Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
File:                     1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft (raw, json)
Hash identifier:          ow4yF/DLfUZ63DGRUI9fRuHD+UdP4n6TMsv5CPMLXCg=
Subject key identifier:   F8:EC:E1:A4:DD:74:91:FF:DD:C6:24:05:CE:75:EB:AC:F9:B6:E6:CC
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Certificate issuer:       /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial:       019F8F474DAB0AC51C0ADCF6394613016C7A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
Manifest number:          19C9
Signing time:             Thu 23 Jul 2026 14:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:42 +0000
Files and hashes:         1: 1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl (hash: rYRQu6w63Hbdvzsq47Ryt/l+Wy2I/J2F5P4aOgZ0xDQ=)
                          2: IJjjXp-NnXkuXMqifqVCpQIFmVM.roa (hash: FAQDxmr60QdwQ78woSv2S5TsR/jufKqQ3EBTR4pkvxw=)
                          3: QJ9BmvbVTtS7A8Ks_kSD4dd3-hw.roa (hash: YikTmuc2uFJ3g6A35GBcQPgqdQmjHo//OB0ZeNSHvUk=)
                          4: x7kr8s7NqU4B3f01PUE6TDdXkmw.roa (hash: D0Z4Gt2OJKdDOlJ+V6cYS0q2kZL9EpP1fRqlwgKU8FE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:4d:ab:0a:c5:1c:0a:dc:f6:39:46:13:01:6c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
        Validity
            Not Before: Jul 23 14:00:42 2026 GMT
            Not After : Jul 24 14:00:42 2026 GMT
        Subject: CN=f8ece1a4dd7491ffddc62405ce75ebacf9b6e6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:60:8b:50:94:07:4e:a3:11:5e:aa:3f:12:da:
                    4b:c0:e5:10:9c:51:5c:39:88:5a:13:ea:98:16:2a:
                    d1:f9:1d:78:5d:0f:4f:aa:20:c8:b4:a1:a3:3b:9c:
                    d8:b8:eb:f0:02:c9:e8:38:5a:44:99:83:00:31:fe:
                    b6:b1:4f:b5:1d:73:0e:5a:c9:a4:0c:24:7f:07:4f:
                    7c:a9:45:74:93:3c:87:de:0d:9f:de:cc:7e:55:7b:
                    ce:31:31:a1:b7:d5:eb:4b:6d:16:ca:42:fb:a3:d8:
                    9e:45:97:84:de:0b:fb:73:0c:08:83:a1:eb:03:57:
                    7b:e9:65:f7:5c:e0:86:ab:73:7d:1d:8e:98:24:9c:
                    9a:20:f3:db:00:57:72:df:a8:fe:88:98:f8:2e:f9:
                    53:68:ac:8c:13:7a:c9:23:4a:32:1a:e0:f2:bb:4b:
                    09:85:8f:6c:8d:76:f1:3e:2e:71:f5:10:42:8e:78:
                    c3:b1:e7:fd:26:73:45:fb:bf:c3:20:cc:3a:37:1f:
                    be:26:b1:34:7a:1e:42:dc:6d:dc:e2:71:90:4c:ce:
                    84:4d:8d:54:79:71:99:13:2e:30:f2:44:81:d1:e3:
                    75:a2:34:22:4c:fb:7a:01:50:a1:e9:a3:34:0f:cc:
                    77:67:6c:f0:e4:1a:fa:36:11:dc:ee:86:24:f4:04:
                    11:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:EC:E1:A4:DD:74:91:FF:DD:C6:24:05:CE:75:EB:AC:F9:B6:E6:CC
            X509v3 Authority Key Identifier:
                keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:4f:6f:b1:8c:6e:3c:91:01:a6:66:7c:30:3d:92:9f:21:4b:
         1e:a5:5a:dd:43:3d:45:81:2d:e1:c7:38:2f:fc:ce:23:76:92:
         0e:a8:26:8a:b8:7c:f2:c3:d7:c9:52:30:cb:f9:27:56:60:74:
         c2:28:a5:19:4e:db:5e:cb:e7:33:1d:71:fb:d0:3b:0f:36:c7:
         b6:4d:8c:09:46:7c:91:a1:c2:5f:44:08:bd:eb:58:96:89:03:
         1b:04:11:f9:7c:38:2c:a4:19:b0:4c:a5:0f:a5:be:e4:bc:45:
         cc:a3:20:0e:fb:c3:5e:36:ac:64:1a:db:b4:ab:e7:eb:73:47:
         4c:d0:6e:f6:6d:bd:76:6b:8f:11:c5:ea:93:c7:c6:ba:5f:17:
         14:83:df:af:77:f7:99:a0:44:a1:07:b0:e3:2e:7f:53:04:d2:
         58:64:15:c5:68:0c:7d:c0:a0:90:ba:7e:a9:22:8b:8b:07:c6:
         8a:2f:44:1a:89:c7:59:73:3f:be:cb:ac:38:30:ae:e1:ba:b6:
         3a:f2:81:a1:c8:5c:df:15:da:c5:df:7a:20:8f:42:93:06:63:
         98:e8:d9:d8:6b:71:cb:38:22:f8:80:f1:5d:e0:2f:08:03:70:
         54:85:c1:7c:16:6d:05:e1:35:23:24:63:fd:8a:3b:22:ac:f9:
         a5:64:7d:36
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+PR02rCsUcCtz2OUYTAWx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMWU5YjRlOGRjNDliZTNhYmE1OTc0MjVhZWZkOGIzYTUz
NjJmZmMwHhcNMjYwNzIzMTQwMDQyWhcNMjYwNzI0MTQwMDQyWjAzMTEwLwYDVQQD
EyhmOGVjZTFhNGRkNzQ5MWZmZGRjNjI0MDVjZTc1ZWJhY2Y5YjZlNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WCLUJQHTqMRXqo/EtpLwOUQnFFc
OYhaE+qYFirR+R14XQ9PqiDItKGjO5zYuOvwAsnoOFpEmYMAMf62sU+1HXMOWsmk
DCR/B098qUV0kzyH3g2f3sx+VXvOMTGht9XrS20WykL7o9ieRZeE3gv7cwwIg6Hr
A1d76WX3XOCGq3N9HY6YJJyaIPPbAFdy36j+iJj4LvlTaKyME3rJI0oyGuDyu0sJ
hY9sjXbxPi5x9RBCjnjDsef9JnNF+7/DIMw6Nx++JrE0eh5C3G3c4nGQTM6ETY1U
eXGZEy4w8kSB0eN1ojQiTPt6AVCh6aM0D8x3Z2zw5Br6NhHc7oYk9AQRjQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFPjs4aTddJH/3cYkBc5166z5tubMMB8GA1UdIwQY
MBaAFPoem06NxJvjq6WXQlrv2LOlNi/8MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oNmJUbzNFbS1PcnBaZENXdV9ZczZVMkxfdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzUvNDcwN2I0LTAwMzItNGFjNy1iY2M3
LTQwYzFhNzI3MDJlZi8xLzEtaDZiVG8zRW0tT3JwWmRDV3VfWXM2VTJMX3cubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M1LzQ3MDdiNC0wMDMyLTRhYzctYmNjNy00MGMxYTcyNzAy
ZWYvMS8xLWg2YlRvM0VtLU9ycFpkQ1d1X1lzNlUyTF93LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnk9v
sYxuPJEBpmZ8MD2SnyFLHqVa3UM9RYEt4cc4L/zOI3aSDqgmirh88sPXyVIwy/kn
VmB0wiilGU7bXsvnMx1x+9A7DzbHtk2MCUZ8kaHCX0QIvetYlokDGwQR+Xw4LKQZ
sEylD6W+5LxFzKMgDvvDXjasZBrbtKvn63NHTNBu9m29dmuPEcXqk8fGul8XFIPf
r3f3maBEoQew4y5/UwTSWGQVxWgMfcCgkLp+qSKLiwfGii9EGonHWXM/vsusODCu
4bq2OvKBochc3xXaxd96II9CkwZjmOjZ2Gtxyzgi+IDxXeAvCANwVIXBfBZtBeE1
IyRj/Yo7Iqz5pWR9Ng==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:17:48 2026 by rpki-client