Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
File:                     X5n94NY7EbXC3YFsD5PC6lg1AzY.mft (raw, json)
Hash identifier:          tIcFTlCfba0rcYNNsUulI2p7ZJ4V4PB19nwYiSwNSeA=
Subject key identifier:   48:39:CE:00:68:91:A2:18:5D:E4:18:DD:CB:9D:97:A2:E1:F4:07:64
Authority key identifier: 5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36
Certificate issuer:       /CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
Certificate serial:       019F867B644F42645E09EA641D42CD058D6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
Manifest number:          19C5
Signing time:             Tue 21 Jul 2026 21:01:01 +0000
Manifest this update:     Tue 21 Jul 2026 21:01:01 +0000
Manifest next update:     Wed 22 Jul 2026 21:01:01 +0000
Files and hashes:         1: QF_399xI2SewrseLB4kyGBneu-M.roa (hash: r2/mY8nxqGv5gn+irkMLldX5c55sQ0uzw/xlOgX6u3c=)
                          2: X5n94NY7EbXC3YFsD5PC6lg1AzY.crl (hash: CHYnYRljKB676+UynObvb6nwNKkRVnZlmAbbixGmMiU=)
                          3: XDqlN_taZIdM6DdjER8uW1UFODI.roa (hash: 6ngdrJA/sMfopr75z6wriVhW2HqdoLfI0EofWQVGvGQ=)
                          4: _oHgZvsJMwRyDYodMcc-dD-xpyQ.roa (hash: wQ28zoW+SYup4IFoFcCESAD8E7hPkqJGGi5NHlim+YI=)
                          5: k7FuEmL7ckZebEdYqLmWq8Y2lFM.roa (hash: OL4V0L7IkRGq+9Cwq5yFJDHvYEDPre5Pe6POd0XMkXE=)
                          6: lzvYQ0K9BEZg4pkQlfVFgknob7A.roa (hash: BcqBpfBCaIEZdSkKphmSBpiqpYSfxDwEADDAeo9W8JA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:64:4f:42:64:5e:09:ea:64:1d:42:cd:05:8d:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f99fde0d63b11b5c2dd816c0f93c2ea58350336
        Validity
            Not Before: Jul 21 21:01:01 2026 GMT
            Not After : Jul 22 21:01:01 2026 GMT
        Subject: CN=4839ce006891a2185de418ddcb9d97a2e1f40764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:2c:5c:42:85:59:80:a6:79:76:cd:33:9c:12:
                    04:cf:e9:66:4f:42:b1:65:8e:14:91:3b:42:5f:38:
                    52:19:e6:a6:68:d0:d7:86:8e:db:95:2d:a1:f4:b2:
                    d3:73:ea:e3:49:bd:c5:db:55:7f:83:86:31:d9:e2:
                    6c:99:6a:bd:93:09:0e:1f:dd:01:dd:1c:3a:2f:42:
                    46:2e:f8:83:26:b9:a2:e3:78:f5:c0:e7:54:57:84:
                    79:47:56:fb:e8:ca:d3:c0:78:8a:4a:cc:1c:1f:3e:
                    c5:78:71:fe:a5:f5:d8:8e:ba:7c:ef:f5:3f:d2:13:
                    3e:67:eb:30:54:45:63:8e:8d:e1:f7:1d:99:f3:f9:
                    6e:d1:ea:e4:c4:43:09:1c:71:44:29:98:11:ff:42:
                    98:6f:98:aa:85:c4:f6:af:6e:6a:14:33:48:9d:1e:
                    ea:7d:b9:dd:f1:c7:95:92:4d:f9:2b:32:dd:1e:41:
                    a8:fd:fd:42:cb:02:a7:56:1a:bd:fc:4b:e6:3b:9d:
                    7f:42:31:e2:a7:ef:73:81:08:f6:d2:6a:0d:59:6f:
                    1d:97:e3:64:d0:cd:d3:e1:8e:ea:24:e4:3b:b4:b9:
                    64:05:64:ac:c0:0e:e9:9f:6b:8d:f1:59:71:71:bc:
                    f8:7b:ca:b5:96:62:cb:8d:58:b3:02:4e:f4:6c:cf:
                    87:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:39:CE:00:68:91:A2:18:5D:E4:18:DD:CB:9D:97:A2:E1:F4:07:64
            X509v3 Authority Key Identifier:
                keyid:5F:99:FD:E0:D6:3B:11:B5:C2:DD:81:6C:0F:93:C2:EA:58:35:03:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5n94NY7EbXC3YFsD5PC6lg1AzY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f116d7-8519-4924-8d1d-4c77d605afec/1/X5n94NY7EbXC3YFsD5PC6lg1AzY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:27:d5:44:d5:f3:d7:c7:9f:84:2a:5b:11:aa:ee:2e:f3:88:
         38:70:f1:92:ea:10:25:f4:c5:a5:a1:aa:ef:9b:b9:20:f9:0a:
         ee:4e:b4:ac:aa:04:dd:a1:15:1a:3d:99:a7:a8:96:a0:95:0b:
         18:47:a1:2d:85:ff:24:ad:e3:a4:10:5a:b9:f4:68:83:9c:43:
         3d:3f:44:c3:d1:90:c2:e7:8e:58:22:ef:e7:21:f2:25:86:6f:
         b6:a3:75:7d:66:9e:0b:ed:8b:c7:56:73:23:5b:06:c0:23:49:
         dd:ea:22:28:a4:0d:c6:49:57:55:5e:b8:24:d6:f2:a4:40:3d:
         82:71:c5:9a:3a:3d:b8:0e:68:bb:86:16:1a:eb:d4:54:6c:86:
         0c:3f:50:c4:be:e6:69:61:86:4f:d1:9f:f7:56:c9:3b:c7:63:
         b6:5a:6a:9b:b8:28:27:57:ae:01:62:0c:6a:b4:5d:f3:40:cb:
         77:7b:78:60:4b:1b:95:d9:f4:1d:62:f2:7d:7b:d3:6d:85:59:
         22:1b:8c:2c:a9:ce:16:41:18:0f:b7:a6:d0:4b:29:3e:f6:25:
         5f:b8:bf:47:2e:35:fe:cb:97:4a:07:f0:e5:43:5d:d6:07:dd:
         b0:e0:87:1a:23:be:a8:52:ff:6a:55:bb:67:7b:f9:85:b3:aa:
         55:60:56:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ge2RPQmReCepkHULNBY1tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmOTlmZGUwZDYzYjExYjVjMmRkODE2YzBmOTNjMmVhNTgz
NTAzMzYwHhcNMjYwNzIxMjEwMTAxWhcNMjYwNzIyMjEwMTAxWjAzMTEwLwYDVQQD
Eyg0ODM5Y2UwMDY4OTFhMjE4NWRlNDE4ZGRjYjlkOTdhMmUxZjQwNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvSxcQoVZgKZ5ds0znBIEz+lmT0Kx
ZY4UkTtCXzhSGeamaNDXho7blS2h9LLTc+rjSb3F21V/g4Yx2eJsmWq9kwkOH90B
3Rw6L0JGLviDJrmi43j1wOdUV4R5R1b76MrTwHiKSswcHz7FeHH+pfXYjrp87/U/
0hM+Z+swVEVjjo3h9x2Z8/lu0erkxEMJHHFEKZgR/0KYb5iqhcT2r25qFDNInR7q
fbnd8ceVkk35KzLdHkGo/f1CywKnVhq9/EvmO51/QjHip+9zgQj20moNWW8dl+Nk
0M3T4Y7qJOQ7tLlkBWSswA7pn2uN8Vlxcbz4e8q1lmLLjVizAk70bM+HVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEg5zgBokaIYXeQY3cudl6Lh9AdkMB8GA1UdIwQY
MBaAFF+Z/eDWOxG1wt2BbA+TwupYNQM2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQt
NGM3N2Q2MDVhZmVjLzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMTE2ZDctODUxOS00OTI0LThkMWQtNGM3N2Q2MDVhZmVj
LzEvWDVuOTROWTdFYlhDM1lGc0Q1UEM2bGcxQXpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSfVRNXz
18efhCpbEaruLvOIOHDxkuoQJfTFpaGq75u5IPkK7k60rKoE3aEVGj2Zp6iWoJUL
GEehLYX/JK3jpBBaufRog5xDPT9Ew9GQwueOWCLv5yHyJYZvtqN1fWaeC+2Lx1Zz
I1sGwCNJ3eoiKKQNxklXVV64JNbypEA9gnHFmjo9uA5ou4YWGuvUVGyGDD9QxL7m
aWGGT9Gf91bJO8djtlpqm7goJ1euAWIMarRd80DLd3t4YEsbldn0HWLyfXvTbYVZ
IhuMLKnOFkEYD7em0EspPvYlX7i/Ry41/suXSgfw5UNd1gfdsOCHGiO+qFL/alW7
Z3v5hbOqVWBW5A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:02:52 2026 by rpki-client