Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
File:                     Mjq1upi-9dDZvQzqAxof4Td3pIY.mft (raw, json)
Hash identifier:          8JEbflvz2tax5u8zzYcrdV/5uJ1pCzS38loymK+tGlo=
Subject key identifier:   9B:C1:B2:A0:41:3B:21:9A:50:3C:D5:B9:A5:78:A6:33:83:4D:93:AC
Authority key identifier: 32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86
Certificate issuer:       /CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
Certificate serial:       019FA305357D7220241D22FD86F024F4C277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
Manifest number:          19D8
Signing time:             Mon 27 Jul 2026 10:00:55 +0000
Manifest this update:     Mon 27 Jul 2026 10:00:55 +0000
Manifest next update:     Tue 28 Jul 2026 10:00:55 +0000
Files and hashes:         1: 4OfU2rfqwcmQHVMCgT7CW5y9Esc.roa (hash: 6c2di21UkdxCdq2ON9gqALGB3nBwbFRZkNvS0qOjJOA=)
                          2: JEARuQCJYCxHv8HfFe-lBL03uK0.roa (hash: 9gO9GtcUyz8FCoLJvfirYDrRc/ywQ/+q2nFc+c77mQw=)
                          3: Mjq1upi-9dDZvQzqAxof4Td3pIY.crl (hash: EN5vn4AhjC6Z5YgZgGCPP6MgyY129rTj2jMbN+pbyY0=)
                          4: hqUy8qtpbSzgGsth7bhGSC_Ob5o.roa (hash: y0DH54HnscuJTZ0/mvHb9xk81GdngOIoXJepxEnN/Is=)
                          5: z8XoAnZ03V47t1hOY-uk-3tN8U0.roa (hash: UcF6sy8hP78bQQegH3qIsA5LxH0dzQkKTfxUjWedo7w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:05:35:7d:72:20:24:1d:22:fd:86:f0:24:f4:c2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=323ab5ba98bef5d0d9bd0cea031a1fe13777a486
        Validity
            Not Before: Jul 27 10:00:55 2026 GMT
            Not After : Jul 28 10:00:55 2026 GMT
        Subject: CN=9bc1b2a0413b219a503cd5b9a578a633834d93ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:40:e9:21:75:0f:1b:b8:31:47:d8:f7:d5:30:
                    ad:7d:22:d2:c2:2e:5c:0d:8e:9d:c6:e2:c5:dc:0a:
                    ef:98:da:39:4d:b5:13:a8:2c:88:4c:4d:a5:d1:6e:
                    95:a0:12:39:f8:e6:0f:bc:32:f7:a4:71:08:64:d4:
                    a6:43:7d:d8:41:b6:ec:21:24:fb:12:eb:de:e5:22:
                    4a:53:10:50:09:7f:28:cd:57:c0:82:b5:44:46:2e:
                    82:ee:ff:35:9a:64:bf:46:13:67:1a:2b:48:91:0a:
                    04:26:9b:92:73:48:e1:14:c4:4a:68:20:cd:b5:77:
                    19:9d:22:a9:f4:ea:04:2b:ce:85:3e:da:14:24:90:
                    9f:d8:fd:c5:90:75:29:b7:d3:12:7e:51:1d:03:71:
                    68:ee:81:21:ed:c2:d9:c3:e9:4d:50:fb:0a:b9:34:
                    25:29:45:6b:e3:e7:05:8c:d0:30:f0:c2:d9:88:95:
                    2c:06:8e:2a:56:f2:e6:7d:4c:ab:63:a1:18:0c:12:
                    e3:0c:7f:41:fc:bb:7a:a1:d3:8e:5e:0f:15:de:8b:
                    c7:41:75:bc:04:32:53:3b:5f:0b:b7:81:5c:6a:b2:
                    3e:62:5b:23:8e:12:43:e3:12:bb:85:55:d1:fc:49:
                    da:f8:4c:90:5c:b8:ba:26:dd:9a:74:e7:2b:b0:33:
                    5b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C1:B2:A0:41:3B:21:9A:50:3C:D5:B9:A5:78:A6:33:83:4D:93:AC
            X509v3 Authority Key Identifier:
                keyid:32:3A:B5:BA:98:BE:F5:D0:D9:BD:0C:EA:03:1A:1F:E1:37:77:A4:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mjq1upi-9dDZvQzqAxof4Td3pIY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b01290-d76d-42d8-a234-f9512499e05c/1/Mjq1upi-9dDZvQzqAxof4Td3pIY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:76:fb:f9:fc:9d:8c:16:13:84:8f:6c:4c:b8:be:79:40:d6:
         58:1b:6e:35:f1:65:8f:01:60:5a:18:61:ad:dd:4e:f0:31:18:
         7c:56:9d:0c:83:f2:b4:9b:bb:a8:aa:59:f8:ec:92:d4:dd:bb:
         dd:21:38:ee:87:7c:81:5b:ed:cb:50:69:86:9a:65:ba:b6:6a:
         c3:00:f0:e8:f5:ae:92:70:f0:1f:20:50:c2:46:12:2f:0c:1f:
         5b:50:2f:2c:60:bd:08:30:17:ff:5d:12:af:f6:14:29:09:4e:
         50:8e:40:4d:63:62:31:ca:a7:e2:3f:65:81:9a:3a:8b:e1:44:
         f6:fb:77:71:07:a1:90:3c:fd:70:7d:5a:de:d4:2b:cd:52:92:
         b5:6c:43:0b:66:9c:4c:20:5d:b1:f1:5b:76:b4:37:04:ec:dc:
         2c:93:58:5a:b0:2f:98:b3:2c:aa:35:cc:8f:e2:4e:99:a5:bc:
         4b:7d:8b:ed:cc:b7:9f:ca:b5:51:f5:51:65:9c:94:aa:14:15:
         06:a9:b6:3a:f2:bb:c1:c4:7b:36:d2:d0:4f:20:a0:99:a7:4e:
         4f:ec:f4:88:65:0a:97:c2:0b:bc:df:d6:85:34:54:f0:8a:20:
         50:fb:cd:26:e3:3a:20:47:41:67:25:e0:73:8e:99:37:6f:ce:
         42:8f:aa:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBTV9ciAkHSL9hvAk9MJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyM2FiNWJhOThiZWY1ZDBkOWJkMGNlYTAzMWExZmUxMzc3
N2E0ODYwHhcNMjYwNzI3MTAwMDU1WhcNMjYwNzI4MTAwMDU1WjAzMTEwLwYDVQQD
Eyg5YmMxYjJhMDQxM2IyMTlhNTAzY2Q1YjlhNTc4YTYzMzgzNGQ5M2FjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyEDpIXUPG7gxR9j31TCtfSLSwi5c
DY6dxuLF3ArvmNo5TbUTqCyITE2l0W6VoBI5+OYPvDL3pHEIZNSmQ33YQbbsIST7
Euve5SJKUxBQCX8ozVfAgrVERi6C7v81mmS/RhNnGitIkQoEJpuSc0jhFMRKaCDN
tXcZnSKp9OoEK86FPtoUJJCf2P3FkHUpt9MSflEdA3Fo7oEh7cLZw+lNUPsKuTQl
KUVr4+cFjNAw8MLZiJUsBo4qVvLmfUyrY6EYDBLjDH9B/Lt6odOOXg8V3ovHQXW8
BDJTO18Lt4FcarI+YlsjjhJD4xK7hVXR/Ena+EyQXLi6Jt2adOcrsDNbyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJvBsqBBOyGaUDzVuaV4pjODTZOsMB8GA1UdIwQY
MBaAFDI6tbqYvvXQ2b0M6gMaH+E3d6SGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQt
Zjk1MTI0OTllMDVjLzEvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9iMDEyOTAtZDc2ZC00MmQ4LWEyMzQtZjk1MTI0OTllMDVj
LzEvTWpxMXVwaS05ZERadlF6cUF4b2Y0VGQzcElZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXb7+fyd
jBYThI9sTLi+eUDWWBtuNfFljwFgWhhhrd1O8DEYfFadDIPytJu7qKpZ+OyS1N27
3SE47od8gVvty1BphpplurZqwwDw6PWuknDwHyBQwkYSLwwfW1AvLGC9CDAX/10S
r/YUKQlOUI5ATWNiMcqn4j9lgZo6i+FE9vt3cQehkDz9cH1a3tQrzVKStWxDC2ac
TCBdsfFbdrQ3BOzcLJNYWrAvmLMsqjXMj+JOmaW8S32L7cy3n8q1UfVRZZyUqhQV
Bqm2OvK7wcR7NtLQTyCgmadOT+z0iGUKl8ILvN/WhTRU8IogUPvNJuM6IEdBZyXg
c46ZN2/OQo+qYA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:47:43 2026 by rpki-client