Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
File:                     zMp2Pz2ylloeTrC_dsHLhouq5G0.mft (raw, json)
Hash identifier:          H76NqtwzWNNrZurN0Oiw3xkv6D7J/7RTNiVoWxsUuqE=
Subject key identifier:   19:6F:19:EA:3A:3D:E3:35:24:FC:DF:09:50:B1:31:19:76:D1:13:96
Authority key identifier: CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D
Certificate issuer:       /CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
Certificate serial:       019F90FE98B5F3ED3F5BBED11B587E638B0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
Manifest number:          19CD
Signing time:             Thu 23 Jul 2026 22:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:32 +0000
Files and hashes:         1: 2Zg_-dpcqfmzuDStyGzldA-iv1s.roa (hash: rO88dw5SEIUE2fPQKc2On6kad3jKSdwxG+JqeHFebNY=)
                          2: zMp2Pz2ylloeTrC_dsHLhouq5G0.crl (hash: 0NYuv/t8QoYOVFaKhrlAixOjznElu/exoTt4b9WUgK0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:98:b5:f3:ed:3f:5b:be:d1:1b:58:7e:63:8b:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccca763f3db2965a1e4eb0bf76c1cb868baae46d
        Validity
            Not Before: Jul 23 22:00:32 2026 GMT
            Not After : Jul 24 22:00:32 2026 GMT
        Subject: CN=196f19ea3a3de33524fcdf0950b1311976d11396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:23:6b:99:c3:06:28:df:9e:9b:98:17:3e:0d:
                    86:c8:14:ce:3c:a8:fe:5f:37:85:d7:43:e1:22:b4:
                    72:57:82:06:ae:9c:ea:72:16:1e:0d:a9:74:2e:16:
                    30:06:56:84:ab:40:38:f2:9a:65:4d:87:32:85:27:
                    56:07:06:0a:26:f9:b7:c0:cf:d1:66:bd:e4:c1:cb:
                    05:c4:7b:4d:9e:7a:38:6c:8d:44:03:f4:1a:40:51:
                    ef:e0:b8:67:fa:de:07:99:a4:c5:c3:c4:6a:d5:c1:
                    fa:b5:af:5d:29:cf:62:07:33:b1:f0:0c:5d:bb:18:
                    d7:77:83:bb:79:95:70:76:c5:9e:66:fb:6c:ab:49:
                    b5:57:e1:d2:bb:e3:95:0a:ce:1f:a6:57:41:50:1f:
                    a7:19:ee:c5:ac:8a:a8:0a:45:47:d4:b5:17:49:f0:
                    1e:f7:e9:45:ea:b3:18:7f:7c:71:1e:30:9a:a6:4c:
                    52:4b:18:8c:6f:f2:3e:98:d5:1c:99:f0:a0:53:30:
                    43:18:6f:15:a7:ab:04:d8:24:21:24:92:e5:58:65:
                    b7:fc:67:f3:14:9c:50:c3:b8:2a:0f:1f:2e:0b:42:
                    4b:9a:72:6e:ba:fb:94:02:e6:7b:61:4e:39:55:9c:
                    a4:9c:80:d6:3f:14:2e:04:87:4a:a1:b6:b6:f2:11:
                    63:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6F:19:EA:3A:3D:E3:35:24:FC:DF:09:50:B1:31:19:76:D1:13:96
            X509v3 Authority Key Identifier:
                keyid:CC:CA:76:3F:3D:B2:96:5A:1E:4E:B0:BF:76:C1:CB:86:8B:AA:E4:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zMp2Pz2ylloeTrC_dsHLhouq5G0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/1c090c-74db-4531-96f7-fac63c03c25a/1/zMp2Pz2ylloeTrC_dsHLhouq5G0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:c6:5c:e3:c2:25:cb:a8:70:fe:1e:9e:34:f5:7b:57:39:6f:
         29:04:d5:5c:4e:2c:c8:ff:e0:63:54:4b:1d:3e:5d:73:46:1b:
         95:7c:8b:29:f2:27:e8:2e:be:f2:6d:cb:45:53:f4:b1:a1:76:
         ac:39:d2:47:c2:e9:b5:0b:0b:3f:6a:7f:a8:8b:1f:9c:7a:e0:
         85:e6:2d:df:b5:21:72:17:c1:f9:78:17:1f:20:c5:69:92:51:
         64:8f:a3:71:93:2d:b0:16:22:f1:d6:34:ab:c9:ba:4d:90:ab:
         76:4e:e0:1f:8c:11:02:a0:54:1d:37:e3:e9:dd:10:61:65:02:
         45:10:dd:c8:f7:4d:b5:21:c6:e9:c0:c7:76:66:22:c8:b1:99:
         48:94:76:a1:16:9a:32:b0:c4:36:81:8c:99:d2:80:4c:5e:9c:
         8c:df:74:39:66:64:ce:25:98:ba:36:c1:7f:21:aa:6d:5f:25:
         62:a5:af:7b:08:0d:cf:52:98:40:61:8d:5e:ec:1d:c7:48:bc:
         6d:8a:4e:1d:25:b8:b5:c4:e0:6e:58:41:4e:7c:87:70:31:f8:
         a2:fb:9b:ca:76:b8:d0:e9:7f:14:54:60:c7:60:cc:f1:23:11:
         77:cf:bf:9d:4e:3f:c9:2e:14:d7:99:f3:32:d9:0d:0f:ce:b9:
         4a:d8:1c:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/pi18+0/W77RG1h+Y4sOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjY2E3NjNmM2RiMjk2NWExZTRlYjBiZjc2YzFjYjg2OGJh
YWU0NmQwHhcNMjYwNzIzMjIwMDMyWhcNMjYwNzI0MjIwMDMyWjAzMTEwLwYDVQQD
EygxOTZmMTllYTNhM2RlMzM1MjRmY2RmMDk1MGIxMzExOTc2ZDExMzk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliNrmcMGKN+em5gXPg2GyBTOPKj+
XzeF10PhIrRyV4IGrpzqchYeDal0LhYwBlaEq0A48pplTYcyhSdWBwYKJvm3wM/R
Zr3kwcsFxHtNnno4bI1EA/QaQFHv4Lhn+t4HmaTFw8Rq1cH6ta9dKc9iBzOx8Axd
uxjXd4O7eZVwdsWeZvtsq0m1V+HSu+OVCs4fpldBUB+nGe7FrIqoCkVH1LUXSfAe
9+lF6rMYf3xxHjCapkxSSxiMb/I+mNUcmfCgUzBDGG8Vp6sE2CQhJJLlWGW3/Gfz
FJxQw7gqDx8uC0JLmnJuuvuUAuZ7YU45VZyknIDWPxQuBIdKoba28hFjvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlvGeo6PeM1JPzfCVCxMRl20ROWMB8GA1UdIwQY
MBaAFMzKdj89spZaHk6wv3bBy4aLquRtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2Zjct
ZmFjNjNjMDNjMjVhLzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8xYzA5MGMtNzRkYi00NTMxLTk2ZjctZmFjNjNjMDNjMjVh
LzEvek1wMlB6MnlsbG9lVHJDX2RzSExob3VxNUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcZc48Il
y6hw/h6eNPV7VzlvKQTVXE4syP/gY1RLHT5dc0YblXyLKfIn6C6+8m3LRVP0saF2
rDnSR8LptQsLP2p/qIsfnHrgheYt37UhchfB+XgXHyDFaZJRZI+jcZMtsBYi8dY0
q8m6TZCrdk7gH4wRAqBUHTfj6d0QYWUCRRDdyPdNtSHG6cDHdmYiyLGZSJR2oRaa
MrDENoGMmdKATF6cjN90OWZkziWYujbBfyGqbV8lYqWvewgNz1KYQGGNXuwdx0i8
bYpOHSW4tcTgblhBTnyHcDH4ovubyna40Ol/FFRgx2DM8SMRd8+/nU4/yS4U15nz
MtkND865StgcOA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:01:21 2026 by rpki-client