIU3esMdd1yrLz0PfINia7eC2qou9hc3ZhGfP/ocjy/xr
fnZ0Zg69A9Wv9vF6Axti5FdK13z9LmH7Efvvoq/+wLB9d+25TNWkceyVowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJJxLdqVWCXyC2brJj8UKC60a5wMB8GA1UdIwQY
MBaAFH7GWh3PgiXn8QviDd3h4hboALZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQt
N2Q5YjgyMzA1MzdlLzEvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84ZTc3ODUtOTQ1MS00NmZiLWIyNDQtN2Q5YjgyMzA1Mzdl
LzEvZnNaYUhjLUNKZWZ4Qy1JTjNlSGlGdWdBdG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcH3KBt/h
S+bXUG61xl+YT3GdzNqziob88umYZAdoKDEBuviyrA2ZmIN7hq7PFFLSBdXZmftG
xceSr8hJjHFSf12ywcygmVFuFAvXyPWkdUUZiRinf1shyOsOSX++/JlLwTTJW6dd
JUkFgnN0jEz+sPIrKe45HS1kdBoXIEMkaGOxchQWHQsXITILICVtSZ1MLNvZUFmr
uPZGNIlNhK56VnlI9mr6K8hIdbNwSHW07CLb/MZpYk80JJf5tHtMyToqdvtXaKDY
fjYHmZS/A6LbNDKMUNXZ/Em0KvZionB+mNFXvcsrERsiO1GoPt/7fa2xV7ju8SKf
EYGa9JtDYFn0Pw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:57 2026 by rpki-client