Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
File:                     BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft (raw, json)
Hash identifier:          HWBep0Yy4RGzk1Z/6JMGRHryjVXYiwACHtWDn7Q99Mk=
Subject key identifier:   6A:B2:50:1D:D8:A3:72:6C:0E:05:D7:19:02:CB:83:79:B7:68:57:8C
Authority key identifier: 06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24
Certificate issuer:       /CN=0620eadb2e1562b4e2e4f480772c36887a777f24
Certificate serial:       019F916C9CFCDE83665E3E1B78054B2F941D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
Manifest number:          19DC
Signing time:             Fri 24 Jul 2026 00:00:42 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:42 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:42 +0000
Files and hashes:         1: BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl (hash: gmQBZeqDx1RPtR/VG2cw9BgkkrU2PNSru8GmE3tByQ4=)
                          2: _wXRGRg_6zlng_X2cu0Vdmyx740.roa (hash: qUv481U77SQNOCg85ZBm0jeo1hhfGdw3T12+hLvftSA=)
                          3: bj5wFXmeRPP2S1wVt1wMSe_BzEY.roa (hash: musfSfNeEvw07XmluOo2fmHJKdeOK5PAUZXeb2dFuaE=)
                          4: cigYLfuKfxY1dzhdPK0-Tor0nAw.roa (hash: Lf7RrTzPFxk/TGatTkwPWxsNBgC0IJVj7eeUQ31/4D8=)
                          5: gvw5yUDT8VkcGYmB4FemcY9F6Z0.roa (hash: qjzJbkJHWatioGBZd8+uDjCJfFJ0vYZMyqtFG/SE1vc=)
                          6: jkHAenTpuidnXByxveNkRSju7uY.roa (hash: cpn+ySzKd4iMnG4Jk2/pb+mw+Adqpv3Wll4fkTbcVt4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:9c:fc:de:83:66:5e:3e:1b:78:05:4b:2f:94:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0620eadb2e1562b4e2e4f480772c36887a777f24
        Validity
            Not Before: Jul 24 00:00:42 2026 GMT
            Not After : Jul 25 00:00:42 2026 GMT
        Subject: CN=6ab2501dd8a3726c0e05d71902cb8379b768578c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:d8:66:ac:5b:3f:3e:f9:78:8b:e0:1f:6d:1e:
                    01:1c:b6:72:02:90:f8:a1:ed:62:ff:6f:fb:ee:bf:
                    30:64:05:e5:4c:a3:77:b5:72:7d:4d:e4:33:f4:41:
                    79:aa:77:6e:b2:f5:20:96:75:9c:61:3a:70:4a:4f:
                    b8:c5:dd:98:40:24:3d:21:2d:f8:3e:15:55:20:26:
                    1a:26:31:80:84:7b:ed:3d:33:f9:9b:80:44:c7:e5:
                    33:6b:30:b6:88:f1:48:46:0e:b1:7f:80:2e:98:a3:
                    95:f2:f8:aa:cc:82:be:4e:b5:54:4c:c5:74:10:5b:
                    ff:91:e5:a1:48:60:a0:74:e5:8e:7c:78:f2:58:e0:
                    8d:89:fe:83:9c:5b:33:d5:1f:cf:54:81:53:f0:f6:
                    2f:1f:35:9f:27:5e:70:d3:e9:ff:3c:b8:31:74:8e:
                    ad:e8:01:3b:b7:db:0e:de:05:a4:0c:83:95:5b:69:
                    a3:63:d3:5c:32:e6:f8:d6:e0:47:dd:bd:0a:30:c0:
                    a7:54:17:08:7f:af:16:a5:5f:1f:8c:24:38:9d:c8:
                    56:28:0d:e6:a9:1f:ba:5f:d7:7c:4c:3d:05:25:da:
                    8c:3a:23:cb:e4:b0:11:f3:d6:e2:ec:7f:05:cd:6a:
                    fb:9e:c0:ce:89:ad:29:3b:8d:ba:d6:b3:93:23:3b:
                    fd:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B2:50:1D:D8:A3:72:6C:0E:05:D7:19:02:CB:83:79:B7:68:57:8C
            X509v3 Authority Key Identifier:
                keyid:06:20:EA:DB:2E:15:62:B4:E2:E4:F4:80:77:2C:36:88:7A:77:7F:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/cc8bfa-2b13-4674-a984-a5fdb570fe9a/1/BiDq2y4VYrTi5PSAdyw2iHp3fyQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:00:f6:ca:5f:94:8d:16:69:24:c5:af:06:26:ab:27:c9:f0:
         92:63:16:1c:b1:4c:50:a5:e2:ab:f1:ad:56:11:93:ca:c0:c7:
         d7:cd:00:62:0c:af:bc:66:d9:7f:db:21:4e:60:27:38:99:04:
         5a:f9:52:03:0c:e6:bd:4d:dd:b3:76:9c:08:c2:38:64:b8:0e:
         11:da:b2:57:b4:34:ce:0e:0b:10:c8:cc:ed:6d:22:76:27:14:
         80:e1:ce:90:17:07:3b:51:64:d6:65:78:0a:b3:11:fe:55:68:
         30:6f:e9:d6:73:e1:75:5e:54:32:2e:8d:0c:d5:d3:f9:51:95:
         d3:91:64:db:54:dc:f5:d2:76:6d:71:17:ae:fd:81:a8:ce:9f:
         c7:fe:ab:9e:89:79:28:c4:70:b1:6e:42:23:4c:81:45:b1:44:
         83:f8:21:7b:36:76:f9:b8:64:1a:8b:21:70:67:46:f1:23:aa:
         e9:5b:75:42:16:5e:00:0b:bb:22:f8:12:56:79:bd:a3:93:7a:
         b5:1a:3c:69:94:80:9c:a3:d1:43:62:47:41:38:52:28:43:a9:
         02:c0:9c:d2:7d:54:d9:bb:51:ae:18:97:13:69:c9:64:8e:f2:
         a3:ad:e1:a5:79:bd:7d:c5:25:de:62:b9:99:b7:9e:cd:44:0f:
         47:d4:1e:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbJz83oNmXj4beAVLL5QdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2MjBlYWRiMmUxNTYyYjRlMmU0ZjQ4MDc3MmMzNjg4N2E3
NzdmMjQwHhcNMjYwNzI0MDAwMDQyWhcNMjYwNzI1MDAwMDQyWjAzMTEwLwYDVQQD
Eyg2YWIyNTAxZGQ4YTM3MjZjMGUwNWQ3MTkwMmNiODM3OWI3Njg1NzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNhmrFs/Pvl4i+AfbR4BHLZyApD4
oe1i/2/77r8wZAXlTKN3tXJ9TeQz9EF5qndusvUglnWcYTpwSk+4xd2YQCQ9IS34
PhVVICYaJjGAhHvtPTP5m4BEx+UzazC2iPFIRg6xf4AumKOV8viqzIK+TrVUTMV0
EFv/keWhSGCgdOWOfHjyWOCNif6DnFsz1R/PVIFT8PYvHzWfJ15w0+n/PLgxdI6t
6AE7t9sO3gWkDIOVW2mjY9NcMub41uBH3b0KMMCnVBcIf68WpV8fjCQ4nchWKA3m
qR+6X9d8TD0FJdqMOiPL5LAR89bi7H8FzWr7nsDOia0pO4261rOTIzv91wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGqyUB3Yo3JsDgXXGQLLg3m3aFeMMB8GA1UdIwQY
MBaAFAYg6tsuFWK04uT0gHcsNoh6d38kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQt
YTVmZGI1NzBmZTlhLzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jYzhiZmEtMmIxMy00Njc0LWE5ODQtYTVmZGI1NzBmZTlh
LzEvQmlEcTJ5NFZZclRpNVBTQWR5dzJpSHAzZnlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAawD2yl+U
jRZpJMWvBiarJ8nwkmMWHLFMUKXiq/GtVhGTysDH180AYgyvvGbZf9shTmAnOJkE
WvlSAwzmvU3ds3acCMI4ZLgOEdqyV7Q0zg4LEMjM7W0idicUgOHOkBcHO1Fk1mV4
CrMR/lVoMG/p1nPhdV5UMi6NDNXT+VGV05Fk21Tc9dJ2bXEXrv2BqM6fx/6rnol5
KMRwsW5CI0yBRbFEg/ghezZ2+bhkGoshcGdG8SOq6Vt1QhZeAAu7IvgSVnm9o5N6
tRo8aZSAnKPRQ2JHQThSKEOpAsCc0n1U2btRrhiXE2nJZI7yo63hpXm9fcUl3mK5
mbeezUQPR9Qefw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:22 2026 by rpki-client