Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          o6OrRuj+NBDdldQcwOjGAZsUl9PxuI7HqeTwPsDnpiU=
Subject key identifier:   54:29:5D:56:70:D9:26:52:94:03:C9:54:8D:6D:9B:BB:FF:16:AA:41
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019F9F282D49E3CD12849CA5905B306C8A7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          19D2
Signing time:             Sun 26 Jul 2026 16:00:38 +0000
Manifest this update:     Sun 26 Jul 2026 16:00:38 +0000
Manifest next update:     Mon 27 Jul 2026 16:00:38 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 6BH9RsRK/lh/XOpaJ9RUJ9H38Wdvt35T7omcuL1twco=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:28:2d:49:e3:cd:12:84:9c:a5:90:5b:30:6c:8a:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Jul 26 16:00:38 2026 GMT
            Not After : Jul 27 16:00:38 2026 GMT
        Subject: CN=54295d5670d926529403c9548d6d9bbbff16aa41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:5e:5d:90:db:c4:6b:e4:34:23:3a:97:fa:
                    46:81:80:d0:66:26:c6:56:fd:c4:53:5d:86:e4:a7:
                    a3:0f:6d:b8:f0:9c:16:53:82:c1:cd:a0:98:9f:89:
                    51:f7:99:1b:2c:44:b7:b0:83:f2:d6:5b:eb:0a:f8:
                    ac:96:2b:f4:95:8c:d3:73:e1:9e:86:fc:57:7e:eb:
                    48:11:12:38:f5:20:9f:af:4f:01:25:7c:cd:12:26:
                    70:b9:5b:f4:db:5e:f2:25:9e:ef:f7:51:16:29:5f:
                    59:cf:18:b2:44:c3:cd:f2:90:e8:d1:97:c1:cb:64:
                    d1:99:de:76:c9:14:f3:47:50:10:ac:7f:d0:78:92:
                    7a:51:fe:23:e7:fd:e8:3f:f1:82:05:f4:f7:35:bb:
                    86:e9:82:12:1a:41:f1:9c:dd:c3:61:3b:68:dd:44:
                    2a:a2:8a:10:21:c9:12:4e:b7:ef:d2:e5:fb:83:55:
                    6b:6d:f7:58:77:fa:c7:ec:12:e9:18:7e:99:f1:9e:
                    51:34:00:d7:be:44:fa:b9:b7:b9:4d:04:a4:61:d0:
                    ea:db:af:d5:72:98:f6:ba:98:c0:1f:02:c4:ef:28:
                    fa:78:cc:46:0f:85:ea:08:1b:79:14:5a:03:d7:5b:
                    c2:b6:ad:88:41:b9:39:da:f5:91:08:55:a7:38:53:
                    53:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:29:5D:56:70:D9:26:52:94:03:C9:54:8D:6D:9B:BB:FF:16:AA:41
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:18:54:ef:09:e8:aa:f9:3b:e1:cd:c0:6e:9f:15:9a:c4:30:
         82:f4:13:52:ee:7e:70:d0:77:43:9f:68:79:8f:ec:ab:09:6f:
         db:ff:61:82:e9:72:bd:9b:bc:24:52:50:d3:ea:bd:9c:38:5d:
         b3:b1:43:f7:4f:43:27:d7:cc:9a:87:c1:8d:7a:26:1e:53:85:
         e5:02:e7:e3:eb:38:4c:e7:66:c2:b1:f4:11:19:3c:9a:af:e6:
         97:03:bb:4f:6a:66:e6:0c:e8:26:0e:cc:aa:22:92:26:70:c2:
         2e:1c:43:d2:87:ab:f7:76:56:7d:bc:c7:3d:55:a3:a8:f7:db:
         37:14:8d:32:ac:22:d0:e1:83:2f:86:20:80:25:83:62:05:34:
         01:2f:9e:0b:2d:7e:df:94:a3:02:24:73:cb:62:8c:42:aa:c3:
         89:44:5a:86:0a:dd:92:88:17:8e:54:0e:dd:3b:e4:17:ef:bc:
         9a:aa:84:da:85:74:14:94:7f:ab:02:f7:8b:38:ed:47:c8:7c:
         67:57:23:38:1b:dc:db:3e:4e:f8:95:22:bb:48:a8:9f:f3:72:
         8c:c8:39:ef:44:ed:ba:96:17:71:8a:e7:b0:66:ef:d8:c4:84:
         14:30:1a:50:ca:fb:00:f0:90:fc:12:70:ab:88:08:bc:08:0c:
         8b:76:83:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fKC1J480ShJylkFswbIp9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwNzI2MTYwMDM4WhcNMjYwNzI3MTYwMDM4WjAzMTEwLwYDVQQD
Eyg1NDI5NWQ1NjcwZDkyNjUyOTQwM2M5NTQ4ZDZkOWJiYmZmMTZhYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqVeXZDbxGvkNCM6l/pGgYDQZibG
Vv3EU12G5KejD2248JwWU4LBzaCYn4lR95kbLES3sIPy1lvrCvisliv0lYzTc+Ge
hvxXfutIERI49SCfr08BJXzNEiZwuVv0217yJZ7v91EWKV9ZzxiyRMPN8pDo0ZfB
y2TRmd52yRTzR1AQrH/QeJJ6Uf4j5/3oP/GCBfT3NbuG6YISGkHxnN3DYTto3UQq
oooQIckSTrfv0uX7g1VrbfdYd/rH7BLpGH6Z8Z5RNADXvkT6ube5TQSkYdDq26/V
cpj2upjAHwLE7yj6eMxGD4XqCBt5FFoD11vCtq2IQbk52vWRCFWnOFNTpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQpXVZw2SZSlAPJVI1tm7v/FqpBMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbhhU7wno
qvk74c3Abp8VmsQwgvQTUu5+cNB3Q59oeY/sqwlv2/9hgulyvZu8JFJQ0+q9nDhd
s7FD909DJ9fMmofBjXomHlOF5QLn4+s4TOdmwrH0ERk8mq/mlwO7T2pm5gzoJg7M
qiKSJnDCLhxD0oer93ZWfbzHPVWjqPfbNxSNMqwi0OGDL4YggCWDYgU0AS+eCy1+
35SjAiRzy2KMQqrDiURahgrdkogXjlQO3TvkF++8mqqE2oV0FJR/qwL3izjtR8h8
Z1cjOBvc2z5O+JUiu0ion/NyjMg570TtupYXcYrnsGbv2MSEFDAaUMr7APCQ/BJw
q4gIvAgMi3aDRw==
-----END CERTIFICATE-----
Generated at Sun Jul 26 19:54:41 2026 by rpki-client