Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
File:                     _0j7nPF97Oat2wju_ZvuhCweK2A.mft (raw, json)
Hash identifier:          pWnBYJKtCYGMvJOvPSHvVJkQVSGsk0iZTGVNEV4suXk=
Subject key identifier:   1D:38:D1:80:D7:22:65:5F:A9:DF:53:0C:B1:E4:77:11:14:39:BD:0A
Authority key identifier: FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60
Certificate issuer:       /CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
Certificate serial:       019F943773BF989B9D124128389F4BB9AAC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 13:01:29 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:29 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:29 +0000
Files and hashes:         1: 4XcJfnMEQwRMn36H0whqZmqgRz0.roa (hash: 3cAlArq6y9UICoHc8IZifo9HP9trBfeMANvUPBi0r6k=)
                          2: _0j7nPF97Oat2wju_ZvuhCweK2A.crl (hash: tjz5xB+42NJKYH7+NOnpVclq84TvQKAG69el86cPUEo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:73:bf:98:9b:9d:12:41:28:38:9f:4b:b9:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff48fb9cf17dece6addb08eefd9bee842c1e2b60
        Validity
            Not Before: Jul 24 13:01:29 2026 GMT
            Not After : Jul 25 13:01:29 2026 GMT
        Subject: CN=1d38d180d722655fa9df530cb1e477111439bd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:25:70:b2:97:d2:c1:a7:d2:d3:50:1b:aa:4d:
                    bd:b6:45:74:e8:ce:6e:73:f6:ec:92:af:d0:e1:7d:
                    46:b3:c3:eb:73:e9:cb:b7:90:da:81:4e:9a:7b:11:
                    6e:8b:3f:5a:fd:db:f1:f3:7e:5d:0c:66:e5:d1:9c:
                    c5:8f:7c:71:42:c2:4d:a0:31:87:37:50:9b:b6:76:
                    e6:3a:a7:4f:52:30:80:2e:38:b3:ee:67:a6:a1:dd:
                    28:fb:ea:e1:17:2f:ba:b6:6d:f5:90:85:e6:67:4b:
                    2c:db:df:aa:bc:b5:c5:25:7b:10:6f:a6:37:65:65:
                    5a:32:2b:4a:aa:9b:60:42:f8:e1:e4:ad:88:56:b8:
                    dd:ad:6c:a5:b5:b7:af:82:80:88:77:12:8c:ee:a7:
                    f7:93:43:dc:ca:da:e5:c8:06:db:24:4d:d1:92:66:
                    be:b1:1e:ca:c4:18:da:2d:7a:f8:de:79:87:f0:bd:
                    21:aa:01:a7:da:da:04:7b:bf:87:61:dd:26:64:ef:
                    e3:82:8a:49:0a:7a:50:8e:f2:2c:c2:1d:be:78:54:
                    e8:24:30:71:b6:64:d8:08:d3:96:0d:a9:00:01:fa:
                    37:bc:3f:16:33:3c:69:b2:9e:11:26:6c:f3:ad:5d:
                    16:e8:95:33:47:0c:af:30:5e:49:77:4b:fe:f0:cb:
                    e7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:38:D1:80:D7:22:65:5F:A9:DF:53:0C:B1:E4:77:11:14:39:BD:0A
            X509v3 Authority Key Identifier:
                keyid:FF:48:FB:9C:F1:7D:EC:E6:AD:DB:08:EE:FD:9B:EE:84:2C:1E:2B:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0j7nPF97Oat2wju_ZvuhCweK2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/c1b3c8-0693-49c4-8132-905407eb0f53/1/_0j7nPF97Oat2wju_ZvuhCweK2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:59:38:80:dc:64:af:73:23:05:30:eb:4d:b7:be:de:c6:e4:
         cc:0a:a7:fb:66:12:8e:a4:d8:96:7b:27:96:11:76:1f:bf:c6:
         91:7f:b5:b3:84:01:ec:2e:7f:23:9c:1f:ac:49:92:70:23:91:
         f5:30:aa:ad:4e:ae:7e:26:6b:39:bf:bd:a7:32:93:b6:c1:6e:
         60:7e:21:db:3d:a2:ed:70:df:67:ff:a1:e8:5d:ec:5e:0b:8d:
         2c:7d:9d:88:50:ee:e2:84:34:c6:74:2d:13:49:e4:57:e7:49:
         46:b9:53:e2:9f:44:4f:d4:94:76:01:57:55:29:6d:3f:36:f1:
         3b:d1:15:b6:62:9e:cb:d8:94:37:85:31:44:78:c2:be:55:6c:
         c0:6e:75:a4:cb:ea:c1:cf:de:17:bd:b0:69:d2:2e:a5:69:c1:
         8b:e9:f2:89:8b:26:80:b2:ae:0c:4f:7d:71:96:00:1d:2e:06:
         0e:4c:76:0f:5b:8c:a6:71:fc:25:00:9c:a4:82:9f:85:9f:56:
         19:8d:15:d6:b7:26:05:81:d0:c5:d6:bf:25:fe:52:44:1e:f4:
         5a:38:ee:9d:fe:3f:a0:ab:7e:49:1a:c8:47:6e:2c:bd:6a:7d:
         92:3f:5f:19:fc:03:f8:c1:64:e3:11:52:2c:47:45:78:c3:8c:
         1a:e4:ce:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN3O/mJudEkEoOJ9LuarAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmNDhmYjljZjE3ZGVjZTZhZGRiMDhlZWZkOWJlZTg0MmMx
ZTJiNjAwHhcNMjYwNzI0MTMwMTI5WhcNMjYwNzI1MTMwMTI5WjAzMTEwLwYDVQQD
EygxZDM4ZDE4MGQ3MjI2NTVmYTlkZjUzMGNiMWU0NzcxMTE0MzliZDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yVwspfSwafS01Abqk29tkV06M5u
c/bskq/Q4X1Gs8Prc+nLt5DagU6aexFuiz9a/dvx835dDGbl0ZzFj3xxQsJNoDGH
N1CbtnbmOqdPUjCALjiz7memod0o++rhFy+6tm31kIXmZ0ss29+qvLXFJXsQb6Y3
ZWVaMitKqptgQvjh5K2IVrjdrWyltbevgoCIdxKM7qf3k0PcytrlyAbbJE3Rkma+
sR7KxBjaLXr43nmH8L0hqgGn2toEe7+HYd0mZO/jgopJCnpQjvIswh2+eFToJDBx
tmTYCNOWDakAAfo3vD8WMzxpsp4RJmzzrV0W6JUzRwyvMF5Jd0v+8MvngQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB040YDXImVfqd9TDLHkdxEUOb0KMB8GA1UdIwQY
MBaAFP9I+5zxfezmrdsI7v2b7oQsHitgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzIt
OTA1NDA3ZWIwZjUzLzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS9jMWIzYzgtMDY5My00OWM0LTgxMzItOTA1NDA3ZWIwZjUz
LzEvXzBqN25QRjk3T2F0MndqdV9adnVoQ3dlSzJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAilk4gNxk
r3MjBTDrTbe+3sbkzAqn+2YSjqTYlnsnlhF2H7/GkX+1s4QB7C5/I5wfrEmScCOR
9TCqrU6ufiZrOb+9pzKTtsFuYH4h2z2i7XDfZ/+h6F3sXguNLH2diFDu4oQ0xnQt
E0nkV+dJRrlT4p9ET9SUdgFXVSltPzbxO9EVtmKey9iUN4UxRHjCvlVswG51pMvq
wc/eF72wadIupWnBi+nyiYsmgLKuDE99cZYAHS4GDkx2D1uMpnH8JQCcpIKfhZ9W
GY0V1rcmBYHQxda/Jf5SRB70Wjjunf4/oKt+SRrIR24svWp9kj9fGfwD+MFk4xFS
LEdFeMOMGuTOzg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:45 2026 by rpki-client