Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File:                     uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier:          jR4AdRAkU8iK95u9XAwrRyKELdstGWYVH6zS0CJ9VaE=
Subject key identifier:   78:39:20:43:95:C5:84:7B:8F:19:A1:F6:E6:D7:D3:6C:C5:70:53:E2
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer:       /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial:       019FA260B927E338CC437DC9FEDFCF05B51A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 07:01:15 +0000
Manifest this update:     Mon 27 Jul 2026 07:01:15 +0000
Manifest next update:     Tue 28 Jul 2026 07:01:15 +0000
Files and hashes:         1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
                          2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
                          3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
                          4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: 1+I7lLSNd2kQceHI2RkMaUZ10VtquKAxjMRo4fd4bQw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:b9:27:e3:38:cc:43:7d:c9:fe:df:cf:05:b5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
        Validity
            Not Before: Jul 27 07:01:15 2026 GMT
            Not After : Jul 28 07:01:15 2026 GMT
        Subject: CN=7839204395c5847b8f19a1f6e6d7d36cc57053e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:93:5a:f3:41:3b:26:83:6d:1d:a3:92:93:cb:
                    ad:8a:c8:86:78:1a:c5:73:81:2b:db:a4:b9:fe:46:
                    76:89:2d:f5:2b:09:aa:7c:56:6b:53:63:8e:c8:d8:
                    cb:5f:81:67:41:bc:6f:31:3b:f1:3b:d0:c0:20:0e:
                    0b:17:cc:34:6f:7b:25:56:f1:78:7f:16:67:90:5c:
                    82:e5:3d:8d:16:37:ed:ed:ff:39:17:b0:4c:41:f5:
                    17:09:8f:c6:2c:69:b2:82:48:d7:8f:da:09:fa:f7:
                    d2:ee:bd:33:a8:1b:5b:25:f2:63:03:0e:78:3c:14:
                    ca:68:5a:38:fc:40:18:a0:c6:37:88:fc:be:42:14:
                    26:c1:94:9b:7d:55:7d:b1:b9:be:2c:96:28:7c:28:
                    d9:9c:f2:d0:85:d1:96:c3:79:8d:a2:89:9f:60:66:
                    f8:cb:46:1e:17:d2:ae:f0:24:38:d0:54:2b:42:a8:
                    98:b2:66:cb:ec:2f:44:88:5a:0f:58:26:f6:5e:3f:
                    21:7d:55:76:a8:87:3d:42:8f:f4:95:bf:29:6f:27:
                    6a:a6:f6:cb:52:41:bf:4b:e5:67:ff:89:1b:d9:0c:
                    b2:84:8f:a6:f1:1a:88:06:06:f5:be:3d:4f:86:91:
                    df:01:46:73:bb:9d:4b:30:74:1e:a8:97:81:8b:8b:
                    92:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:39:20:43:95:C5:84:7B:8F:19:A1:F6:E6:D7:D3:6C:C5:70:53:E2
            X509v3 Authority Key Identifier:
                keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6e:8a:f4:fe:db:25:d4:c4:39:cf:7a:b8:50:b9:56:3e:43:
         9c:fb:07:e2:70:69:74:54:36:64:8d:cd:f0:ef:2b:f3:b8:fd:
         c3:43:0a:b1:7d:69:a1:cd:73:8f:f0:b1:5e:47:59:a8:20:3d:
         0a:67:55:f0:37:fd:31:58:21:28:1d:e8:a0:b8:aa:9f:93:1f:
         b8:a8:2d:7a:e9:b0:00:dd:66:0b:da:a7:0a:cb:bd:39:1c:eb:
         0f:19:43:6c:d0:1c:24:f4:3f:cc:81:af:33:6a:9e:8d:d7:79:
         9b:01:98:b4:0f:05:86:a5:71:d1:c1:70:19:df:a2:16:4d:47:
         8b:15:17:6a:54:16:26:6e:9a:be:1e:c7:c9:d8:33:93:3c:61:
         c3:f1:94:27:9f:52:0f:c7:67:21:91:a3:73:8f:fb:27:ea:a6:
         88:af:4d:4a:26:45:fd:62:1e:dd:bf:81:43:02:b2:b3:9e:a2:
         3e:6f:47:66:59:00:9f:ed:d0:9a:7d:67:39:6f:59:0e:ad:33:
         c3:a0:c5:0d:7b:34:e3:47:e0:25:3d:29:e0:d1:74:d5:25:39:
         1c:c4:b4:da:ff:8f:83:1c:72:43:9b:9f:7d:cc:c5:1c:db:f8:
         17:1f:a0:76:19:0a:38:20:4f:59:6f:8a:f8:b2:f0:0c:64:16:
         8c:cc:da:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYLkn4zjMQ33J/t/PBbUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MjEyNzdmM2U3OTU0YTRhZjU1MjBhOTkwNDJmYjA4OTNh
ZjgwNGQwHhcNMjYwNzI3MDcwMTE1WhcNMjYwNzI4MDcwMTE1WjAzMTEwLwYDVQQD
Eyg3ODM5MjA0Mzk1YzU4NDdiOGYxOWExZjZlNmQ3ZDM2Y2M1NzA1M2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZNa80E7JoNtHaOSk8utisiGeBrF
c4Er26S5/kZ2iS31KwmqfFZrU2OOyNjLX4FnQbxvMTvxO9DAIA4LF8w0b3slVvF4
fxZnkFyC5T2NFjft7f85F7BMQfUXCY/GLGmygkjXj9oJ+vfS7r0zqBtbJfJjAw54
PBTKaFo4/EAYoMY3iPy+QhQmwZSbfVV9sbm+LJYofCjZnPLQhdGWw3mNoomfYGb4
y0YeF9Ku8CQ40FQrQqiYsmbL7C9EiFoPWCb2Xj8hfVV2qIc9Qo/0lb8pbydqpvbL
UkG/S+Vn/4kb2QyyhI+m8RqIBgb1vj1PhpHfAUZzu51LMHQeqJeBi4uS4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHg5IEOVxYR7jxmh9ubX02zFcFPiMB8GA1UdIwQY
MBaAFLkhJ38+eVSkr1UgqZBC+wiTr4BNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUt
MzZmZDIzMzUxNGY5LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi84Y2NiY2MtY2Q1MS00NGFlLThmMDUtMzZmZDIzMzUxNGY5
LzEvdVNFbmZ6NTVWS1N2VlNDcGtFTDdDSk92Z0UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd26K9P7b
JdTEOc96uFC5Vj5DnPsH4nBpdFQ2ZI3N8O8r87j9w0MKsX1poc1zj/CxXkdZqCA9
CmdV8Df9MVghKB3ooLiqn5MfuKgteumwAN1mC9qnCsu9ORzrDxlDbNAcJPQ/zIGv
M2qejdd5mwGYtA8FhqVx0cFwGd+iFk1HixUXalQWJm6avh7Hydgzkzxhw/GUJ59S
D8dnIZGjc4/7J+qmiK9NSiZF/WIe3b+BQwKys56iPm9HZlkAn+3Qmn1nOW9ZDq0z
w6DFDXs040fgJT0p4NF01SU5HMS02v+PgxxyQ5uffczFHNv4Fx+gdhkKOCBPWW+K
+LLwDGQWjMzaqA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:36 2026 by rpki-client