Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File:                     84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier:          tQ1f89x+hKngIq+1YzKYmv+BDRxoFHk7ZTkgbqtOCIk=
Subject key identifier:   B0:49:23:32:54:9D:71:0A:70:6A:FC:32:5F:59:48:C5:1C:98:4A:0D
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer:       /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial:       019F8FB5450C77BC8CA51718B6FEBD6E3669
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number:          19D7
Signing time:             Thu 23 Jul 2026 16:00:49 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:49 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:49 +0000
Files and hashes:         1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: UuJBSeC9N3JbpxWIkFyi7grHjAEbG7OoGlWtXpf4/7E=)
                          2: A3Wm_w660o-WOKx14Qzsk48w80w.roa (hash: bbx1tQ0RBrPD7hgRhmK+PhPzre/duloLQugMlYybsho=)
                          3: R3vUElIMqfT3vzJXMUzIubVzmLQ.roa (hash: 44Gpc3/VsnWSrTFrLhn2IhmQD8M15ksHH0oPjm/pzxE=)
                          4: U1oh_8Ho8r1k2j-nGFoU_RDlNoE.roa (hash: NZ8sSZ9siHhWGPZhK1C3U7mz9zhYVNPsOY9uQbWP0to=)
                          5: Wi9gkeR1iKqKbqZI-0MAYDsf4BQ.roa (hash: fLvaMM59aDROgiWjnfSZl5l0LhCb2/kteh3fgXY7l5M=)
                          6: baXaAX1rxYa_2y57T1wari4SNRQ.roa (hash: Zn5x85hGWjwOTzCti/LCEZHhyAwdPWfVjbdllVnVtH0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:45:0c:77:bc:8c:a5:17:18:b6:fe:bd:6e:36:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
        Validity
            Not Before: Jul 23 16:00:49 2026 GMT
            Not After : Jul 24 16:00:49 2026 GMT
        Subject: CN=b0492332549d710a706afc325f5948c51c984a0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:19:4d:fe:70:89:f4:76:65:fe:61:cf:2b:10:
                    d6:ed:f7:f6:9e:29:bb:38:c8:1e:ae:e3:6b:9d:36:
                    04:04:94:84:1a:c8:1f:9e:85:7a:47:17:2a:0a:23:
                    51:4e:32:f4:80:fe:1d:4c:9c:68:76:3f:a3:c3:09:
                    f9:66:44:62:55:f1:f8:45:89:c4:70:ae:db:a1:9f:
                    45:dd:4c:8b:a5:2c:b1:4e:c9:1b:f9:20:50:20:f0:
                    89:5d:15:08:fb:15:8d:cc:bd:b6:6a:21:32:ca:15:
                    43:11:ec:87:c4:9a:94:36:68:3b:75:df:31:20:83:
                    3e:1c:41:5f:1c:9f:76:3b:c2:ea:e7:d9:97:eb:fa:
                    e3:77:e5:6b:a8:54:2f:81:a3:cc:c5:3d:fb:ca:4b:
                    d6:ee:fc:fb:be:8f:a0:77:d1:94:64:f3:b1:d1:31:
                    62:c7:94:54:f9:7d:e4:97:1e:1f:9a:45:88:24:13:
                    17:ad:7c:8d:45:68:0b:51:b8:35:a0:f4:7a:f5:69:
                    5e:33:62:e2:76:ab:62:b9:ed:dc:f3:4e:21:3d:3a:
                    e0:02:6a:bd:61:cb:19:6e:80:84:5a:97:b2:03:cb:
                    8a:63:ba:9d:4a:9a:dd:e0:a9:8e:8a:4e:a8:38:84:
                    b3:c7:b6:a5:28:9e:a7:48:2d:1b:b8:03:04:e4:3a:
                    75:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:49:23:32:54:9D:71:0A:70:6A:FC:32:5F:59:48:C5:1C:98:4A:0D
            X509v3 Authority Key Identifier:
                keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:23:50:cc:95:fa:f5:21:83:60:a1:1d:31:63:9d:1e:15:90:
         eb:e8:1d:82:16:4a:45:51:d6:90:b6:04:37:62:ab:48:60:10:
         08:64:85:21:4e:e0:a9:cc:b1:e1:b2:53:0b:8d:d1:c8:da:17:
         0b:d3:28:43:77:87:da:26:a9:92:b2:85:14:ce:4b:48:12:ec:
         1d:e5:3a:d0:86:d7:05:13:fd:1b:fe:c2:1d:29:30:1a:6c:8d:
         97:07:d0:f5:08:bd:83:9c:c4:eb:dd:6c:c9:4c:a3:17:2f:5d:
         0f:17:0f:02:eb:73:bb:fc:cb:01:a3:83:e4:f2:fa:97:2c:7c:
         da:cd:50:b9:fe:6a:08:53:ad:3c:73:f7:29:6b:06:37:bb:57:
         64:15:46:d2:b9:b8:1c:b7:ae:b9:a7:3f:58:2f:5e:2e:bb:14:
         52:c0:e9:e2:3d:9a:e9:f5:d3:19:0e:58:3e:31:10:62:0a:69:
         2e:57:13:02:d8:40:f9:be:fd:0b:26:d7:a3:dd:98:83:60:3d:
         2c:f0:3d:05:73:7d:9e:10:4b:7e:76:9e:91:d1:a0:6d:35:fd:
         96:ee:23:b7:b3:94:7b:d5:84:ab:51:3c:02:c1:59:c9:93:43:
         47:ce:49:5f:60:a5:f9:34:a0:44:31:44:f3:71:d4:37:15:4c:
         66:be:3a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtUUMd7yMpRcYtv69bjZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODJjYjEzZGRlMTI2NThjZGFjMThjYWNhZTkxZmJiZjVj
NTgwOTAwHhcNMjYwNzIzMTYwMDQ5WhcNMjYwNzI0MTYwMDQ5WjAzMTEwLwYDVQQD
EyhiMDQ5MjMzMjU0OWQ3MTBhNzA2YWZjMzI1ZjU5NDhjNTFjOTg0YTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRlN/nCJ9HZl/mHPKxDW7ff2nim7
OMgeruNrnTYEBJSEGsgfnoV6RxcqCiNRTjL0gP4dTJxodj+jwwn5ZkRiVfH4RYnE
cK7boZ9F3UyLpSyxTskb+SBQIPCJXRUI+xWNzL22aiEyyhVDEeyHxJqUNmg7dd8x
IIM+HEFfHJ92O8Lq59mX6/rjd+VrqFQvgaPMxT37ykvW7vz7vo+gd9GUZPOx0TFi
x5RU+X3klx4fmkWIJBMXrXyNRWgLUbg1oPR69WleM2Lidqtiue3c804hPTrgAmq9
YcsZboCEWpeyA8uKY7qdSprd4KmOik6oOISzx7alKJ6nSC0buAME5Dp1mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBJIzJUnXEKcGr8Ml9ZSMUcmEoNMB8GA1UdIwQY
MBaAFPOCyxPd4SZYzawYysrpH7v1xYCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDIt
OTcwNDI4OTFlYjk5LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lN2RhOWEtOTMyYS00NjdiLWIyZDItOTcwNDI4OTFlYjk5
LzEvODRMTEU5M2hKbGpOckJqS3l1a2Z1X1hGZ0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmyNQzJX6
9SGDYKEdMWOdHhWQ6+gdghZKRVHWkLYEN2KrSGAQCGSFIU7gqcyx4bJTC43RyNoX
C9MoQ3eH2iapkrKFFM5LSBLsHeU60IbXBRP9G/7CHSkwGmyNlwfQ9Qi9g5zE691s
yUyjFy9dDxcPAutzu/zLAaOD5PL6lyx82s1Quf5qCFOtPHP3KWsGN7tXZBVG0rm4
HLeuuac/WC9eLrsUUsDp4j2a6fXTGQ5YPjEQYgppLlcTAthA+b79CybXo92Yg2A9
LPA9BXN9nhBLfnaekdGgbTX9lu4jt7OUe9WEq1E8AsFZyZNDR85JX2Cl+TSgRDFE
83HUNxVMZr46Tw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:56:30 2026 by rpki-client