Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
File:                     36acPZg4XUFUBfxv0wqAA2PAF8E.mft (raw, json)
Hash identifier:          xNGRPyAMwvRYzsyXOM7nhiFjwRjYTYQstUV+7YaE7dk=
Subject key identifier:   BB:C5:BE:20:80:1C:21:BD:A5:BF:02:6C:21:A7:09:16:3D:A0:31:16
Authority key identifier: DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1
Certificate issuer:       /CN=dfa69c3d98385d415405fc6fd30a800363c017c1
Certificate serial:       019F8FEC78EE47B8351195B8F74B685C031F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 17:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:06 +0000
Files and hashes:         1: 36acPZg4XUFUBfxv0wqAA2PAF8E.crl (hash: ClZQy8UDiRBWzzw0xcDuPMj/DZRXVFIRZ5+jGrstGE4=)
                          2: _ZC_MGF9yyx42gGb0lgQ-sX228w.roa (hash: bGqRm0SkOPme7T2i93CGaIAZfH+uCY+YSZjEaMa7stY=)
                          3: lpfk7UVcGKZO2jgTSznBpb0u8Pk.roa (hash: DMe8L1nI8dyjjoOJsf6UQZzDm/D+LPuRxMoaepRymzk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:78:ee:47:b8:35:11:95:b8:f7:4b:68:5c:03:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfa69c3d98385d415405fc6fd30a800363c017c1
        Validity
            Not Before: Jul 23 17:01:06 2026 GMT
            Not After : Jul 24 17:01:06 2026 GMT
        Subject: CN=bbc5be20801c21bda5bf026c21a709163da03116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:8a:25:3d:bf:0b:7c:45:96:ca:2e:93:e0:36:
                    8e:d0:7a:fd:79:62:b8:a9:5c:73:94:14:6d:13:c6:
                    b8:6e:aa:cd:a1:08:1e:8a:fb:ae:81:18:2b:8e:1a:
                    f2:07:d0:8a:85:cf:50:d7:e3:5f:5c:8e:ba:da:79:
                    ba:b4:de:5d:b7:b5:98:a1:7e:52:36:80:59:ef:86:
                    06:dd:f6:f2:09:22:30:cb:45:c4:f4:f6:0b:96:59:
                    3b:82:12:03:77:77:36:ff:57:72:ff:7a:a5:9b:dd:
                    22:60:04:23:52:68:52:1f:13:ae:a8:9c:4d:88:46:
                    f4:3a:ba:c8:45:0d:e9:01:68:61:19:84:e2:d5:c9:
                    49:74:ae:ca:91:0a:1e:b0:fe:39:06:47:6c:c8:d4:
                    f2:cf:0b:6b:25:e3:b4:f1:d3:38:a7:9e:93:a3:6c:
                    9e:55:4d:8a:a5:1d:68:66:15:e5:8a:b8:ff:69:99:
                    87:de:98:91:ba:cd:f0:e9:46:f0:2a:4c:4e:2e:a0:
                    4f:90:18:4d:3f:1b:44:69:aa:60:44:e4:28:ef:16:
                    2a:b9:26:ec:8a:76:72:b1:75:c6:0f:e8:ca:b6:7c:
                    4d:1a:60:19:bb:f4:54:2b:59:90:02:ef:f1:16:1f:
                    17:cf:7f:30:e2:8f:fc:3c:3c:f8:b8:4e:83:cb:c5:
                    f8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C5:BE:20:80:1C:21:BD:A5:BF:02:6C:21:A7:09:16:3D:A0:31:16
            X509v3 Authority Key Identifier:
                keyid:DF:A6:9C:3D:98:38:5D:41:54:05:FC:6F:D3:0A:80:03:63:C0:17:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36acPZg4XUFUBfxv0wqAA2PAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0d4810-902a-4b7d-9818-3cef5625aed6/1/36acPZg4XUFUBfxv0wqAA2PAF8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:62:1e:03:b0:bc:de:8a:80:b7:f2:42:45:45:ee:ab:d5:68:
         99:88:ef:82:4c:45:91:8d:57:40:50:4e:74:3e:81:8d:5f:25:
         c9:7e:47:93:f0:4d:c7:c0:c7:35:d3:b3:09:2d:17:e0:a5:cd:
         ce:d5:57:53:38:5f:a0:44:d8:92:fb:01:85:37:b9:61:af:c2:
         68:7f:51:6a:c3:5a:83:70:a0:28:d0:4d:27:89:75:34:9b:ba:
         32:4b:a7:d1:d3:a5:a3:18:18:92:f6:15:cb:4b:d2:3a:7e:45:
         11:3a:20:a4:13:8d:11:ab:2b:8b:1d:33:69:2e:22:fc:ca:a1:
         6d:44:50:fa:51:58:20:c9:27:8e:83:9b:74:e6:7c:cd:94:73:
         38:e8:0b:45:78:20:c8:fe:fe:bd:4c:25:18:e0:2d:02:32:26:
         1c:8d:f0:38:b1:fd:70:d8:12:65:d9:d1:79:b3:f5:03:a7:5a:
         0a:a8:52:83:db:d8:23:86:ad:4d:b8:cc:66:c3:69:bf:af:48:
         70:19:0f:4f:ab:57:5f:10:1f:45:a2:2c:d8:e7:dd:a9:62:d4:
         84:40:e5:82:1d:79:05:c1:ab:03:66:27:71:96:d2:43:d8:38:
         a6:6e:50:5f:fd:6d:3a:aa:a8:33:0e:19:8f:71:62:6c:ab:cf:
         e8:90:77:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7HjuR7g1EZW490toXAMfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYTY5YzNkOTgzODVkNDE1NDA1ZmM2ZmQzMGE4MDAzNjNj
MDE3YzEwHhcNMjYwNzIzMTcwMTA2WhcNMjYwNzI0MTcwMTA2WjAzMTEwLwYDVQQD
EyhiYmM1YmUyMDgwMWMyMWJkYTViZjAyNmMyMWE3MDkxNjNkYTAzMTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4olPb8LfEWWyi6T4DaO0Hr9eWK4
qVxzlBRtE8a4bqrNoQgeivuugRgrjhryB9CKhc9Q1+NfXI662nm6tN5dt7WYoX5S
NoBZ74YG3fbyCSIwy0XE9PYLllk7ghIDd3c2/1dy/3qlm90iYAQjUmhSHxOuqJxN
iEb0OrrIRQ3pAWhhGYTi1clJdK7KkQoesP45BkdsyNTyzwtrJeO08dM4p56To2ye
VU2KpR1oZhXlirj/aZmH3piRus3w6UbwKkxOLqBPkBhNPxtEaapgROQo7xYquSbs
inZysXXGD+jKtnxNGmAZu/RUK1mQAu/xFh8Xz38w4o/8PDz4uE6Dy8X4+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLvFviCAHCG9pb8CbCGnCRY9oDEWMB8GA1UdIwQY
MBaAFN+mnD2YOF1BVAX8b9MKgANjwBfBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgt
M2NlZjU2MjVhZWQ2LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8wZDQ4MTAtOTAyYS00YjdkLTk4MTgtM2NlZjU2MjVhZWQ2
LzEvMzZhY1BaZzRYVUZVQmZ4djB3cUFBMlBBRjhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2IeA7C8
3oqAt/JCRUXuq9VomYjvgkxFkY1XQFBOdD6BjV8lyX5Hk/BNx8DHNdOzCS0X4KXN
ztVXUzhfoETYkvsBhTe5Ya/CaH9RasNag3CgKNBNJ4l1NJu6Mkun0dOloxgYkvYV
y0vSOn5FETogpBONEasrix0zaS4i/MqhbURQ+lFYIMknjoObdOZ8zZRzOOgLRXgg
yP7+vUwlGOAtAjImHI3wOLH9cNgSZdnRebP1A6daCqhSg9vYI4atTbjMZsNpv69I
cBkPT6tXXxAfRaIs2OfdqWLUhEDlgh15BcGrA2YncZbSQ9g4pm5QX/1tOqqoMw4Z
j3FibKvP6JB3ng==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:29 2026 by rpki-client