Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
File:                     v124EbXV0FvsN-6dCaTsUu7tGtU.mft (raw, json)
Hash identifier:          L1Ec9+rILWdjP1okILFW2rpJRhyDb13vg1M5C9Fa5tI=
Subject key identifier:   CC:29:81:F4:AF:2B:4C:0B:DE:5D:32:A1:51:CF:51:D2:6D:5A:67:F3
Authority key identifier: BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5
Certificate issuer:       /CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
Certificate serial:       019F90599313664FC163C0A70B30727605BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 19:00:17 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:17 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:17 +0000
Files and hashes:         1: KIh3iVyzYzBFwGCfMvIVwpDbwps.roa (hash: 0aqbny00NM5+aliDEhOtMTVMWp3rSs0L91g1Lzq7VNE=)
                          2: TFL4paU1haNnRInCWqOJo9sZT2Y.asa (hash: mHqD6U6ln2GlV4OWaVbyFcs+NJUkiBYoMa3GtoILhzg=)
                          3: cK35oW3CRoDVTabPCj-bao3z8NI.roa (hash: Ebd+i8ctjoE4+ZV/syWp95hkz3ZcP0gcjB71tiszUJs=)
                          4: ftWl42XlVR06kFIc2c0GqMJzHUE.roa (hash: nYy1i5V68Ehly7gVpP19Cgh2GN1U/c5mj8ykEj8Zqek=)
                          5: v124EbXV0FvsN-6dCaTsUu7tGtU.crl (hash: 32xjBuUjEZppHokkfy4CVKiueBDCmjXuatXYVIr6XFM=)
                          6: wAYSOlZXIwRTXJ1_sEHsvUg6_Hk.asa (hash: sD8ye+o6KlRiRfxK9grgMbdXDN9cGHkO49QpZZCQGaY=)
                          7: wsCCmspEM6WspzHVHs3VS2kVt5s.roa (hash: hed0UXeEzgYWiVtnJDozjUnK8u7srJbOFxteQGQPqbY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:93:13:66:4f:c1:63:c0:a7:0b:30:72:76:05:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf5db811b5d5d05bec37ee9d09a4ec52eeed1ad5
        Validity
            Not Before: Jul 23 19:00:17 2026 GMT
            Not After : Jul 24 19:00:17 2026 GMT
        Subject: CN=cc2981f4af2b4c0bde5d32a151cf51d26d5a67f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:90:98:be:52:64:bc:7f:3e:ba:b3:46:c6:
                    62:ba:1a:28:d2:09:e9:b7:2c:99:f5:3e:a4:e5:01:
                    b2:00:ad:6d:bc:b4:37:7f:61:87:1b:48:13:4c:95:
                    14:78:92:ec:a6:a0:5f:db:d1:54:0c:6e:e3:38:69:
                    2e:2a:b0:31:85:fe:ff:6f:d4:ad:0a:95:38:22:a3:
                    f3:87:e3:71:7d:f3:02:a9:6b:c6:36:c1:02:67:8b:
                    84:24:d8:f0:d8:32:29:e7:9a:ae:9f:88:45:7e:82:
                    2a:28:26:35:be:4b:85:41:83:6f:3f:e2:72:55:5b:
                    70:26:18:54:86:42:20:1d:a3:8b:e4:be:0b:73:8a:
                    6a:14:e7:92:1c:a4:61:b8:b0:d7:ab:fc:e7:b8:50:
                    18:90:d4:46:4a:2d:70:33:d4:af:7e:35:c9:6f:37:
                    2b:fe:bd:b3:72:7b:91:c6:9e:a1:2a:ad:f1:1e:1d:
                    59:9d:c1:61:a9:d7:34:0c:91:16:0a:bd:3f:81:35:
                    74:2a:a4:d3:6a:83:45:53:77:81:4a:8c:7e:6a:25:
                    a9:d6:aa:30:a1:6a:4a:06:d5:2f:07:e3:2e:58:eb:
                    49:bc:1c:97:44:36:41:c8:eb:56:85:04:57:01:64:
                    9f:d7:fb:46:bc:a9:88:4b:2c:f6:29:ff:d2:4f:c4:
                    39:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:29:81:F4:AF:2B:4C:0B:DE:5D:32:A1:51:CF:51:D2:6D:5A:67:F3
            X509v3 Authority Key Identifier:
                keyid:BF:5D:B8:11:B5:D5:D0:5B:EC:37:EE:9D:09:A4:EC:52:EE:ED:1A:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v124EbXV0FvsN-6dCaTsUu7tGtU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/30f5e0-a04f-4993-983c-715f09817341/1/v124EbXV0FvsN-6dCaTsUu7tGtU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:2e:6a:83:96:54:5d:15:55:38:6f:6c:dc:26:a3:8d:18:f2:
         c7:e8:83:13:90:dc:9e:83:ae:45:98:78:a1:18:8a:6a:02:0a:
         be:87:73:1b:b8:37:7d:bf:b8:0d:cf:bf:f4:f3:8a:70:8a:d2:
         85:49:b4:e1:50:d5:b4:3c:42:bd:34:78:e8:d5:5f:b8:40:a6:
         d9:d5:9f:b1:d6:be:a5:4d:e1:4a:c9:0b:45:4d:ca:e8:99:e2:
         3a:3a:9d:66:fd:f4:13:cc:f9:1c:49:0c:13:e6:7b:0e:45:5b:
         57:72:eb:a4:a6:b9:97:62:ae:e1:c6:fc:63:cb:22:7c:b9:be:
         bd:8e:52:e9:38:e0:1e:2a:a4:80:fe:e5:10:cd:11:f4:85:87:
         11:c3:9c:fd:79:d4:90:f4:27:ff:8b:d7:63:40:65:46:66:4b:
         2a:f7:7f:66:76:8a:d4:3f:7c:ad:4c:2c:7f:93:68:1b:20:ee:
         0e:3b:6d:93:4a:d2:93:70:45:71:99:1c:3d:23:e6:3c:02:c1:
         20:b2:90:e4:88:cb:10:26:fe:c1:c0:13:0e:7f:76:d3:b4:2b:
         31:57:56:be:b8:1c:11:6c:e1:2e:7d:a1:87:d7:14:af:54:3a:
         57:f3:6d:83:bc:1d:00:49:50:c1:01:ec:64:ac:6c:9f:90:26:
         15:d8:3a:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWZMTZk/BY8CnCzBydgW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWRiODExYjVkNWQwNWJlYzM3ZWU5ZDA5YTRlYzUyZWVl
ZDFhZDUwHhcNMjYwNzIzMTkwMDE3WhcNMjYwNzI0MTkwMDE3WjAzMTEwLwYDVQQD
EyhjYzI5ODFmNGFmMmI0YzBiZGU1ZDMyYTE1MWNmNTFkMjZkNWE2N2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnKQmL5SZLx/PrqzRsZiuhoo0gnp
tyyZ9T6k5QGyAK1tvLQ3f2GHG0gTTJUUeJLspqBf29FUDG7jOGkuKrAxhf7/b9St
CpU4IqPzh+NxffMCqWvGNsECZ4uEJNjw2DIp55qun4hFfoIqKCY1vkuFQYNvP+Jy
VVtwJhhUhkIgHaOL5L4Lc4pqFOeSHKRhuLDXq/znuFAYkNRGSi1wM9SvfjXJbzcr
/r2zcnuRxp6hKq3xHh1ZncFhqdc0DJEWCr0/gTV0KqTTaoNFU3eBSox+aiWp1qow
oWpKBtUvB+MuWOtJvByXRDZByOtWhQRXAWSf1/tGvKmISyz2Kf/ST8Q5CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMwpgfSvK0wL3l0yoVHPUdJtWmfzMB8GA1UdIwQY
MBaAFL9duBG11dBb7DfunQmk7FLu7RrVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2Mt
NzE1ZjA5ODE3MzQxLzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zMGY1ZTAtYTA0Zi00OTkzLTk4M2MtNzE1ZjA5ODE3MzQx
LzEvdjEyNEViWFYwRnZzTi02ZENhVHNVdTd0R3RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaC5qg5ZU
XRVVOG9s3CajjRjyx+iDE5DcnoOuRZh4oRiKagIKvodzG7g3fb+4Dc+/9POKcIrS
hUm04VDVtDxCvTR46NVfuECm2dWfsda+pU3hSskLRU3K6JniOjqdZv30E8z5HEkM
E+Z7DkVbV3LrpKa5l2Ku4cb8Y8sifLm+vY5S6TjgHiqkgP7lEM0R9IWHEcOc/XnU
kPQn/4vXY0BlRmZLKvd/ZnaK1D98rUwsf5NoGyDuDjttk0rSk3BFcZkcPSPmPALB
ILKQ5IjLECb+wcATDn9207QrMVdWvrgcEWzhLn2hh9cUr1Q6V/Ntg7wdAElQwQHs
ZKxsn5AmFdg6uw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:09:03 2026 by rpki-client