Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
File:                     fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft (raw, json)
Hash identifier:          gQNPZIEUJotMa145pf5N2yaQlMxS+zY7mOkDHhGeQsc=
Subject key identifier:   D6:4D:DE:59:CD:0B:84:3E:02:1E:B3:DA:E5:A4:EC:4C:75:E5:DE:69
Authority key identifier: 7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37
Certificate issuer:       /CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
Certificate serial:       019FA03A92FF9CC0CFA8A9B4A3ABB7279C65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
Manifest number:          19D7
Signing time:             Sun 26 Jul 2026 21:00:20 +0000
Manifest this update:     Sun 26 Jul 2026 21:00:20 +0000
Manifest next update:     Mon 27 Jul 2026 21:00:20 +0000
Files and hashes:         1: QHMJ6q0wq4_fZJJIZvFP81FKk48.roa (hash: f3trAL2IqUAU12dUD7R9RG4xG2VfoibnYgOAP7y/SEI=)
                          2: XAJ4y4vCfoUX6YkHgNFSElorTlI.roa (hash: umjfBMJi5nL3QbJXt5uwfy+GZK3OPSRY00tGrVG+j6o=)
                          3: fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl (hash: mGIghwqp+QjBaveRdjXGa7Gs9UHoJ1pP/ZjAPXlZycw=)
                          4: v06BU2iHIu9uorNsisLEBjplmZA.roa (hash: MXRyS0OQvbC4wtl745NoArc8F6bSSkBVii6fN2pQffw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:3a:92:ff:9c:c0:cf:a8:a9:b4:a3:ab:b7:27:9c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c67ee3de881562eea7df2e3232cdb32b54fe037
        Validity
            Not Before: Jul 26 21:00:20 2026 GMT
            Not After : Jul 27 21:00:20 2026 GMT
        Subject: CN=d64dde59cd0b843e021eb3dae5a4ec4c75e5de69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9a:cb:4c:5c:d9:a0:d0:cc:1d:b5:5c:2c:43:
                    58:ca:c2:ef:d6:b1:83:da:ed:8f:5d:ea:9b:94:40:
                    fa:19:e0:23:11:8f:4d:1f:ed:17:fe:5b:26:12:4c:
                    14:49:18:f5:2e:9a:3b:2c:1e:3b:08:e7:0e:6c:e1:
                    a7:a2:f1:5f:36:2f:08:07:03:bc:97:09:a6:88:62:
                    70:41:c5:3a:53:32:ff:f9:94:27:40:14:40:ae:f6:
                    d0:7c:8e:d6:cf:f5:4a:dd:76:8d:74:a4:21:af:0d:
                    5d:59:fb:83:08:05:46:12:d7:59:25:ad:e3:59:b2:
                    85:0d:eb:fb:e0:ed:e6:fa:5b:17:a1:1e:03:62:86:
                    96:9b:aa:5a:d5:1c:80:1b:05:1e:ab:00:49:e4:ba:
                    b2:5d:c8:1e:fe:69:13:70:b4:5b:ee:fb:e7:2a:e3:
                    9c:33:97:b3:8b:39:99:b8:b2:f0:9e:5b:09:66:de:
                    28:fe:d6:5a:b1:97:1e:a4:e1:ea:d1:75:5e:8d:36:
                    86:3b:8f:28:d4:cd:ee:f5:13:71:1d:30:e7:9b:8e:
                    9d:56:c2:c2:19:bb:3a:14:12:61:c0:0a:1f:b5:35:
                    d4:c0:d4:f4:24:c9:19:19:51:c4:5e:b4:39:dc:fd:
                    66:c3:bc:5b:5d:ec:88:0d:f3:15:d7:d2:7d:55:de:
                    cf:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4D:DE:59:CD:0B:84:3E:02:1E:B3:DA:E5:A4:EC:4C:75:E5:DE:69
            X509v3 Authority Key Identifier:
                keyid:7C:67:EE:3D:E8:81:56:2E:EA:7D:F2:E3:23:2C:DB:32:B5:4F:E0:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fGfuPeiBVi7qffLjIyzbMrVP4Dc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/5fab75-5f35-464d-9f0d-3ed2eceb4f6c/1/fGfuPeiBVi7qffLjIyzbMrVP4Dc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cf:3f:12:91:65:ec:90:a0:a3:34:21:08:d2:96:a3:51:70:
         77:63:16:cf:56:00:81:a0:ac:dc:32:fd:48:2b:d5:fa:db:ce:
         d6:44:73:2c:6e:d1:58:df:80:a6:c6:85:22:4b:23:ba:ba:4f:
         8c:67:02:81:1a:df:1b:50:87:d4:d4:54:43:aa:03:03:76:60:
         96:31:89:b4:94:9e:f9:48:35:09:ea:d5:3b:c6:1c:11:6f:d2:
         83:e8:97:bc:d6:4e:23:36:fe:22:94:e1:54:4e:7a:92:a1:92:
         e0:d1:02:60:33:55:28:50:e5:dc:a6:40:1b:ec:08:ec:3e:54:
         ff:f0:ad:e2:d2:97:e5:33:0b:64:e0:2e:b1:48:bb:21:2c:07:
         44:6c:78:5f:17:84:6d:ca:14:f5:74:35:4c:cf:07:8a:87:7f:
         32:a5:4d:e9:ff:11:b3:35:e9:c6:82:5f:df:10:82:48:d3:2a:
         7c:9b:dc:44:80:64:76:e3:83:25:74:5a:e9:95:76:5e:81:5b:
         0e:7b:06:33:90:dc:a1:72:18:f2:2d:f1:d7:3a:5b:e0:52:a3:
         d6:3e:11:d1:64:f4:44:95:8b:f4:6f:ba:b0:90:ab:3a:f7:0b:
         4b:94:09:1c:01:8f:80:3c:f3:e5:65:43:07:a1:ce:c8:94:ee:
         3f:b7:45:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOpL/nMDPqKm0o6u3J5xlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNjdlZTNkZTg4MTU2MmVlYTdkZjJlMzIzMmNkYjMyYjU0
ZmUwMzcwHhcNMjYwNzI2MjEwMDIwWhcNMjYwNzI3MjEwMDIwWjAzMTEwLwYDVQQD
EyhkNjRkZGU1OWNkMGI4NDNlMDIxZWIzZGFlNWE0ZWM0Yzc1ZTVkZTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArprLTFzZoNDMHbVcLENYysLv1rGD
2u2PXeqblED6GeAjEY9NH+0X/lsmEkwUSRj1Lpo7LB47COcObOGnovFfNi8IBwO8
lwmmiGJwQcU6UzL/+ZQnQBRArvbQfI7Wz/VK3XaNdKQhrw1dWfuDCAVGEtdZJa3j
WbKFDev74O3m+lsXoR4DYoaWm6pa1RyAGwUeqwBJ5LqyXcge/mkTcLRb7vvnKuOc
M5ezizmZuLLwnlsJZt4o/tZasZcepOHq0XVejTaGO48o1M3u9RNxHTDnm46dVsLC
Gbs6FBJhwAoftTXUwNT0JMkZGVHEXrQ53P1mw7xbXeyIDfMV19J9Vd7PfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZN3lnNC4Q+Ah6z2uWk7Ex15d5pMB8GA1UdIwQY
MBaAFHxn7j3ogVYu6n3y4yMs2zK1T+A3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQt
M2VkMmVjZWI0ZjZjLzEvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi81ZmFiNzUtNWYzNS00NjRkLTlmMGQtM2VkMmVjZWI0ZjZj
LzEvZkdmdVBlaUJWaTdxZmZMakl5emJNclZQNERjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJM8/EpFl
7JCgozQhCNKWo1Fwd2MWz1YAgaCs3DL9SCvV+tvO1kRzLG7RWN+ApsaFIksjurpP
jGcCgRrfG1CH1NRUQ6oDA3ZgljGJtJSe+Ug1CerVO8YcEW/Sg+iXvNZOIzb+IpTh
VE56kqGS4NECYDNVKFDl3KZAG+wI7D5U//Ct4tKX5TMLZOAusUi7ISwHRGx4XxeE
bcoU9XQ1TM8Hiod/MqVN6f8RszXpxoJf3xCCSNMqfJvcRIBkduODJXRa6ZV2XoFb
DnsGM5DcoXIY8i3x1zpb4FKj1j4R0WT0RJWL9G+6sJCrOvcLS5QJHAGPgDzz5WVD
B6HOyJTuP7dFTw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 03:14:03 2026 by rpki-client