Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
File:                     1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json)
Hash identifier:          AJmlMY4RFSdr67aTBeNG021fu3ncYXocbtEIl4qt5zQ=
Subject key identifier:   3E:8E:91:77:AB:63:AB:88:7B:9B:16:46:5F:57:30:FB:8F:D5:6D:FE
Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF
Certificate issuer:       /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
Certificate serial:       019F8FEBFD142FD16FBB11130C51AC3B4050
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
Manifest number:          19D1
Signing time:             Thu 23 Jul 2026 17:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:35 +0000
Files and hashes:         1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: AYyol13CGavMMh5Ye9UcQNWyM6adSSn7aGMgaOGX8os=)
                          2: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (hash: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ=)
                          3: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=)
                          4: GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa (hash: ZMR4mH+eqRB4yaYaBEAA+Z5mr/sJpbjQJrZ/3hcHthA=)
                          5: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=)
                          6: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=)
                          7: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=)
                          8: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=)
                          9: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=)
                          10: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=)
                          11: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=)
                          12: u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa (hash: logMCehLES5I14Fvvq1Wfet2WZemmEdMO+ZvgR5D7JY=)
                          13: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:fd:14:2f:d1:6f:bb:11:13:0c:51:ac:3b:40:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef
        Validity
            Not Before: Jul 23 17:00:35 2026 GMT
            Not After : Jul 24 17:00:35 2026 GMT
        Subject: CN=3e8e9177ab63ab887b9b16465f5730fb8fd56dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:93:05:4b:eb:18:44:a2:67:84:02:82:83:b4:
                    5a:dc:68:7a:5c:c9:d7:c1:90:8f:49:01:dc:e4:3a:
                    15:fd:15:9c:6e:07:84:54:0c:f1:98:84:36:d7:73:
                    07:b7:d5:55:e7:d3:39:2b:9d:38:90:24:7d:18:42:
                    ed:05:3c:33:06:84:4f:31:f2:4a:11:60:8a:8c:63:
                    48:09:66:30:38:97:fb:0f:25:80:e6:c5:05:d7:93:
                    dc:69:dc:7e:3d:08:ce:b6:d1:9a:08:b1:61:fd:cb:
                    c8:6d:80:2a:43:4a:53:62:19:18:57:91:fb:40:30:
                    51:bd:3b:15:8c:07:94:82:ac:0a:2c:8c:89:c7:42:
                    a3:8b:c4:0c:cd:15:65:05:09:e2:1d:46:69:5c:7d:
                    73:ee:8e:63:bd:33:3c:f4:11:7e:55:bf:89:c4:43:
                    30:61:0d:67:62:4e:72:9f:7f:89:ed:f1:ae:59:bf:
                    bf:e4:b7:7a:cd:d5:65:fa:d2:8a:b2:74:e3:d0:05:
                    f2:4a:d4:73:45:2b:5a:08:23:94:5e:8a:8f:1e:74:
                    b0:c5:47:6e:4d:17:c7:d7:52:4b:80:6e:87:f6:e5:
                    11:28:87:70:70:98:86:61:ce:9d:b1:c8:60:b9:15:
                    b5:f6:ab:83:70:6b:8d:67:eb:e5:61:9a:e2:a3:76:
                    85:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:8E:91:77:AB:63:AB:88:7B:9B:16:46:5F:57:30:FB:8F:D5:6D:FE
            X509v3 Authority Key Identifier:
                keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:89:70:a9:5f:1d:f4:71:3b:b9:79:2c:d5:f1:a1:08:05:a1:
         d7:69:3f:99:ae:27:39:5f:34:d8:2b:1e:40:b7:52:af:41:8f:
         28:4e:f9:35:42:0a:97:5c:8e:40:80:40:10:9a:50:cc:47:ff:
         d1:27:4b:78:54:1f:d1:09:a5:5f:b3:94:81:fe:ba:24:bf:bf:
         2d:01:b8:66:25:9d:4f:d4:36:d3:ec:47:f4:fc:1a:f2:61:13:
         b5:34:7a:92:98:52:34:73:b4:71:ee:53:bc:d8:fa:96:19:18:
         0f:f9:9b:53:9c:9f:fb:8b:f1:e8:db:11:83:ad:41:78:6a:56:
         1f:66:f2:ba:e3:23:f9:b0:24:6b:ac:78:85:26:24:99:e6:55:
         20:a8:13:3b:5a:1f:af:8d:38:00:93:02:7a:9f:be:36:88:a4:
         66:ce:73:e7:ff:9a:8b:9a:64:7e:b3:5a:bf:54:64:96:ca:3a:
         04:7b:f9:66:60:be:a0:2f:ec:65:3a:46:82:e4:55:89:60:3a:
         ed:06:ee:30:47:f2:2a:09:65:87:52:e2:a7:f5:46:02:d8:33:
         3f:42:90:a7:c5:ea:fe:73:2b:d4:c0:11:97:e6:1b:05:b1:bb:
         bd:65:42:d7:92:7d:ae:5b:aa:74:fd:bb:b1:35:ac:be:44:01:
         2d:a5:31:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P6/0UL9FvuxETDFGsO0BQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3
N2E2ZWYwHhcNMjYwNzIzMTcwMDM1WhcNMjYwNzI0MTcwMDM1WjAzMTEwLwYDVQQD
EygzZThlOTE3N2FiNjNhYjg4N2I5YjE2NDY1ZjU3MzBmYjhmZDU2ZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJMFS+sYRKJnhAKCg7Ra3Gh6XMnX
wZCPSQHc5DoV/RWcbgeEVAzxmIQ213MHt9VV59M5K504kCR9GELtBTwzBoRPMfJK
EWCKjGNICWYwOJf7DyWA5sUF15Pcadx+PQjOttGaCLFh/cvIbYAqQ0pTYhkYV5H7
QDBRvTsVjAeUgqwKLIyJx0Kji8QMzRVlBQniHUZpXH1z7o5jvTM89BF+Vb+JxEMw
YQ1nYk5yn3+J7fGuWb+/5Ld6zdVl+tKKsnTj0AXyStRzRStaCCOUXoqPHnSwxUdu
TRfH11JLgG6H9uURKIdwcJiGYc6dschguRW19quDcGuNZ+vlYZrio3aFrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD6OkXerY6uIe5sWRl9XMPuP1W3+MB8GA1UdIwQY
MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt
YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh
LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALolwqV8d
9HE7uXks1fGhCAWh12k/ma4nOV802CseQLdSr0GPKE75NUIKl1yOQIBAEJpQzEf/
0SdLeFQf0QmlX7OUgf66JL+/LQG4ZiWdT9Q20+xH9Pwa8mETtTR6kphSNHO0ce5T
vNj6lhkYD/mbU5yf+4vx6NsRg61BeGpWH2byuuMj+bAka6x4hSYkmeZVIKgTO1of
r404AJMCep++NoikZs5z5/+ai5pkfrNav1Rklso6BHv5ZmC+oC/sZTpGguRViWA6
7QbuMEfyKgllh1Lip/VGAtgzP0KQp8Xq/nMr1MARl+YbBbG7vWVC15J9rluqdP27
sTWsvkQBLaUxNw==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:36 2026 by rpki-client