Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File:                     trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier:          5CnCGRD2NDqfWqS2wMiakJCARaE/qSXJU5O8tEA6vj8=
Subject key identifier:   19:85:BF:68:F8:49:6C:D2:00:CA:E5:33:01:64:6B:DE:5E:92:A3:F5
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer:       /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial:       019F9392795EA2DF973F92AE78ABACC0BE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number:          165A
Signing time:             Fri 24 Jul 2026 10:01:17 +0000
Manifest this update:     Fri 24 Jul 2026 10:01:17 +0000
Manifest next update:     Sat 25 Jul 2026 10:01:17 +0000
Files and hashes:         1: 6RygQ5X9m4wR38_i9WAiO4if2HM.roa (hash: kUWQpysYJq9PoXLRmw04AY/W59nDN80L6l7bNKqqxYU=)
                          2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: usHRFGpgwxJ4PkT0/jzJEpp9cOZTa1cHRxGCL5FmnVA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:92:79:5e:a2:df:97:3f:92:ae:78:ab:ac:c0:be:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
        Validity
            Not Before: Jul 24 10:01:17 2026 GMT
            Not After : Jul 25 10:01:17 2026 GMT
        Subject: CN=1985bf68f8496cd200cae53301646bde5e92a3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:20:d0:7a:66:f1:9e:42:50:b4:4e:b4:79:74:
                    84:f7:e0:fe:00:92:04:0a:be:de:85:61:a6:cd:95:
                    99:af:2d:38:a1:8d:d5:c9:58:79:69:48:40:4b:28:
                    d5:9d:fa:ce:f3:91:5e:35:61:c8:06:ca:47:3c:db:
                    75:38:99:b4:cf:a4:7a:7e:6b:87:c4:7c:52:81:c4:
                    62:8d:e0:a8:19:4b:0c:ca:c1:3b:49:bb:8a:a0:80:
                    bd:15:7e:c0:78:23:b0:67:e3:5d:37:30:c5:1d:24:
                    85:96:06:fa:2f:b0:e3:7f:28:27:f0:10:f9:a5:1b:
                    2b:94:1d:f7:7e:bb:09:2b:71:7d:03:bb:2a:14:23:
                    42:4a:42:cc:89:8a:ef:b9:cb:63:56:a3:20:20:e5:
                    08:ba:ce:1b:f1:c4:a2:73:f3:0e:3b:10:2e:8f:d9:
                    72:93:23:a7:5a:9d:60:c3:a3:16:f8:13:48:58:0d:
                    58:bd:d3:44:19:20:38:9f:5c:16:7f:ac:10:98:ca:
                    0b:ce:54:37:8f:18:28:1a:ec:7d:66:92:0f:17:02:
                    ae:87:80:ce:82:2f:dd:2c:2d:ae:d8:28:be:91:e0:
                    88:2f:28:0e:4b:6f:29:a7:a5:be:be:17:56:07:cf:
                    be:5f:42:1c:bd:e4:67:11:c0:08:15:72:d9:27:d1:
                    ad:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:85:BF:68:F8:49:6C:D2:00:CA:E5:33:01:64:6B:DE:5E:92:A3:F5
            X509v3 Authority Key Identifier:
                keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:0a:97:66:41:68:0b:f2:a8:ee:b7:d1:0b:ca:23:7c:30:86:
         cf:10:f7:45:2e:ea:5b:9c:dc:0d:e7:77:4b:74:15:7b:b6:4a:
         d9:07:a1:b1:6a:fb:8c:76:46:55:02:85:e5:ab:8d:91:79:39:
         a6:21:37:f5:02:47:a1:95:47:6f:04:87:84:ef:1c:fe:24:bf:
         d4:cb:da:0a:c2:66:eb:79:98:a9:e9:d7:d7:5a:36:87:a7:d1:
         c6:56:b8:b3:cc:c6:fa:47:2a:74:60:aa:cb:78:d2:35:a3:ab:
         ac:bd:43:82:3b:20:79:9d:5d:07:b2:43:9b:dd:65:a9:ad:43:
         ea:2d:8b:95:dc:39:22:d2:7e:26:c7:64:12:c1:9c:96:32:41:
         75:c1:f3:24:d7:38:5b:25:d6:3f:f6:ae:2f:cb:b9:d7:3e:13:
         78:7b:d4:b2:50:a6:f0:59:70:f2:b6:e0:5e:40:21:67:27:aa:
         ac:aa:6f:34:06:c3:1a:79:32:23:05:f2:ba:1c:b6:22:6d:21:
         87:8d:a4:a1:1d:0a:92:82:7b:5b:33:ca:ad:ca:e2:6f:ff:ae:
         3b:25:c9:69:2f:72:0c:20:11:f0:f3:cd:51:a1:ce:30:dd:73:
         06:1d:b5:3d:cc:40:5a:23:33:ee:eb:6f:93:3f:7b:7f:35:ae:
         80:33:ce:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Tknleot+XP5KueKuswL5nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2YjI0OWEyYzU2MmM1ZWRiZGI3NTA1OGUyNmJkNzcwMTIz
ZTk1YWUwHhcNMjYwNzI0MTAwMTE3WhcNMjYwNzI1MTAwMTE3WjAzMTEwLwYDVQQD
EygxOTg1YmY2OGY4NDk2Y2QyMDBjYWU1MzMwMTY0NmJkZTVlOTJhM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6SDQembxnkJQtE60eXSE9+D+AJIE
Cr7ehWGmzZWZry04oY3VyVh5aUhASyjVnfrO85FeNWHIBspHPNt1OJm0z6R6fmuH
xHxSgcRijeCoGUsMysE7SbuKoIC9FX7AeCOwZ+NdNzDFHSSFlgb6L7Djfygn8BD5
pRsrlB33frsJK3F9A7sqFCNCSkLMiYrvuctjVqMgIOUIus4b8cSic/MOOxAuj9ly
kyOnWp1gw6MW+BNIWA1YvdNEGSA4n1wWf6wQmMoLzlQ3jxgoGux9ZpIPFwKuh4DO
gi/dLC2u2Ci+keCILygOS28pp6W+vhdWB8++X0IcveRnEcAIFXLZJ9GtCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmFv2j4SWzSAMrlMwFka95ekqP1MB8GA1UdIwQY
MBaAFLaySaLFYsXtvbdQWOJr13ASPpWuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUt
OWNlMzFjMjczMTA4LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC80NTViMjYtNmFhMS00MzVmLWJkNDUtOWNlMzFjMjczMTA4
LzEvdHJKSm9zVml4ZTI5dDFCWTRtdlhjQkktbGE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjQqXZkFo
C/Ko7rfRC8ojfDCGzxD3RS7qW5zcDed3S3QVe7ZK2QehsWr7jHZGVQKF5auNkXk5
piE39QJHoZVHbwSHhO8c/iS/1MvaCsJm63mYqenX11o2h6fRxla4s8zG+kcqdGCq
y3jSNaOrrL1DgjsgeZ1dB7JDm91lqa1D6i2Lldw5ItJ+JsdkEsGcljJBdcHzJNc4
WyXWP/auL8u51z4TeHvUslCm8Flw8rbgXkAhZyeqrKpvNAbDGnkyIwXyuhy2Im0h
h42koR0KkoJ7WzPKrcrib/+uOyXJaS9yDCAR8PPNUaHOMN1zBh21PcxAWiMz7utv
kz97fzWugDPOUQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:30:12 2026 by rpki-client