Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File:                     U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier:          HwBtsHTuEzIo6xFERSjFXTdsWtB4P4g5sDWbehcWsHk=
Subject key identifier:   7B:31:6F:4A:3F:10:5E:89:AF:07:5B:45:D2:67:E5:F6:88:CE:25:27
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer:       /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial:       019F9FCD6FEE7105372F903C5B4DECBFEC9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number:          19DE
Signing time:             Sun 26 Jul 2026 19:01:08 +0000
Manifest this update:     Sun 26 Jul 2026 19:01:08 +0000
Manifest next update:     Mon 27 Jul 2026 19:01:08 +0000
Files and hashes:         1: 4T05fIk1IL5XmP-J7JePysAxRKE.roa (hash: CZTtj6ljL4ZrRColIvs5nHru+2r0m25Gxfk+juu8BnA=)
                          2: GIKwXPgpp9tYu44qAWsgouqavSk.roa (hash: U0ZjuWOGhkNCjwceAqeYAxKQDQUWsJyAsTBPjUkaiJM=)
                          3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: BfduSMDibHm5fb/pjlMBK9c2GhZUliEYM7Mmo582eSY=)
                          4: _r56llLnHAPpXxxxkXq1tr0D3E8.roa (hash: GaXEko33otm3bGM4yo2EOeA4n0z4wsimGbz5tJkDlo0=)
                          5: hdiJUsn-mGkGSUlT1Hqx92eDVHA.roa (hash: LJKbx4az7vTER8ap7GuxbSzBoud2G6PQUC4oXRhpf84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cd:6f:ee:71:05:37:2f:90:3c:5b:4d:ec:bf:ec:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
        Validity
            Not Before: Jul 26 19:01:08 2026 GMT
            Not After : Jul 27 19:01:08 2026 GMT
        Subject: CN=7b316f4a3f105e89af075b45d267e5f688ce2527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:db:d4:68:7c:17:59:08:ff:56:91:b1:b7:
                    0a:9a:20:98:64:b6:ac:11:64:46:c9:30:45:b4:b7:
                    40:e1:97:42:99:dd:50:e6:0c:8e:14:ce:a0:02:b8:
                    56:95:cf:55:27:c7:2c:cc:d0:4b:8b:ea:d2:d1:43:
                    e7:c8:c5:5c:b6:9b:0b:bd:c7:03:a6:9f:b6:5c:cb:
                    91:8b:76:96:9d:5a:6d:58:1f:3c:c2:06:eb:ee:7a:
                    ce:ec:2f:b7:6a:1e:29:93:f0:3a:2c:0b:b6:61:dc:
                    f8:ce:dd:1b:08:c3:1c:ef:c7:57:ba:6b:91:28:ba:
                    28:bc:51:f1:7c:bd:85:b7:f7:47:70:bf:71:f4:67:
                    b3:d3:66:e9:c5:15:2e:b6:ef:6b:a6:ab:4e:b2:31:
                    55:33:e7:45:b9:4c:50:ca:e5:8f:1e:b7:ef:d8:69:
                    4a:e3:60:2c:8e:90:3b:bf:67:50:b6:a8:7b:83:82:
                    80:ca:84:d9:86:8e:10:a2:91:9a:db:b6:5c:59:b4:
                    25:e5:d9:90:a2:08:b4:ea:8a:7b:59:f2:11:83:18:
                    6f:12:60:33:9d:2d:c9:d6:a7:3c:9c:3f:e7:77:f6:
                    0c:3b:75:f7:02:c3:22:26:39:6a:c9:5a:c2:b5:f1:
                    1d:0d:1d:9a:9f:70:c4:3c:f1:4f:89:cb:c9:69:c3:
                    cb:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:31:6F:4A:3F:10:5E:89:AF:07:5B:45:D2:67:E5:F6:88:CE:25:27
            X509v3 Authority Key Identifier:
                keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:e3:ca:bc:8b:f4:a1:c3:83:36:31:c8:b7:04:ed:f5:29:a2:
         a5:85:73:63:4c:ae:a3:1a:f3:21:02:38:5b:c9:96:32:9d:8c:
         c0:5d:9a:63:f9:cb:ea:e7:b4:56:bd:c7:76:c8:ff:4a:e5:a9:
         03:ee:81:2d:c5:55:0f:10:10:71:84:a8:ff:54:44:8c:9b:20:
         17:43:73:ca:61:b2:e5:e9:2b:80:f9:4d:e0:10:08:27:06:f6:
         2a:a3:ea:9f:44:b7:9b:96:2e:3b:c5:0e:ef:14:79:a6:8d:0f:
         8a:50:39:f7:5c:7f:c9:b0:f3:82:88:2c:31:55:2c:05:bd:80:
         9a:e8:19:20:8f:73:69:55:cd:93:ab:2c:52:8c:66:c1:17:aa:
         86:2d:4f:0a:17:42:af:d5:3f:c5:fb:b7:21:f5:61:04:7f:60:
         55:7c:4b:63:7b:9d:65:80:ae:bc:8b:54:b6:6a:78:5a:ae:03:
         1b:0f:9b:e4:dd:71:7d:11:57:fe:13:8f:eb:d0:bf:b1:81:30:
         a5:38:30:50:88:d3:69:f7:4d:1c:3d:d2:d0:7e:f6:79:48:b6:
         15:e5:a6:cf:1f:99:d1:c6:e5:c7:4c:80:d0:de:41:88:44:b7:
         50:ba:e6:37:32:8c:10:b7:13:9c:1a:2e:23:0a:06:15:c4:f9:
         bd:19:ba:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+fzW/ucQU3L5A8W03sv+yeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjYyYWNlNjE1YjkwNmI0MmFiMjdmNGZiMWQyMDNkZjM2
ZDU0MzYwHhcNMjYwNzI2MTkwMTA4WhcNMjYwNzI3MTkwMTA4WjAzMTEwLwYDVQQD
Eyg3YjMxNmY0YTNmMTA1ZTg5YWYwNzViNDVkMjY3ZTVmNjg4Y2UyNTI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuO7b1Gh8F1kI/1aRsbcKmiCYZLas
EWRGyTBFtLdA4ZdCmd1Q5gyOFM6gArhWlc9VJ8cszNBLi+rS0UPnyMVctpsLvccD
pp+2XMuRi3aWnVptWB88wgbr7nrO7C+3ah4pk/A6LAu2Ydz4zt0bCMMc78dXumuR
KLoovFHxfL2Ft/dHcL9x9Gez02bpxRUutu9rpqtOsjFVM+dFuUxQyuWPHrfv2GlK
42AsjpA7v2dQtqh7g4KAyoTZho4QopGa27ZcWbQl5dmQogi06op7WfIRgxhvEmAz
nS3J1qc8nD/nd/YMO3X3AsMiJjlqyVrCtfEdDR2an3DEPPFPicvJacPLXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHsxb0o/EF6JrwdbRdJn5faIziUnMB8GA1UdIwQY
MBaAFFO2Ks5hW5BrQqsn9PsdID3zbVQ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDIt
OTcyYTRjM2RjM2YzLzEvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC84YjA3Y2QtMGNlZC00YWZjLThkMDItOTcyYTRjM2RjM2Yz
LzEvVTdZcXptRmJrR3RDcXlmMC14MGdQZk50VkRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApOPKvIv0
ocODNjHItwTt9SmipYVzY0yuoxrzIQI4W8mWMp2MwF2aY/nL6ue0Vr3Hdsj/SuWp
A+6BLcVVDxAQcYSo/1REjJsgF0NzymGy5ekrgPlN4BAIJwb2KqPqn0S3m5YuO8UO
7xR5po0PilA591x/ybDzgogsMVUsBb2AmugZII9zaVXNk6ssUoxmwReqhi1PChdC
r9U/xfu3IfVhBH9gVXxLY3udZYCuvItUtmp4Wq4DGw+b5N1xfRFX/hOP69C/sYEw
pTgwUIjTafdNHD3S0H72eUi2FeWmzx+Z0cblx0yA0N5BiES3ULrmNzKMELcTnBou
IwoGFcT5vRm6/A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:02 2026 by rpki-client