Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
File:                     sgTq-NsT70M8-YIp0jLTMKX14lY.mft (raw, json)
Hash identifier:          yofa8nY3dcRSoFOVlfiLtfaFzYn3yxO2JYhtHuBQebE=
Subject key identifier:   8F:7B:6A:D7:D6:21:92:C2:CB:79:86:D5:9E:AF:9F:91:86:2A:9E:39
Authority key identifier: B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56
Certificate issuer:       /CN=b204eaf8db13ef433cf98229d232d330a5f5e256
Certificate serial:       019FA0A908C4CB04566D7604E6CAE572A4FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
Manifest number:          19CF
Signing time:             Sun 26 Jul 2026 23:00:59 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:59 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:59 +0000
Files and hashes:         1: _7FUJXfD4Ngly6FguO7Icv3bnRs.roa (hash: uIw7fcvWe1lM1UlpZ2C4ZV/RLkNGSXf/iL61npEiJKw=)
                          2: sgTq-NsT70M8-YIp0jLTMKX14lY.crl (hash: lvmgxcfIQuAFxIG+J2HG1QKK8DfZWJnTrzibuYmg38c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a9:08:c4:cb:04:56:6d:76:04:e6:ca:e5:72:a4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b204eaf8db13ef433cf98229d232d330a5f5e256
        Validity
            Not Before: Jul 26 23:00:59 2026 GMT
            Not After : Jul 27 23:00:59 2026 GMT
        Subject: CN=8f7b6ad7d62192c2cb7986d59eaf9f91862a9e39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:6f:c5:a2:55:6a:6f:08:4f:05:1f:44:35:a4:
                    69:59:a8:9a:2d:76:36:42:95:44:27:5d:29:c9:83:
                    c9:c5:24:d0:a2:44:90:30:2d:0b:c4:67:31:dd:81:
                    e5:f0:46:a1:70:9e:a2:47:cf:05:09:58:83:48:f5:
                    2f:ae:6b:cd:77:71:0f:49:65:de:63:61:9e:25:03:
                    52:7b:3f:db:cd:bd:ed:37:e4:97:da:af:c7:52:5c:
                    00:e6:19:2a:7c:2a:85:79:77:98:06:a4:3d:67:35:
                    2d:d2:0f:98:fd:b3:87:e6:21:78:2c:83:84:f0:82:
                    3f:82:bf:07:24:7a:a8:84:3e:31:75:79:9e:3b:42:
                    37:92:07:53:13:9a:78:00:2f:a0:89:38:ad:e4:35:
                    b4:b6:56:9d:e9:bc:4d:49:67:22:2e:fe:6e:02:9f:
                    c1:8c:04:1c:c7:3b:6d:bd:3a:19:23:f3:00:12:87:
                    a7:e2:78:c9:a1:3d:94:f4:50:15:a5:e2:61:b4:16:
                    c6:fb:89:61:4d:b5:8f:f6:d8:7f:5f:b0:fa:4b:29:
                    39:e2:b3:89:e3:7d:c7:b8:7e:d1:9b:22:d9:a6:8b:
                    74:b4:d2:f9:7c:f7:eb:97:df:6d:6f:98:e4:f9:67:
                    50:b8:0b:36:1f:b7:8b:a2:fa:36:98:b3:3f:a1:c8:
                    e8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:7B:6A:D7:D6:21:92:C2:CB:79:86:D5:9E:AF:9F:91:86:2A:9E:39
            X509v3 Authority Key Identifier:
                keyid:B2:04:EA:F8:DB:13:EF:43:3C:F9:82:29:D2:32:D3:30:A5:F5:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgTq-NsT70M8-YIp0jLTMKX14lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/597638-713c-44b7-9b70-25017ec94095/1/sgTq-NsT70M8-YIp0jLTMKX14lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:5d:a3:bc:aa:e6:9a:08:38:09:8a:8b:47:38:5d:40:3c:be:
         cd:58:49:6b:ed:bc:df:33:66:e0:e4:a4:aa:12:ba:cb:7f:86:
         04:c3:4d:7b:ff:98:b5:7d:ef:67:26:67:1f:96:44:1e:31:5c:
         5e:8f:71:b5:c0:9e:c1:1f:f8:67:58:30:91:cd:c7:2e:eb:34:
         4e:08:5f:63:a6:1a:af:57:13:a4:39:0c:43:e1:b8:52:a0:77:
         6a:03:8e:34:1f:9f:c2:2c:b8:d4:65:a3:3a:79:75:be:5d:1d:
         24:ec:06:8e:ff:33:1f:82:ec:a7:26:13:4e:db:3b:ac:ed:5d:
         a6:ac:c1:2b:25:e3:49:c2:2a:64:d8:f0:23:2a:fd:18:71:90:
         f3:40:c5:09:fd:08:0a:77:b2:f6:3d:91:48:71:7b:9f:ac:50:
         b5:33:09:8d:1b:62:c1:cc:d0:17:01:c0:98:4b:d1:14:fc:a9:
         bb:b7:ae:d7:51:c3:10:af:90:b5:45:e0:e1:31:d3:3e:0f:6a:
         d2:8b:c0:25:2d:8f:5b:a0:96:e0:3d:21:08:9b:86:c0:7d:0c:
         2b:d0:84:06:78:7f:a7:32:ae:dd:30:c0:08:23:ec:fd:06:85:
         78:05:c9:94:37:2b:33:69:a4:92:04:ec:e7:79:ad:c5:98:af:
         a7:26:77:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqQjEywRWbXYE5srlcqT7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDRlYWY4ZGIxM2VmNDMzY2Y5ODIyOWQyMzJkMzMwYTVm
NWUyNTYwHhcNMjYwNzI2MjMwMDU5WhcNMjYwNzI3MjMwMDU5WjAzMTEwLwYDVQQD
Eyg4ZjdiNmFkN2Q2MjE5MmMyY2I3OTg2ZDU5ZWFmOWY5MTg2MmE5ZTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8m/FolVqbwhPBR9ENaRpWaiaLXY2
QpVEJ10pyYPJxSTQokSQMC0LxGcx3YHl8EahcJ6iR88FCViDSPUvrmvNd3EPSWXe
Y2GeJQNSez/bzb3tN+SX2q/HUlwA5hkqfCqFeXeYBqQ9ZzUt0g+Y/bOH5iF4LIOE
8II/gr8HJHqohD4xdXmeO0I3kgdTE5p4AC+giTit5DW0tlad6bxNSWciLv5uAp/B
jAQcxzttvToZI/MAEoen4njJoT2U9FAVpeJhtBbG+4lhTbWP9th/X7D6Syk54rOJ
433HuH7RmyLZpot0tNL5fPfrl99tb5jk+WdQuAs2H7eLovo2mLM/ocjoAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI97atfWIZLCy3mG1Z6vn5GGKp45MB8GA1UdIwQY
MBaAFLIE6vjbE+9DPPmCKdIy0zCl9eJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2dUcS1Oc1Q3ME04LVlJcDBqTFRNS1gxNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81OTc2MzgtNzEzYy00NGI3LTliNzAt
MjUwMTdlYzk0MDk1LzEvc2dUcS1Oc1Q3ME04LVlJcDBqTFRNS1gxNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC81OTc2MzgtNzEzYy00NGI3LTliNzAtMjUwMTdlYzk0MDk1
LzEvc2dUcS1Oc1Q3ME04LVlJcDBqTFRNS1gxNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANV2jvKrm
mgg4CYqLRzhdQDy+zVhJa+283zNm4OSkqhK6y3+GBMNNe/+YtX3vZyZnH5ZEHjFc
Xo9xtcCewR/4Z1gwkc3HLus0TghfY6Yar1cTpDkMQ+G4UqB3agOONB+fwiy41GWj
Onl1vl0dJOwGjv8zH4LspyYTTts7rO1dpqzBKyXjScIqZNjwIyr9GHGQ80DFCf0I
Cney9j2RSHF7n6xQtTMJjRtiwczQFwHAmEvRFPypu7eu11HDEK+QtUXg4THTPg9q
0ovAJS2PW6CW4D0hCJuGwH0MK9CEBnh/pzKu3TDACCPs/QaFeAXJlDcrM2mkkgTs
53mtxZivpyZ3Xg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:31:40 2026 by rpki-client