Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
File:                     t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft (raw, json)
Hash identifier:          sqkJdoaI9NS2+bbMErZBhhEFEUx4MfET2p6WbVKcGJM=
Subject key identifier:   FB:FF:49:92:E7:60:DD:64:9C:D9:74:3A:92:92:2E:90:88:D6:27:A5
Authority key identifier: B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21
Certificate issuer:       /CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
Certificate serial:       019FA4F358F5F1BDE66AA36EB6A3268E5F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
Manifest number:          19D5
Signing time:             Mon 27 Jul 2026 19:00:39 +0000
Manifest this update:     Mon 27 Jul 2026 19:00:39 +0000
Manifest next update:     Tue 28 Jul 2026 19:00:39 +0000
Files and hashes:         1: 2MSpCLbIJT_dNS85cUQH7P6hQQQ.roa (hash: LqxKJfwKg1vJNoy6niHI6Ay0t/ibwSsUhqanJ+kZvVg=)
                          2: TZEmLmroEs6IRm7BIRkKTFCJTnA.roa (hash: QhC3msm1fXEe5FbZInDyO6caWrevlSV8+0GhYVm+mSE=)
                          3: XKyWf4Y6NjYLpXjJG8NNu1YgV8I.roa (hash: Wg/rYioLK0eT7zXUczkOHExRo3EIegYLBIdXxr8Hp88=)
                          4: t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl (hash: 9UtFy1DesgO9WCW6wYR74M3u3Xi1q8r1F8PzLXjmMss=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:f3:58:f5:f1:bd:e6:6a:a3:6e:b6:a3:26:8e:5f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b75a0566d0b63a1f862d83458e4f2ea6fd8f7d21
        Validity
            Not Before: Jul 27 19:00:39 2026 GMT
            Not After : Jul 28 19:00:39 2026 GMT
        Subject: CN=fbff4992e760dd649cd9743a92922e9088d627a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:27:88:46:b0:19:c9:40:82:6e:9f:27:5d:03:
                    89:ab:14:e9:7e:66:dc:39:73:71:1b:d4:f2:9a:21:
                    1d:49:00:01:71:ba:b4:7b:5a:21:61:e4:e1:d1:28:
                    bd:a7:38:c1:fb:67:fb:c7:03:d5:51:c8:23:cd:e3:
                    71:37:ee:c9:1c:a7:61:eb:a9:b3:3b:57:29:d7:e4:
                    37:5b:54:b9:ed:3b:ca:eb:af:3a:e6:e3:7a:ae:84:
                    ce:e2:c3:74:69:72:6d:26:b4:eb:62:00:1a:2e:5f:
                    63:4c:62:c3:66:26:3a:78:68:04:f8:3c:2a:0c:90:
                    43:0e:26:79:24:a0:2d:ce:ff:7c:aa:5c:6e:97:16:
                    72:bb:f7:9e:a5:b1:77:50:1b:03:ef:35:34:e2:c0:
                    7c:24:2a:2a:d3:e5:06:a9:1b:bf:48:9c:3c:f9:6d:
                    c5:0a:6b:a5:61:36:10:85:1e:d9:dd:ca:e5:d7:69:
                    99:14:44:61:f3:41:7b:98:3c:d0:9a:b2:ac:8d:09:
                    b5:74:25:45:96:ad:7e:ca:7f:6d:9e:68:bd:d4:4b:
                    ad:9a:97:b1:37:b7:a9:f3:c2:ad:69:c4:93:a7:94:
                    3d:68:f1:b4:4d:85:36:3d:05:ad:68:2c:bb:72:94:
                    d5:aa:16:ec:72:8c:7e:40:47:e3:4d:88:76:36:5c:
                    fe:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:FF:49:92:E7:60:DD:64:9C:D9:74:3A:92:92:2E:90:88:D6:27:A5
            X509v3 Authority Key Identifier:
                keyid:B7:5A:05:66:D0:B6:3A:1F:86:2D:83:45:8E:4F:2E:A6:FD:8F:7D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1oFZtC2Oh-GLYNFjk8upv2PfSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/103570-1cf6-42ac-81d4-83f601c3fb59/1/t1oFZtC2Oh-GLYNFjk8upv2PfSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a7:72:c6:4c:ab:fb:8c:44:4d:4e:7a:6d:b6:c6:a3:eb:55:
         bd:86:27:3e:7d:bf:8b:2a:05:8f:5d:81:e9:82:24:1c:46:84:
         0c:85:e3:e8:4a:5d:8a:63:09:a0:ae:7a:b5:5e:3a:d1:45:fc:
         be:aa:06:9f:8e:b4:52:7f:4d:bd:e2:f7:f6:22:c5:2f:68:eb:
         6d:1d:d5:b9:59:a8:c5:8b:ca:37:fc:cc:99:12:63:78:3b:13:
         9c:eb:d7:ef:ae:ba:2b:29:b4:ea:5e:fd:74:07:fb:4f:b5:7f:
         81:7c:ea:4a:31:19:a3:e8:e5:98:a6:1d:f9:49:ab:93:b8:e6:
         ef:8b:7f:ae:1f:b9:97:b3:c6:d6:08:ff:f7:a0:bc:c4:81:41:
         7f:7d:86:45:5b:a2:a5:bd:39:72:db:91:c3:8d:51:b0:69:d0:
         8c:17:84:33:a5:ce:08:e3:f6:d5:cc:1a:86:bc:69:f3:78:6b:
         0a:73:7a:4f:91:0e:1b:09:96:40:1c:cf:de:20:20:6d:ee:80:
         43:ef:49:4a:3b:40:43:70:b8:38:52:fc:af:4f:9f:14:54:04:
         f3:c2:25:2d:7d:6c:91:9e:47:8a:c8:2d:1f:00:2b:5a:09:e1:
         fc:39:66:85:d7:5f:fa:2e:cc:58:cd:e8:53:a8:b3:36:4b:30:
         9d:77:97:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+k81j18b3maqNutqMmjl9QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NWEwNTY2ZDBiNjNhMWY4NjJkODM0NThlNGYyZWE2ZmQ4
ZjdkMjEwHhcNMjYwNzI3MTkwMDM5WhcNMjYwNzI4MTkwMDM5WjAzMTEwLwYDVQQD
EyhmYmZmNDk5MmU3NjBkZDY0OWNkOTc0M2E5MjkyMmU5MDg4ZDYyN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCeIRrAZyUCCbp8nXQOJqxTpfmbc
OXNxG9TymiEdSQABcbq0e1ohYeTh0Si9pzjB+2f7xwPVUcgjzeNxN+7JHKdh66mz
O1cp1+Q3W1S57TvK66865uN6roTO4sN0aXJtJrTrYgAaLl9jTGLDZiY6eGgE+Dwq
DJBDDiZ5JKAtzv98qlxulxZyu/eepbF3UBsD7zU04sB8JCoq0+UGqRu/SJw8+W3F
CmulYTYQhR7Z3crl12mZFERh80F7mDzQmrKsjQm1dCVFlq1+yn9tnmi91Eutmpex
N7ep88KtacSTp5Q9aPG0TYU2PQWtaCy7cpTVqhbscox+QEfjTYh2Nlz+KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv/SZLnYN1knNl0OpKSLpCI1ielMB8GA1UdIwQY
MBaAFLdaBWbQtjofhi2DRY5PLqb9j30hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQt
ODNmNjAxYzNmYjU5LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xMDM1NzAtMWNmNi00MmFjLTgxZDQtODNmNjAxYzNmYjU5
LzEvdDFvRlp0QzJPaC1HTFlORmprOHVwdjJQZlNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT6dyxkyr
+4xETU56bbbGo+tVvYYnPn2/iyoFj12B6YIkHEaEDIXj6EpdimMJoK56tV460UX8
vqoGn460Un9NveL39iLFL2jrbR3VuVmoxYvKN/zMmRJjeDsTnOvX7666Kym06l79
dAf7T7V/gXzqSjEZo+jlmKYd+Umrk7jm74t/rh+5l7PG1gj/96C8xIFBf32GRVui
pb05ctuRw41RsGnQjBeEM6XOCOP21cwahrxp83hrCnN6T5EOGwmWQBzP3iAgbe6A
Q+9JSjtAQ3C4OFL8r0+fFFQE88IlLX1skZ5HisgtHwArWgnh/Dlmhddf+i7MWM3o
U6izNkswnXeXTw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 00:13:48 2026 by rpki-client