Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
File:                     R6qHj3a1CUfL197KBKyDLih7UU0.mft (raw, json)
Hash identifier:          KJCkUl1Q92dS9D7TtzrWOCV7g551hQ7J/VMpqNqe/KE=
Subject key identifier:   B6:E7:7A:56:0A:BB:88:3B:98:E7:B8:17:8C:96:7F:53:34:8C:60:1B
Authority key identifier: 47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D
Certificate issuer:       /CN=47aa878f76b50947cbd7deca04ac832e287b514d
Certificate serial:       019F9211A46AF2DCEDC4B4A80F7E0798018A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
Manifest number:          19CB
Signing time:             Fri 24 Jul 2026 03:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:57 +0000
Files and hashes:         1: BivoMBiiKX1jnny2zKvOSrTYRUY.roa (hash: 8hB7iW5L2nOivqzn4BVVbjDdy20ghF6rXv05CZui8t8=)
                          2: KbO_rhcd_Py9G7bL23wPhQg_H1E.roa (hash: Gt+nLupr4LnlUwhUJTSyzH1eIxogBFFobyE9mPwX8Qw=)
                          3: LJQ2CSjZ3vUCVBe9x_aAVbx2eLs.roa (hash: 37sNgm8sahuJz7mDJK1LfOWx1Msk+HpvlqlI2WPKepM=)
                          4: LtE8in6FERFIEpRVKUfnYcuzmpQ.roa (hash: q4RfQwClDkZ6vDi0Ca1x3tfdzvX5MK4MZ7S3KpJaJns=)
                          5: R6qHj3a1CUfL197KBKyDLih7UU0.crl (hash: NC+Cx1syq+B7p1IazEGR92GL5J3z0I6EXKVoX6/bELE=)
                          6: hEXbRt4GR6sdCxsQ6con5D0SlaE.roa (hash: jGZHf86R7GGQ0RMCh4pHt1hpLp3iGJcQcFX98OKa04k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:a4:6a:f2:dc:ed:c4:b4:a8:0f:7e:07:98:01:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47aa878f76b50947cbd7deca04ac832e287b514d
        Validity
            Not Before: Jul 24 03:00:57 2026 GMT
            Not After : Jul 25 03:00:57 2026 GMT
        Subject: CN=b6e77a560abb883b98e7b8178c967f53348c601b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:59:f6:6f:ae:2a:a5:69:7f:50:c6:e9:23:
                    77:e5:43:77:15:7a:fc:06:52:75:5e:4b:42:10:e4:
                    1b:d0:c8:b8:2f:5b:9a:b7:b4:b9:f6:74:d7:8b:40:
                    61:74:3d:e8:c1:db:53:0e:48:f0:ad:fd:10:4b:7c:
                    d4:38:55:9c:6f:4a:6e:5b:b5:17:b5:26:92:12:bb:
                    7f:be:cc:76:e5:11:a6:2d:5d:b8:19:bc:7a:9e:fa:
                    52:7d:f2:0f:b3:17:07:4f:63:32:50:1a:7e:a0:a6:
                    65:a5:0d:b4:16:55:1c:68:fd:64:7c:4e:a0:30:fc:
                    94:91:01:d8:6e:59:e9:22:bc:86:ab:f3:6f:b8:7b:
                    76:db:b0:1f:df:7d:0f:d3:35:70:06:b8:ed:29:d0:
                    80:67:53:b9:e1:3e:91:c7:ba:8d:6b:55:60:4b:63:
                    5e:ec:1d:09:ad:2e:3e:e7:8e:a4:b1:6d:65:2d:98:
                    c8:82:c8:ad:0d:e9:cc:f0:aa:d1:6e:75:f5:b1:d6:
                    27:d9:f0:4b:6f:5a:a1:c0:7c:09:65:fb:16:1a:a6:
                    5f:43:87:71:63:96:32:b5:6f:6b:2e:84:1d:fa:d6:
                    f2:71:3c:d0:78:2e:2c:52:88:dd:55:12:da:3d:a5:
                    bb:7b:85:94:e6:a4:a3:9f:f8:aa:76:ec:10:48:ed:
                    0c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:E7:7A:56:0A:BB:88:3B:98:E7:B8:17:8C:96:7F:53:34:8C:60:1B
            X509v3 Authority Key Identifier:
                keyid:47:AA:87:8F:76:B5:09:47:CB:D7:DE:CA:04:AC:83:2E:28:7B:51:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R6qHj3a1CUfL197KBKyDLih7UU0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/c1ab26-28b0-4637-b51b-3992c54e187b/1/R6qHj3a1CUfL197KBKyDLih7UU0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:87:00:25:36:03:7f:82:27:df:9e:d7:cd:0e:ce:90:7a:f7:
         47:54:4b:08:40:9f:d7:f7:f6:13:f4:85:da:ac:9a:19:32:fe:
         8d:ce:e7:d5:4b:5f:7e:f7:53:6c:42:06:4d:f9:16:26:0e:4c:
         1b:9c:7d:f6:b1:92:e0:34:71:6a:ba:b1:23:52:af:fe:02:31:
         c2:9e:93:5f:d0:db:7e:05:e7:c9:81:f3:92:a2:18:e9:f7:10:
         b1:85:7e:97:33:13:d5:98:5c:04:b7:28:bf:99:2f:41:73:c8:
         33:a9:1b:4e:9a:4f:8e:56:9e:98:e2:c7:fe:8c:42:14:58:15:
         64:9f:e9:b0:cc:95:27:a6:b9:11:87:7d:e4:c2:b1:e8:08:1d:
         90:ff:84:b7:b2:45:75:d5:4f:4f:a2:f8:0e:9b:b6:7f:6c:a0:
         a9:7c:9b:9c:f2:26:b7:89:54:b3:91:a8:51:b5:f6:c5:ee:6c:
         91:59:4f:dd:bd:63:b6:90:9a:74:39:ab:ea:6c:99:bd:03:a0:
         4c:6f:26:34:41:0d:37:68:ed:b3:17:5b:44:02:93:6a:ab:10:
         44:d1:99:c5:46:24:73:a4:aa:12:2d:b9:a2:7f:25:6a:8b:72:
         77:cf:c6:ec:f1:9d:b7:e3:5c:a5:db:e9:b0:3e:93:1f:42:0a:
         af:f7:de:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEaRq8tztxLSoD34HmAGKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YWE4NzhmNzZiNTA5NDdjYmQ3ZGVjYTA0YWM4MzJlMjg3
YjUxNGQwHhcNMjYwNzI0MDMwMDU3WhcNMjYwNzI1MDMwMDU3WjAzMTEwLwYDVQQD
EyhiNmU3N2E1NjBhYmI4ODNiOThlN2I4MTc4Yzk2N2Y1MzM0OGM2MDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QFZ9m+uKqVpf1DG6SN35UN3FXr8
BlJ1XktCEOQb0Mi4L1uat7S59nTXi0BhdD3owdtTDkjwrf0QS3zUOFWcb0puW7UX
tSaSErt/vsx25RGmLV24Gbx6nvpSffIPsxcHT2MyUBp+oKZlpQ20FlUcaP1kfE6g
MPyUkQHYblnpIryGq/NvuHt227Af330P0zVwBrjtKdCAZ1O54T6Rx7qNa1VgS2Ne
7B0JrS4+546ksW1lLZjIgsitDenM8KrRbnX1sdYn2fBLb1qhwHwJZfsWGqZfQ4dx
Y5YytW9rLoQd+tbycTzQeC4sUojdVRLaPaW7e4WU5qSjn/iqduwQSO0MYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbnelYKu4g7mOe4F4yWf1M0jGAbMB8GA1UdIwQY
MBaAFEeqh492tQlHy9feygSsgy4oe1FNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWIt
Mzk5MmM1NGUxODdiLzEvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9jMWFiMjYtMjhiMC00NjM3LWI1MWItMzk5MmM1NGUxODdi
LzEvUjZxSGozYTFDVWZMMTk3S0JLeURMaWg3VVUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIcAJTYD
f4In357XzQ7OkHr3R1RLCECf1/f2E/SF2qyaGTL+jc7n1UtffvdTbEIGTfkWJg5M
G5x99rGS4DRxarqxI1Kv/gIxwp6TX9DbfgXnyYHzkqIY6fcQsYV+lzMT1ZhcBLco
v5kvQXPIM6kbTppPjlaemOLH/oxCFFgVZJ/psMyVJ6a5EYd95MKx6AgdkP+Et7JF
ddVPT6L4Dpu2f2ygqXybnPImt4lUs5GoUbX2xe5skVlP3b1jtpCadDmr6myZvQOg
TG8mNEENN2jtsxdbRAKTaqsQRNGZxUYkc6SqEi25on8laotyd8/G7PGdt+Ncpdvp
sD6TH0IKr/feFQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:02:42 2026 by rpki-client