Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
File:                     dn62YZNtyV2j7MTKPq9YE4nA2FU.mft (raw, json)
Hash identifier:          JV6q4a+0osMUYFSsvAtWbEmGSA0iG5ay2cJOuRQeKpE=
Subject key identifier:   6F:B3:80:FB:94:03:C3:0D:B2:32:1C:89:BC:FF:BD:63:2D:92:83:3C
Authority key identifier: 76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55
Certificate issuer:       /CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
Certificate serial:       019F8FEBFD653C00AA63B71002F1CB967660
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 17:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:35 +0000
Files and hashes:         1: afJIfmFpNu3X_XQnH955OF5pA20.roa (hash: clXQX+IWESYXCRjS08HRXKg3UCGRxStO10aaboiTF8Y=)
                          2: dn62YZNtyV2j7MTKPq9YE4nA2FU.crl (hash: RJnCToK1zlOEJ5/dnRxks71ngw+o5/J3TIlhiZY4h3M=)
                          3: iuEbzqWMcJMEWcYi_VU5jTwMYq4.roa (hash: mnklv3f+xx2uue3nbyHfu65gufVE0wUia/UVTbAJrX4=)
                          4: stZCtmiLOSA_sYTyLesIwzuXoDk.roa (hash: WCDdO6ymRey5SOvMXoHMkslbV9l33cheMotNCIxCBuI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:fd:65:3c:00:aa:63:b7:10:02:f1:cb:96:76:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767eb661936dc95da3ecc4ca3eaf581389c0d855
        Validity
            Not Before: Jul 23 17:00:35 2026 GMT
            Not After : Jul 24 17:00:35 2026 GMT
        Subject: CN=6fb380fb9403c30db2321c89bcffbd632d92833c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:2b:49:30:2e:ee:cf:89:c3:7f:48:f0:35:e1:
                    09:d0:e5:98:e4:11:9a:fd:d0:b9:61:93:67:d7:41:
                    2d:88:7a:a8:53:77:3c:c1:9a:6f:7c:90:66:9f:84:
                    83:6c:93:be:38:5f:1e:7f:43:e9:b5:1f:0e:d7:1d:
                    7b:b4:0e:12:e6:18:fe:d2:dc:3e:4d:35:24:1e:4b:
                    67:77:9d:9b:d6:d6:2f:fe:89:d2:48:36:8c:4f:67:
                    4c:a8:82:ac:58:77:5b:02:74:c9:7e:f3:36:8d:ed:
                    bf:14:f3:c6:80:4a:f6:f7:b5:aa:0d:6e:16:3c:52:
                    20:2b:a9:e9:a3:ad:1d:08:be:12:e1:65:cc:94:e1:
                    a1:fd:e9:03:c5:cb:2f:a5:60:bf:6c:57:a1:95:11:
                    29:cc:12:40:c9:65:f8:9c:c9:31:33:ef:9b:82:ce:
                    65:85:d5:d7:63:30:60:4c:88:22:a9:61:f3:80:ed:
                    1b:09:f2:0d:e5:4e:c6:7d:83:a0:87:5c:f5:2d:be:
                    f6:26:11:c0:ab:8a:cc:1b:f9:23:6e:2a:82:d1:c8:
                    d5:9d:64:6c:cd:90:84:fb:ce:9d:54:82:4b:9a:3c:
                    a2:81:5b:8f:2b:55:9f:f2:8a:91:50:02:61:a7:d9:
                    d7:35:5c:c4:fa:92:c7:e1:6c:bd:83:2b:f0:77:a5:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B3:80:FB:94:03:C3:0D:B2:32:1C:89:BC:FF:BD:63:2D:92:83:3C
            X509v3 Authority Key Identifier:
                keyid:76:7E:B6:61:93:6D:C9:5D:A3:EC:C4:CA:3E:AF:58:13:89:C0:D8:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn62YZNtyV2j7MTKPq9YE4nA2FU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2a5a9c-bdf9-4ed0-ad33-f457544363ef/1/dn62YZNtyV2j7MTKPq9YE4nA2FU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:29:1a:cd:ee:66:aa:4d:1e:6f:ae:d1:e3:e4:63:1f:89:20:
         4d:fc:69:36:19:df:aa:3c:4a:d8:9d:c5:6c:7a:ac:b4:c8:28:
         7f:af:0d:7f:fc:9c:41:5b:db:c2:0e:5d:ec:3f:e7:3d:3e:bd:
         1c:2c:10:a6:9c:ff:25:35:2d:e6:20:d7:ae:47:af:68:39:bb:
         11:96:8b:66:7e:2d:03:95:dd:8f:85:98:bd:f7:18:d9:7f:69:
         e6:07:fe:a0:af:e9:06:3c:19:65:30:52:ec:d3:ff:a0:9e:d9:
         a9:bb:4e:4b:c1:d8:ef:ed:d2:4f:45:a5:55:e6:44:2c:9d:29:
         cd:0f:83:89:a8:c1:7f:51:11:d8:dc:3f:a9:26:94:9b:85:ac:
         d6:3b:23:88:a9:35:d6:86:21:49:32:09:f7:82:3e:22:35:c7:
         6b:2f:a9:d2:0e:e9:d7:23:df:98:13:33:37:e5:3c:06:77:5d:
         40:c4:f2:93:57:09:35:46:e5:6d:d2:60:a8:88:17:9a:7f:fe:
         3e:a4:93:1e:fe:21:ab:17:2e:75:27:a7:71:06:cd:53:a1:0c:
         53:fe:66:27:69:16:ab:b7:35:91:e6:f6:ce:c1:08:df:6a:54:
         fd:c5:c4:87:1d:59:84:de:f6:dd:58:ad:82:b2:ae:36:5f:2e:
         bd:ad:dc:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P6/1lPACqY7cQAvHLlnZgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2N2ViNjYxOTM2ZGM5NWRhM2VjYzRjYTNlYWY1ODEzODlj
MGQ4NTUwHhcNMjYwNzIzMTcwMDM1WhcNMjYwNzI0MTcwMDM1WjAzMTEwLwYDVQQD
Eyg2ZmIzODBmYjk0MDNjMzBkYjIzMjFjODliY2ZmYmQ2MzJkOTI4MzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqitJMC7uz4nDf0jwNeEJ0OWY5BGa
/dC5YZNn10EtiHqoU3c8wZpvfJBmn4SDbJO+OF8ef0PptR8O1x17tA4S5hj+0tw+
TTUkHktnd52b1tYv/onSSDaMT2dMqIKsWHdbAnTJfvM2je2/FPPGgEr297WqDW4W
PFIgK6npo60dCL4S4WXMlOGh/ekDxcsvpWC/bFehlREpzBJAyWX4nMkxM++bgs5l
hdXXYzBgTIgiqWHzgO0bCfIN5U7GfYOgh1z1Lb72JhHAq4rMG/kjbiqC0cjVnWRs
zZCE+86dVIJLmjyigVuPK1Wf8oqRUAJhp9nXNVzE+pLH4Wy9gyvwd6URjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+zgPuUA8MNsjIcibz/vWMtkoM8MB8GA1UdIwQY
MBaAFHZ+tmGTbcldo+zEyj6vWBOJwNhVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMt
ZjQ1NzU0NDM2M2VmLzEvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC8yYTVhOWMtYmRmOS00ZWQwLWFkMzMtZjQ1NzU0NDM2M2Vm
LzEvZG42MllaTnR5VjJqN01US1BxOVlFNG5BMkZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeikaze5m
qk0eb67R4+RjH4kgTfxpNhnfqjxK2J3FbHqstMgof68Nf/ycQVvbwg5d7D/nPT69
HCwQppz/JTUt5iDXrkevaDm7EZaLZn4tA5Xdj4WYvfcY2X9p5gf+oK/pBjwZZTBS
7NP/oJ7ZqbtOS8HY7+3ST0WlVeZELJ0pzQ+DiajBf1ER2Nw/qSaUm4Ws1jsjiKk1
1oYhSTIJ94I+IjXHay+p0g7p1yPfmBMzN+U8BnddQMTyk1cJNUblbdJgqIgXmn/+
PqSTHv4hqxcudSencQbNU6EMU/5mJ2kWq7c1keb2zsEI32pU/cXEhx1ZhN723Vit
grKuNl8uva3cEw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:30 2026 by rpki-client