Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File:                     F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier:          odDk/0TDWTgDaZO5aK3K4YBZcZYjZuuWQrH1pIbcFOk=
Subject key identifier:   D8:31:40:59:C9:B4:98:13:6A:F6:A4:4D:44:C4:D0:BD:2F:F0:D4:83
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer:       /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial:       019F94376317BBDF4CB10CBD3130F9B1044C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 13:01:25 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:25 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:25 +0000
Files and hashes:         1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: Qg98dpXN8y039jVWRO6gpHP6YZI6ihVqO2BCqE/dKBU=)
                          2: bZtAv7jof-AuwEu0cxY9E17KiEM.roa (hash: GmHiN36XVNHoznaH+f5s8+gOGqjQoGIfCLxDgTEZBEA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:63:17:bb:df:4c:b1:0c:bd:31:30:f9:b1:04:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
        Validity
            Not Before: Jul 24 13:01:25 2026 GMT
            Not After : Jul 25 13:01:25 2026 GMT
        Subject: CN=d8314059c9b498136af6a44d44c4d0bd2ff0d483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:dd:aa:9c:0d:51:ca:0f:09:b4:e3:63:63:0d:
                    3d:27:44:29:59:c3:37:44:96:fc:6d:ef:15:a7:19:
                    fa:79:ba:da:06:95:90:14:0b:91:e6:6d:48:86:67:
                    c6:37:3a:79:8e:4f:0f:a3:b3:78:fb:67:68:69:5a:
                    07:e9:c9:37:52:66:c9:da:27:0b:10:6d:95:dd:bf:
                    7a:c5:25:a3:87:81:24:a1:57:9f:7b:e2:e3:13:04:
                    3c:4f:65:74:0b:d2:b2:ad:d2:79:27:ec:3f:b5:61:
                    8e:d2:4a:47:af:68:1c:c3:f7:8e:cb:7e:e0:9d:84:
                    be:30:64:0a:9c:a9:c4:dd:b3:f7:04:ac:b7:69:e6:
                    ee:41:1b:00:74:12:25:e2:4f:36:fe:f9:59:4a:fe:
                    0a:77:48:08:30:91:aa:43:fe:9c:d1:23:fe:f5:4f:
                    b6:70:09:3f:b8:74:c7:36:75:b2:d8:17:58:54:74:
                    9b:7f:72:33:90:4b:97:5f:1a:e8:fc:09:1e:4d:94:
                    09:8f:96:78:4e:f2:19:ec:cf:57:c3:09:8a:9b:83:
                    b2:d7:2a:7f:d4:17:f4:f1:8b:a3:28:bf:d0:62:b6:
                    6f:ed:49:16:6c:79:f4:20:15:2c:b6:a0:1d:f4:2c:
                    b5:6a:eb:1d:43:51:ae:28:65:c8:50:d5:e0:a9:c3:
                    9f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:31:40:59:C9:B4:98:13:6A:F6:A4:4D:44:C4:D0:BD:2F:F0:D4:83
            X509v3 Authority Key Identifier:
                keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:ff:c7:a6:89:53:35:f7:46:a9:35:65:39:8d:38:c9:12:59:
         da:83:f5:75:95:65:ca:8a:9e:09:6e:2b:11:17:bc:f5:7c:0e:
         bb:be:18:f8:18:a4:28:18:f7:37:98:5f:6e:bc:26:11:28:00:
         ff:c5:1a:24:06:5a:4d:7c:de:eb:dc:62:93:af:14:53:5c:c5:
         fb:87:19:01:18:c4:99:c3:4f:62:56:55:c3:05:6e:9f:0d:4f:
         a4:6e:0e:df:22:ff:7a:c5:40:d7:1b:5f:3a:75:be:5f:e5:89:
         da:46:d6:7c:3d:ad:72:ad:11:1a:36:c5:aa:d3:32:90:b9:ab:
         4e:11:2e:61:22:c4:9b:b0:85:53:39:8f:57:c3:1b:4f:7c:61:
         60:23:4a:14:c5:99:21:4c:b6:3b:fe:6d:a2:73:a7:be:58:45:
         01:01:7c:d2:96:b6:65:bf:5c:f0:2f:20:89:c4:fd:c5:b6:e7:
         98:94:a4:fb:1d:ec:b8:70:76:10:3d:71:87:4b:39:01:e0:af:
         04:39:e0:e2:56:10:c6:4f:5e:4f:77:4a:f4:75:f2:87:b1:d8:
         56:c2:00:52:a4:47:b2:16:4b:79:6f:50:64:f5:d5:5b:73:fa:
         74:33:e1:21:3c:e7:44:92:f2:e5:fc:44:de:e8:b4:3b:a3:d3:
         c8:77:fc:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN2MXu99MsQy9MTD5sQRMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NDFiZDc2ODUxMzhkYzUxZDVhNmIwY2QzNzgwZjQ2NmI1
N2ZkMTMwHhcNMjYwNzI0MTMwMTI1WhcNMjYwNzI1MTMwMTI1WjAzMTEwLwYDVQQD
EyhkODMxNDA1OWM5YjQ5ODEzNmFmNmE0NGQ0NGM0ZDBiZDJmZjBkNDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd2qnA1Ryg8JtONjYw09J0QpWcM3
RJb8be8Vpxn6ebraBpWQFAuR5m1IhmfGNzp5jk8Po7N4+2doaVoH6ck3UmbJ2icL
EG2V3b96xSWjh4EkoVefe+LjEwQ8T2V0C9KyrdJ5J+w/tWGO0kpHr2gcw/eOy37g
nYS+MGQKnKnE3bP3BKy3aebuQRsAdBIl4k82/vlZSv4Kd0gIMJGqQ/6c0SP+9U+2
cAk/uHTHNnWy2BdYVHSbf3IzkEuXXxro/AkeTZQJj5Z4TvIZ7M9XwwmKm4Oy1yp/
1Bf08YujKL/QYrZv7UkWbHn0IBUstqAd9Cy1ausdQ1GuKGXIUNXgqcOfAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgxQFnJtJgTavakTUTE0L0v8NSDMB8GA1UdIwQY
MBaAFBdBvXaFE43FHVprDNN4D0ZrV/0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgt
MjlmMDlkODkzYWU3LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS9kZjI5MmQtOTU5Yi00ZWFkLTkzNDgtMjlmMDlkODkzYWU3
LzEvRjBHOWRvVVRqY1VkV21zTTAzZ1BSbXRYX1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS//HpolT
NfdGqTVlOY04yRJZ2oP1dZVlyoqeCW4rERe89XwOu74Y+BikKBj3N5hfbrwmESgA
/8UaJAZaTXze69xik68UU1zF+4cZARjEmcNPYlZVwwVunw1PpG4O3yL/esVA1xtf
OnW+X+WJ2kbWfD2tcq0RGjbFqtMykLmrThEuYSLEm7CFUzmPV8MbT3xhYCNKFMWZ
IUy2O/5tonOnvlhFAQF80pa2Zb9c8C8gicT9xbbnmJSk+x3suHB2ED1xh0s5AeCv
BDng4lYQxk9eT3dK9HXyh7HYVsIAUqRHshZLeW9QZPXVW3P6dDPhITznRJLy5fxE
3ui0O6PTyHf8+Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:13:10 2026 by rpki-client