Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
File:                     YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft (raw, json)
Hash identifier:          reV25VC+ZdBDN/BnMuP5qxmdAQ2u6yZtFe5zAb3+xXk=
Subject key identifier:   63:E0:19:F9:54:29:34:AB:8D:CC:45:2B:D0:20:AA:D1:BB:B2:BC:82
Authority key identifier: 61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0
Certificate issuer:       /CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
Certificate serial:       019F71061321A587E8F8527178A36856C6C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
Manifest number:          19BD
Signing time:             Fri 17 Jul 2026 17:00:51 +0000
Manifest this update:     Fri 17 Jul 2026 17:00:51 +0000
Manifest next update:     Sat 18 Jul 2026 17:00:51 +0000
Files and hashes:         1: 8Q0Zf_p2yrZ0sNHZrjCdOSKVFH0.roa (hash: yTf6BtJWlrsaOEBrk5U/warCLRXhsKvIf1U8hGm0E84=)
                          2: Dch7ul5aVnL_m2XEZjfUT9TlzKI.roa (hash: dY0WBC4mPaz5+Exli1KBR1KbgYfTH82golhb7jbBUj0=)
                          3: YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl (hash: KWYNtBQ3Tld4Hqev0xE7oRQmd8bV1Sp6jbM7mYqDEFE=)
                          4: ZcwqCFu-ugccIfT-C61LOqP6Rms.roa (hash: zUv7VdLIHUw6+UwEQbFc7BcKwkxW2AOANbLeMf0i6t0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:71:06:13:21:a5:87:e8:f8:52:71:78:a3:68:56:c6:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=617cd8d48b5d15667bf131396d4a6c59d7d167c0
        Validity
            Not Before: Jul 17 17:00:51 2026 GMT
            Not After : Jul 18 17:00:51 2026 GMT
        Subject: CN=63e019f9542934ab8dcc452bd020aad1bbb2bc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b5:2b:64:4c:04:41:a2:bd:c4:4a:ef:9d:83:
                    57:ca:5c:62:ab:e3:f0:c9:9d:7e:79:a4:de:9f:54:
                    cc:6c:8c:80:3a:fb:ff:16:a8:60:46:d4:a1:cf:d9:
                    01:44:8b:e8:e9:02:b3:4b:70:c0:49:bd:cb:f6:41:
                    7d:8c:2e:73:17:c5:94:5f:8b:47:4d:8f:01:7b:d7:
                    8a:97:fc:e3:ba:6f:a6:47:5c:26:b8:4e:15:af:61:
                    f5:74:b2:1c:8c:cf:4e:fc:c5:54:32:b9:cd:9a:62:
                    3f:83:15:c0:55:f1:63:fd:4b:b4:3e:a1:4a:2f:54:
                    b5:67:2e:06:70:ba:6e:1c:c8:8e:4f:54:ce:bd:03:
                    0a:3f:62:0a:f5:73:ec:2e:55:03:e7:db:30:48:dc:
                    52:c1:18:e5:7f:a4:15:cf:41:14:df:99:e5:ab:72:
                    62:b5:6a:7a:79:69:41:a2:57:b9:93:f1:4f:11:36:
                    17:44:01:de:6b:a6:ab:fd:af:b0:05:fb:4c:1b:ea:
                    55:10:b5:e7:9b:1f:6a:ef:02:00:3d:11:b7:89:bb:
                    97:18:6b:f5:c5:99:18:33:62:c2:dd:22:db:2b:95:
                    06:ad:a1:bc:63:71:d1:31:fb:22:d1:65:b0:bb:2e:
                    0f:60:09:88:48:b2:59:c0:4c:0d:87:d1:22:38:e9:
                    e3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:E0:19:F9:54:29:34:AB:8D:CC:45:2B:D0:20:AA:D1:BB:B2:BC:82
            X509v3 Authority Key Identifier:
                keyid:61:7C:D8:D4:8B:5D:15:66:7B:F1:31:39:6D:4A:6C:59:D7:D1:67:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/105e23-6ce6-4ce0-93fa-bf6e97ddd079/1/YXzY1ItdFWZ78TE5bUpsWdfRZ8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:23:07:57:c0:34:d8:94:bf:98:bd:b0:b4:ec:0b:ef:e6:26:
         20:14:aa:b3:f9:59:d7:c9:f5:97:c6:79:12:e8:2b:9a:ee:78:
         a0:ba:e1:1c:e4:b9:7c:78:76:c2:fd:4b:9b:7c:e1:85:29:71:
         4a:53:a2:7d:9e:ac:d6:9a:97:a7:73:62:cf:72:1c:ea:32:41:
         e2:fb:84:28:15:28:6f:49:a8:b0:8a:d0:4d:f2:ab:de:7b:49:
         cf:41:d5:15:86:31:af:e5:70:d6:1b:d2:82:ad:a8:1b:09:b3:
         24:5d:8e:e2:7f:b0:65:61:b2:6a:c5:c0:0f:d5:c8:9c:be:84:
         a9:42:cc:f7:8c:a0:7b:db:a5:5c:12:d8:af:d3:0d:01:b2:81:
         20:d1:55:18:18:c3:cf:69:a2:bd:5b:1e:68:b0:f2:d3:4e:be:
         c1:97:2b:93:75:c3:91:f6:9c:d4:3c:c6:1b:df:84:6e:6a:8d:
         7a:c3:e4:e2:62:a8:54:9e:4f:6a:2e:f0:cc:a5:4a:58:f3:f1:
         38:b6:02:2a:04:40:26:cd:f4:00:2b:da:be:df:6e:97:79:cb:
         a3:da:e0:22:67:94:ed:c3:36:c7:c4:cc:e9:45:73:6b:3f:a7:
         c9:c4:f5:65:b2:fd:91:ad:c4:29:d4:ed:9d:07:8a:ff:53:4f:
         25:3a:fb:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9xBhMhpYfo+FJxeKNoVsbBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxN2NkOGQ0OGI1ZDE1NjY3YmYxMzEzOTZkNGE2YzU5ZDdk
MTY3YzAwHhcNMjYwNzE3MTcwMDUxWhcNMjYwNzE4MTcwMDUxWjAzMTEwLwYDVQQD
Eyg2M2UwMTlmOTU0MjkzNGFiOGRjYzQ1MmJkMDIwYWFkMWJiYjJiYzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbUrZEwEQaK9xErvnYNXylxiq+Pw
yZ1+eaTen1TMbIyAOvv/FqhgRtShz9kBRIvo6QKzS3DASb3L9kF9jC5zF8WUX4tH
TY8Be9eKl/zjum+mR1wmuE4Vr2H1dLIcjM9O/MVUMrnNmmI/gxXAVfFj/Uu0PqFK
L1S1Zy4GcLpuHMiOT1TOvQMKP2IK9XPsLlUD59swSNxSwRjlf6QVz0EU35nlq3Ji
tWp6eWlBole5k/FPETYXRAHea6ar/a+wBftMG+pVELXnmx9q7wIAPRG3ibuXGGv1
xZkYM2LC3SLbK5UGraG8Y3HRMfsi0WWwuy4PYAmISLJZwEwNh9EiOOnj3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPgGflUKTSrjcxFK9AgqtG7sryCMB8GA1UdIwQY
MBaAFGF82NSLXRVme/ExOW1KbFnX0WfAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEt
YmY2ZTk3ZGRkMDc5LzEvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy8xMDVlMjMtNmNlNi00Y2UwLTkzZmEtYmY2ZTk3ZGRkMDc5
LzEvWVh6WTFJdGRGV1o3OFRFNWJVcHNXZGZSWjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCMHV8A0
2JS/mL2wtOwL7+YmIBSqs/lZ18n1l8Z5Eugrmu54oLrhHOS5fHh2wv1Lm3zhhSlx
SlOifZ6s1pqXp3Niz3Ic6jJB4vuEKBUob0mosIrQTfKr3ntJz0HVFYYxr+Vw1hvS
gq2oGwmzJF2O4n+wZWGyasXAD9XInL6EqULM94yge9ulXBLYr9MNAbKBINFVGBjD
z2mivVseaLDy006+wZcrk3XDkfac1DzGG9+EbmqNesPk4mKoVJ5Pai7wzKVKWPPx
OLYCKgRAJs30ACvavt9ul3nLo9rgImeU7cM2x8TM6UVzaz+nycT1ZbL9ka3EKdTt
nQeK/1NPJTr7Cw==
-----END CERTIFICATE-----
Generated at Sat Jul 18 02:55:44 2026 by rpki-client