Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
File:                     tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft (raw, json)
Hash identifier:          ftUaGma7JmXfRpA14m6HGRq6AHS1G9UUwRt9Yz8Krxs=
Subject key identifier:   EC:3B:64:C8:91:FC:67:7A:1F:45:F8:A9:EF:A4:6B:BD:AB:D2:D0:BC
Authority key identifier: B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E
Certificate issuer:       /CN=b4dd6d658e14571e839f7813da31f2217422818e
Certificate serial:       019FA1849F1AB5F8CDBB16081338264C0031
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 03:00:50 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:50 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:50 +0000
Files and hashes:         1: YwaTWFoU_sclTYJB9JwjIcKav1Y.roa (hash: Eu+5SivPrsHncNTTaLf6fSyoRwG5oxFjSNJBm3PvsI0=)
                          2: tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl (hash: LjDbEVKxB1Tc9JlgYegSyvgD4ZhC+hrWqXVDKxRXpcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:9f:1a:b5:f8:cd:bb:16:08:13:38:26:4c:00:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4dd6d658e14571e839f7813da31f2217422818e
        Validity
            Not Before: Jul 27 03:00:50 2026 GMT
            Not After : Jul 28 03:00:50 2026 GMT
        Subject: CN=ec3b64c891fc677a1f45f8a9efa46bbdabd2d0bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:06:3b:43:fd:06:3e:66:6e:c8:55:6a:b7:9f:
                    34:6d:27:b7:0b:b6:cb:1a:28:a7:96:ae:67:a8:20:
                    a4:d3:dd:82:44:4a:b5:7c:0a:c8:c7:eb:59:13:2a:
                    8a:95:8f:e3:9f:b1:a5:83:6d:7e:38:da:1f:2f:61:
                    89:70:20:4b:c1:e4:6d:8d:8c:43:6c:f4:1d:e7:56:
                    8d:63:c0:47:17:2d:43:04:42:7f:b7:39:09:a1:3c:
                    06:2f:dc:d6:6e:04:3e:fa:b1:d9:87:ad:1c:3c:b3:
                    bb:12:6e:9b:6e:33:fb:7b:71:23:2e:90:db:66:91:
                    43:e9:8e:d2:64:62:df:7f:7f:ae:fc:55:8b:74:6c:
                    04:60:06:ed:9b:c0:28:c2:6f:73:cc:52:9f:d1:67:
                    d6:f9:cc:7e:18:48:fd:8e:ea:8d:b2:c4:3d:28:a2:
                    37:0c:73:00:e3:47:fb:7b:94:fd:43:e8:4f:18:31:
                    25:79:be:1c:98:80:77:d4:e2:ef:a9:00:c6:e5:f8:
                    5e:6d:ca:20:db:f5:62:8e:81:b5:d0:ae:f5:2e:c4:
                    e5:f0:d1:60:94:6d:9f:d6:5f:dc:24:d4:c6:2b:a6:
                    6f:14:90:0f:3d:71:12:8c:c7:b1:4d:8a:99:57:9e:
                    d1:d3:54:3e:4b:42:0e:45:39:43:ee:a2:a2:ec:b8:
                    34:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:3B:64:C8:91:FC:67:7A:1F:45:F8:A9:EF:A4:6B:BD:AB:D2:D0:BC
            X509v3 Authority Key Identifier:
                keyid:B4:DD:6D:65:8E:14:57:1E:83:9F:78:13:DA:31:F2:21:74:22:81:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tN1tZY4UVx6Dn3gT2jHyIXQigY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/264934-2a7f-428b-afe5-81d214edf298/1/tN1tZY4UVx6Dn3gT2jHyIXQigY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:47:4a:1b:97:ec:09:25:c6:17:06:f9:89:0c:2e:6a:87:d0:
         56:da:4f:5f:df:c7:1a:b5:3d:ef:ac:d7:83:d6:89:70:1d:29:
         8a:48:6c:68:c0:36:0e:30:65:68:36:b8:34:f4:de:e6:b6:fb:
         39:d3:9a:cf:52:f2:f5:6c:3c:34:a1:b2:02:2c:7a:a5:13:87:
         b8:5b:40:a4:16:92:a9:95:f2:d8:8d:2e:5f:1e:c1:95:67:0a:
         a9:21:83:b6:b4:44:96:34:d6:f5:94:5c:64:db:77:78:e2:64:
         a4:64:51:d1:db:12:00:15:47:5a:14:81:03:f8:26:9a:b1:b9:
         f8:30:0c:22:ab:91:c5:cf:ea:87:0e:3c:2f:d1:ed:cb:2b:dd:
         b3:1e:8d:6e:1f:81:c6:97:de:90:3f:d8:f2:82:48:7b:a3:52:
         4b:67:c4:7b:20:92:b8:ca:5d:44:0d:13:69:9d:4f:cc:37:68:
         a5:e9:bb:f3:ba:1d:f5:7c:ba:97:d7:27:51:bd:56:c4:b2:e1:
         a5:1e:3b:fa:2d:c9:48:bd:8d:29:e7:ed:ce:8a:35:08:71:d0:
         6b:17:eb:9b:53:0a:93:3b:70:5a:72:83:76:ec:7e:59:89:80:
         44:da:5d:67:56:3d:22:2d:5f:d8:84:0b:31:c1:13:5d:a9:29:
         39:ce:09:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhJ8atfjNuxYIEzgmTAAxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZGQ2ZDY1OGUxNDU3MWU4MzlmNzgxM2RhMzFmMjIxNzQy
MjgxOGUwHhcNMjYwNzI3MDMwMDUwWhcNMjYwNzI4MDMwMDUwWjAzMTEwLwYDVQQD
EyhlYzNiNjRjODkxZmM2NzdhMWY0NWY4YTllZmE0NmJiZGFiZDJkMGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQY7Q/0GPmZuyFVqt580bSe3C7bL
Giinlq5nqCCk092CREq1fArIx+tZEyqKlY/jn7Glg21+ONofL2GJcCBLweRtjYxD
bPQd51aNY8BHFy1DBEJ/tzkJoTwGL9zWbgQ++rHZh60cPLO7Em6bbjP7e3EjLpDb
ZpFD6Y7SZGLff3+u/FWLdGwEYAbtm8Aowm9zzFKf0WfW+cx+GEj9juqNssQ9KKI3
DHMA40f7e5T9Q+hPGDEleb4cmIB31OLvqQDG5fhebcog2/VijoG10K71LsTl8NFg
lG2f1l/cJNTGK6ZvFJAPPXESjMexTYqZV57R01Q+S0IORTlD7qKi7Lg0CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOw7ZMiR/Gd6H0X4qe+ka72r0tC8MB8GA1UdIwQY
MBaAFLTdbWWOFFceg594E9ox8iF0IoGOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUt
ODFkMjE0ZWRmMjk4LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8yNjQ5MzQtMmE3Zi00MjhiLWFmZTUtODFkMjE0ZWRmMjk4
LzEvdE4xdFpZNFVWeDZEbjNnVDJqSHlJWFFpZ1k0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVEdKG5fs
CSXGFwb5iQwuaofQVtpPX9/HGrU976zXg9aJcB0pikhsaMA2DjBlaDa4NPTe5rb7
OdOaz1Ly9Ww8NKGyAix6pROHuFtApBaSqZXy2I0uXx7BlWcKqSGDtrREljTW9ZRc
ZNt3eOJkpGRR0dsSABVHWhSBA/gmmrG5+DAMIquRxc/qhw48L9Htyyvdsx6Nbh+B
xpfekD/Y8oJIe6NSS2fEeyCSuMpdRA0TaZ1PzDdopem787od9Xy6l9cnUb1WxLLh
pR47+i3JSL2NKeftzoo1CHHQaxfrm1MKkztwWnKDdux+WYmARNpdZ1Y9Ii1f2IQL
McETXakpOc4JBA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:37:27 2026 by rpki-client