Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
File:                     94ItRZflST0VF4v7EOaEHdF-WJc.mft (raw, json)
Hash identifier:          WFD8of7h8BlEND7Ii0eEhH9KrPy2u8v7o4475zD6jgQ=
Subject key identifier:   48:AB:C3:41:19:A0:35:A4:EE:A0:B4:03:CB:F5:AB:15:FB:35:80:52
Authority key identifier: F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97
Certificate issuer:       /CN=f7822d4597e5493d15178bfb10e6841dd17e5897
Certificate serial:       019F8FECC6157C7E27F3B9356F6B853F3C9A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
Manifest number:          19CB
Signing time:             Thu 23 Jul 2026 17:01:26 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:26 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:26 +0000
Files and hashes:         1: 94ItRZflST0VF4v7EOaEHdF-WJc.crl (hash: XkTGfd6xQ2LyR0Qq912bRmqOgcrMxh20kq2WQ4CBaxY=)
                          2: Ooaqx-AaUuIu05bcvjpYwUT3gg0.roa (hash: WYWgX4Kkm4uSctkElEdv5T7C0cdbRdRsvjVMLWI0Es0=)
                          3: ccNKaJaHrf3w7WRgXmlLGSGlh3g.roa (hash: GNXHKw8JOl4x62WkohXxkLR6V3oFi4zgRDQxr+0jQ1k=)
                          4: eM23ZnD8jpZVPByDqpueUzr7VuM.roa (hash: XpFVafOc5evuKnLSP6z1Ow2v+VF3PM8B+n8NEsUA1rw=)
                          5: tcsP5brAEAunOOZmw7uzUCdknZY.roa (hash: 2QWWwqVUcIdmiuZeMh2Xyt6tD8Eiy3oPwgkIaE2T/X0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:c6:15:7c:7e:27:f3:b9:35:6f:6b:85:3f:3c:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7822d4597e5493d15178bfb10e6841dd17e5897
        Validity
            Not Before: Jul 23 17:01:26 2026 GMT
            Not After : Jul 24 17:01:26 2026 GMT
        Subject: CN=48abc34119a035a4eea0b403cbf5ab15fb358052
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:88:0c:cc:81:a7:b6:05:61:03:ec:88:80:de:
                    c8:89:97:fa:c5:16:8c:13:22:5e:84:c5:1a:7c:51:
                    db:21:a5:f8:c2:fb:a5:1e:c9:e0:f3:fe:78:1d:3b:
                    48:78:8b:a5:6f:f4:4b:5f:70:a8:24:3b:bb:60:f8:
                    d8:4f:13:cd:d2:7e:8b:d7:76:e4:dd:5a:9c:bb:bc:
                    e0:89:62:8e:94:94:01:69:2e:c1:5a:71:41:65:93:
                    1a:05:9b:ee:c2:cf:eb:27:e9:63:06:29:2f:8c:69:
                    d1:4a:67:4a:71:cf:18:98:3f:e9:87:b6:95:b7:df:
                    8d:a8:c1:21:f1:79:b0:38:44:c4:d0:73:e2:ea:85:
                    ba:3b:3d:4d:ff:c7:bf:6a:9c:e5:78:b3:ba:8d:ec:
                    03:b2:08:24:d2:61:06:d8:f6:0d:d9:10:1a:03:38:
                    9b:21:cc:39:3c:89:bc:73:0c:8f:99:19:d6:06:e9:
                    f9:b6:ac:ec:5e:60:bc:25:00:25:04:71:36:f4:95:
                    29:c2:f4:c8:30:69:f8:73:38:68:d6:d6:66:94:88:
                    bc:e3:0a:af:ad:5d:e8:35:83:d9:3c:80:81:1c:8c:
                    94:ad:ad:0d:10:da:3d:51:f7:dc:76:98:27:72:a6:
                    36:68:cf:2f:89:64:69:c9:ba:69:62:50:74:1a:70:
                    28:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AB:C3:41:19:A0:35:A4:EE:A0:B4:03:CB:F5:AB:15:FB:35:80:52
            X509v3 Authority Key Identifier:
                keyid:F7:82:2D:45:97:E5:49:3D:15:17:8B:FB:10:E6:84:1D:D1:7E:58:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94ItRZflST0VF4v7EOaEHdF-WJc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/31081a-8b5a-49ec-9036-862e99973fc3/1/94ItRZflST0VF4v7EOaEHdF-WJc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:6c:4d:ab:98:b3:5f:93:5a:a1:3a:16:96:a1:80:3e:ca:c3:
         bb:90:78:df:db:9f:b4:6c:04:4f:20:d8:c9:3f:68:37:20:ef:
         58:f5:84:5c:40:9c:2f:1b:12:90:ca:20:98:ba:33:0c:28:ea:
         45:b6:90:9f:54:22:8d:4f:c2:b2:5f:50:fb:f0:8f:58:b7:8b:
         09:f8:71:dc:98:32:8e:42:ec:77:fe:e4:d5:83:96:46:f9:de:
         5b:ca:6c:2a:65:c9:a4:1f:fb:18:29:b8:b0:81:33:0a:30:94:
         dc:a9:cc:e5:a4:92:7d:db:94:49:3c:9d:6f:fd:28:9f:95:dc:
         36:4d:65:e4:66:d3:17:d6:a9:ad:dd:b6:34:b9:4c:9b:50:57:
         d3:5e:7d:fc:37:6c:87:17:7c:59:b6:40:37:2f:b6:98:47:6d:
         e5:9c:c8:7f:41:64:1b:8f:00:74:7f:aa:97:9a:30:2d:14:12:
         58:bf:48:a5:26:76:40:13:24:d5:43:75:c6:2c:c2:23:1b:c4:
         e9:c3:5e:d0:d1:7c:ae:8f:e4:ca:fa:c0:9d:11:a7:d9:18:3f:
         ca:be:96:b9:77:b0:25:2e:1e:fc:44:1b:a0:2a:97:67:ad:b9:
         f8:d5:54:e4:d9:55:00:20:71:1e:15:7c:6a:b6:21:5a:62:ae:
         71:5b:48:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7MYVfH4n87k1b2uFPzyaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ODIyZDQ1OTdlNTQ5M2QxNTE3OGJmYjEwZTY4NDFkZDE3
ZTU4OTcwHhcNMjYwNzIzMTcwMTI2WhcNMjYwNzI0MTcwMTI2WjAzMTEwLwYDVQQD
Eyg0OGFiYzM0MTE5YTAzNWE0ZWVhMGI0MDNjYmY1YWIxNWZiMzU4MDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4gMzIGntgVhA+yIgN7IiZf6xRaM
EyJehMUafFHbIaX4wvulHsng8/54HTtIeIulb/RLX3CoJDu7YPjYTxPN0n6L13bk
3Vqcu7zgiWKOlJQBaS7BWnFBZZMaBZvuws/rJ+ljBikvjGnRSmdKcc8YmD/ph7aV
t9+NqMEh8XmwOETE0HPi6oW6Oz1N/8e/apzleLO6jewDsggk0mEG2PYN2RAaAzib
Icw5PIm8cwyPmRnWBun5tqzsXmC8JQAlBHE29JUpwvTIMGn4czho1tZmlIi84wqv
rV3oNYPZPICBHIyUra0NENo9UffcdpgncqY2aM8viWRpybppYlB0GnAo/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEirw0EZoDWk7qC0A8v1qxX7NYBSMB8GA1UdIwQY
MBaAFPeCLUWX5Uk9FReL+xDmhB3RfliXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYt
ODYyZTk5OTczZmMzLzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zMTA4MWEtOGI1YS00OWVjLTkwMzYtODYyZTk5OTczZmMz
LzEvOTRJdFJaZmxTVDBWRjR2N0VPYUVIZEYtV0pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHWxNq5iz
X5NaoToWlqGAPsrDu5B439uftGwETyDYyT9oNyDvWPWEXECcLxsSkMogmLozDCjq
RbaQn1QijU/Csl9Q+/CPWLeLCfhx3JgyjkLsd/7k1YOWRvneW8psKmXJpB/7GCm4
sIEzCjCU3KnM5aSSfduUSTydb/0on5XcNk1l5GbTF9aprd22NLlMm1BX0159/Dds
hxd8WbZANy+2mEdt5ZzIf0FkG48AdH+ql5owLRQSWL9IpSZ2QBMk1UN1xizCIxvE
6cNe0NF8ro/kyvrAnRGn2Rg/yr6WuXewJS4e/EQboCqXZ625+NVU5NlVACBxHhV8
arYhWmKucVtIcg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:30 2026 by rpki-client