Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
File:                     sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft (raw, json)
Hash identifier:          ajuK2JUohJwD/FnHRd2xXKFe0pgUAt5Qhslp85FABy4=
Subject key identifier:   6B:F9:01:5C:14:66:63:48:19:B6:CD:74:AF:CE:7E:A2:F9:3C:5B:88
Authority key identifier: B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44
Certificate issuer:       /CN=b194f0304eedd363c6622fd91c59b10871aa3044
Certificate serial:       019FA184AEA3BC6266B514492F66CF368C9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
Manifest number:          19D3
Signing time:             Mon 27 Jul 2026 03:00:54 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:54 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:54 +0000
Files and hashes:         1: 1OKJSf7t7_lAiooOLlq2_b408jY.asa (hash: TVW+nVerXDEgPaaDUGrcKWYX2YALjhxpnf1JfzADSvU=)
                          2: B9HNNW3Bz7oID9G3-lfUfNqxyrY.roa (hash: tzCu3LyuSxup7J333i9m+mIRLj60qx1pJbahNRpyJGA=)
                          3: MUOyRWPN46PNKkdduP0g7nQfNok.roa (hash: fGl9qQgDH816kxRklhwGBTJ3WAbYJUjNKNT/W0cEqrc=)
                          4: sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl (hash: 8NNkLFMfWh53lEgDubfvYo7orc2Nfn6LGf9kllQncXQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:ae:a3:bc:62:66:b5:14:49:2f:66:cf:36:8c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194f0304eedd363c6622fd91c59b10871aa3044
        Validity
            Not Before: Jul 27 03:00:54 2026 GMT
            Not After : Jul 28 03:00:54 2026 GMT
        Subject: CN=6bf9015c1466634819b6cd74afce7ea2f93c5b88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d2:01:4f:a8:8b:74:81:17:74:d8:35:43:24:
                    25:c7:be:3e:eb:18:29:db:79:2d:56:8f:26:55:4d:
                    6a:d1:80:e9:47:00:f1:21:10:78:24:eb:33:f8:e7:
                    66:a5:c0:b0:e8:f6:c3:5a:0f:17:4f:7d:45:ae:2d:
                    8c:d3:f2:95:aa:63:8c:25:95:e7:55:0d:8d:4a:1f:
                    42:c2:ec:76:29:2f:1f:c5:09:0b:a2:1c:8f:bc:c5:
                    66:b7:68:fe:40:cb:88:6d:73:18:1b:7b:2b:60:b8:
                    c7:5a:b5:a4:0e:a7:8d:9f:3c:d9:a7:28:67:3b:db:
                    5a:92:a5:bc:4e:5f:fc:bf:dc:a1:06:c2:00:fb:fc:
                    c4:11:47:57:a0:cc:00:bf:da:05:cb:ad:7d:ee:8c:
                    ee:e7:64:4d:ef:bb:24:17:90:aa:4a:21:e5:b4:3e:
                    95:35:78:7c:0d:7c:79:be:28:b3:cc:3b:9f:ca:4b:
                    3a:57:3e:27:54:e8:ab:b7:e8:9f:91:fd:6b:3f:fa:
                    be:77:7c:28:07:9b:7d:4a:a3:32:38:05:02:53:9e:
                    2a:00:6e:1a:7b:90:a5:45:fc:b0:be:5c:42:f4:f4:
                    54:a5:1f:18:fc:b4:9d:2f:63:eb:57:b8:b3:ba:ec:
                    1c:65:6f:0c:ab:91:54:8c:05:c2:4a:f6:4d:3f:f0:
                    ea:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F9:01:5C:14:66:63:48:19:B6:CD:74:AF:CE:7E:A2:F9:3C:5B:88
            X509v3 Authority Key Identifier:
                keyid:B1:94:F0:30:4E:ED:D3:63:C6:62:2F:D9:1C:59:B1:08:71:AA:30:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZTwME7t02PGYi_ZHFmxCHGqMEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/df84a7-72c9-4a2f-8115-afbdbdad58a5/1/sZTwME7t02PGYi_ZHFmxCHGqMEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:0c:a8:b2:9b:6f:1e:b2:14:d4:d1:a2:11:31:43:99:e5:5e:
         b5:7c:19:82:76:22:05:ca:ae:c4:3b:04:58:d0:2c:0b:08:6c:
         16:e0:88:e3:b9:1d:d0:18:cf:3a:3f:00:7d:34:33:e3:8f:0d:
         31:55:e3:a9:27:52:e3:61:87:cd:8a:07:fd:45:99:3f:1f:ef:
         5d:84:2c:77:49:63:ce:a1:1f:33:c6:65:94:f2:10:23:e9:66:
         c2:43:75:94:45:99:4c:04:72:31:e6:28:61:96:de:26:4b:14:
         dd:ca:13:f3:c1:0f:31:30:20:af:cd:58:4b:36:08:eb:47:6e:
         00:fb:d3:90:23:8b:d7:23:a9:3c:b6:72:92:b9:2b:5a:eb:06:
         63:dd:c4:fb:63:55:0b:74:9f:49:45:21:51:51:58:d2:dc:4c:
         af:fa:bd:06:fd:82:bd:8b:aa:50:88:87:f8:dd:4c:48:64:2c:
         ff:cc:fa:6e:21:23:1f:cd:60:bd:7f:c9:d6:4b:f9:fd:6c:3f:
         bc:9d:c1:23:09:4a:7e:e3:fa:11:4b:cf:7a:72:8b:82:7f:aa:
         64:46:78:41:64:82:80:93:86:cf:6b:c8:6f:fe:be:43:e0:b7:
         ae:08:5e:b3:16:6f:44:97:b2:5a:59:f8:22:22:2c:41:a3:57:
         92:e2:85:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhK6jvGJmtRRJL2bPNoydMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxOTRmMDMwNGVlZGQzNjNjNjYyMmZkOTFjNTliMTA4NzFh
YTMwNDQwHhcNMjYwNzI3MDMwMDU0WhcNMjYwNzI4MDMwMDU0WjAzMTEwLwYDVQQD
Eyg2YmY5MDE1YzE0NjY2MzQ4MTliNmNkNzRhZmNlN2VhMmY5M2M1Yjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdIBT6iLdIEXdNg1QyQlx74+6xgp
23ktVo8mVU1q0YDpRwDxIRB4JOsz+OdmpcCw6PbDWg8XT31Fri2M0/KVqmOMJZXn
VQ2NSh9Cwux2KS8fxQkLohyPvMVmt2j+QMuIbXMYG3srYLjHWrWkDqeNnzzZpyhn
O9takqW8Tl/8v9yhBsIA+/zEEUdXoMwAv9oFy6197ozu52RN77skF5CqSiHltD6V
NXh8DXx5viizzDufyks6Vz4nVOirt+ifkf1rP/q+d3woB5t9SqMyOAUCU54qAG4a
e5ClRfywvlxC9PRUpR8Y/LSdL2PrV7izuuwcZW8Mq5FUjAXCSvZNP/Dq4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv5AVwUZmNIGbbNdK/OfqL5PFuIMB8GA1UdIwQY
MBaAFLGU8DBO7dNjxmIv2RxZsQhxqjBEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUt
YWZiZGJkYWQ1OGE1LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9kZjg0YTctNzJjOS00YTJmLTgxMTUtYWZiZGJkYWQ1OGE1
LzEvc1pUd01FN3QwMlBHWWlfWkhGbXhDSEdxTUVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQyosptv
HrIU1NGiETFDmeVetXwZgnYiBcquxDsEWNAsCwhsFuCI47kd0BjPOj8AfTQz448N
MVXjqSdS42GHzYoH/UWZPx/vXYQsd0ljzqEfM8ZllPIQI+lmwkN1lEWZTARyMeYo
YZbeJksU3coT88EPMTAgr81YSzYI60duAPvTkCOL1yOpPLZykrkrWusGY93E+2NV
C3SfSUUhUVFY0txMr/q9Bv2CvYuqUIiH+N1MSGQs/8z6biEjH81gvX/J1kv5/Ww/
vJ3BIwlKfuP6EUvPenKLgn+qZEZ4QWSCgJOGz2vIb/6+Q+C3rghesxZvRJeyWln4
IiIsQaNXkuKFFg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:25:39 2026 by rpki-client