Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
File:                     TZkZWi_leH1dYCYBjDUY88HlABk.mft (raw, json)
Hash identifier:          d7FfTdfO2RvQqKZkEoapGIe4C62IzJgLpaPHZpDDhz8=
Subject key identifier:   2C:A4:0D:84:B6:02:85:45:2C:3A:D0:1B:F9:31:EC:D4:4E:06:7E:1E
Authority key identifier: 4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19
Certificate issuer:       /CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
Certificate serial:       019F935AEE1E1EA474A18C12478B895159C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:37 +0000
Files and hashes:         1: TZkZWi_leH1dYCYBjDUY88HlABk.crl (hash: +ZR5P72G1hsiNMzfiMiQpOPathnYGzRMBQQSvlXIEDw=)
                          2: iZEmjwEPRyx8QyyQn4gnbiaigT4.roa (hash: I3dS4NuQKJEmxy0uXjJxX1xrNFM+VLP6Pll5fzdeVhg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5a:ee:1e:1e:a4:74:a1:8c:12:47:8b:89:51:59:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d99195a2fe5787d5d6026018c3518f3c1e50019
        Validity
            Not Before: Jul 24 09:00:37 2026 GMT
            Not After : Jul 25 09:00:37 2026 GMT
        Subject: CN=2ca40d84b60285452c3ad01bf931ecd44e067e1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e5:45:1c:00:fe:b2:b1:ec:29:cd:c6:62:76:
                    26:5f:03:d9:f1:99:21:98:93:a1:f2:d8:9c:a9:5b:
                    f6:dc:dc:7d:91:9d:ef:67:a0:c0:63:4b:4a:cb:c4:
                    a3:cd:1d:8e:9b:57:be:19:a5:42:25:59:91:db:f9:
                    12:a6:1a:54:e1:ac:64:04:cf:a5:c3:2a:42:5a:73:
                    1c:81:4d:ed:cc:7b:8f:a1:40:32:45:fc:11:6b:1c:
                    15:0c:cd:f9:37:6a:fb:c7:6e:76:c4:93:a3:f1:76:
                    e6:b3:d2:38:0d:4e:ca:98:ba:8a:5c:d3:5f:68:ac:
                    38:37:fc:db:60:8f:1f:67:7c:f9:c5:5f:52:9e:13:
                    71:75:62:db:98:6d:5e:3f:b9:1d:d9:6c:3a:69:c3:
                    2a:67:1f:20:4d:03:9f:87:55:6e:2a:e5:0d:ab:09:
                    02:a0:79:16:9d:46:6e:5f:51:40:3c:19:df:0e:b8:
                    81:f9:60:7c:ff:d5:4d:df:13:d6:eb:c3:3d:65:01:
                    d1:44:10:bd:05:78:a8:61:82:cf:a2:5e:f4:42:45:
                    c7:3c:ee:f4:f1:ec:5f:cd:de:7b:92:48:ae:50:06:
                    e4:b1:01:f3:6a:43:3b:55:b1:04:89:07:6f:11:a4:
                    f7:b3:84:95:58:55:83:2a:a9:0d:bc:9e:cf:4c:3f:
                    75:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A4:0D:84:B6:02:85:45:2C:3A:D0:1B:F9:31:EC:D4:4E:06:7E:1E
            X509v3 Authority Key Identifier:
                keyid:4D:99:19:5A:2F:E5:78:7D:5D:60:26:01:8C:35:18:F3:C1:E5:00:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZkZWi_leH1dYCYBjDUY88HlABk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dcc50-025c-4c20-8699-bced579c0b7b/1/TZkZWi_leH1dYCYBjDUY88HlABk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:03:6c:16:6f:ba:69:4b:67:ec:36:c9:6d:4e:58:fb:cb:7e:
         88:ff:a9:43:42:12:7c:87:12:6b:f3:07:54:5a:b1:44:00:97:
         44:94:fe:47:eb:00:87:56:c4:80:17:4b:a6:52:3c:29:8d:14:
         7c:82:69:8a:64:62:f9:8c:2e:4a:c8:39:01:e1:aa:b2:8a:e1:
         f9:7a:af:0e:a0:62:87:c5:c7:06:4f:d6:89:60:05:d4:17:cd:
         24:73:17:80:a4:07:36:8c:40:a2:b9:40:dc:49:0a:5b:e0:88:
         06:db:44:e0:a0:07:94:da:48:7c:19:bb:19:d0:4e:92:08:86:
         e3:9c:51:f0:79:7d:82:b3:8a:cc:aa:6b:e1:13:33:56:a0:fd:
         31:b5:f3:69:38:0a:77:28:0f:9f:c6:59:bf:b4:af:11:4e:22:
         15:68:01:ad:a7:54:cd:9e:21:bb:d1:1c:82:03:be:f9:34:f7:
         54:b0:76:1c:07:b5:fb:3e:98:51:43:0d:a9:9b:2f:4f:31:a7:
         27:dc:3a:81:b0:92:64:0a:5a:0f:35:57:6c:d4:8c:e4:7c:fb:
         c4:3d:a0:68:4f:c2:16:6c:83:1a:5c:15:b0:d4:cb:e7:74:30:
         5d:5f:a2:f9:b3:5f:bb:de:7a:0d:d7:1a:08:a0:c1:db:b8:7b:
         33:06:3c:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TWu4eHqR0oYwSR4uJUVnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkOTkxOTVhMmZlNTc4N2Q1ZDYwMjYwMThjMzUxOGYzYzFl
NTAwMTkwHhcNMjYwNzI0MDkwMDM3WhcNMjYwNzI1MDkwMDM3WjAzMTEwLwYDVQQD
EygyY2E0MGQ4NGI2MDI4NTQ1MmMzYWQwMWJmOTMxZWNkNDRlMDY3ZTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eVFHAD+srHsKc3GYnYmXwPZ8Zkh
mJOh8ticqVv23Nx9kZ3vZ6DAY0tKy8SjzR2Om1e+GaVCJVmR2/kSphpU4axkBM+l
wypCWnMcgU3tzHuPoUAyRfwRaxwVDM35N2r7x252xJOj8Xbms9I4DU7KmLqKXNNf
aKw4N/zbYI8fZ3z5xV9SnhNxdWLbmG1eP7kd2Ww6acMqZx8gTQOfh1VuKuUNqwkC
oHkWnUZuX1FAPBnfDriB+WB8/9VN3xPW68M9ZQHRRBC9BXioYYLPol70QkXHPO70
8exfzd57kkiuUAbksQHzakM7VbEEiQdvEaT3s4SVWFWDKqkNvJ7PTD91cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCykDYS2AoVFLDrQG/kx7NROBn4eMB8GA1UdIwQY
MBaAFE2ZGVov5Xh9XWAmAYw1GPPB5QAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFprWldpX2xlSDFkWUNZQmpEVVk4OEhsQUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTkt
YmNlZDU3OWMwYjdiLzEvVFprWldpX2xlSDFkWUNZQmpEVVk4OEhsQUJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82ZGNjNTAtMDI1Yy00YzIwLTg2OTktYmNlZDU3OWMwYjdi
LzEvVFprWldpX2xlSDFkWUNZQmpEVVk4OEhsQUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAagNsFm+6
aUtn7DbJbU5Y+8t+iP+pQ0ISfIcSa/MHVFqxRACXRJT+R+sAh1bEgBdLplI8KY0U
fIJpimRi+YwuSsg5AeGqsorh+XqvDqBih8XHBk/WiWAF1BfNJHMXgKQHNoxAorlA
3EkKW+CIBttE4KAHlNpIfBm7GdBOkgiG45xR8Hl9grOKzKpr4RMzVqD9MbXzaTgK
dygPn8ZZv7SvEU4iFWgBradUzZ4hu9EcggO++TT3VLB2HAe1+z6YUUMNqZsvTzGn
J9w6gbCSZApaDzVXbNSM5Hz7xD2gaE/CFmyDGlwVsNTL53QwXV+i+bNfu956Ddca
CKDB27h7MwY8MQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:25:14 2026 by rpki-client