Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
File:                     szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft (raw, json)
Hash identifier:          jkPhz9jP0t4jAIQK3WrPft9Fqow9npC72iteVTPO9wM=
Subject key identifier:   86:BB:8B:E8:98:96:89:CD:59:4F:E7:E0:99:09:49:D6:22:78:FE:25
Authority key identifier: B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A
Certificate issuer:       /CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
Certificate serial:       019F916DB467EAF06309D9A622EBBCDB69CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
Manifest number:          19C7
Signing time:             Fri 24 Jul 2026 00:01:53 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:53 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:53 +0000
Files and hashes:         1: 8hD_hPQ-d2C-I237LdYPsmemGMc.roa (hash: Kq3FtrbxrcCDHnEp/P2g4aC/Ve47a+GB/z1ePLIcWF0=)
                          2: K4N3orsfXe-l_cCSMBw3n5JPDVI.roa (hash: 6KwKSqMS7ufj2P5HpkvKEEDqwAMVfIJTQOp6xcQ5Pms=)
                          3: lL17tuBDoLvw-pd1vpQwvUHTCM8.roa (hash: minPejjWJuMMJn1mp0vvXo5sojqAMoVldEghqvBYb48=)
                          4: szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl (hash: mTSl/MZmbOtTYMsCSIbL1FqkAGXkD/kaZerMmovX7os=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:b4:67:ea:f0:63:09:d9:a6:22:eb:bc:db:69:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b334fc2b5b8227b6df3f21d1ad3a74b14ec0685a
        Validity
            Not Before: Jul 24 00:01:53 2026 GMT
            Not After : Jul 25 00:01:53 2026 GMT
        Subject: CN=86bb8be8989689cd594fe7e0990949d62278fe25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:26:36:65:85:d1:1c:75:b8:59:e6:48:de:4c:
                    9c:c1:b8:6a:f1:3c:79:6e:d5:15:33:0b:79:10:d8:
                    97:1a:55:74:be:e5:61:ad:36:57:df:22:72:0c:1f:
                    bb:70:8b:11:db:5a:bc:88:4e:ce:ae:03:7a:b6:2e:
                    1b:1a:6b:c3:64:01:55:50:62:07:b7:7f:c1:fc:7f:
                    9d:32:51:b7:28:db:e7:32:1e:48:d7:68:61:18:ef:
                    3a:e7:0c:92:ea:fe:2f:77:72:5f:73:ce:45:e6:af:
                    8b:fa:2f:b9:10:41:c1:de:cc:0a:c9:d0:88:46:17:
                    cd:56:8d:ed:ad:bd:03:ad:92:01:4b:87:e6:0c:68:
                    ce:71:a2:c4:d7:c6:04:a4:f7:b4:76:e7:90:0d:b3:
                    39:32:21:9e:11:eb:49:b3:6f:7a:eb:b4:2d:3f:b2:
                    69:71:f4:10:53:22:15:ec:0e:13:94:97:3e:e4:9c:
                    20:a1:31:aa:8c:e1:07:2d:92:73:92:b9:6d:45:6d:
                    ac:75:41:54:c0:c3:04:65:74:58:e2:a2:52:c7:54:
                    e1:13:8b:8f:ca:06:39:1a:5a:4b:d5:ed:99:5f:cf:
                    46:4e:5e:8b:a5:3b:f2:b2:9c:85:9d:a7:4b:9f:a2:
                    58:2b:4a:b8:82:30:b7:d4:fa:8f:68:1c:10:06:0f:
                    ab:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:BB:8B:E8:98:96:89:CD:59:4F:E7:E0:99:09:49:D6:22:78:FE:25
            X509v3 Authority Key Identifier:
                keyid:B3:34:FC:2B:5B:82:27:B6:DF:3F:21:D1:AD:3A:74:B1:4E:C0:68:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/szT8K1uCJ7bfPyHRrTp0sU7AaFo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/682ece-ebe2-4a23-8ab5-36e64ac64542/1/szT8K1uCJ7bfPyHRrTp0sU7AaFo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:08:ed:d9:4b:a9:32:8c:cb:bc:64:4a:63:c2:eb:2d:d4:34:
         75:6e:11:00:9b:fa:cf:f4:44:73:99:32:14:24:d9:ce:33:e4:
         53:f0:15:b0:91:b9:de:72:9b:aa:17:1f:4c:15:d9:35:d1:a2:
         41:05:05:02:34:ee:51:40:df:f8:23:73:11:c8:e9:ce:c6:38:
         3a:15:69:b4:6a:d2:81:c9:eb:69:48:39:46:8f:ea:39:14:cb:
         68:ef:aa:04:fd:d4:5e:1b:51:c6:24:3a:b4:31:a4:05:22:d7:
         66:03:f4:c7:aa:9b:7f:03:f3:7f:14:de:33:5e:2f:37:2c:a6:
         36:d2:01:19:36:c2:9c:29:fb:22:f8:f7:ae:06:3c:9b:53:d4:
         9b:8a:57:16:2d:fa:0e:61:4a:71:87:77:57:8f:eb:f4:b1:4d:
         f9:41:04:e5:92:7d:0c:a1:56:81:0a:92:29:7d:98:d9:a9:df:
         97:36:28:f5:e6:30:ee:40:91:0b:23:8a:48:ed:ed:99:2b:36:
         0e:47:0a:64:2d:75:80:00:34:44:51:6a:47:82:69:25:3e:f8:
         10:97:b5:5b:10:30:4d:bb:19:9f:ae:ea:5c:53:34:2c:4c:6e:
         a2:d4:61:4a:a6:bc:bb:3d:dd:35:da:5f:88:e9:37:93:85:37:
         03:70:ba:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbbRn6vBjCdmmIuu822nPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMzRmYzJiNWI4MjI3YjZkZjNmMjFkMWFkM2E3NGIxNGVj
MDY4NWEwHhcNMjYwNzI0MDAwMTUzWhcNMjYwNzI1MDAwMTUzWjAzMTEwLwYDVQQD
Eyg4NmJiOGJlODk4OTY4OWNkNTk0ZmU3ZTA5OTA5NDlkNjIyNzhmZTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiY2ZYXRHHW4WeZI3kycwbhq8Tx5
btUVMwt5ENiXGlV0vuVhrTZX3yJyDB+7cIsR21q8iE7OrgN6ti4bGmvDZAFVUGIH
t3/B/H+dMlG3KNvnMh5I12hhGO865wyS6v4vd3Jfc85F5q+L+i+5EEHB3swKydCI
RhfNVo3trb0DrZIBS4fmDGjOcaLE18YEpPe0dueQDbM5MiGeEetJs29667QtP7Jp
cfQQUyIV7A4TlJc+5JwgoTGqjOEHLZJzkrltRW2sdUFUwMMEZXRY4qJSx1ThE4uP
ygY5GlpL1e2ZX89GTl6LpTvyspyFnadLn6JYK0q4gjC31PqPaBwQBg+rqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa7i+iYlonNWU/n4JkJSdYieP4lMB8GA1UdIwQY
MBaAFLM0/Ctbgie23z8h0a06dLFOwGhaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUt
MzZlNjRhYzY0NTQyLzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ODJlY2UtZWJlMi00YTIzLThhYjUtMzZlNjRhYzY0NTQy
LzEvc3pUOEsxdUNKN2JmUHlIUnJUcDBzVTdBYUZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwjt2Uup
MozLvGRKY8LrLdQ0dW4RAJv6z/REc5kyFCTZzjPkU/AVsJG53nKbqhcfTBXZNdGi
QQUFAjTuUUDf+CNzEcjpzsY4OhVptGrSgcnraUg5Ro/qORTLaO+qBP3UXhtRxiQ6
tDGkBSLXZgP0x6qbfwPzfxTeM14vNyymNtIBGTbCnCn7Ivj3rgY8m1PUm4pXFi36
DmFKcYd3V4/r9LFN+UEE5ZJ9DKFWgQqSKX2Y2anflzYo9eYw7kCRCyOKSO3tmSs2
DkcKZC11gAA0RFFqR4JpJT74EJe1WxAwTbsZn67qXFM0LExuotRhSqa8uz3dNdpf
iOk3k4U3A3C6Eg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:43 2026 by rpki-client