Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File:                     v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier:          a0rIuMGFvtE3thbd5tzoxyBD5S7V6s9DcNd19C4uIlQ=
Subject key identifier:   D6:3E:D3:72:79:14:67:C6:61:35:CD:CD:A8:B5:7A:C9:0E:86:A9:C9
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer:       /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial:       019F85313516470D5243868340D155EB99F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number:          19C1
Signing time:             Tue 21 Jul 2026 15:00:22 +0000
Manifest this update:     Tue 21 Jul 2026 15:00:22 +0000
Manifest next update:     Wed 22 Jul 2026 15:00:22 +0000
Files and hashes:         1: 33KpGlS_VtYMS4VxaCOKuIoKRIU.roa (hash: PycRk9WWt2oF1w6VPqOesZM2Iyc5sLWnv91I0/vqfTA=)
                          2: 6FH6tzQ-OGL1olRZmGsLavyetEI.roa (hash: t7CC5E4Cq4qAeFI/xEX8HmFf3pMyY/Orv1k1m68NVmM=)
                          3: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: XRQou/7qxNZP1x7MeXkp1RaxpCZq6W+zWsYlzccy8X4=)
                          4: zt1e9hXqnKC7GTDcsl5TmahbR14.roa (hash: cMjId05GIC2DoYaxGvqZ9tQQexKxYbYtbXXHMb77nW0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:31:35:16:47:0d:52:43:86:83:40:d1:55:eb:99:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
        Validity
            Not Before: Jul 21 15:00:22 2026 GMT
            Not After : Jul 22 15:00:22 2026 GMT
        Subject: CN=d63ed372791467c66135cdcda8b57ac90e86a9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:29:27:a0:34:ed:16:58:08:42:e3:4b:60:13:
                    61:69:91:0e:3f:e2:1d:97:d3:b7:8c:89:47:71:3e:
                    fd:48:19:bf:15:1a:87:79:ea:56:24:d1:4e:ba:55:
                    c3:a0:b6:8d:ee:4e:3e:11:b8:b4:52:bd:d2:aa:1d:
                    75:bf:c5:3c:d2:1c:69:6f:45:8f:02:8a:8d:54:0f:
                    39:db:a9:fe:c9:58:66:67:6c:3c:8d:b1:2b:f6:5c:
                    a1:9a:9d:74:75:f7:c0:e4:6a:84:ed:c2:64:d5:88:
                    20:52:09:4d:34:82:5e:12:96:59:9d:c9:f5:aa:2f:
                    87:9e:b0:ab:5b:98:75:50:71:6e:2b:0b:d3:6f:eb:
                    af:21:80:49:21:78:e1:3b:d5:e1:21:df:1e:9b:91:
                    1a:bf:37:b7:d4:00:7b:c2:5c:ca:8a:4f:cb:2c:9d:
                    d9:6f:bf:ca:b1:a2:23:1b:bc:29:8d:0a:ff:a7:da:
                    55:60:f1:9a:17:7c:59:fe:82:51:23:6f:39:fe:b7:
                    63:99:7e:87:43:e3:9f:be:97:aa:0d:82:fd:5b:03:
                    48:55:96:21:85:c6:3a:4a:28:9d:ef:5f:70:99:52:
                    bc:b9:29:78:22:64:07:66:03:d7:32:1d:17:7c:c8:
                    73:0f:7d:36:a1:f8:51:f7:50:c5:07:bc:2f:e5:62:
                    02:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3E:D3:72:79:14:67:C6:61:35:CD:CD:A8:B5:7A:C9:0E:86:A9:C9
            X509v3 Authority Key Identifier:
                keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:a6:0b:4c:55:03:37:d1:98:df:b3:bf:6c:d3:88:e4:84:c2:
         ec:ba:43:3f:1c:97:b1:18:3b:1a:f3:23:bc:a2:a0:a5:d8:16:
         81:13:86:fa:dd:b0:99:d4:f3:29:c1:d9:76:dc:2e:92:49:f8:
         93:e1:8f:80:65:b3:3d:f5:63:21:da:76:bd:72:90:a3:5d:b9:
         61:d6:10:da:4d:c5:1b:7d:b6:e1:68:92:bd:f7:39:da:f5:85:
         db:65:99:d4:1e:fe:d7:da:98:7d:c8:84:28:05:e4:f7:22:cf:
         ef:ca:fd:60:af:30:71:5a:ca:78:81:45:c2:6f:e2:70:a8:de:
         4a:79:ea:5e:e1:c1:35:ab:dd:7d:d4:51:9e:81:c1:13:ea:62:
         8a:aa:5b:44:99:ae:55:0a:2f:63:3e:a2:10:7a:06:7d:ab:6d:
         0b:69:fd:34:35:ea:7b:88:ad:bc:bd:08:4e:42:e9:6b:27:a6:
         f6:0f:f6:56:a8:98:f0:a9:a6:e8:c5:00:81:7c:cd:f6:2e:5f:
         8b:a0:45:ed:3e:d5:da:a1:6d:63:42:e1:9b:c3:14:16:c4:7c:
         5f:a3:b7:df:ae:7c:c8:3f:65:4f:11:99:09:a0:6d:29:c6:9c:
         ac:27:16:05:8b:ef:42:d8:f4:cd:52:08:fd:50:dc:94:b8:c8:
         3a:b8:8c:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FMTUWRw1SQ4aDQNFV65n2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDgxY2E5MGNjNTIyNDU4NmFmZWJhYjFjNzhiMTc5MDI2
OGQ1YzEwHhcNMjYwNzIxMTUwMDIyWhcNMjYwNzIyMTUwMDIyWjAzMTEwLwYDVQQD
EyhkNjNlZDM3Mjc5MTQ2N2M2NjEzNWNkY2RhOGI1N2FjOTBlODZhOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iknoDTtFlgIQuNLYBNhaZEOP+Id
l9O3jIlHcT79SBm/FRqHeepWJNFOulXDoLaN7k4+Ebi0Ur3Sqh11v8U80hxpb0WP
AoqNVA8526n+yVhmZ2w8jbEr9lyhmp10dffA5GqE7cJk1YggUglNNIJeEpZZncn1
qi+HnrCrW5h1UHFuKwvTb+uvIYBJIXjhO9XhId8em5Eavze31AB7wlzKik/LLJ3Z
b7/KsaIjG7wpjQr/p9pVYPGaF3xZ/oJRI285/rdjmX6HQ+OfvpeqDYL9WwNIVZYh
hcY6Siid719wmVK8uSl4ImQHZgPXMh0XfMhzD302ofhR91DFB7wv5WIChQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNY+03J5FGfGYTXNzai1eskOhqnJMB8GA1UdIwQY
MBaAFL/YHKkMxSJFhq/rqxx4sXkCaNXBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2Zjct
ODRhZGNiZjVhYzU1LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi8yNWE1OWMtYzJmYy00ZmQ0LTk2ZjctODRhZGNiZjVhYzU1
LzEvdjlnY3FRekZJa1dHci11ckhIaXhlUUpvMWNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKYLTFUD
N9GY37O/bNOI5ITC7LpDPxyXsRg7GvMjvKKgpdgWgROG+t2wmdTzKcHZdtwukkn4
k+GPgGWzPfVjIdp2vXKQo125YdYQ2k3FG3224WiSvfc52vWF22WZ1B7+19qYfciE
KAXk9yLP78r9YK8wcVrKeIFFwm/icKjeSnnqXuHBNavdfdRRnoHBE+piiqpbRJmu
VQovYz6iEHoGfattC2n9NDXqe4itvL0ITkLpayem9g/2VqiY8Kmm6MUAgXzN9i5f
i6BF7T7V2qFtY0Lhm8MUFsR8X6O33658yD9lTxGZCaBtKcacrCcWBYvvQtj0zVII
/VDclLjIOriMNA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:08:01 2026 by rpki-client