Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
File:                     I399sDMxTEc82hlODfefHDddo_Q.mft (raw, json)
Hash identifier:          I4ZWXtnU1Y+dby4B/1/oioiKs/qRpPMzb+3rJiNLjKc=
Subject key identifier:   82:95:65:46:C1:26:B5:41:73:72:1D:50:68:C7:DC:24:50:25:06:B3
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Certificate issuer:       /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial:       019F848CB25970DC16CBBA52B042AA4DCEB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
Manifest number:          19ED
Signing time:             Tue 21 Jul 2026 12:00:40 +0000
Manifest this update:     Tue 21 Jul 2026 12:00:40 +0000
Manifest next update:     Wed 22 Jul 2026 12:00:40 +0000
Files and hashes:         1: I399sDMxTEc82hlODfefHDddo_Q.crl (hash: 9VAjFDKW5nam/AqmFht1LEpAlaMomz5kzBqHdCgq4wQ=)
                          2: Kc_ZYw3v8hIzmM1zcgt9F5cxL98.roa (hash: Lw1rg+/Tz8s8iqnT6INdOtQPU4yz9vyMzF8Or+39BWE=)
                          3: MuwC6x_yLgD7FpDJOy4_RplJ5mE.roa (hash: CQmgt3q4+ZbJ/msa1p0DIKb/lStj5UiMyS0JzyMSKyg=)
                          4: OwT3MWkGmy8nucB77AIErlwv-c8.roa (hash: TO+izXPgq1XnvslTtUGRCnNQnecbCKgXbwm0U1xhS58=)
                          5: ei49HQBepZfijJONn1YXG9qTwnQ.roa (hash: 436lkK/qtqzaDmSUiPMUIk0ZEB4+mDd5VFzkWFWYadA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 12:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:8c:b2:59:70:dc:16:cb:ba:52:b0:42:aa:4d:ce:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
        Validity
            Not Before: Jul 21 12:00:40 2026 GMT
            Not After : Jul 22 12:00:40 2026 GMT
        Subject: CN=82956546c126b54173721d5068c7dc24502506b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0e:3e:e4:5b:40:71:03:4d:ce:e6:66:0b:b9:
                    4e:1c:0c:48:47:6a:c3:fb:94:2a:a1:02:42:8e:70:
                    90:fe:f5:83:26:fb:f4:72:59:a7:17:e9:04:c1:c0:
                    11:56:85:ca:64:a9:84:5b:b0:ca:5f:2a:a4:a5:f2:
                    b8:f8:76:22:c1:e0:2f:b9:f3:a0:65:71:ba:1a:ad:
                    bb:b2:bb:48:65:0e:d4:0f:11:80:ef:bd:75:4c:08:
                    73:5b:eb:e0:20:ed:9b:11:f8:f6:78:6d:c2:ee:12:
                    61:a9:33:70:f9:c5:10:83:ad:eb:2c:95:9c:08:0d:
                    1a:cd:c5:26:5d:18:7c:09:c5:0c:e5:8e:08:03:83:
                    b2:e4:2a:9f:f0:f9:a2:c8:d4:5a:ea:a3:77:1f:cb:
                    72:f4:06:78:ea:b6:6c:86:02:25:b9:d5:eb:6a:e3:
                    a9:58:52:b2:1f:95:60:b2:74:ec:71:c6:42:dd:a1:
                    31:8a:4d:8e:0d:48:e3:aa:f6:b8:2a:4a:44:1d:55:
                    7a:0d:02:b0:f7:6a:fe:f9:fc:ac:44:0b:16:79:53:
                    68:ab:04:d4:85:29:3d:0c:6a:8a:a4:1c:53:7a:67:
                    01:ac:36:65:40:40:46:bd:6b:49:3d:1b:85:ba:30:
                    91:23:74:2b:c1:12:18:f2:fb:d2:13:e7:7f:62:bd:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:95:65:46:C1:26:B5:41:73:72:1D:50:68:C7:DC:24:50:25:06:B3
            X509v3 Authority Key Identifier:
                keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:fc:83:1e:f5:dd:30:8c:64:23:ea:70:c8:b0:94:43:a3:ad:
         e7:03:fa:8f:09:c5:2b:e0:4b:a0:db:8d:52:39:4e:24:88:d3:
         7d:31:2e:63:23:46:19:8c:84:56:b9:c0:8d:b5:f7:78:5f:bc:
         b1:54:8f:d8:95:33:88:33:fb:77:b9:54:18:86:84:d0:91:45:
         7f:24:13:08:0d:b5:35:48:c3:64:e6:18:f2:ca:43:1e:f0:07:
         43:e8:5e:7f:b4:c6:d2:75:d4:38:81:86:61:ae:58:e3:bd:fd:
         c2:0a:e6:36:47:15:c7:ab:bf:0b:42:40:f7:7e:6f:6c:59:e1:
         5f:d2:7f:c4:20:ea:5f:e9:b2:93:dc:5c:ca:47:a9:f4:a9:f5:
         4e:93:86:e7:64:dc:e1:d3:f5:1a:0a:8e:76:8c:04:19:27:6d:
         6b:9b:69:95:1e:0e:f3:ae:c7:80:c2:2b:51:fc:5a:34:bc:16:
         d2:5b:f3:a1:6c:ca:6b:e0:70:9a:16:7f:f4:f0:43:14:dc:fc:
         17:2f:f2:d3:1c:0f:ea:9d:b3:d9:48:eb:1c:77:60:fa:f5:52:
         ff:b8:c9:d1:22:bd:1e:67:3c:83:1f:7c:7f:60:ea:19:31:93:
         17:32:f8:17:0a:06:6b:a6:bb:70:77:66:b0:bb:eb:3d:ce:55:
         b9:c8:ab:84
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EjLJZcNwWy7pSsEKqTc60MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2Y3ZGIwMzMzMTRjNDczY2RhMTk0ZTBkZjc5ZjFjMzc1
ZGEzZjQwHhcNMjYwNzIxMTIwMDQwWhcNMjYwNzIyMTIwMDQwWjAzMTEwLwYDVQQD
Eyg4Mjk1NjU0NmMxMjZiNTQxNzM3MjFkNTA2OGM3ZGMyNDUwMjUwNmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtA4+5FtAcQNNzuZmC7lOHAxIR2rD
+5QqoQJCjnCQ/vWDJvv0clmnF+kEwcARVoXKZKmEW7DKXyqkpfK4+HYiweAvufOg
ZXG6Gq27srtIZQ7UDxGA7711TAhzW+vgIO2bEfj2eG3C7hJhqTNw+cUQg63rLJWc
CA0azcUmXRh8CcUM5Y4IA4Oy5Cqf8PmiyNRa6qN3H8ty9AZ46rZshgIludXrauOp
WFKyH5VgsnTsccZC3aExik2ODUjjqva4KkpEHVV6DQKw92r++fysRAsWeVNoqwTU
hSk9DGqKpBxTemcBrDZlQEBGvWtJPRuFujCRI3QrwRIY8vvSE+d/Yr3JzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKVZUbBJrVBc3IdUGjH3CRQJQazMB8GA1UdIwQY
MBaAFCN/fbAzMUxHPNoZTg33nxw3XaP0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYt
ZWUwNjAzOTQ5ZjkzLzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lZWY1NTctMGUxMC00MGNlLWE0OGYtZWUwNjAzOTQ5Zjkz
LzEvSTM5OXNETXhURWM4MmhsT0RmZWZIRGRkb19RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs/yDHvXd
MIxkI+pwyLCUQ6Ot5wP6jwnFK+BLoNuNUjlOJIjTfTEuYyNGGYyEVrnAjbX3eF+8
sVSP2JUziDP7d7lUGIaE0JFFfyQTCA21NUjDZOYY8spDHvAHQ+hef7TG0nXUOIGG
Ya5Y4739wgrmNkcVx6u/C0JA935vbFnhX9J/xCDqX+myk9xcykep9Kn1TpOG52Tc
4dP1GgqOdowEGSdta5tplR4O867HgMIrUfxaNLwW0lvzoWzKa+BwmhZ/9PBDFNz8
Fy/y0xwP6p2z2UjrHHdg+vVS/7jJ0SK9Hmc8gx98f2DqGTGTFzL4FwoGa6a7cHdm
sLvrPc5VucirhA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:31:58 2026 by rpki-client