Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
File:                     S1KaTSL67yMTXW7_iRImZiPEklU.mft (raw, json)
Hash identifier:          ImHkFvH3B4vISU1Y9AnPJonebSbb7n8EDCBGlKJmibk=
Subject key identifier:   7D:E0:6D:0F:C0:20:6C:FB:54:8F:41:57:31:52:7C:62:8E:24:15:34
Authority key identifier: 4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55
Certificate issuer:       /CN=4b529a4d22faef23135d6eff8912266623c49255
Certificate serial:       019F921192138969B0CC397581312FBCD953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
Manifest number:          19E5
Signing time:             Fri 24 Jul 2026 03:00:52 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:52 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:52 +0000
Files and hashes:         1: 8JTBQJyqUxIFa2P7t0W6NdfJ7CI.roa (hash: bvR7uwT6CerdByDmx1xzty2bHjJMPuqJsJHdeopKM9Y=)
                          2: IAcgHGi2lFpmozwldAdI6otCCf8.roa (hash: BMvZpTPd4wPptVWAuFWagP2MsiisY343W0Dlxwe5jk8=)
                          3: PGdzQPbVNWOAAR-X1BVXtgxofwg.roa (hash: dnLVHCkUAzZBzW5KJgWgdjrJ3f9Bmjq6lfV0HEQ9YaI=)
                          4: S1KaTSL67yMTXW7_iRImZiPEklU.crl (hash: M+FQ0nA89shHjH2J0XhnZqX+NlDL+hg2v7Up0rkm8pw=)
                          5: UeKejWBuRMBTzBVkphHiwU6F1G4.roa (hash: 4Va/WDHUaUbqMZBtGC/uemvvWN5D2KRgvotniu/r8z8=)
                          6: bspFglFUNNfB3BfctmrtidkBJJ0.roa (hash: b4qzed65X33LBM+fRSUuJ6eNd3msfTHJCKt5GOuVSMY=)
                          7: yf5DE453VSZNaMBDFecfcs8_ti8.roa (hash: /6VfJrCwSdAcWd7VeCBpZye97Dzq0Ew18Tz6xEOZHdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:92:13:89:69:b0:cc:39:75:81:31:2f:bc:d9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b529a4d22faef23135d6eff8912266623c49255
        Validity
            Not Before: Jul 24 03:00:52 2026 GMT
            Not After : Jul 25 03:00:52 2026 GMT
        Subject: CN=7de06d0fc0206cfb548f415731527c628e241534
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:1f:b3:3f:9b:72:f1:e0:53:19:89:3f:b1:0f:
                    db:b8:28:60:53:c3:f2:be:72:01:59:af:23:da:8d:
                    6b:7c:30:52:d4:90:64:a6:a4:f8:9a:ad:14:cb:25:
                    d1:cd:58:39:e4:0f:9b:cc:ba:18:6d:66:ba:74:12:
                    83:76:fc:60:d8:55:ef:cb:9d:20:27:1d:82:ae:d9:
                    89:83:61:72:be:af:01:77:92:2b:61:ec:2c:f3:c0:
                    84:ad:7a:f9:a2:b6:bd:1a:5d:20:83:eb:61:72:81:
                    aa:f7:62:b9:db:ae:8f:8f:5c:2e:44:dc:2f:78:60:
                    17:d4:48:18:c9:e8:2d:fb:63:e6:42:d7:d5:85:7b:
                    06:f3:e0:55:74:a3:0c:c9:0f:0e:00:89:5a:79:0a:
                    b1:f1:e3:35:25:56:8d:b8:c9:5d:bb:de:f4:d9:6d:
                    f2:38:95:2f:fe:24:dc:f9:e0:25:ee:31:f6:05:a4:
                    05:34:d8:d6:99:22:bd:32:c6:9f:f1:b3:03:1c:13:
                    1e:83:9b:08:84:a8:0a:0e:9c:55:bc:c3:ad:bd:df:
                    77:c9:f1:3f:18:0e:03:91:43:b9:42:17:d3:a1:ce:
                    ff:e3:79:d3:c7:99:b1:c0:18:45:a5:d8:49:a3:c4:
                    5f:d1:c1:62:e4:71:58:b5:19:c6:5f:57:1a:d8:3e:
                    f5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E0:6D:0F:C0:20:6C:FB:54:8F:41:57:31:52:7C:62:8E:24:15:34
            X509v3 Authority Key Identifier:
                keyid:4B:52:9A:4D:22:FA:EF:23:13:5D:6E:FF:89:12:26:66:23:C4:92:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S1KaTSL67yMTXW7_iRImZiPEklU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/1d9b05-ec61-4c33-a097-36ae76ee983e/1/S1KaTSL67yMTXW7_iRImZiPEklU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:e4:b8:ef:f3:75:cb:2d:83:41:3e:5b:12:84:9b:48:2d:
         eb:00:7a:0d:5d:e5:2e:a8:70:76:27:37:05:21:71:54:75:65:
         c3:9b:fe:a7:04:20:95:fb:f8:e5:1e:35:38:cb:8d:4a:77:1b:
         a4:e2:59:07:59:ba:99:dd:78:3f:0e:8b:d6:d8:40:42:90:80:
         4c:1d:32:d0:1c:9f:03:32:6c:18:7f:7f:73:1c:4a:0e:73:22:
         d7:d0:f3:3a:d6:16:5e:52:79:b5:c5:64:f8:52:cb:06:62:a5:
         df:96:2b:68:2d:40:ea:5c:69:61:fe:3e:d9:cb:3e:4a:83:67:
         f0:be:f9:79:7f:db:25:39:bf:8f:b3:2d:0a:94:8d:b3:70:b7:
         d7:1f:74:7e:08:84:c9:5e:47:06:ce:a9:45:02:10:5b:cc:74:
         29:49:1d:d6:1c:1d:f5:a3:94:c4:33:ae:fc:69:03:d4:3b:54:
         53:3d:5b:1a:53:b5:e2:4a:b7:aa:e7:ce:fc:45:f9:92:f4:e0:
         22:7b:05:25:49:79:b7:b5:ab:21:d9:37:09:3d:9a:19:7a:8e:
         83:6b:1d:ed:16:05:31:aa:bb:0a:83:28:0a:36:89:f1:42:db:
         7c:24:2f:34:44:f5:8b:08:df:6a:ab:56:ac:e4:87:9e:53:30:
         72:da:8a:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEZITiWmwzDl1gTEvvNlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNTI5YTRkMjJmYWVmMjMxMzVkNmVmZjg5MTIyNjY2MjNj
NDkyNTUwHhcNMjYwNzI0MDMwMDUyWhcNMjYwNzI1MDMwMDUyWjAzMTEwLwYDVQQD
Eyg3ZGUwNmQwZmMwMjA2Y2ZiNTQ4ZjQxNTczMTUyN2M2MjhlMjQxNTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhR+zP5ty8eBTGYk/sQ/buChgU8Py
vnIBWa8j2o1rfDBS1JBkpqT4mq0UyyXRzVg55A+bzLoYbWa6dBKDdvxg2FXvy50g
Jx2CrtmJg2Fyvq8Bd5IrYews88CErXr5ora9Gl0gg+thcoGq92K5266Pj1wuRNwv
eGAX1EgYyegt+2PmQtfVhXsG8+BVdKMMyQ8OAIlaeQqx8eM1JVaNuMldu9702W3y
OJUv/iTc+eAl7jH2BaQFNNjWmSK9Msaf8bMDHBMeg5sIhKgKDpxVvMOtvd93yfE/
GA4DkUO5QhfToc7/43nTx5mxwBhFpdhJo8Rf0cFi5HFYtRnGX1ca2D71ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3gbQ/AIGz7VI9BVzFSfGKOJBU0MB8GA1UdIwQY
MBaAFEtSmk0i+u8jE11u/4kSJmYjxJJVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTct
MzZhZTc2ZWU5ODNlLzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8xZDliMDUtZWM2MS00YzMzLWEwOTctMzZhZTc2ZWU5ODNl
LzEvUzFLYVRTTDY3eU1UWFc3X2lSSW1aaVBFa2xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7jkuO/z
dcstg0E+WxKEm0gt6wB6DV3lLqhwdic3BSFxVHVlw5v+pwQglfv45R41OMuNSncb
pOJZB1m6md14Pw6L1thAQpCATB0y0ByfAzJsGH9/cxxKDnMi19DzOtYWXlJ5tcVk
+FLLBmKl35YraC1A6lxpYf4+2cs+SoNn8L75eX/bJTm/j7MtCpSNs3C31x90fgiE
yV5HBs6pRQIQW8x0KUkd1hwd9aOUxDOu/GkD1DtUUz1bGlO14kq3qufO/EX5kvTg
InsFJUl5t7WrIdk3CT2aGXqOg2sd7RYFMaq7CoMoCjaJ8ULbfCQvNET1iwjfaqtW
rOSHnlMwctqKVA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:01:50 2026 by rpki-client