Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
File:                     94hH4ENTVu5e8IbBIEhAigQZG3g.mft (raw, json)
Hash identifier:          9jA1qHu9O48RRZj0oUY9bCA6rlCTQePmxUFo8u27Pzc=
Subject key identifier:   B2:D3:5C:50:3B:EC:60:EB:E5:B7:45:B8:44:DF:AA:6B:13:F0:A5:FB
Authority key identifier: F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78
Certificate issuer:       /CN=f78847e0435356ee5ef086c12048408a04191b78
Certificate serial:       019F8F7F3F4F9EED213DDC3E8EBC60E34140
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
Manifest number:          19C3
Signing time:             Thu 23 Jul 2026 15:01:48 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:48 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:48 +0000
Files and hashes:         1: 94hH4ENTVu5e8IbBIEhAigQZG3g.crl (hash: 0QuykmzmvldX7SkGsp+hgPZAEAvE7b8YTlxLyLK4GVU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:3f:4f:9e:ed:21:3d:dc:3e:8e:bc:60:e3:41:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f78847e0435356ee5ef086c12048408a04191b78
        Validity
            Not Before: Jul 23 15:01:48 2026 GMT
            Not After : Jul 24 15:01:48 2026 GMT
        Subject: CN=b2d35c503bec60ebe5b745b844dfaa6b13f0a5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:be:c2:4d:99:c3:f1:c0:5e:bb:ba:fb:8e:28:
                    32:16:c1:8b:88:f6:2a:51:e6:f4:eb:e2:c0:9a:a1:
                    9a:42:bc:51:4b:c4:99:66:60:8f:27:82:3b:fd:fa:
                    dc:48:37:ca:42:08:d4:0b:9c:ac:23:b7:94:d8:4e:
                    84:a7:9a:4d:17:c1:14:3d:53:e1:f6:42:17:fa:5c:
                    c2:b0:4e:d8:7d:16:b5:80:7f:8a:8a:23:a7:f8:8c:
                    60:c6:21:c0:8d:0f:c5:6e:01:76:32:79:9e:c8:63:
                    2b:d4:f3:c3:e2:71:c4:60:ec:ea:d7:37:fb:86:9a:
                    fd:09:6f:46:4f:fb:b3:93:08:0a:31:09:08:d1:a3:
                    1b:3e:51:ad:87:f8:cb:c4:0b:92:52:69:c9:86:b1:
                    e7:9e:4d:c9:ba:14:5f:2a:b2:ff:ee:3d:75:e0:5c:
                    99:e8:3d:68:2e:a2:1d:07:6e:7e:b1:02:74:a7:20:
                    10:60:dc:2f:8f:da:85:34:5b:a4:62:f3:24:50:0a:
                    0a:ee:76:03:65:e7:67:78:88:e0:0c:a6:97:95:33:
                    5a:5d:72:96:48:51:99:8a:1b:ed:ad:a3:27:35:01:
                    dc:3e:7a:59:88:fd:c8:86:ff:cc:82:0a:39:ac:3c:
                    e0:65:d5:62:6a:8c:1b:bc:09:8e:6d:ff:10:e0:be:
                    0c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D3:5C:50:3B:EC:60:EB:E5:B7:45:B8:44:DF:AA:6B:13:F0:A5:FB
            X509v3 Authority Key Identifier:
                keyid:F7:88:47:E0:43:53:56:EE:5E:F0:86:C1:20:48:40:8A:04:19:1B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94hH4ENTVu5e8IbBIEhAigQZG3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/3a6b4b-757b-4d01-a3d7-dbb4ca54d294/1/94hH4ENTVu5e8IbBIEhAigQZG3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:c5:2c:93:81:4a:fc:42:4a:7c:d3:dc:63:a7:48:65:47:db:
         98:fa:0a:14:f6:5a:c6:f3:1d:6e:a0:a7:03:11:de:84:2e:2f:
         1e:8e:57:8d:86:ee:2e:5a:70:c7:02:21:e0:96:3f:f5:2b:b2:
         1b:55:22:aa:6d:87:a1:e0:af:f9:05:51:9d:d7:09:72:8b:8e:
         8e:5e:e8:62:c7:9e:ee:d3:da:df:f6:00:6f:a4:bf:07:3e:bb:
         73:d4:26:b2:74:a7:71:ed:cb:f8:eb:4f:53:0d:ce:33:cd:e9:
         77:28:0a:6b:94:48:ee:7c:7b:b4:bb:92:06:62:93:c9:73:f0:
         fa:1d:f9:ae:f6:b3:ea:4e:73:be:4b:ed:40:c1:af:75:d9:3d:
         19:10:09:87:0e:0b:99:0c:5a:f9:76:8e:7e:22:c7:b3:f7:be:
         57:30:dc:d5:7a:74:18:49:d0:a1:ee:c2:a1:d2:a7:a8:e5:20:
         70:bb:ff:30:03:1f:02:49:67:19:84:e3:ff:d4:1f:a0:a7:6e:
         f8:7f:f9:cd:b5:f5:0a:13:5f:71:bc:f6:84:2c:6e:8f:0d:53:
         e3:2c:73:73:d4:6b:fe:f2:4b:5d:2b:fe:74:94:27:ac:db:b0:
         b7:68:a3:8e:f4:3c:60:84:a4:90:ce:50:34:82:6e:5b:8e:33:
         a5:39:48:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pfz9Pnu0hPdw+jrxg40FAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODg0N2UwNDM1MzU2ZWU1ZWYwODZjMTIwNDg0MDhhMDQx
OTFiNzgwHhcNMjYwNzIzMTUwMTQ4WhcNMjYwNzI0MTUwMTQ4WjAzMTEwLwYDVQQD
EyhiMmQzNWM1MDNiZWM2MGViZTViNzQ1Yjg0NGRmYWE2YjEzZjBhNWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlr7CTZnD8cBeu7r7jigyFsGLiPYq
Ueb06+LAmqGaQrxRS8SZZmCPJ4I7/frcSDfKQgjUC5ysI7eU2E6Ep5pNF8EUPVPh
9kIX+lzCsE7YfRa1gH+KiiOn+IxgxiHAjQ/FbgF2MnmeyGMr1PPD4nHEYOzq1zf7
hpr9CW9GT/uzkwgKMQkI0aMbPlGth/jLxAuSUmnJhrHnnk3JuhRfKrL/7j114FyZ
6D1oLqIdB25+sQJ0pyAQYNwvj9qFNFukYvMkUAoK7nYDZedneIjgDKaXlTNaXXKW
SFGZihvtraMnNQHcPnpZiP3Ihv/Mggo5rDzgZdViaowbvAmObf8Q4L4M+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLTXFA77GDr5bdFuETfqmsT8KX7MB8GA1UdIwQY
MBaAFPeIR+BDU1buXvCGwSBIQIoEGRt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRoSDRFTlRWdTVlOEliQklFaEFpZ1FaRzNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS8zYTZiNGItNzU3Yi00ZDAxLWEzZDct
ZGJiNGNhNTRkMjk0LzEvOTRoSDRFTlRWdTVlOEliQklFaEFpZ1FaRzNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS8zYTZiNGItNzU3Yi00ZDAxLWEzZDctZGJiNGNhNTRkMjk0
LzEvOTRoSDRFTlRWdTVlOEliQklFaEFpZ1FaRzNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxsUsk4FK
/EJKfNPcY6dIZUfbmPoKFPZaxvMdbqCnAxHehC4vHo5XjYbuLlpwxwIh4JY/9Suy
G1Uiqm2HoeCv+QVRndcJcouOjl7oYsee7tPa3/YAb6S/Bz67c9QmsnSnce3L+OtP
Uw3OM83pdygKa5RI7nx7tLuSBmKTyXPw+h35rvaz6k5zvkvtQMGvddk9GRAJhw4L
mQxa+XaOfiLHs/e+VzDc1Xp0GEnQoe7CodKnqOUgcLv/MAMfAklnGYTj/9QfoKdu
+H/5zbX1ChNfcbz2hCxujw1T4yxzc9Rr/vJLXSv+dJQnrNuwt2ijjvQ8YISkkM5Q
NIJuW44zpTlIfg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:52:42 2026 by rpki-client