Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File:                     tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier:          Y6Y0nAyJLgZY1kyW1TZk2oeCKHho4GWmAXD3vGN3Nkg=
Subject key identifier:   2C:3E:5E:CD:C3:14:C8:61:5E:A4:BF:C4:B3:FA:F7:20:2B:57:E3:71
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer:       /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial:       019FF8DA221D00DF7A8FB38D8175FB738FCE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number:          19FB
Signing time:             Thu 13 Aug 2026 02:01:12 +0000
Manifest this update:     Thu 13 Aug 2026 02:01:12 +0000
Manifest next update:     Fri 14 Aug 2026 02:01:12 +0000
Files and hashes:         1: bXgR8m5zIy_GMOS_a3seOOEoPYQ.roa (hash: dQET79lWM3bPQ1IRR0iZoVaViZjUeP97gYh31kK/K0E=)
                          2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: hXGMjPChuy2wML5yF227VQol8L47xk24YTN2BJOIsSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:da:22:1d:00:df:7a:8f:b3:8d:81:75:fb:73:8f:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
        Validity
            Not Before: Aug 13 02:01:12 2026 GMT
            Not After : Aug 14 02:01:12 2026 GMT
        Subject: CN=2c3e5ecdc314c8615ea4bfc4b3faf7202b57e371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:5c:e4:80:63:04:3d:34:f9:f0:99:f9:30:
                    55:f6:2c:19:e4:9e:73:a8:d5:62:de:e1:0c:b0:96:
                    96:ae:99:05:a5:e5:9d:53:1d:8d:dd:d1:fb:5c:b4:
                    0c:b1:95:95:05:93:42:ef:51:e6:da:27:da:83:85:
                    79:1c:e9:75:e0:0b:41:c4:57:3f:b4:c5:3c:95:93:
                    0a:32:cb:c2:c8:95:83:99:54:f8:56:3d:3e:f1:e9:
                    36:91:6b:14:92:56:79:58:ff:e3:28:a8:22:22:a9:
                    f3:21:8a:98:61:bf:7b:cb:75:64:5a:b2:23:b1:1a:
                    81:cb:c3:12:f1:af:64:0f:b6:71:f8:f9:1a:b5:b7:
                    e1:72:07:a1:37:96:db:15:1e:af:3b:66:9b:c6:29:
                    0d:46:0a:43:99:6d:56:fe:8e:f0:df:84:b8:dc:07:
                    03:88:cb:40:74:20:f3:1d:8c:3b:cb:85:c3:a1:55:
                    e5:0d:cd:c5:b4:7b:0c:8f:2c:46:d1:7f:ee:56:93:
                    93:cf:be:89:d9:bb:37:62:7e:1e:60:64:4a:85:93:
                    a6:13:d4:48:06:09:92:85:4c:98:8a:77:66:bf:8e:
                    05:10:00:5c:f8:8d:64:5e:b6:3c:96:88:10:3d:09:
                    28:e9:b7:9d:ae:e3:07:9a:37:98:14:fd:11:9b:e1:
                    fc:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3E:5E:CD:C3:14:C8:61:5E:A4:BF:C4:B3:FA:F7:20:2B:57:E3:71
            X509v3 Authority Key Identifier:
                keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:72:a7:c9:a7:72:61:8b:ac:c9:b2:e8:4c:f0:5d:86:db:64:
         1c:ac:66:95:58:0d:eb:de:5e:29:cc:b2:7e:38:5d:de:ef:35:
         5a:0a:4e:cc:93:75:51:6e:28:71:cc:99:75:db:1b:c4:21:dc:
         1b:56:a1:2a:3f:e1:bb:d0:97:12:11:74:33:a6:21:ab:66:a4:
         96:72:de:1b:74:61:46:22:9a:2c:0f:1c:64:98:bb:32:a0:a1:
         27:78:44:8e:cf:5b:45:7d:5e:d1:73:39:41:c4:2b:f6:41:29:
         a7:c8:85:4e:74:15:b5:b0:b5:d7:c4:07:26:ff:71:42:2d:20:
         36:00:9c:c0:a6:43:82:ed:ef:98:3b:65:8a:33:05:4f:e3:57:
         a8:53:23:ad:d2:8e:c9:b7:f7:d7:87:8b:95:45:79:61:c9:06:
         c6:29:25:e6:8c:93:d8:df:7a:ab:ca:a0:a5:d3:e3:b2:c2:74:
         e7:8c:05:3a:eb:50:a6:5c:f5:a6:7e:5a:db:1c:95:ae:81:3a:
         d9:d8:51:6e:f5:38:a3:27:89:6c:53:c3:8b:9a:7c:cd:7c:16:
         6b:39:bf:95:97:6a:03:40:60:ea:20:46:bb:b6:ab:38:bc:b0:
         97:6e:4f:0a:7e:46:64:6a:53:0b:0f:fc:fa:f3:ae:0a:39:64:
         fa:69:2a:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/42iIdAN96j7ONgXX7c4/OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Y2Q5NmIyN2U4ODQzNTA0YmI1YmQ1NWMzMjllYzAyZGI5
ZjBmZmQwHhcNMjYwODEzMDIwMTEyWhcNMjYwODE0MDIwMTEyWjAzMTEwLwYDVQQD
EygyYzNlNWVjZGMzMTRjODYxNWVhNGJmYzRiM2ZhZjcyMDJiNTdlMzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LVc5IBjBD00+fCZ+TBV9iwZ5J5z
qNVi3uEMsJaWrpkFpeWdUx2N3dH7XLQMsZWVBZNC71Hm2ifag4V5HOl14AtBxFc/
tMU8lZMKMsvCyJWDmVT4Vj0+8ek2kWsUklZ5WP/jKKgiIqnzIYqYYb97y3VkWrIj
sRqBy8MS8a9kD7Zx+PkatbfhcgehN5bbFR6vO2abxikNRgpDmW1W/o7w34S43AcD
iMtAdCDzHYw7y4XDoVXlDc3FtHsMjyxG0X/uVpOTz76J2bs3Yn4eYGRKhZOmE9RI
BgmShUyYindmv44FEABc+I1kXrY8logQPQko6bedruMHmjeYFP0Rm+H8wwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCw+Xs3DFMhhXqS/xLP69yArV+NxMB8GA1UdIwQY
MBaAFLTNlrJ+iENQS7W9VcMp7ALbnw/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUt
NTczZjE3ZDJhZWYzLzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUtNTczZjE3ZDJhZWYz
LzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXKnyady
YYusybLoTPBdhttkHKxmlVgN695eKcyyfjhd3u81WgpOzJN1UW4occyZddsbxCHc
G1ahKj/hu9CXEhF0M6Yhq2aklnLeG3RhRiKaLA8cZJi7MqChJ3hEjs9bRX1e0XM5
QcQr9kEpp8iFTnQVtbC118QHJv9xQi0gNgCcwKZDgu3vmDtlijMFT+NXqFMjrdKO
ybf314eLlUV5YckGxikl5oyT2N96q8qgpdPjssJ054wFOutQplz1pn5a2xyVroE6
2dhRbvU4oyeJbFPDi5p8zXwWazm/lZdqA0Bg6iBGu7arOLywl25PCn5GZGpTCw/8
+vOuCjlk+mkqBA==
-----END CERTIFICATE-----
Generated at Thu Aug 13 09:00:18 2026 by rpki-client