Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
File:                     fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft (raw, json)
Hash identifier:          zVbXSEokomUgTfnbQLC+Ay9tDFP1KfTYYqNobNOuEto=
Subject key identifier:   CA:E6:8F:A6:EA:BB:80:6B:D3:FE:9F:01:53:23:16:D8:E1:E7:CF:71
Authority key identifier: 7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A
Certificate issuer:       /CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
Certificate serial:       019F86E89E052E8C9993B3DD0CE8F7B2E0ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
Manifest number:          19BE
Signing time:             Tue 21 Jul 2026 23:00:19 +0000
Manifest this update:     Tue 21 Jul 2026 23:00:19 +0000
Manifest next update:     Wed 22 Jul 2026 23:00:19 +0000
Files and hashes:         1: OYXBnR_i_32vVbXh0HFOhPBkIao.roa (hash: uFNMDyNJ2OVPR9PkOadpZs87yuOZdywd47eCM9lTesc=)
                          2: fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl (hash: G3+/1o+xC7vpSF2wLHe37TqFwmk4R7ERQWq2fAU83hE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:e8:9e:05:2e:8c:99:93:b3:dd:0c:e8:f7:b2:e0:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1d58d62ddd7e47af2196fd754bb3ff2679892a
        Validity
            Not Before: Jul 21 23:00:19 2026 GMT
            Not After : Jul 22 23:00:19 2026 GMT
        Subject: CN=cae68fa6eabb806bd3fe9f01532316d8e1e7cf71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:04:a5:d4:b2:9c:27:3d:28:d5:fa:69:88:05:
                    66:33:3c:8d:ac:c9:33:24:66:82:d1:2e:b3:d9:51:
                    75:e8:de:d3:a4:10:ef:d8:b2:24:db:fa:64:84:69:
                    3f:35:05:3a:b2:45:6c:10:71:c1:74:fd:c8:0f:f9:
                    da:0a:2e:34:01:79:a9:7f:cf:c4:53:13:4a:25:47:
                    f7:fa:04:dc:9f:41:fe:06:82:37:98:09:2f:04:d7:
                    62:7f:f0:dd:a2:85:d1:c0:be:60:15:b6:37:a5:91:
                    98:60:5c:b5:d2:f5:e5:41:46:a4:36:bc:d3:e3:28:
                    d9:85:c7:6d:63:2c:b3:50:d9:81:ba:c7:b2:a5:65:
                    2c:14:b7:7f:8c:77:9c:95:f5:1c:73:ef:46:fb:12:
                    9a:5d:62:31:7f:e7:8b:c5:77:de:7c:55:6b:1c:39:
                    7f:c8:90:24:25:c1:36:85:ea:2c:f7:77:23:9a:8e:
                    d3:69:fd:35:8a:4c:4f:12:ff:bb:a6:cb:51:43:4a:
                    e6:77:51:fd:78:2c:df:88:74:4b:90:28:df:9c:dc:
                    e6:68:5a:f1:74:9f:b0:88:a9:2a:80:59:7e:87:28:
                    df:26:51:3b:4a:11:84:65:c8:3f:34:e6:e9:27:11:
                    a2:d5:49:87:a9:28:d4:d8:38:7e:07:27:73:6b:ab:
                    75:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:E6:8F:A6:EA:BB:80:6B:D3:FE:9F:01:53:23:16:D8:E1:E7:CF:71
            X509v3 Authority Key Identifier:
                keyid:7F:1D:58:D6:2D:DD:7E:47:AF:21:96:FD:75:4B:B3:FF:26:79:89:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/290a60-792f-4475-a9f4-e3b9e0bae6ab/1/fx1Y1i3dfkevIZb9dUuz_yZ5iSo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:ac:de:74:56:46:15:90:01:94:37:95:58:a6:df:8b:00:b5:
         b7:43:73:d7:a7:a4:7a:67:f4:d1:36:82:c6:57:90:3f:4a:f1:
         90:95:5e:2d:92:79:8a:91:93:f8:56:4d:68:7f:71:53:52:fe:
         d1:94:af:73:a0:5d:d9:ce:39:84:9c:a0:0e:d7:4e:21:f9:15:
         fa:90:10:ff:6a:18:9a:23:ad:cb:98:55:81:08:5a:61:f2:4c:
         5a:74:22:dc:0e:81:a4:08:84:fc:27:4c:05:c7:da:2d:09:5e:
         a8:dd:9e:2c:b5:64:1e:e3:d0:d1:d9:69:0c:12:49:21:9b:91:
         23:97:a8:13:7c:ed:be:b0:01:02:e4:66:ef:48:f1:b6:b9:2a:
         25:ce:47:7f:6e:1a:79:62:88:16:d6:16:32:84:05:63:eb:fd:
         8c:78:a1:8a:20:a7:5f:69:72:ad:bd:bb:1b:df:1f:fb:07:95:
         0e:d9:5d:5d:49:45:20:f8:a9:4d:e7:9a:0f:6a:61:84:d9:3e:
         3f:19:f0:41:3b:80:b8:b3:c6:01:89:ce:64:de:1d:cf:ca:c6:
         be:90:bd:71:87:5e:4b:d6:38:6d:69:76:fa:84:a3:0b:a0:bc:
         f2:53:34:46:ef:a8:46:cf:ed:fb:a2:03:41:2a:a8:7b:6d:fc:
         2d:01:65:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+G6J4FLoyZk7PdDOj3suDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmMWQ1OGQ2MmRkZDdlNDdhZjIxOTZmZDc1NGJiM2ZmMjY3
OTg5MmEwHhcNMjYwNzIxMjMwMDE5WhcNMjYwNzIyMjMwMDE5WjAzMTEwLwYDVQQD
EyhjYWU2OGZhNmVhYmI4MDZiZDNmZTlmMDE1MzIzMTZkOGUxZTdjZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowSl1LKcJz0o1fppiAVmMzyNrMkz
JGaC0S6z2VF16N7TpBDv2LIk2/pkhGk/NQU6skVsEHHBdP3ID/naCi40AXmpf8/E
UxNKJUf3+gTcn0H+BoI3mAkvBNdif/DdooXRwL5gFbY3pZGYYFy10vXlQUakNrzT
4yjZhcdtYyyzUNmBuseypWUsFLd/jHeclfUcc+9G+xKaXWIxf+eLxXfefFVrHDl/
yJAkJcE2heos93cjmo7Taf01ikxPEv+7pstRQ0rmd1H9eCzfiHRLkCjfnNzmaFrx
dJ+wiKkqgFl+hyjfJlE7ShGEZcg/NObpJxGi1UmHqSjU2Dh+Bydza6t1BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrmj6bqu4Br0/6fAVMjFtjh589xMB8GA1UdIwQY
MBaAFH8dWNYt3X5HryGW/XVLs/8meYkqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQt
ZTNiOWUwYmFlNmFiLzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yOTBhNjAtNzkyZi00NDc1LWE5ZjQtZTNiOWUwYmFlNmFi
LzEvZngxWTFpM2Rma2V2SVpiOWRVdXpfeVo1aVNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtqzedFZG
FZABlDeVWKbfiwC1t0Nz16ekemf00TaCxleQP0rxkJVeLZJ5ipGT+FZNaH9xU1L+
0ZSvc6Bd2c45hJygDtdOIfkV+pAQ/2oYmiOty5hVgQhaYfJMWnQi3A6BpAiE/CdM
BcfaLQleqN2eLLVkHuPQ0dlpDBJJIZuRI5eoE3ztvrABAuRm70jxtrkqJc5Hf24a
eWKIFtYWMoQFY+v9jHihiiCnX2lyrb27G98f+weVDtldXUlFIPipTeeaD2phhNk+
PxnwQTuAuLPGAYnOZN4dz8rGvpC9cYdeS9Y4bWl2+oSjC6C88lM0Ru+oRs/t+6ID
QSqoe238LQFl+w==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:02:51 2026 by rpki-client