Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
File:                     Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft (raw, json)
Hash identifier:          gD21Mh+UHSza/fCa2GRAKf3M3YQO6q9cgKFsLqgupIM=
Subject key identifier:   E7:FB:BD:72:84:B7:71:78:18:97:2D:85:14:18:84:12:74:E3:49:72
Authority key identifier: 4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A
Certificate issuer:       /CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
Certificate serial:       019F8FB597B2A89564B4EB6A228DFAFCD1BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 16:01:10 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:10 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:10 +0000
Files and hashes:         1: Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl (hash: twUj0hPBXU57U/2c5dfvAloT9nwkecmO61E/dr1kgI0=)
                          2: owMZq8FjMrGcWydVPo2XzsNX_wE.roa (hash: oerV8Rk8gelATCf/K/1z5Pi6X6k6wK997b4CHySJpco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:97:b2:a8:95:64:b4:eb:6a:22:8d:fa:fc:d1:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f3bf7ac28e830656cf6e999c4993ba76cb1a98a
        Validity
            Not Before: Jul 23 16:01:10 2026 GMT
            Not After : Jul 24 16:01:10 2026 GMT
        Subject: CN=e7fbbd7284b7717818972d851418841274e34972
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:82:e2:2c:57:45:1b:bc:37:4b:ec:df:91:ce:
                    6a:e4:60:69:4b:b8:e4:43:de:d5:c8:1d:cd:21:a7:
                    f1:bb:bf:ff:3f:c2:33:90:93:27:0a:77:41:50:99:
                    b1:17:06:04:fb:63:1a:c4:fd:a6:de:fa:93:95:17:
                    4f:04:95:58:61:4c:7b:2b:c0:4e:48:1f:f7:24:00:
                    a2:38:7a:81:e7:6e:54:c7:a7:99:d5:a6:70:61:71:
                    34:92:25:1d:d7:41:77:26:6a:c8:97:a5:14:ca:04:
                    28:2e:28:5a:22:2f:1f:62:2b:5a:98:f3:94:7e:a8:
                    4b:df:ac:74:8b:c5:d4:e9:41:39:8f:aa:de:cd:5d:
                    62:00:c2:61:54:f2:0d:43:fa:14:9e:ff:20:eb:21:
                    b3:19:cb:07:6f:95:67:49:85:dd:b9:52:25:e1:54:
                    72:c0:74:8c:bf:26:c8:b0:a9:fb:db:3a:61:ce:c9:
                    ce:b2:b9:5f:b3:72:02:01:7b:fe:05:d4:80:a3:3b:
                    f3:f8:95:27:b0:40:fa:c0:27:fd:7d:8d:31:c0:96:
                    78:8a:17:a9:98:2b:89:a1:9c:ae:8e:c5:a9:c9:05:
                    db:28:ee:d8:9e:46:2d:46:c1:82:d3:59:9a:07:2a:
                    54:c2:10:36:2a:fb:5e:a1:89:cf:33:85:d4:a9:9f:
                    ee:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:FB:BD:72:84:B7:71:78:18:97:2D:85:14:18:84:12:74:E3:49:72
            X509v3 Authority Key Identifier:
                keyid:4F:3B:F7:AC:28:E8:30:65:6C:F6:E9:99:C4:99:3B:A7:6C:B1:A9:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tzv3rCjoMGVs9umZxJk7p2yxqYo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/bbd64b-ebb8-46d8-b4e3-62eafed5922e/1/Tzv3rCjoMGVs9umZxJk7p2yxqYo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:9f:58:8d:ea:4d:6b:4c:e5:c8:e0:86:a3:92:b9:26:89:a6:
         5f:47:ef:c8:27:bd:88:ee:3c:10:20:eb:f3:f7:dd:ad:1b:3f:
         4f:11:d8:63:51:2b:ac:be:15:89:6d:e5:37:62:b0:11:6d:fe:
         fa:85:ce:d3:70:cb:31:63:9f:34:6a:43:1c:9a:5b:23:e5:c2:
         eb:8d:e1:5e:f1:53:c5:ef:19:a1:d9:85:1d:43:a5:2f:42:09:
         8c:20:4a:a6:33:0b:8a:04:45:e9:58:79:49:33:a1:a6:7b:1c:
         5a:b4:88:67:c3:bd:6d:6c:ef:3a:82:e2:a0:d8:e4:4c:29:9f:
         c2:4c:9f:f1:8e:21:ef:95:d3:ac:e2:ca:cc:be:02:48:9e:6a:
         66:49:a8:5a:98:0c:16:60:dc:c3:8e:0b:2f:d1:eb:28:dd:e7:
         14:85:35:f8:a4:2e:c3:7f:4c:79:e7:2f:75:37:6f:d7:8b:e9:
         ab:d0:0e:d9:e9:14:68:0f:b0:01:8f:83:3d:b1:b5:df:a4:f4:
         5e:74:6b:8e:fb:f4:a0:39:73:b7:9b:6f:2e:39:7d:d2:c4:30:
         9d:ed:9b:3e:89:ed:94:34:b7:d0:18:e2:9f:47:77:29:dc:6b:
         08:d1:47:74:a6:bd:03:ef:5a:8a:de:ea:b6:b4:fa:4f:51:30:
         72:b5:47:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtZeyqJVktOtqIo36/NG8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmM2JmN2FjMjhlODMwNjU2Y2Y2ZTk5OWM0OTkzYmE3NmNi
MWE5OGEwHhcNMjYwNzIzMTYwMTEwWhcNMjYwNzI0MTYwMTEwWjAzMTEwLwYDVQQD
EyhlN2ZiYmQ3Mjg0Yjc3MTc4MTg5NzJkODUxNDE4ODQxMjc0ZTM0OTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtoLiLFdFG7w3S+zfkc5q5GBpS7jk
Q97VyB3NIafxu7//P8IzkJMnCndBUJmxFwYE+2MaxP2m3vqTlRdPBJVYYUx7K8BO
SB/3JACiOHqB525Ux6eZ1aZwYXE0kiUd10F3JmrIl6UUygQoLihaIi8fYitamPOU
fqhL36x0i8XU6UE5j6rezV1iAMJhVPINQ/oUnv8g6yGzGcsHb5VnSYXduVIl4VRy
wHSMvybIsKn72zphzsnOsrlfs3ICAXv+BdSAozvz+JUnsED6wCf9fY0xwJZ4ihep
mCuJoZyujsWpyQXbKO7YnkYtRsGC01maBypUwhA2KvteoYnPM4XUqZ/usQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf7vXKEt3F4GJcthRQYhBJ040lyMB8GA1UdIwQY
MBaAFE8796wo6DBlbPbpmcSZO6dssamKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMt
NjJlYWZlZDU5MjJlLzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9iYmQ2NGItZWJiOC00NmQ4LWI0ZTMtNjJlYWZlZDU5MjJl
LzEvVHp2M3JDam9NR1ZzOXVtWnhKazdwMnl4cVlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGp9YjepN
a0zlyOCGo5K5JommX0fvyCe9iO48ECDr8/fdrRs/TxHYY1ErrL4ViW3lN2KwEW3+
+oXO03DLMWOfNGpDHJpbI+XC643hXvFTxe8ZodmFHUOlL0IJjCBKpjMLigRF6Vh5
STOhpnscWrSIZ8O9bWzvOoLioNjkTCmfwkyf8Y4h75XTrOLKzL4CSJ5qZkmoWpgM
FmDcw44LL9HrKN3nFIU1+KQuw39MeecvdTdv14vpq9AO2ekUaA+wAY+DPbG136T0
XnRrjvv0oDlzt5tvLjl90sQwne2bPontlDS30Bjin0d3KdxrCNFHdKa9A+9ait7q
trT6T1EwcrVHvQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:33:18 2026 by rpki-client