Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
File:                     kebTJCJXspZbYnj_jBfhb_PwiyE.mft (raw, json)
Hash identifier:          TMfvNmnh0sBIbbB4Ekhx+Ec6vC79WC7M0EfCV3F5suY=
Subject key identifier:   4A:7B:03:13:2D:57:6F:EB:85:3B:BA:1F:6D:FB:E4:21:E3:E5:68:53
Authority key identifier: 91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21
Certificate issuer:       /CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
Certificate serial:       019F927F768B685BD794027F80BE85CBD529
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 05:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:54 +0000
Files and hashes:         1: iJabTTtAtZd2-Bt3JGr6szkGsok.roa (hash: 0sW3IKzf/8J/9kZJ3JO4MPvHO33GYi073LMRFSBG6BU=)
                          2: kebTJCJXspZbYnj_jBfhb_PwiyE.crl (hash: RTdirArvy66ejryqsEUQRsvsEYkdMbMEwP9SBKPY3Cs=)
                          3: xbuO7BsG7LbkSSQWawkvzIhK7y0.roa (hash: rlJz6+DJBLMlRi3myws4jEcOw9pVWqZGLHBQLp+0Ork=)
                          4: y3sbhhs4VAa9_leAXdVqA3jNjH8.roa (hash: Y15UbgY+4x80GYEq/q2RiWXokuPdkLl/xPzz6tjdo0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:76:8b:68:5b:d7:94:02:7f:80:be:85:cb:d5:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91e6d3242257b2965b6278ff8c17e16ff3f08b21
        Validity
            Not Before: Jul 24 05:00:54 2026 GMT
            Not After : Jul 25 05:00:54 2026 GMT
        Subject: CN=4a7b03132d576feb853bba1f6dfbe421e3e56853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f0:55:bd:69:50:97:84:ef:09:95:6e:a3:a0:
                    71:4a:a9:aa:95:d8:0f:f0:2b:09:93:ad:5a:a6:72:
                    19:61:1d:18:2f:a7:e2:11:7e:b8:6c:ef:9e:7a:ef:
                    05:ac:d5:c6:d1:02:cf:bb:7d:2b:ca:02:96:6d:77:
                    a1:74:a3:ac:a7:2e:1b:08:64:ce:20:07:dd:3d:19:
                    ea:05:59:36:e1:05:12:24:36:79:ce:17:ac:f9:c7:
                    36:a1:9e:78:71:d6:e3:b6:ee:6a:b4:7c:f0:ec:55:
                    a0:a6:04:5c:e9:1e:2b:14:34:39:24:0d:dc:58:44:
                    c8:f4:da:9c:3a:35:25:48:33:66:54:f5:47:d1:89:
                    ec:40:bf:8c:54:1c:cf:27:53:1f:47:35:1a:50:b2:
                    17:f0:75:69:52:62:68:6d:de:54:7f:6d:41:91:94:
                    f0:a4:f3:0d:5a:68:0d:45:1f:37:38:f1:04:e6:c8:
                    fd:10:33:8f:9f:e2:2c:74:9e:a3:bf:e3:21:7c:62:
                    3a:b5:56:ca:60:59:78:2a:65:32:dd:ef:13:51:7e:
                    57:88:43:0d:64:1f:81:4f:22:f5:d4:05:72:41:47:
                    ea:0b:fc:98:94:e5:a2:92:7f:a1:e5:d8:e2:68:d9:
                    d0:48:20:57:63:37:2e:51:39:45:7e:44:62:da:fe:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7B:03:13:2D:57:6F:EB:85:3B:BA:1F:6D:FB:E4:21:E3:E5:68:53
            X509v3 Authority Key Identifier:
                keyid:91:E6:D3:24:22:57:B2:96:5B:62:78:FF:8C:17:E1:6F:F3:F0:8B:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kebTJCJXspZbYnj_jBfhb_PwiyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/0c0f61-b69c-4657-9867-7e74a6a98ecd/1/kebTJCJXspZbYnj_jBfhb_PwiyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c9:fe:63:3d:c6:50:43:5e:71:3a:b8:91:72:8b:e0:91:6d:
         c4:e0:d9:e1:a4:b2:bd:a2:81:b5:e2:da:2e:15:8b:5b:9c:1a:
         86:38:1e:2d:d3:11:9f:f7:78:33:09:0b:69:0e:ae:19:fc:dc:
         be:b1:92:b9:9f:f2:33:db:4c:85:fe:4c:5b:09:8c:ad:ac:be:
         8d:d1:83:f8:cd:44:b1:08:53:75:3b:e6:4e:bd:49:d6:c1:eb:
         30:7f:0a:b8:21:3c:6c:c1:d7:51:d2:4f:12:06:64:ee:d3:54:
         66:2e:fb:5c:2e:1e:58:ea:79:ea:44:2a:f4:f9:16:b8:f2:63:
         a7:bf:32:2c:1b:2f:91:bd:fa:22:cb:9b:a0:f1:e6:e1:0f:66:
         ac:fe:0f:91:87:70:79:29:a6:0a:04:3d:cc:bc:42:b4:26:5c:
         24:39:fb:bc:98:a4:bc:b6:c0:ba:8f:8d:c6:7c:9d:6b:db:76:
         5e:1a:f2:59:34:5d:20:96:95:91:a8:7b:91:d4:72:ee:82:87:
         83:5d:03:9a:91:a8:39:25:1a:1f:ff:7e:54:a4:5c:71:92:95:
         60:be:d3:32:69:08:28:b0:b1:85:ef:58:26:d3:87:60:29:87:
         7a:52:b9:7a:a5:4a:3a:55:ff:ba:a5:f5:c9:01:92:91:3f:96:
         23:86:65:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf3aLaFvXlAJ/gL6Fy9UpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZTZkMzI0MjI1N2IyOTY1YjYyNzhmZjhjMTdlMTZmZjNm
MDhiMjEwHhcNMjYwNzI0MDUwMDU0WhcNMjYwNzI1MDUwMDU0WjAzMTEwLwYDVQQD
Eyg0YTdiMDMxMzJkNTc2ZmViODUzYmJhMWY2ZGZiZTQyMWUzZTU2ODUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPBVvWlQl4TvCZVuo6BxSqmqldgP
8CsJk61apnIZYR0YL6fiEX64bO+eeu8FrNXG0QLPu30rygKWbXehdKOspy4bCGTO
IAfdPRnqBVk24QUSJDZ5zhes+cc2oZ54cdbjtu5qtHzw7FWgpgRc6R4rFDQ5JA3c
WETI9NqcOjUlSDNmVPVH0YnsQL+MVBzPJ1MfRzUaULIX8HVpUmJobd5Uf21BkZTw
pPMNWmgNRR83OPEE5sj9EDOPn+IsdJ6jv+MhfGI6tVbKYFl4KmUy3e8TUX5XiEMN
ZB+BTyL11AVyQUfqC/yYlOWikn+h5djiaNnQSCBXYzcuUTlFfkRi2v5BfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEp7AxMtV2/rhTu6H2375CHj5WhTMB8GA1UdIwQY
MBaAFJHm0yQiV7KWW2J4/4wX4W/z8IshMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4Njct
N2U3NGE2YTk4ZWNkLzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8wYzBmNjEtYjY5Yy00NjU3LTk4NjctN2U3NGE2YTk4ZWNk
LzEva2ViVEpDSlhzcFpiWW5qX2pCZmhiX1B3aXlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo8n+Yz3G
UENecTq4kXKL4JFtxODZ4aSyvaKBteLaLhWLW5wahjgeLdMRn/d4MwkLaQ6uGfzc
vrGSuZ/yM9tMhf5MWwmMray+jdGD+M1EsQhTdTvmTr1J1sHrMH8KuCE8bMHXUdJP
EgZk7tNUZi77XC4eWOp56kQq9PkWuPJjp78yLBsvkb36IsuboPHm4Q9mrP4PkYdw
eSmmCgQ9zLxCtCZcJDn7vJikvLbAuo+Nxnyda9t2XhryWTRdIJaVkah7kdRy7oKH
g10DmpGoOSUaH/9+VKRccZKVYL7TMmkIKLCxhe9YJtOHYCmHelK5eqVKOlX/uqX1
yQGSkT+WI4ZlLw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:39 2026 by rpki-client