Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
File:                     sUP6cD--4Eu9kc5joyFIs2uOVao.mft (raw, json)
Hash identifier:          /V7M5e0vwrrZHdVg49L1TfIPGWM1zI7LP0yRk8hIEa0=
Subject key identifier:   32:90:64:8D:0C:85:C9:34:27:E8:BB:04:09:B0:22:28:58:14:3D:E8
Authority key identifier: B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA
Certificate issuer:       /CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
Certificate serial:       019F9391FE9467361E37ED1CE8514DE56FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
Manifest number:          19CC
Signing time:             Fri 24 Jul 2026 10:00:46 +0000
Manifest this update:     Fri 24 Jul 2026 10:00:46 +0000
Manifest next update:     Sat 25 Jul 2026 10:00:46 +0000
Files and hashes:         1: AI5iPwrPeQM75vgCBirIJ7ULXR8.roa (hash: 6BPizRCmHI1yenYS4NwhiHl3z1wmNCdGTc9GKZg1Dkg=)
                          2: n5pV2dNWRA_f9PGG9onX31tv0X4.roa (hash: D07pEt8gK/cdGWqE9Zyt/+iA5IXUOBq9V7PLS+yh6/A=)
                          3: sEzlM5R6zA-ZnYv0970VvpCyW2s.roa (hash: QcSUN0qNT/RW84mhkqVzl01FcB1TS7ALX77ko6AurMc=)
                          4: sUP6cD--4Eu9kc5joyFIs2uOVao.crl (hash: MeFwcAMwXflPoswhcmOjIQdzVbN/IQEdEg9ibMrZGbk=)
                          5: u3Sm5CQkYvsGuCc2LmoCaugkKjw.roa (hash: QovOPnDsIRjc0fHKUk+YUhtZOJkATZJ4vmW0nQyk6FY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:91:fe:94:67:36:1e:37:ed:1c:e8:51:4d:e5:6f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b143fa703fbee04bbd91ce63a32148b36b8e55aa
        Validity
            Not Before: Jul 24 10:00:46 2026 GMT
            Not After : Jul 25 10:00:46 2026 GMT
        Subject: CN=3290648d0c85c93427e8bb0409b0222858143de8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d9:e9:13:c4:d5:06:3c:57:04:da:14:9e:1c:
                    1b:87:a8:02:8e:e5:aa:8b:88:43:6d:98:4d:00:5a:
                    bf:7b:b7:8d:5e:00:9d:3d:dd:7f:51:8e:98:a7:be:
                    41:2e:87:06:77:e7:92:44:0a:d1:1d:85:d6:45:4c:
                    b6:10:bc:68:22:e1:c8:b2:5d:40:7a:8b:27:cd:cd:
                    19:e3:4b:b8:01:12:5e:cd:96:80:6a:30:bd:4f:58:
                    66:10:4a:5f:59:d6:44:4e:9c:2f:8b:f5:54:37:b6:
                    6f:00:5e:86:09:00:33:ea:bc:ad:5d:51:cc:ee:58:
                    e8:b6:66:50:be:11:91:45:a4:75:e9:67:56:72:6a:
                    33:5b:2d:fe:c0:0a:c9:60:5e:92:fe:cb:27:76:d1:
                    8c:42:a0:5b:12:92:e4:e9:c4:9b:4c:41:08:6a:fb:
                    44:2d:43:39:67:34:17:15:cb:f4:6b:c0:23:ad:95:
                    fd:be:b3:83:73:cf:90:85:00:07:6d:f6:22:18:ff:
                    ed:a5:ee:8a:98:ef:52:b0:f2:18:e8:90:3e:49:35:
                    eb:4a:8b:e5:17:0c:6f:15:1b:c9:cd:82:6d:bc:02:
                    fc:30:d5:c7:e3:8a:2c:f7:26:d7:96:d0:e9:e1:e1:
                    80:44:cd:15:b3:9c:f2:e4:6b:a7:1d:8f:39:7d:1a:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:90:64:8D:0C:85:C9:34:27:E8:BB:04:09:B0:22:28:58:14:3D:E8
            X509v3 Authority Key Identifier:
                keyid:B1:43:FA:70:3F:BE:E0:4B:BD:91:CE:63:A3:21:48:B3:6B:8E:55:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUP6cD--4Eu9kc5joyFIs2uOVao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b9342f-5916-4644-b1aa-00d1e7a170a2/1/sUP6cD--4Eu9kc5joyFIs2uOVao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d8:fa:b9:78:07:05:11:da:08:12:c5:6e:37:cb:d7:9f:98:
         33:48:2d:19:6b:3c:eb:b5:73:59:36:86:c4:94:40:d8:27:ac:
         8c:da:41:3a:78:a2:1a:59:c9:52:71:ac:c0:7f:b7:e1:55:71:
         b8:4f:96:a2:0b:69:2c:cb:62:93:41:31:13:0c:69:d2:92:00:
         2a:b2:44:4a:e7:23:27:25:6d:f7:bf:51:0c:7a:73:da:ee:3d:
         a8:8a:d7:40:f6:1c:8b:e1:88:50:a3:6f:6f:c6:a9:81:7b:57:
         d1:fd:c1:85:dd:17:cd:bf:c8:af:f8:10:34:4b:ca:91:6c:df:
         b6:8b:38:04:d0:83:07:6b:6b:48:ab:44:ca:7d:cd:4c:50:a7:
         32:bc:95:56:f1:7a:c5:f5:39:49:15:4e:ec:7c:af:a6:e9:9d:
         25:4d:aa:73:e4:7b:52:65:41:7b:bd:c1:79:c2:56:60:2e:cd:
         f7:49:47:43:0b:58:02:83:75:bc:52:e0:15:81:ff:08:21:4b:
         ab:36:2a:d4:df:18:6e:cb:94:80:58:d3:ec:f3:fc:1f:1d:91:
         83:c8:da:f1:57:30:8f:26:59:58:27:b4:e8:3e:33:e3:c4:51:
         db:51:5a:1b:e7:e3:41:6a:be:ec:1e:9b:7f:4f:2e:8a:76:d0:
         45:42:c6:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tkf6UZzYeN+0c6FFN5W/iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNDNmYTcwM2ZiZWUwNGJiZDkxY2U2M2EzMjE0OGIzNmI4
ZTU1YWEwHhcNMjYwNzI0MTAwMDQ2WhcNMjYwNzI1MTAwMDQ2WjAzMTEwLwYDVQQD
EygzMjkwNjQ4ZDBjODVjOTM0MjdlOGJiMDQwOWIwMjIyODU4MTQzZGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9npE8TVBjxXBNoUnhwbh6gCjuWq
i4hDbZhNAFq/e7eNXgCdPd1/UY6Yp75BLocGd+eSRArRHYXWRUy2ELxoIuHIsl1A
eosnzc0Z40u4ARJezZaAajC9T1hmEEpfWdZETpwvi/VUN7ZvAF6GCQAz6rytXVHM
7ljotmZQvhGRRaR16WdWcmozWy3+wArJYF6S/ssndtGMQqBbEpLk6cSbTEEIavtE
LUM5ZzQXFcv0a8AjrZX9vrODc8+QhQAHbfYiGP/tpe6KmO9SsPIY6JA+STXrSovl
FwxvFRvJzYJtvAL8MNXH44os9ybXltDp4eGARM0Vs5zy5GunHY85fRqXiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKQZI0Mhck0J+i7BAmwIihYFD3oMB8GA1UdIwQY
MBaAFLFD+nA/vuBLvZHOY6MhSLNrjlWqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEt
MDBkMWU3YTE3MGEyLzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9iOTM0MmYtNTkxNi00NjQ0LWIxYWEtMDBkMWU3YTE3MGEy
LzEvc1VQNmNELS00RXU5a2M1am95RklzMnVPVmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNj6uXgH
BRHaCBLFbjfL15+YM0gtGWs867VzWTaGxJRA2CesjNpBOniiGlnJUnGswH+34VVx
uE+WogtpLMtik0ExEwxp0pIAKrJESucjJyVt979RDHpz2u49qIrXQPYci+GIUKNv
b8apgXtX0f3Bhd0Xzb/Ir/gQNEvKkWzftos4BNCDB2trSKtEyn3NTFCnMryVVvF6
xfU5SRVO7HyvpumdJU2qc+R7UmVBe73BecJWYC7N90lHQwtYAoN1vFLgFYH/CCFL
qzYq1N8YbsuUgFjT7PP8Hx2Rg8ja8VcwjyZZWCe06D4z48RR21FaG+fjQWq+7B6b
f08uinbQRULGVQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:38:56 2026 by rpki-client