Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
File:                     74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft (raw, json)
Hash identifier:          XnBbN5o6hk7uPzGgunARmWcfjS+evCSKSorjK16Ekkg=
Subject key identifier:   99:7C:15:F4:33:DE:56:9B:A9:18:73:8A:71:57:6C:02:80:1A:DE:7E
Authority key identifier: EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC
Certificate issuer:       /CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
Certificate serial:       019F8F7F81C92DD4107BFC27AA05DE853735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 15:02:05 +0000
Manifest this update:     Thu 23 Jul 2026 15:02:05 +0000
Manifest next update:     Fri 24 Jul 2026 15:02:05 +0000
Files and hashes:         1: 74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl (hash: v6sNJWY+zSg1KTUWyPrA341YQDLP78t1mZy9t1756tA=)
                          2: TZ8jvTk6A1oo1Lzus_lifwt-Bn0.roa (hash: DbjvnCZSJdthAFWx2QS0tIkKV6q5D4WL/xKcQ3AHDmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:81:c9:2d:d4:10:7b:fc:27:aa:05:de:85:37:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef8669e70cea94973afd34fb08eb59e9d86b57fc
        Validity
            Not Before: Jul 23 15:02:05 2026 GMT
            Not After : Jul 24 15:02:05 2026 GMT
        Subject: CN=997c15f433de569ba918738a71576c02801ade7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:ba:ef:2c:1d:96:b7:ad:e7:65:2b:f6:fb:
                    e4:7e:bb:15:a7:11:a7:28:28:7b:7d:fa:c9:46:be:
                    36:ec:49:ab:bd:9e:90:a5:31:38:5a:55:34:0b:d8:
                    01:04:28:f7:4f:29:4f:b0:c8:50:0d:e7:04:01:68:
                    ac:33:33:2a:7c:01:f8:62:a5:08:a8:ac:aa:8d:8d:
                    9c:51:57:87:84:59:bc:d0:26:e2:00:39:71:ec:ac:
                    8e:cf:ee:0e:0d:d9:6d:1e:b9:ac:4d:c5:0c:94:06:
                    32:97:d2:ca:45:23:7f:cb:2d:39:ee:c4:27:8a:8c:
                    3e:65:79:db:7c:ef:d8:d6:53:7d:8a:f0:ec:29:1f:
                    af:49:0f:a8:86:3b:7a:9f:24:a1:97:c9:5f:cd:4b:
                    84:b5:97:5d:cd:e3:a8:d0:8c:f8:59:bf:8a:3c:ca:
                    2e:97:3a:8c:26:fa:f2:3e:5b:d5:d4:96:34:2a:7e:
                    a5:3f:fa:fa:0c:e7:6c:39:03:f2:ce:90:77:46:16:
                    5b:89:13:bf:1e:88:76:5b:0d:5f:61:14:2d:8a:96:
                    99:cf:42:39:68:45:e2:22:c3:2a:89:07:2c:8f:4a:
                    4e:fb:18:12:ad:55:82:4f:74:a5:e5:6e:0a:0a:d1:
                    12:ce:b4:c2:f8:d7:bf:e6:bf:e3:f3:ce:3c:e8:fe:
                    72:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:7C:15:F4:33:DE:56:9B:A9:18:73:8A:71:57:6C:02:80:1A:DE:7E
            X509v3 Authority Key Identifier:
                keyid:EF:86:69:E7:0C:EA:94:97:3A:FD:34:FB:08:EB:59:E9:D8:6B:57:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74Zp5wzqlJc6_TT7COtZ6dhrV_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/397c1e-51a7-416f-a45c-2a0213179c07/1/74Zp5wzqlJc6_TT7COtZ6dhrV_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:5c:47:d7:a1:f9:c4:b5:1e:8c:e9:7a:13:67:ff:d9:da:3c:
         bf:09:ea:da:a5:31:0e:3f:c0:60:b8:d1:d4:28:6e:b9:09:b7:
         c5:6d:c4:40:4c:b1:a8:a1:6d:80:66:47:9a:69:e5:80:31:11:
         a4:97:9c:eb:e9:5f:0a:eb:23:c8:77:ad:b8:a5:41:fc:c7:fd:
         77:68:4f:65:3b:f6:5c:8b:dd:70:f9:18:97:a5:0c:3e:5a:01:
         dd:cc:c2:30:19:0d:87:57:b8:98:1b:9b:9a:76:54:b1:9f:d0:
         a5:06:9a:14:b0:c0:17:e8:2b:ee:83:9b:1f:12:71:64:d4:a0:
         20:36:fd:a4:5f:0d:7f:84:37:3e:0d:4e:cc:c7:59:48:fe:56:
         83:f9:ec:64:af:04:4f:f3:69:f5:d8:29:c3:c7:5f:eb:5d:73:
         f5:f8:73:90:54:4d:34:28:bc:67:93:47:fd:5f:88:7e:4c:5b:
         4e:74:f6:7a:18:d4:90:d7:92:88:35:ab:9e:e3:7e:3d:9d:2a:
         7f:44:05:97:1c:2e:72:dc:f0:92:15:5d:4f:dc:ec:34:cb:95:
         c1:00:5a:9a:17:76:be:b7:66:89:31:d5:03:7b:21:f4:81:2e:
         0d:4d:02:bf:61:54:04:ce:41:a5:60:f1:fa:32:f5:37:f6:bb:
         dc:83:62:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pf4HJLdQQe/wnqgXehTc1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmODY2OWU3MGNlYTk0OTczYWZkMzRmYjA4ZWI1OWU5ZDg2
YjU3ZmMwHhcNMjYwNzIzMTUwMjA1WhcNMjYwNzI0MTUwMjA1WjAzMTEwLwYDVQQD
Eyg5OTdjMTVmNDMzZGU1NjliYTkxODczOGE3MTU3NmMwMjgwMWFkZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF+67ywdlret52Ur9vvkfrsVpxGn
KCh7ffrJRr427EmrvZ6QpTE4WlU0C9gBBCj3TylPsMhQDecEAWisMzMqfAH4YqUI
qKyqjY2cUVeHhFm80CbiADlx7KyOz+4ODdltHrmsTcUMlAYyl9LKRSN/yy057sQn
iow+ZXnbfO/Y1lN9ivDsKR+vSQ+ohjt6nyShl8lfzUuEtZddzeOo0Iz4Wb+KPMou
lzqMJvryPlvV1JY0Kn6lP/r6DOdsOQPyzpB3RhZbiRO/Hoh2Ww1fYRQtipaZz0I5
aEXiIsMqiQcsj0pO+xgSrVWCT3Sl5W4KCtESzrTC+Ne/5r/j88486P5ydQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJl8FfQz3labqRhzinFXbAKAGt5+MB8GA1UdIwQY
MBaAFO+GaecM6pSXOv00+wjrWenYa1f8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzRacDV3enFsSmM2X1RUN0NPdFo2ZGhyVl93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8zOTdjMWUtNTFhNy00MTZmLWE0NWMt
MmEwMjEzMTc5YzA3LzEvNzRacDV3enFsSmM2X1RUN0NPdFo2ZGhyVl93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8zOTdjMWUtNTFhNy00MTZmLWE0NWMtMmEwMjEzMTc5YzA3
LzEvNzRacDV3enFsSmM2X1RUN0NPdFo2ZGhyVl93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVFxH16H5
xLUejOl6E2f/2do8vwnq2qUxDj/AYLjR1ChuuQm3xW3EQEyxqKFtgGZHmmnlgDER
pJec6+lfCusjyHetuKVB/Mf9d2hPZTv2XIvdcPkYl6UMPloB3czCMBkNh1e4mBub
mnZUsZ/QpQaaFLDAF+gr7oObHxJxZNSgIDb9pF8Nf4Q3Pg1OzMdZSP5Wg/nsZK8E
T/Np9dgpw8df611z9fhzkFRNNCi8Z5NH/V+IfkxbTnT2ehjUkNeSiDWrnuN+PZ0q
f0QFlxwuctzwkhVdT9zsNMuVwQBamhd2vrdmiTHVA3sh9IEuDU0Cv2FUBM5BpWDx
+jL1N/a73INiLA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:54:32 2026 by rpki-client