Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File:                     TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier:          sr0OO5qUpvMOtky4r4jqGiPUG6si3J1YyT+yQLMKOBw=
Subject key identifier:   FC:8A:97:BB:3B:7D:FF:B7:51:57:E5:0E:DA:78:C8:94:FB:19:62:F2
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       019F90FF8227DEDA225204D181A0ABC932CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 22:01:31 +0000
Manifest this update:     Thu 23 Jul 2026 22:01:31 +0000
Manifest next update:     Fri 24 Jul 2026 22:01:31 +0000
Files and hashes:         1: EuzrvuKdTBEUT1iTSTu2oWpyl08.roa (hash: 6lfE37g+270FUBODA6XRsyANZt1xmAjhCCTH8Dga4fo=)
                          2: HKK9g6Hqt_cBY1AbSvefDUFZRlo.roa (hash: MqB9AcT2/OThR4+/4lhCs0wiEEPqRX8xFMsmjXA2ijw=)
                          3: L2kVxbfcMS2nv-PBLG1ThCSQCJM.roa (hash: vnnfABGEtbcmc5yS9HseTFPLNWl4SZGd7BuXLhUduKk=)
                          4: OBx05QEiDP1Vr5e_268J9tar1QE.roa (hash: TIpDQvAlekr1QcZvuTryLbf0wSjkmsau0xJ8uS3rJTc=)
                          5: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: YXcih6Ns27WBB4SZabyh+CH/f5uoemvDy2kjwXUz/cM=)
                          6: bq_R2KuxT4atP4GNyi-WGk7ZHgI.roa (hash: ukHJbM0cPkDakME1wOGsLKMQaAIR4oQCPsvSvUhBbpE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 22:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:ff:82:27:de:da:22:52:04:d1:81:a0:ab:c9:32:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Jul 23 22:01:31 2026 GMT
            Not After : Jul 24 22:01:31 2026 GMT
        Subject: CN=fc8a97bb3b7dffb75157e50eda78c894fb1962f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:52:77:c6:f7:16:35:15:9d:81:63:f7:58:
                    ff:d3:c2:93:0b:28:e4:61:7b:8c:25:c2:9c:54:ac:
                    99:c5:90:e0:0e:e7:b5:65:61:55:25:3d:fd:6a:6c:
                    31:e7:d0:e8:17:61:ef:9a:3c:f0:7d:db:a7:fd:c9:
                    a6:c6:2b:75:ae:a6:8f:14:73:19:d5:de:b5:d9:35:
                    bc:06:17:55:03:0a:df:4f:f1:50:3f:91:02:c4:77:
                    e6:7c:5a:77:93:c7:c9:a7:97:22:cc:02:8c:97:15:
                    47:bb:ff:de:17:ca:37:6d:61:6b:0e:6a:f4:0a:15:
                    b5:07:93:ce:83:c5:cc:8b:65:42:b1:ff:bb:50:34:
                    72:4e:92:60:01:02:7f:d7:14:30:d3:b5:5c:8c:94:
                    88:33:6e:86:45:bc:b4:46:af:f0:63:bf:30:ea:58:
                    d6:b3:be:c2:96:e3:33:47:5d:ed:46:c3:ce:e4:15:
                    4e:d4:d6:59:43:0d:19:83:7c:65:75:a5:6d:d6:c2:
                    46:9f:da:c6:4e:02:9c:23:95:9b:0a:f7:33:09:18:
                    d2:07:2a:5b:cb:4c:90:b1:d4:4c:0b:40:c9:9f:d8:
                    a9:91:63:3f:c9:4d:00:8c:27:5f:9d:5e:61:cd:bc:
                    e6:f8:5e:6c:da:45:b7:e9:c8:49:dd:fc:c2:fb:b9:
                    8c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8A:97:BB:3B:7D:FF:B7:51:57:E5:0E:DA:78:C8:94:FB:19:62:F2
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:6a:a1:87:08:ee:cf:35:b4:ba:f0:74:c9:11:d1:60:3b:32:
         5b:57:10:2b:c7:ed:76:ee:5a:4f:d6:9e:ee:cb:72:56:1c:de:
         59:09:93:a1:f9:00:69:b9:1c:a5:01:e1:78:08:18:ad:c1:15:
         e7:74:35:63:27:4e:c6:3c:d6:5b:81:c7:aa:59:7f:9d:72:9d:
         9e:c8:c0:cd:e7:2f:30:64:fa:6d:e7:4f:85:60:01:23:05:e6:
         c3:a6:29:ee:e3:66:9f:ea:2b:70:29:25:66:6b:81:a1:ab:47:
         bc:bf:73:89:95:2d:44:1b:4d:80:c6:9b:1b:8a:6b:42:78:58:
         55:de:43:cf:95:1b:42:6a:d0:db:f3:95:99:fe:f7:bd:24:d7:
         ef:95:aa:e3:c7:7e:60:5b:28:e8:35:65:ed:ce:68:2d:d8:12:
         22:f8:90:1b:bb:28:d1:18:ec:8d:38:54:6a:21:c1:d6:c5:9b:
         a6:33:42:26:9b:82:2f:0d:90:4b:8d:01:c7:79:ab:24:05:ae:
         69:65:91:e8:62:42:56:30:a0:6b:c5:b9:ac:bd:e6:85:70:ae:
         38:a2:1e:f7:f2:7d:c6:bb:4d:3d:5b:3c:ef:23:a3:cb:a5:97:
         79:e2:22:60:7d:90:dc:a7:41:c1:0f:47:a8:3b:42:6e:bb:13:
         d4:ff:82:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/4In3toiUgTRgaCryTLPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjY2M2MDQ5NWIyYTM0ZDg5MjExY2MxYzc5NTI0ZWFiNjFi
YTE2NTYwHhcNMjYwNzIzMjIwMTMxWhcNMjYwNzI0MjIwMTMxWjAzMTEwLwYDVQQD
EyhmYzhhOTdiYjNiN2RmZmI3NTE1N2U1MGVkYTc4Yzg5NGZiMTk2MmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMBSd8b3FjUVnYFj91j/08KTCyjk
YXuMJcKcVKyZxZDgDue1ZWFVJT39amwx59DoF2Hvmjzwfdun/cmmxit1rqaPFHMZ
1d612TW8BhdVAwrfT/FQP5ECxHfmfFp3k8fJp5cizAKMlxVHu//eF8o3bWFrDmr0
ChW1B5POg8XMi2VCsf+7UDRyTpJgAQJ/1xQw07VcjJSIM26GRby0Rq/wY78w6ljW
s77CluMzR13tRsPO5BVO1NZZQw0Zg3xldaVt1sJGn9rGTgKcI5WbCvczCRjSBypb
y0yQsdRMC0DJn9ipkWM/yU0AjCdfnV5hzbzm+F5s2kW36chJ3fzC+7mMqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPyKl7s7ff+3UVflDtp4yJT7GWLyMB8GA1UdIwQY
MBaAFEzMYElbKjTYkhHMHHlSTqthuhZWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUt
Njk4MDlkOGI5YzIwLzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNTFjNmMtNjE3Yy00NjQzLTlmNmUtNjk4MDlkOGI5YzIw
LzEvVE14Z1NWc3FOTmlTRWN3Y2VWSk9xMkc2RmxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsWqhhwju
zzW0uvB0yRHRYDsyW1cQK8ftdu5aT9ae7styVhzeWQmTofkAabkcpQHheAgYrcEV
53Q1YydOxjzWW4HHqll/nXKdnsjAzecvMGT6bedPhWABIwXmw6Yp7uNmn+orcCkl
ZmuBoatHvL9ziZUtRBtNgMabG4prQnhYVd5Dz5UbQmrQ2/OVmf73vSTX75Wq48d+
YFso6DVl7c5oLdgSIviQG7so0RjsjThUaiHB1sWbpjNCJpuCLw2QS40Bx3mrJAWu
aWWR6GJCVjCga8W5rL3mhXCuOKIe9/J9xrtNPVs87yOjy6WXeeIiYH2Q3KdBwQ9H
qDtCbrsT1P+CNw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:06:04 2026 by rpki-client