Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File:                     7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier:          +9OLv4T/qBIxry79P2V9upPK6otujF5hs7KpW+p+AbY=
Subject key identifier:   95:65:D7:45:8B:4C:E7:FC:57:C4:8E:A9:BB:DE:09:FD:BA:51:3F:0A
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer:       /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial:       019FA1171FE24E929E6221331CC7BCD63B1D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number:          19D2
Signing time:             Mon 27 Jul 2026 01:01:14 +0000
Manifest this update:     Mon 27 Jul 2026 01:01:14 +0000
Manifest next update:     Tue 28 Jul 2026 01:01:14 +0000
Files and hashes:         1: 6CjF8Jlu6tuK8zsCRGmRKkMW1aY.roa (hash: cbJEUas+h/1ENIgGWWNamGqYchFhfCj4L7NJTrlZrxc=)
                          2: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: dJF2tqRz5yeXuQh4TtlPUIkCo5SR87jtN3yxqBnPAZg=)
                          3: sW8W0-8WOsG0evmu2fYzqrWdI9U.roa (hash: aDuewNAM6XmzF96K8nKeS1R/6Pbon3faWwSXg53klfQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 01:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:17:1f:e2:4e:92:9e:62:21:33:1c:c7:bc:d6:3b:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
        Validity
            Not Before: Jul 27 01:01:14 2026 GMT
            Not After : Jul 28 01:01:14 2026 GMT
        Subject: CN=9565d7458b4ce7fc57c48ea9bbde09fdba513f0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fd:13:4a:2b:ff:41:f0:bd:52:f9:6a:38:a3:
                    ae:9f:a6:94:25:ad:f5:32:7f:96:c4:ac:a2:ee:ff:
                    7f:ca:19:2a:ac:ee:cb:63:41:75:a3:7f:2c:29:25:
                    5a:55:6e:fc:0e:fc:c3:4e:50:7f:53:1d:2a:5e:39:
                    50:2b:80:df:86:22:ff:f3:10:f2:f5:fb:11:55:20:
                    85:a5:0a:d9:92:87:09:4d:55:2f:5d:6d:8b:ed:6b:
                    e2:08:2d:42:5f:e0:cb:d4:35:af:24:ab:d3:c3:fa:
                    dc:36:e7:f2:9c:72:5a:36:3b:e4:42:a6:4a:a7:df:
                    32:e4:fc:c2:26:75:7c:52:bc:ca:c5:66:18:58:ee:
                    39:48:5c:54:c2:82:4e:ae:58:e2:56:4a:f0:81:94:
                    1d:86:a5:96:52:40:0f:cd:bb:60:29:16:6e:f0:e6:
                    a8:52:7e:b2:7f:b8:1a:c8:56:12:08:cb:3d:ff:5d:
                    50:4f:46:e8:b2:56:c7:ef:c9:d7:05:fc:12:ca:b7:
                    ca:af:94:b2:8d:fb:13:9f:09:1f:ff:fb:8b:56:20:
                    92:e1:a5:42:6a:ab:92:f5:37:c0:66:2b:2a:d5:a1:
                    3a:cb:4d:97:bb:6b:40:68:35:58:4c:a1:91:b3:8a:
                    ed:d1:f4:81:4f:39:c1:a6:5c:b7:17:29:fd:ea:cc:
                    9f:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:65:D7:45:8B:4C:E7:FC:57:C4:8E:A9:BB:DE:09:FD:BA:51:3F:0A
            X509v3 Authority Key Identifier:
                keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:2e:61:88:52:a4:2c:80:a8:33:bf:51:f9:17:cc:43:52:85:
         5b:86:5f:08:1a:68:7f:7f:bd:24:f9:e4:5f:9a:69:32:d2:4d:
         f1:87:e2:8f:56:cb:a8:5e:e8:17:a9:16:38:27:81:03:4b:3b:
         fa:a8:13:62:a8:01:bf:5e:bc:c8:1f:28:94:36:07:d8:33:20:
         de:28:e9:3b:11:13:38:41:c5:71:db:a0:58:c3:e7:55:a4:47:
         65:85:d6:ee:33:09:74:aa:25:9f:ef:6a:a3:77:6f:44:7d:27:
         c6:ee:09:0c:bc:b5:7f:c0:46:44:df:5a:37:c2:6a:72:86:55:
         a0:4d:8c:ad:a2:45:b0:a6:1d:63:38:3c:35:61:58:2e:53:8e:
         4f:a5:18:34:27:10:27:7b:84:3e:66:75:65:72:78:94:5a:d1:
         da:60:0e:80:f6:76:fb:a9:94:90:a6:a6:bb:59:4b:f0:93:d1:
         91:6f:3f:99:67:03:66:ff:c3:06:46:98:db:55:e1:70:08:5e:
         37:11:c9:fd:cf:5c:49:6b:8d:24:c1:68:5d:2a:4a:08:8d:80:
         bd:95:51:85:89:de:5d:b1:de:af:11:fc:7b:29:79:a7:f2:6c:
         e3:0d:9c:aa:81:bb:69:d8:95:c8:3d:4a:e6:09:83:a9:db:32:
         1b:85:50:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hFx/iTpKeYiEzHMe81jsdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMjI1OWYxNThiOWFhNzZhYWQwYjFhZGZhNjJjMWVlZDQ1
NTlkMTQwHhcNMjYwNzI3MDEwMTE0WhcNMjYwNzI4MDEwMTE0WjAzMTEwLwYDVQQD
Eyg5NTY1ZDc0NThiNGNlN2ZjNTdjNDhlYTliYmRlMDlmZGJhNTEzZjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/0TSiv/QfC9UvlqOKOun6aUJa31
Mn+WxKyi7v9/yhkqrO7LY0F1o38sKSVaVW78DvzDTlB/Ux0qXjlQK4DfhiL/8xDy
9fsRVSCFpQrZkocJTVUvXW2L7WviCC1CX+DL1DWvJKvTw/rcNufynHJaNjvkQqZK
p98y5PzCJnV8UrzKxWYYWO45SFxUwoJOrljiVkrwgZQdhqWWUkAPzbtgKRZu8Oao
Un6yf7gayFYSCMs9/11QT0boslbH78nXBfwSyrfKr5SyjfsTnwkf//uLViCS4aVC
aquS9TfAZisq1aE6y02Xu2tAaDVYTKGRs4rt0fSBTznBply3Fyn96syfKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVl10WLTOf8V8SOqbveCf26UT8KMB8GA1UdIwQY
MBaAFO4iWfFYuap2qtCxrfpiwe7UVZ0UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQt
MzQ5N2NlMWI3MWJmLzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC80MTAxMmUtNzg4NS00ZjQwLWJkZjQtMzQ5N2NlMWI3MWJm
LzEvN2lKWjhWaTVxbmFxMExHdC1tTEI3dFJWblJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoS5hiFKk
LICoM79R+RfMQ1KFW4ZfCBpof3+9JPnkX5ppMtJN8Yfij1bLqF7oF6kWOCeBA0s7
+qgTYqgBv168yB8olDYH2DMg3ijpOxETOEHFcdugWMPnVaRHZYXW7jMJdKoln+9q
o3dvRH0nxu4JDLy1f8BGRN9aN8JqcoZVoE2MraJFsKYdYzg8NWFYLlOOT6UYNCcQ
J3uEPmZ1ZXJ4lFrR2mAOgPZ2+6mUkKamu1lL8JPRkW8/mWcDZv/DBkaY21XhcAhe
NxHJ/c9cSWuNJMFoXSpKCI2AvZVRhYneXbHerxH8eyl5p/Js4w2cqoG7adiVyD1K
5gmDqdsyG4VQfw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:48:20 2026 by rpki-client