Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
File:                     m1iV5_am1KupyWH3E7LnlxXwIfA.mft (raw, json)
Hash identifier:          oI3GyT+p1MaxfKRy40i6dEHaUWJCv4g6mukbFIiD36k=
Subject key identifier:   B0:64:E0:32:E6:98:45:0E:60:EC:E8:F4:F2:6A:77:87:24:54:6D:12
Authority key identifier: 9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0
Certificate issuer:       /CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
Certificate serial:       019FA18474732924852A4C3F73FAB7D98685
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 03:00:40 +0000
Manifest this update:     Mon 27 Jul 2026 03:00:40 +0000
Manifest next update:     Tue 28 Jul 2026 03:00:40 +0000
Files and hashes:         1: m1iV5_am1KupyWH3E7LnlxXwIfA.crl (hash: 2FupvqOX2JuxFyZ407N6NuIwpsSUXwRpX+MSvXOtsHQ=)
                          2: qQ5wyVk3Z3xJb9VITeIiyOE6Sbc.roa (hash: h2aANiX2nKKZxUEkCXX/gXAdtKRfHxmcGefK8NxJSXs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:74:73:29:24:85:2a:4c:3f:73:fa:b7:d9:86:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b5895e7f6a6d4aba9c961f713b2e79715f021f0
        Validity
            Not Before: Jul 27 03:00:40 2026 GMT
            Not After : Jul 28 03:00:40 2026 GMT
        Subject: CN=b064e032e698450e60ece8f4f26a778724546d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:32:5e:75:b6:f9:1b:a4:8e:8a:4f:8c:99:51:
                    50:2b:94:6a:b3:26:18:a8:b8:18:95:b6:14:51:46:
                    cb:73:a0:6d:9d:57:55:4c:81:fc:dd:0d:5c:fa:7e:
                    e1:1e:e1:07:9d:39:44:d6:39:f7:6f:de:88:42:6c:
                    d3:1a:ea:ed:37:1a:de:4d:d8:a6:96:65:a0:15:21:
                    86:b4:ee:54:be:a9:25:39:6f:e3:b1:b0:2b:8d:d2:
                    63:06:a8:3a:28:9c:57:1e:75:de:b5:51:e9:9b:6c:
                    7e:c1:ff:53:25:7e:6d:c7:cf:01:3e:4b:0e:23:c8:
                    48:e9:e0:51:54:86:8a:ba:a5:a5:04:e3:ea:2a:dc:
                    f5:96:2c:9b:90:48:80:6e:58:eb:73:ac:65:0d:81:
                    9e:4b:21:30:e6:99:a9:60:19:88:ea:d4:9f:5d:b4:
                    fc:e2:04:55:78:c3:e2:83:eb:0b:79:9d:cf:1e:d0:
                    8f:e9:35:74:b9:e8:b8:61:db:7f:4d:51:72:a3:8b:
                    24:98:82:6f:d2:8f:03:2e:26:09:b0:13:7e:53:f6:
                    a4:90:01:69:7f:eb:b6:85:31:9c:5e:7f:80:9e:83:
                    10:1f:62:cd:e0:7a:80:31:b5:e5:2c:cc:5f:ab:95:
                    34:06:39:84:49:6c:18:85:b9:91:66:a2:d8:19:90:
                    c7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:64:E0:32:E6:98:45:0E:60:EC:E8:F4:F2:6A:77:87:24:54:6D:12
            X509v3 Authority Key Identifier:
                keyid:9B:58:95:E7:F6:A6:D4:AB:A9:C9:61:F7:13:B2:E7:97:15:F0:21:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1iV5_am1KupyWH3E7LnlxXwIfA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/134b82-bcfb-445c-bd42-fc2a97b7d53e/1/m1iV5_am1KupyWH3E7LnlxXwIfA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:09:24:cb:8e:ec:0b:79:4c:1f:f7:8d:63:0b:04:68:32:05:
         df:a8:6b:34:79:6f:ab:83:ec:e9:00:19:b6:be:17:97:86:fb:
         a5:a8:ad:8b:64:ed:9a:65:53:64:de:f2:73:a6:e6:9e:b1:65:
         14:83:e8:f4:6e:d9:ad:fa:3d:15:d2:de:9a:0e:d1:8e:be:3a:
         df:94:99:e1:bf:99:39:13:59:f0:82:5c:5c:56:b3:ef:c5:4d:
         52:6d:15:6e:54:a5:aa:39:74:56:65:a9:48:a0:2a:db:30:1a:
         f1:34:13:12:19:a9:f6:92:55:db:40:36:97:e3:f1:ca:14:67:
         2c:75:c0:6c:ea:ea:9c:e4:a0:45:50:f3:8b:82:64:96:b1:ce:
         f5:a8:23:fb:21:0a:31:50:20:ac:fb:53:d3:7b:e2:c6:1d:43:
         70:f3:80:a0:1b:f3:6b:a7:20:4c:17:77:c1:09:2b:db:cc:40:
         3b:1d:7f:0b:98:76:31:e5:02:32:91:f1:de:31:8d:af:46:2b:
         73:3d:c8:7f:a2:b4:c2:d5:17:b5:09:a2:16:c7:e0:57:b9:c9:
         a9:42:fb:9f:0d:ca:f2:95:74:f8:ab:b8:41:fc:17:92:0d:6b:
         bb:b7:08:c7:29:95:c0:28:47:7e:97:2b:97:b7:c6:c3:91:54:
         d6:7a:49:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhHRzKSSFKkw/c/q32YaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTg5NWU3ZjZhNmQ0YWJhOWM5NjFmNzEzYjJlNzk3MTVm
MDIxZjAwHhcNMjYwNzI3MDMwMDQwWhcNMjYwNzI4MDMwMDQwWjAzMTEwLwYDVQQD
EyhiMDY0ZTAzMmU2OTg0NTBlNjBlY2U4ZjRmMjZhNzc4NzI0NTQ2ZDEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjJedbb5G6SOik+MmVFQK5RqsyYY
qLgYlbYUUUbLc6BtnVdVTIH83Q1c+n7hHuEHnTlE1jn3b96IQmzTGurtNxreTdim
lmWgFSGGtO5UvqklOW/jsbArjdJjBqg6KJxXHnXetVHpm2x+wf9TJX5tx88BPksO
I8hI6eBRVIaKuqWlBOPqKtz1liybkEiAbljrc6xlDYGeSyEw5pmpYBmI6tSfXbT8
4gRVeMPig+sLeZ3PHtCP6TV0uei4Ydt/TVFyo4skmIJv0o8DLiYJsBN+U/akkAFp
f+u2hTGcXn+AnoMQH2LN4HqAMbXlLMxfq5U0BjmESWwYhbmRZqLYGZDHWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBk4DLmmEUOYOzo9PJqd4ckVG0SMB8GA1UdIwQY
MBaAFJtYlef2ptSrqclh9xOy55cV8CHwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDIt
ZmMyYTk3YjdkNTNlLzEvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xMzRiODItYmNmYi00NDVjLWJkNDItZmMyYTk3YjdkNTNl
LzEvbTFpVjVfYW0xS3VweVdIM0U3TG5seFh3SWZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANwkky47s
C3lMH/eNYwsEaDIF36hrNHlvq4Ps6QAZtr4Xl4b7paiti2TtmmVTZN7yc6bmnrFl
FIPo9G7Zrfo9FdLemg7Rjr4635SZ4b+ZORNZ8IJcXFaz78VNUm0VblSlqjl0VmWp
SKAq2zAa8TQTEhmp9pJV20A2l+PxyhRnLHXAbOrqnOSgRVDzi4JklrHO9agj+yEK
MVAgrPtT03vixh1DcPOAoBvza6cgTBd3wQkr28xAOx1/C5h2MeUCMpHx3jGNr0Yr
cz3If6K0wtUXtQmiFsfgV7nJqUL7nw3K8pV0+Ku4QfwXkg1ru7cIxymVwChHfpcr
l7fGw5FU1npJ1w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:06:07 2026 by rpki-client