Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File:                     tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier:          EfaJkiY+5oaSho2yR82b/A13EiSPrc+9Wqpd2loVCGU=
Subject key identifier:   55:6A:B3:67:4C:82:CC:26:04:DA:3C:24:71:02:FC:FC:AD:2B:59:D2
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer:       /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial:       019FA1F1F7424E65ABAAA679A332282007DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 05:00:16 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:16 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:16 +0000
Files and hashes:         1: 4uSa1k9qPhTt7gCV8bgatCnF4QE.roa (hash: AebIBoqTns7X5qm7Et95omb7FUrUebB3Fnzu8mpT4eM=)
                          2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: G7j0T2iFlFW8mEjFnLfKnBywnjcb1iWXCXODQPs8wck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f1:f7:42:4e:65:ab:aa:a6:79:a3:32:28:20:07:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
        Validity
            Not Before: Jul 27 05:00:16 2026 GMT
            Not After : Jul 28 05:00:16 2026 GMT
        Subject: CN=556ab3674c82cc2604da3c247102fcfcad2b59d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d7:bb:9d:cc:7b:64:b4:b7:d6:fd:1d:cc:65:
                    33:16:45:b1:8e:73:80:a4:c0:b3:f1:32:75:28:14:
                    f5:0c:d2:b6:45:7a:bd:01:12:5c:43:b5:34:9c:e0:
                    52:c4:af:ab:b4:06:e8:0f:f1:05:22:fc:fb:6c:37:
                    8e:65:23:61:ba:c3:60:47:a2:79:26:e5:63:a5:4d:
                    53:f7:cb:da:ff:b4:10:09:e8:90:cb:89:16:ab:20:
                    34:6d:41:ed:41:e0:93:7a:e6:22:d2:85:b0:8b:cc:
                    67:36:01:b8:2f:57:de:c8:03:2f:e2:de:bf:ff:18:
                    96:92:b1:8c:c5:c1:13:5e:7e:4a:64:fd:64:b0:7b:
                    59:09:82:eb:57:48:c3:d1:2d:9b:63:e8:2d:c7:71:
                    1b:49:25:86:22:cd:9f:5b:16:98:64:98:57:3a:67:
                    20:0a:bb:a7:11:bc:6f:3c:86:a2:15:06:44:bf:a8:
                    bc:ca:3d:3c:ab:9b:6f:9d:ff:9f:f9:b9:a2:24:75:
                    01:20:59:c0:af:8e:e8:d9:b5:9a:4c:f8:6d:e8:fc:
                    3c:bc:1a:16:e9:7b:72:2e:8e:72:0c:a3:c2:7e:78:
                    4d:58:cd:76:36:16:3d:27:75:3d:3d:11:74:8b:ea:
                    06:a1:dc:38:9e:c5:fa:6d:ae:dc:b4:7a:dc:c7:ba:
                    82:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:6A:B3:67:4C:82:CC:26:04:DA:3C:24:71:02:FC:FC:AD:2B:59:D2
            X509v3 Authority Key Identifier:
                keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:94:8c:91:5a:86:82:49:e4:f2:3e:c1:4c:b9:34:a7:0e:74:
         a1:4f:b3:fe:72:85:08:8c:e8:2a:b0:a5:2f:c4:15:cf:a8:af:
         34:63:68:2c:a0:d0:79:b3:44:15:80:1a:e7:b6:3a:27:7e:65:
         e5:3c:42:8a:b1:ea:f2:82:ba:45:82:e3:67:ce:de:c6:a6:03:
         d7:1a:7a:4f:12:d7:16:cf:2b:22:62:7f:c2:53:db:95:f7:b8:
         3b:fd:d0:2b:93:6f:84:95:e6:b7:41:f6:a7:e3:cc:26:ed:10:
         cd:cd:37:92:c0:26:7b:df:5f:7a:e0:e5:da:25:f9:11:5d:b9:
         0f:b3:67:80:d1:06:4d:f5:50:76:7c:df:db:87:e4:f4:ed:b1:
         e3:a3:76:f7:db:48:c1:fa:e3:87:25:ee:ef:1c:f8:0e:a6:43:
         5b:22:f3:ea:80:dc:72:81:90:57:4e:ce:44:1a:6f:ef:1d:98:
         6f:c4:a1:b5:82:bf:b7:e0:2b:6a:5f:3a:8f:b8:1b:5e:4d:2d:
         8c:02:13:c3:3a:e1:e0:4f:ff:0d:9a:6a:d5:4d:4f:ca:54:55:
         d4:9a:0a:7e:97:2b:41:9c:1a:e5:24:8c:93:f0:48:c9:98:6d:
         9f:55:d8:68:bb:9c:4a:00:c8:af:f9:b2:1e:17:eb:87:95:8b:
         f0:de:64:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8fdCTmWrqqZ5ozIoIAfdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MWVjNGU1OGJkNDRlYmFjNzg5NTQ4ZjMxOWU2OWNjOWE1
MzIxMWYwHhcNMjYwNzI3MDUwMDE2WhcNMjYwNzI4MDUwMDE2WjAzMTEwLwYDVQQD
Eyg1NTZhYjM2NzRjODJjYzI2MDRkYTNjMjQ3MTAyZmNmY2FkMmI1OWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNe7ncx7ZLS31v0dzGUzFkWxjnOA
pMCz8TJ1KBT1DNK2RXq9ARJcQ7U0nOBSxK+rtAboD/EFIvz7bDeOZSNhusNgR6J5
JuVjpU1T98va/7QQCeiQy4kWqyA0bUHtQeCTeuYi0oWwi8xnNgG4L1feyAMv4t6/
/xiWkrGMxcETXn5KZP1ksHtZCYLrV0jD0S2bY+gtx3EbSSWGIs2fWxaYZJhXOmcg
CrunEbxvPIaiFQZEv6i8yj08q5tvnf+f+bmiJHUBIFnAr47o2bWaTPht6Pw8vBoW
6XtyLo5yDKPCfnhNWM12NhY9J3U9PRF0i+oGodw4nsX6ba7ctHrcx7qC7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFVqs2dMgswmBNo8JHEC/PytK1nSMB8GA1UdIwQY
MBaAFLUexOWL1E66x4lUjzGeacyaUyEfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9jYjg5MzAtYzA2My00MWUyLTgwNWQt
YTdlNGJiNDE1Y2ZlLzEvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC9jYjg5MzAtYzA2My00MWUyLTgwNWQtYTdlNGJiNDE1Y2Zl
LzEvdFI3RTVZdlVUcnJIaVZTUE1aNXB6SnBUSVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpSMkVqG
gknk8j7BTLk0pw50oU+z/nKFCIzoKrClL8QVz6ivNGNoLKDQebNEFYAa57Y6J35l
5TxCirHq8oK6RYLjZ87exqYD1xp6TxLXFs8rImJ/wlPblfe4O/3QK5NvhJXmt0H2
p+PMJu0Qzc03ksAme99feuDl2iX5EV25D7NngNEGTfVQdnzf24fk9O2x46N299tI
wfrjhyXu7xz4DqZDWyLz6oDccoGQV07ORBpv7x2Yb8ShtYK/t+Aral86j7gbXk0t
jAITwzrh4E//DZpq1U1PylRV1JoKfpcrQZwa5SSMk/BIyZhtn1XYaLucSgDIr/my
Hhfrh5WL8N5kjQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:38 2026 by rpki-client