Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
File:                     aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft (raw, json)
Hash identifier:          FyKUC1SS6lPZ6OtdNGpIDWzPfejA7PAScD8j8wj8c68=
Subject key identifier:   3B:1A:6B:C1:47:43:AF:CE:AA:11:4B:69:82:6E:FF:6A:86:59:12:DA
Authority key identifier: 69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA
Certificate issuer:       /CN=694a2ed9a412747fcd644749de57d9ff780393aa
Certificate serial:       019F916C49BF79C68002B4F009C6FC7F7126
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 00:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:20 +0000
Files and hashes:         1: aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl (hash: LLuKJArT1xd1g+1d58DOPGXLCB2oATsuzD5aS5+wh/Y=)
                          2: xk7gnuwRExVZ3WpkBbinksRcNPA.roa (hash: Y5M1fjS98FTBsE2/QZ9YYs0JV68w5Upx40qPZ+9XJj4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:49:bf:79:c6:80:02:b4:f0:09:c6:fc:7f:71:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=694a2ed9a412747fcd644749de57d9ff780393aa
        Validity
            Not Before: Jul 24 00:00:20 2026 GMT
            Not After : Jul 25 00:00:20 2026 GMT
        Subject: CN=3b1a6bc14743afceaa114b69826eff6a865912da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e1:10:bc:0c:40:d6:4d:c1:b3:10:d9:81:39:
                    76:95:86:75:a8:c5:ee:0c:40:bc:99:89:31:80:21:
                    74:0a:8c:52:49:fe:03:76:9e:08:13:24:75:93:2d:
                    11:0b:50:6a:a2:60:46:db:13:7d:31:9a:79:92:6a:
                    ad:ad:15:d8:6e:10:a2:c4:52:ca:ad:16:01:6e:3e:
                    93:5f:87:88:98:5c:55:7b:23:36:ff:1d:1b:40:ed:
                    fa:84:25:4c:5a:c4:ef:0d:b7:e4:10:23:8e:da:e8:
                    a8:52:ca:a5:35:f8:95:e7:ce:53:7b:a9:21:7e:06:
                    b6:e7:50:f6:f0:02:8e:6f:82:83:0f:ad:cc:86:98:
                    a1:48:f1:44:52:f0:a3:f8:a4:c9:85:06:10:b4:82:
                    14:0f:da:93:c8:a1:52:90:f2:d3:e8:b0:c6:b9:a0:
                    aa:ca:95:ed:e3:68:69:8b:5c:5a:6b:ec:23:0e:ea:
                    bb:b0:c9:86:5d:b8:d6:8f:6a:84:77:28:17:a3:16:
                    1e:53:51:c7:cb:a1:68:bd:fa:2c:00:fe:36:29:3c:
                    27:be:49:40:9e:14:34:46:3e:a7:f6:5a:ba:23:55:
                    f5:4b:4e:d4:bb:ed:26:be:dd:d7:44:27:70:60:66:
                    0e:40:60:5b:46:ab:4c:26:38:3b:c8:f4:43:2d:1c:
                    9e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:1A:6B:C1:47:43:AF:CE:AA:11:4B:69:82:6E:FF:6A:86:59:12:DA
            X509v3 Authority Key Identifier:
                keyid:69:4A:2E:D9:A4:12:74:7F:CD:64:47:49:DE:57:D9:FF:78:03:93:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9e4f21-f9e6-4942-9601-adf43f04ec9c/1/aUou2aQSdH_NZEdJ3lfZ_3gDk6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:b1:88:99:5b:2e:f6:56:99:c7:df:01:1b:75:06:34:bb:8c:
         f7:65:9b:92:f9:13:a8:0b:07:fc:f9:a1:84:a0:2b:7e:13:55:
         76:eb:83:36:76:24:96:e9:95:81:31:36:3e:0d:71:b7:c5:02:
         64:ef:5c:d6:af:ed:da:ed:61:cc:23:e0:83:23:f0:f5:87:44:
         da:65:74:65:16:6e:da:ec:4a:52:62:75:2a:09:2c:c4:f1:c7:
         de:50:ad:9b:64:ba:a9:87:35:1d:5b:6f:a7:22:45:c5:f8:0b:
         d2:e7:80:ce:ca:ca:8b:95:c0:51:64:74:8a:b0:17:73:09:39:
         89:6c:66:bc:1f:dd:1b:77:7c:01:2a:75:66:2d:a8:7d:7f:ba:
         35:3f:04:3e:97:18:2b:ed:7b:8a:aa:34:f3:51:91:84:48:5f:
         3c:3e:28:75:b6:4a:ea:e9:75:0e:4d:98:fd:1d:0e:cf:58:d0:
         79:a1:5e:ec:da:ea:23:fd:b7:4d:31:c4:f2:09:75:1c:77:fb:
         e8:59:a3:18:51:78:f6:55:b4:0a:c5:8c:9b:b8:a8:2b:52:1d:
         fe:e1:b8:33:85:5f:4f:41:6e:b3:eb:ba:df:98:52:13:34:e5:
         5c:53:8c:e5:78:ed:df:e3:98:82:fd:90:96:18:25:a4:ca:2f:
         a3:48:1b:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbEm/ecaAArTwCcb8f3EmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NGEyZWQ5YTQxMjc0N2ZjZDY0NDc0OWRlNTdkOWZmNzgw
MzkzYWEwHhcNMjYwNzI0MDAwMDIwWhcNMjYwNzI1MDAwMDIwWjAzMTEwLwYDVQQD
EygzYjFhNmJjMTQ3NDNhZmNlYWExMTRiNjk4MjZlZmY2YTg2NTkxMmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+EQvAxA1k3BsxDZgTl2lYZ1qMXu
DEC8mYkxgCF0CoxSSf4Ddp4IEyR1ky0RC1BqomBG2xN9MZp5kmqtrRXYbhCixFLK
rRYBbj6TX4eImFxVeyM2/x0bQO36hCVMWsTvDbfkECOO2uioUsqlNfiV585Te6kh
fga251D28AKOb4KDD63MhpihSPFEUvCj+KTJhQYQtIIUD9qTyKFSkPLT6LDGuaCq
ypXt42hpi1xaa+wjDuq7sMmGXbjWj2qEdygXoxYeU1HHy6FovfosAP42KTwnvklA
nhQ0Rj6n9lq6I1X1S07Uu+0mvt3XRCdwYGYOQGBbRqtMJjg7yPRDLRyeGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsaa8FHQ6/OqhFLaYJu/2qGWRLaMB8GA1UdIwQY
MBaAFGlKLtmkEnR/zWRHSd5X2f94A5OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEt
YWRmNDNmMDRlYzljLzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS85ZTRmMjEtZjllNi00OTQyLTk2MDEtYWRmNDNmMDRlYzlj
LzEvYVVvdTJhUVNkSF9OWkVkSjNsZlpfM2dEazZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7GImVsu
9laZx98BG3UGNLuM92WbkvkTqAsH/PmhhKArfhNVduuDNnYklumVgTE2Pg1xt8UC
ZO9c1q/t2u1hzCPggyPw9YdE2mV0ZRZu2uxKUmJ1KgksxPHH3lCtm2S6qYc1HVtv
pyJFxfgL0ueAzsrKi5XAUWR0irAXcwk5iWxmvB/dG3d8ASp1Zi2ofX+6NT8EPpcY
K+17iqo081GRhEhfPD4odbZK6ul1Dk2Y/R0Oz1jQeaFe7NrqI/23TTHE8gl1HHf7
6FmjGFF49lW0CsWMm7ioK1Id/uG4M4VfT0Fus+u635hSEzTlXFOM5Xjt3+OYgv2Q
lhglpMovo0gb3w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:25:11 2026 by rpki-client