Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
File:                     T5CKbYaKuem9sQRy--wxyWbpQnQ.mft (raw, json)
Hash identifier:          SF+BKGfacYxDjBzEiZjn97mfTeD8qb5LLCLVe7N0u/o=
Subject key identifier:   EA:17:C7:B2:7D:5D:DC:EB:B9:50:1A:66:4F:76:92:F7:D7:38:66:CA
Authority key identifier: 4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74
Certificate issuer:       /CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
Certificate serial:       019F3B625C69DD8AFFF91D73A0E2130B3FCB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
Manifest number:          199C
Signing time:             Tue 07 Jul 2026 07:02:09 +0000
Manifest this update:     Tue 07 Jul 2026 07:02:09 +0000
Manifest next update:     Wed 08 Jul 2026 07:02:09 +0000
Files and hashes:         1: T5CKbYaKuem9sQRy--wxyWbpQnQ.crl (hash: ZJhsX3acyynNl6WWvoM/zM8bst+m0dSxsPuCnphhwfw=)
                          2: X206-RRIU-SViIIBDaDjImGa3dY.roa (hash: 4tlHju7QfGBzo1uVLYUwcT6W8w+LZeglWr2bK3XYBCs=)
                          3: kWFBLyUBTvbzusgV_UpooCs9BmI.roa (hash: C7RWuvHqnRmXJ+YGjt/KFK6eJ1YPoddfOOX7abEUYvs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 Jul 2026 07:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:3b:62:5c:69:dd:8a:ff:f9:1d:73:a0:e2:13:0b:3f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f908a6d868ab9e9bdb10472fbec31c966e94274
        Validity
            Not Before: Jul  7 07:02:09 2026 GMT
            Not After : Jul  8 07:02:09 2026 GMT
        Subject: CN=ea17c7b27d5ddcebb9501a664f7692f7d73866ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:ea:1f:88:3c:cf:5a:af:62:52:1b:4a:e8:a2:
                    98:c1:63:ad:a1:1f:3b:da:2c:2e:48:75:5d:e2:fd:
                    2b:e1:09:43:ca:7f:54:79:3d:1f:de:a4:75:23:ab:
                    e7:55:b2:61:30:d7:6c:96:53:36:b5:14:1c:ad:27:
                    fa:55:81:ee:b2:d8:c0:d0:ed:ae:5b:d7:e3:40:c0:
                    ea:e4:c3:7f:75:a8:ad:c4:cd:5b:db:75:f1:12:bc:
                    b5:28:2f:7a:75:ad:5a:ba:fa:2d:4e:15:0d:eb:4d:
                    9c:83:c3:70:24:7d:d1:f7:b7:0b:c0:a2:0b:b9:12:
                    cc:dd:bc:0e:f7:01:a1:86:09:1c:63:e8:16:8f:f9:
                    8c:32:f9:e6:0e:fe:b9:24:5b:52:5c:ef:c4:ca:0a:
                    74:54:84:5c:e8:b1:00:3b:e6:6b:b5:a0:e4:81:c0:
                    5a:49:38:f7:cf:3a:60:d3:ab:4f:ec:1e:42:58:b9:
                    fd:8b:d8:b9:47:c6:d2:41:1e:83:87:07:1f:79:26:
                    a2:ff:5d:e1:16:81:73:25:06:89:39:44:65:52:60:
                    57:d5:9a:82:7e:4e:07:df:51:f8:99:a6:f9:f3:0a:
                    1c:02:62:16:ce:0d:bf:68:ab:b3:bc:16:ae:5a:79:
                    c2:ad:2a:93:a7:22:6f:bc:d6:e8:9f:cf:dc:41:cd:
                    48:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:C7:B2:7D:5D:DC:EB:B9:50:1A:66:4F:76:92:F7:D7:38:66:CA
            X509v3 Authority Key Identifier:
                keyid:4F:90:8A:6D:86:8A:B9:E9:BD:B1:04:72:FB:EC:31:C9:66:E9:42:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5CKbYaKuem9sQRy--wxyWbpQnQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/4d77d9-b0a3-48ad-aa2a-1c6ee5bbeb66/1/T5CKbYaKuem9sQRy--wxyWbpQnQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:aa:bc:73:2f:90:86:68:98:08:86:36:4a:c3:74:cf:7c:35:
         b2:4c:ac:02:21:84:8f:49:86:da:79:ac:b1:16:d7:0b:19:6e:
         9a:0a:a0:ac:6f:b4:19:3d:5c:29:a6:ee:81:f8:97:a8:e4:e7:
         51:10:d1:ce:be:f6:7f:c4:fc:fe:bf:c8:77:86:33:af:80:9a:
         9a:5c:6c:7d:8f:7f:e0:c1:4e:22:df:14:d0:7a:0e:66:4c:25:
         f7:72:8b:64:7a:a6:63:49:f1:61:ab:4f:b8:d6:98:d7:a9:15:
         2e:71:95:60:2a:e3:c5:8c:39:7f:7a:e6:8a:4d:a4:06:cf:a3:
         f8:46:34:c8:c9:c0:7e:76:a5:9b:63:f5:af:ba:c4:a9:87:3c:
         20:93:0e:0e:57:d8:65:a4:01:0b:25:5a:2b:f6:cb:51:c7:12:
         68:58:8a:bc:65:32:c3:f2:9b:51:a1:81:ae:2b:0c:af:d1:ce:
         49:d5:1e:d4:b4:02:e8:72:28:d4:96:fe:3c:43:93:ca:68:96:
         bb:db:f7:bd:f5:13:e0:a2:6b:80:3a:22:a7:11:6b:ea:78:16:
         7e:aa:f3:ed:2e:49:28:46:83:1c:43:59:b1:64:d9:c4:9f:d9:
         4c:8b:d8:db:12:21:a3:4e:aa:2a:ea:a0:ff:24:94:39:c5:a9:
         09:56:31:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ87Ylxp3Yr/+R1zoOITCz/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmOTA4YTZkODY4YWI5ZTliZGIxMDQ3MmZiZWMzMWM5NjZl
OTQyNzQwHhcNMjYwNzA3MDcwMjA5WhcNMjYwNzA4MDcwMjA5WjAzMTEwLwYDVQQD
EyhlYTE3YzdiMjdkNWRkY2ViYjk1MDFhNjY0Zjc2OTJmN2Q3Mzg2NmNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5eofiDzPWq9iUhtK6KKYwWOtoR87
2iwuSHVd4v0r4QlDyn9UeT0f3qR1I6vnVbJhMNdsllM2tRQcrSf6VYHustjA0O2u
W9fjQMDq5MN/daitxM1b23XxEry1KC96da1auvotThUN602cg8NwJH3R97cLwKIL
uRLM3bwO9wGhhgkcY+gWj/mMMvnmDv65JFtSXO/Eygp0VIRc6LEAO+ZrtaDkgcBa
STj3zzpg06tP7B5CWLn9i9i5R8bSQR6DhwcfeSai/13hFoFzJQaJOURlUmBX1ZqC
fk4H31H4mab58wocAmIWzg2/aKuzvBauWnnCrSqTpyJvvNbon8/cQc1IoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoXx7J9XdzruVAaZk92kvfXOGbKMB8GA1UdIwQY
MBaAFE+Qim2GirnpvbEEcvvsMclm6UJ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEt
MWM2ZWU1YmJlYjY2LzEvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC80ZDc3ZDktYjBhMy00OGFkLWFhMmEtMWM2ZWU1YmJlYjY2
LzEvVDVDS2JZYUt1ZW05c1FSeS0td3h5V2JwUW5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhKq8cy+Q
hmiYCIY2SsN0z3w1skysAiGEj0mG2nmssRbXCxlumgqgrG+0GT1cKabugfiXqOTn
URDRzr72f8T8/r/Id4Yzr4CamlxsfY9/4MFOIt8U0HoOZkwl93KLZHqmY0nxYatP
uNaY16kVLnGVYCrjxYw5f3rmik2kBs+j+EY0yMnAfnalm2P1r7rEqYc8IJMODlfY
ZaQBCyVaK/bLUccSaFiKvGUyw/KbUaGBrisMr9HOSdUe1LQC6HIo1Jb+PEOTymiW
u9v3vfUT4KJrgDoipxFr6ngWfqrz7S5JKEaDHENZsWTZxJ/ZTIvY2xIho06qKuqg
/ySUOcWpCVYxPA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 10:46:00 2026 by rpki-client