Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          nFMJ5tvAVhRtnUg+fng1encafKWOr0ePpei1+9Yy0Kg=
Subject key identifier:   35:2F:67:14:DD:87:B2:8C:4F:59:62:43:4A:46:E0:8B:DB:3C:42:13
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       019F93FFB78016D982E288AC911D22528A99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 12:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 12:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 12:00:37 +0000
Files and hashes:         1: 4io-REhzFRxPhNR2ODLWtq5-pVg.roa (hash: wvYJq+OJ0yBLuz2nx1cnZCl0Nf5x5+pis6cfSb4TkHk=)
                          2: arrkUMPGlGp12fBDJz-y-TlydqE.roa (hash: FzEjkq/IJVG3rsaQp/9UZuy/iTz0QoR1J2fAeimur2Q=)
                          3: rDrbyqGHpXISP5iG3Y1GTyKdM24.roa (hash: IEFZML7lOlLhBvi4soPybXTGWqMozr/vczumNvS04HI=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: B5hEAhDm5demtwq2Cd57vZt7V2AfYcqPrWFGDfS4eGk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 12:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:ff:b7:80:16:d9:82:e2:88:ac:91:1d:22:52:8a:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Jul 24 12:00:37 2026 GMT
            Not After : Jul 25 12:00:37 2026 GMT
        Subject: CN=352f6714dd87b28c4f5962434a46e08bdb3c4213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:aa:2e:2e:2a:24:8a:b2:3e:0f:46:b4:84:8e:
                    99:7a:05:15:30:8d:33:02:13:02:de:fe:aa:8e:a3:
                    6a:50:ed:b1:4e:d7:f0:00:c6:53:ff:0a:76:16:f1:
                    3e:1e:75:0c:7b:14:78:16:8c:8e:33:ac:59:58:3d:
                    68:5b:93:a7:c2:37:13:41:58:29:c6:ff:c7:ee:7c:
                    76:75:ee:f3:ab:a0:19:e3:eb:1e:6f:24:d9:9e:e2:
                    35:07:e9:87:6b:e7:db:db:37:8f:d9:ce:3e:a9:8f:
                    bd:1c:14:8d:99:16:16:0a:49:37:4d:3f:16:80:f1:
                    c8:85:c0:34:23:86:f2:4e:68:a4:7a:c7:82:64:34:
                    00:21:b5:fc:67:c9:b3:33:86:98:54:ab:e1:08:e8:
                    a5:55:ec:97:63:d4:9b:0d:af:2b:51:39:b3:f4:d2:
                    5a:e4:f1:4e:13:78:78:bb:fc:82:6a:16:69:75:28:
                    3e:6c:49:cd:57:f0:44:56:c0:15:38:a2:6c:e4:31:
                    5b:24:39:f5:8d:7b:95:4b:8a:23:c0:7b:25:be:bb:
                    ef:0d:61:77:b7:fc:41:b6:62:a3:85:d9:fe:f5:9d:
                    c7:db:9a:35:29:26:bf:54:98:c8:fc:42:82:c3:53:
                    bb:38:ca:35:7d:cb:3f:26:1d:e0:5e:dd:34:55:fb:
                    8f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:2F:67:14:DD:87:B2:8C:4F:59:62:43:4A:46:E0:8B:DB:3C:42:13
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5e:b8:ca:9b:b2:09:27:27:0e:85:b8:26:55:86:7f:d5:b6:
         41:06:67:3e:49:ef:6d:9d:8e:8a:c5:be:30:a3:94:3d:c8:04:
         38:1a:a2:d1:23:49:6d:49:31:03:29:50:d9:a9:5a:76:07:2e:
         07:63:88:18:42:01:e1:34:d0:2c:3e:cf:b8:9b:42:43:35:fc:
         99:9b:f4:34:4a:33:10:ee:f3:8c:7d:50:0f:61:8d:39:0a:b1:
         5c:57:c6:26:2f:37:44:d7:13:0b:a6:84:c5:fd:4d:f1:c7:24:
         1b:38:0d:a5:cd:66:02:5c:2d:91:9e:c7:f1:49:85:34:a1:6e:
         84:0d:2b:1b:e3:2b:8a:0f:13:bd:27:01:41:3b:25:89:a1:fb:
         d6:52:08:44:07:39:d9:e7:50:6f:e4:7c:2c:7f:f9:e2:f3:46:
         ab:f3:25:ce:0b:5b:36:06:8d:45:20:88:b7:66:0d:bc:72:50:
         72:9c:a5:a9:f0:02:88:86:d9:e2:4c:9b:36:a5:02:e8:7e:c5:
         06:97:a6:6a:53:6d:71:52:c5:fb:fd:69:49:99:ab:59:7a:0b:
         9e:d9:00:53:31:0b:71:f9:c3:22:a1:7f:b2:6c:40:e2:11:ff:
         14:4b:17:ba:06:40:1c:ec:48:9e:de:a1:00:e3:bc:bb:6f:8b:
         10:81:5f:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T/7eAFtmC4oiskR0iUoqZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzA0ODU4YjY0MzI2NmY3YzcxMDc3MjFjOThmMmJhOTNk
ZDUyNjUwHhcNMjYwNzI0MTIwMDM3WhcNMjYwNzI1MTIwMDM3WjAzMTEwLwYDVQQD
EygzNTJmNjcxNGRkODdiMjhjNGY1OTYyNDM0YTQ2ZTA4YmRiM2M0MjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6qouLiokirI+D0a0hI6ZegUVMI0z
AhMC3v6qjqNqUO2xTtfwAMZT/wp2FvE+HnUMexR4FoyOM6xZWD1oW5OnwjcTQVgp
xv/H7nx2de7zq6AZ4+sebyTZnuI1B+mHa+fb2zeP2c4+qY+9HBSNmRYWCkk3TT8W
gPHIhcA0I4byTmikeseCZDQAIbX8Z8mzM4aYVKvhCOilVeyXY9SbDa8rUTmz9NJa
5PFOE3h4u/yCahZpdSg+bEnNV/BEVsAVOKJs5DFbJDn1jXuVS4ojwHslvrvvDWF3
t/xBtmKjhdn+9Z3H25o1KSa/VJjI/EKCw1O7OMo1fcs/Jh3gXt00VfuPxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDUvZxTdh7KMT1liQ0pG4IvbPEITMB8GA1UdIwQY
MBaAFM5wSFi2QyZvfHEHchyY8rqT3VJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0Yzkt
MzhmODBkNjk2MWVjLzEvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0YzktMzhmODBkNjk2MWVj
LzEvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALV64ypuy
CScnDoW4JlWGf9W2QQZnPknvbZ2OisW+MKOUPcgEOBqi0SNJbUkxAylQ2aladgcu
B2OIGEIB4TTQLD7PuJtCQzX8mZv0NEozEO7zjH1QD2GNOQqxXFfGJi83RNcTC6aE
xf1N8cckGzgNpc1mAlwtkZ7H8UmFNKFuhA0rG+Mrig8TvScBQTsliaH71lIIRAc5
2edQb+R8LH/54vNGq/MlzgtbNgaNRSCIt2YNvHJQcpylqfACiIbZ4kybNqUC6H7F
BpemalNtcVLF+/1pSZmrWXoLntkAUzELcfnDIqF/smxA4hH/FEsXugZAHOxInt6h
AOO8u2+LEIFfeQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:10:30 2026 by rpki-client