Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File:                     DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier:          dlLCVlcG7vj4lZYvDORCQQm0rcs1euv/m7BZAtJywos=
Subject key identifier:   19:2F:CF:25:32:05:31:23:D7:8E:8F:4B:E9:32:0E:4A:0D:CC:2C:E0
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer:       /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial:       019F90232D60BB08126CEA849E3EBFC76A37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number:          19C7
Signing time:             Thu 23 Jul 2026 18:00:52 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:52 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:52 +0000
Files and hashes:         1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: X1g76iZSTFjMygZsdaqYLJtmuWZZmZPZFS4DpZgiJGo=)
                          2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:23:2d:60:bb:08:12:6c:ea:84:9e:3e:bf:c7:6a:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
        Validity
            Not Before: Jul 23 18:00:52 2026 GMT
            Not After : Jul 24 18:00:52 2026 GMT
        Subject: CN=192fcf2532053123d78e8f4be9320e4a0dcc2ce0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:08:75:50:4b:c8:03:c9:56:64:5b:b8:5f:89:
                    27:0d:82:1e:6d:01:38:e7:22:1d:f7:e9:71:5d:0c:
                    12:81:9d:7d:38:5f:49:2a:99:36:1a:dd:e0:ed:31:
                    3a:6a:d4:89:dc:26:bf:13:b3:9f:dd:a0:7c:69:5c:
                    b7:f0:e9:8a:e7:87:ca:34:af:e4:0f:6a:70:6a:51:
                    4c:07:6f:06:84:bc:69:a8:e9:95:90:c8:6a:cd:ea:
                    d8:a7:6a:cb:b8:25:fb:9c:3c:a6:24:df:6d:eb:f3:
                    0f:eb:53:ea:43:9f:c2:d1:fb:13:25:f4:7d:ca:59:
                    b2:a2:f8:a9:15:da:5f:82:25:bb:09:af:41:14:24:
                    1f:b1:9c:2d:a5:68:91:f5:13:49:56:75:2f:e8:5c:
                    60:1b:f2:a0:13:22:a8:bd:0b:7b:39:ef:9d:32:1b:
                    ee:50:48:5e:7d:55:cc:bd:bd:d1:49:0b:51:5d:c3:
                    80:c2:42:10:53:0b:30:05:f3:c1:9b:52:4b:53:5e:
                    06:cc:8c:63:3f:0b:cf:42:96:e8:a0:48:26:0f:6a:
                    d2:ae:3b:33:07:05:ca:24:a2:ab:97:32:ad:6d:1c:
                    34:ec:72:90:79:16:1d:43:26:09:4d:8f:d9:bd:07:
                    2a:67:e3:8e:5c:1c:a8:7a:c7:3f:77:45:48:14:1f:
                    2f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2F:CF:25:32:05:31:23:D7:8E:8F:4B:E9:32:0E:4A:0D:CC:2C:E0
            X509v3 Authority Key Identifier:
                keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:6e:8b:48:b7:f0:97:1e:08:68:73:de:c7:a7:95:33:77:34:
         1f:3b:b9:34:99:28:36:a4:8b:8e:f6:f2:2b:93:95:2f:2b:17:
         76:b0:b0:26:bb:66:08:14:8a:c2:ae:85:04:91:e4:fd:38:88:
         ac:b3:0e:37:f5:2e:66:47:e4:26:15:c1:1b:30:55:9e:a7:e7:
         ba:24:2b:fd:24:e4:d7:6b:4c:ed:d8:34:01:11:4b:b9:29:81:
         75:8d:f6:a0:81:46:01:91:27:4e:1a:21:38:77:58:8f:c3:52:
         1a:92:1e:af:c3:a4:84:a0:2e:35:0f:f4:c4:6c:b6:c3:d6:fb:
         53:fb:56:82:1e:ad:12:6a:b5:34:bc:d1:64:15:84:52:03:17:
         39:ae:47:fc:59:3c:08:da:9c:d7:ab:fe:8d:13:16:3b:c1:12:
         1f:53:83:bf:75:1a:59:d2:1e:52:56:f3:78:4c:bc:da:d3:d9:
         d8:9b:f0:bd:4e:fc:63:bf:30:0e:db:8b:b1:d4:d8:95:a7:9c:
         56:3d:33:cb:19:80:d8:a5:e7:6e:ea:26:a1:b7:98:77:fd:35:
         14:1a:a9:a8:c6:28:2f:20:13:9b:01:a8:4c:f0:27:71:7a:34:
         c4:18:3b:ad:7b:8c:49:a2:c4:85:f2:96:de:b3:9c:aa:e8:d0:
         32:0f:17:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIy1guwgSbOqEnj6/x2o3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOGFhZTE4OWM2M2NlYjU2NDNjYjA4MDMyN2JjYWEzYjBl
ZjhhNTkwHhcNMjYwNzIzMTgwMDUyWhcNMjYwNzI0MTgwMDUyWjAzMTEwLwYDVQQD
EygxOTJmY2YyNTMyMDUzMTIzZDc4ZThmNGJlOTMyMGU0YTBkY2MyY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Ah1UEvIA8lWZFu4X4knDYIebQE4
5yId9+lxXQwSgZ19OF9JKpk2Gt3g7TE6atSJ3Ca/E7Of3aB8aVy38OmK54fKNK/k
D2pwalFMB28GhLxpqOmVkMhqzerYp2rLuCX7nDymJN9t6/MP61PqQ5/C0fsTJfR9
ylmyovipFdpfgiW7Ca9BFCQfsZwtpWiR9RNJVnUv6FxgG/KgEyKovQt7Oe+dMhvu
UEhefVXMvb3RSQtRXcOAwkIQUwswBfPBm1JLU14GzIxjPwvPQpbooEgmD2rSrjsz
BwXKJKKrlzKtbRw07HKQeRYdQyYJTY/ZvQcqZ+OOXByoesc/d0VIFB8vwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBkvzyUyBTEj146PS+kyDkoNzCzgMB8GA1UdIwQY
MBaAFAyKrhicY861ZDywgDJ7yqOw74pZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQt
YjZiYTg2Y2YzMWY5LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy81MDE1ZjYtMGJkMC00OWY5LWI4NTQtYjZiYTg2Y2YzMWY5
LzEvRElxdUdKeGp6clZrUExDQU1udktvN0R2aWxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAom6LSLfw
lx4IaHPex6eVM3c0Hzu5NJkoNqSLjvbyK5OVLysXdrCwJrtmCBSKwq6FBJHk/TiI
rLMON/UuZkfkJhXBGzBVnqfnuiQr/STk12tM7dg0ARFLuSmBdY32oIFGAZEnThoh
OHdYj8NSGpIer8OkhKAuNQ/0xGy2w9b7U/tWgh6tEmq1NLzRZBWEUgMXOa5H/Fk8
CNqc16v+jRMWO8ESH1ODv3UaWdIeUlbzeEy82tPZ2JvwvU78Y78wDtuLsdTYlaec
Vj0zyxmA2KXnbuomobeYd/01FBqpqMYoLyATmwGoTPAncXo0xBg7rXuMSaLEhfKW
3rOcqujQMg8Xhg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:42:39 2026 by rpki-client