Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
File:                     SAGluBYVjweoyorLN-l-LyCwaRE.mft (raw, json)
Hash identifier:          gjohGuPSYfUMJ9oUQmzQChb1ZpdBjf0lbsCMf/RpTo8=
Subject key identifier:   20:4C:2D:AA:30:B7:3F:AF:A9:18:B0:FF:34:4F:EB:D9:36:27:A4:0A
Authority key identifier: 48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11
Certificate issuer:       /CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
Certificate serial:       019F9090DE88D9F26AA01A9DDE547F87FF67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
Manifest number:          17C5
Signing time:             Thu 23 Jul 2026 20:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:40 +0000
Files and hashes:         1: 32houEZJjYMHYgPuRqIg-2gVrRU.roa (hash: SgYOhNo4HZLgeATCDQYMmqSzEM1MXHyJPN6hUBC7MIM=)
                          2: JnkLx50ImRIwe6DLwjoBPmLJiIM.roa (hash: ZgcI3W3bS8GffqjlQ449bvcUFmbTNqw4WdF2nIUN8ao=)
                          3: SAGluBYVjweoyorLN-l-LyCwaRE.crl (hash: 6MhCWMggcXp2tO5IHuaH0qQ+8aaCwwFkON8pZ7Ro+tw=)
                          4: TSB5mTZZzRTTPnt6-Y8o-3CQEPA.roa (hash: PsDTk/dMLVROLGkVcO0KwNjR8rb+3K2JtemVORHSo8Y=)
                          5: Vzeyp2a_2ybj2YU-0i2OoZlnwnI.roa (hash: OMd6zbL5MprZ3M6eB+ZY4S4Gxx6gPSlVJAESUBQW+L4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:de:88:d9:f2:6a:a0:1a:9d:de:54:7f:87:ff:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4801a5b816158f07a8ca8acb37e97e2f20b06911
        Validity
            Not Before: Jul 23 20:00:40 2026 GMT
            Not After : Jul 24 20:00:40 2026 GMT
        Subject: CN=204c2daa30b73fafa918b0ff344febd93627a40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e0:11:73:cf:3a:db:f8:49:4f:81:47:a6:63:
                    02:45:aa:aa:a1:94:f1:1e:2e:b9:27:59:05:fc:9d:
                    7a:1c:f9:7b:69:d4:cf:2b:78:fb:45:08:34:2c:36:
                    fc:87:8e:ac:22:b8:e3:bb:87:83:1e:d1:fb:98:08:
                    fb:ee:5c:a3:b8:ba:77:d1:a6:75:b2:09:f1:52:db:
                    f5:3d:75:2e:c6:65:d0:89:34:a9:8d:2d:3a:18:fc:
                    f2:d9:a3:a1:24:93:09:29:e8:31:4d:37:9d:c0:88:
                    d3:e5:f5:fe:95:28:51:14:57:08:cc:7c:5a:5b:40:
                    2a:ee:84:78:de:87:ef:8b:6f:36:a3:b5:1e:6b:99:
                    f3:75:b3:b2:19:36:2d:56:fb:a0:d3:72:fc:5f:c3:
                    d0:b5:6d:48:02:28:b4:c2:67:9f:c8:57:bc:42:e3:
                    e3:66:6f:3f:67:88:cb:9e:80:29:3a:b1:f5:2f:7e:
                    f1:67:ba:fa:49:f5:bf:02:e7:d9:03:0f:74:96:ac:
                    83:29:cd:cd:09:b1:46:85:f0:73:30:c7:7e:e0:e7:
                    63:c5:8e:1d:a3:b1:d5:60:00:f0:05:95:01:77:dc:
                    02:18:56:11:b6:20:e1:2b:3e:4f:9b:c9:7b:ac:4d:
                    a9:2f:08:3f:0e:40:1c:bb:31:ff:30:da:9f:de:d1:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4C:2D:AA:30:B7:3F:AF:A9:18:B0:FF:34:4F:EB:D9:36:27:A4:0A
            X509v3 Authority Key Identifier:
                keyid:48:01:A5:B8:16:15:8F:07:A8:CA:8A:CB:37:E9:7E:2F:20:B0:69:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAGluBYVjweoyorLN-l-LyCwaRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/7090a9-feed-4ea1-8459-ee810b83adcd/1/SAGluBYVjweoyorLN-l-LyCwaRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:36:08:5b:4b:21:b3:7d:ae:e9:db:7c:93:04:15:8f:7c:d1:
         24:7b:de:82:61:f2:b6:cd:f6:85:8e:e8:f3:4b:9f:71:13:19:
         57:ae:d7:8c:5d:77:d8:65:68:37:fc:fa:8c:33:dd:8b:da:7b:
         a0:36:88:6d:47:64:0d:df:72:11:5b:ce:2e:28:2f:de:41:8b:
         50:3b:21:df:24:93:33:57:d3:d9:cb:14:08:6d:69:68:e4:66:
         c1:83:2e:33:b5:7a:33:69:62:49:77:8b:c1:8e:06:84:19:c2:
         12:ec:82:44:17:09:ef:8a:8a:a3:e4:ee:d8:a2:ee:1e:72:05:
         ce:3d:e0:f2:fb:3b:8e:20:cb:af:bd:28:8b:f7:e7:ad:81:83:
         e9:cc:49:b0:fc:7e:68:4b:34:e2:01:ee:26:95:97:1d:6f:b3:
         3f:5f:00:8a:e6:ba:83:7d:aa:96:11:97:31:fb:10:3e:41:82:
         f9:16:ce:22:9f:82:ff:e3:b3:20:95:5c:97:a8:4d:af:04:d5:
         0e:18:78:f4:04:28:cb:ee:8d:82:41:16:70:ca:2e:35:6b:77:
         1f:dc:8a:35:60:3f:a5:0c:5f:f8:15:fb:ed:b4:c0:c2:42:fa:
         dd:f3:75:14:56:8e:bb:b0:db:02:90:47:ac:6e:d1:d3:56:aa:
         65:c1:ca:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkN6I2fJqoBqd3lR/h/9nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDFhNWI4MTYxNThmMDdhOGNhOGFjYjM3ZTk3ZTJmMjBi
MDY5MTEwHhcNMjYwNzIzMjAwMDQwWhcNMjYwNzI0MjAwMDQwWjAzMTEwLwYDVQQD
EygyMDRjMmRhYTMwYjczZmFmYTkxOGIwZmYzNDRmZWJkOTM2MjdhNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+ARc8862/hJT4FHpmMCRaqqoZTx
Hi65J1kF/J16HPl7adTPK3j7RQg0LDb8h46sIrjju4eDHtH7mAj77lyjuLp30aZ1
sgnxUtv1PXUuxmXQiTSpjS06GPzy2aOhJJMJKegxTTedwIjT5fX+lShRFFcIzHxa
W0Aq7oR43ofvi282o7Uea5nzdbOyGTYtVvug03L8X8PQtW1IAii0wmefyFe8QuPj
Zm8/Z4jLnoApOrH1L37xZ7r6SfW/AufZAw90lqyDKc3NCbFGhfBzMMd+4OdjxY4d
o7HVYADwBZUBd9wCGFYRtiDhKz5Pm8l7rE2pLwg/DkAcuzH/MNqf3tGvsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCBMLaowtz+vqRiw/zRP69k2J6QKMB8GA1UdIwQY
MBaAFEgBpbgWFY8HqMqKyzfpfi8gsGkRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTkt
ZWU4MTBiODNhZGNkLzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS83MDkwYTktZmVlZC00ZWExLTg0NTktZWU4MTBiODNhZGNk
LzEvU0FHbHVCWVZqd2VveW9yTE4tbC1MeUN3YVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtTYIW0sh
s32u6dt8kwQVj3zRJHvegmHyts32hY7o80ufcRMZV67XjF132GVoN/z6jDPdi9p7
oDaIbUdkDd9yEVvOLigv3kGLUDsh3ySTM1fT2csUCG1paORmwYMuM7V6M2liSXeL
wY4GhBnCEuyCRBcJ74qKo+Tu2KLuHnIFzj3g8vs7jiDLr70oi/fnrYGD6cxJsPx+
aEs04gHuJpWXHW+zP18Aiua6g32qlhGXMfsQPkGC+RbOIp+C/+OzIJVcl6hNrwTV
Dhh49AQoy+6NgkEWcMouNWt3H9yKNWA/pQxf+BX77bTAwkL63fN1FFaOu7DbApBH
rG7R01aqZcHK2g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:41:16 2026 by rpki-client