Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
File:                     kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft (raw, json)
Hash identifier:          7C3vCtX2YqegrUpldD1x7pUKRL348dQD64y0UiDqV7o=
Subject key identifier:   E8:03:51:F4:69:C5:4D:D7:3B:D1:FF:A7:BB:64:7C:6D:7F:18:62:A8
Authority key identifier: 90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39
Certificate issuer:       /CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
Certificate serial:       019F98817C6B1985A2029E3847EA194AD617
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
Manifest number:          19CD
Signing time:             Sat 25 Jul 2026 09:00:50 +0000
Manifest this update:     Sat 25 Jul 2026 09:00:50 +0000
Manifest next update:     Sun 26 Jul 2026 09:00:50 +0000
Files and hashes:         1: ddmt2-uWwkD03hR8f-AnYnhHvEQ.roa (hash: NzfyOsp8qB/kzAypqWkHF3Ue4tcxIJ2yaDyTF4sPpVU=)
                          2: kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl (hash: nymajaco11dibXMCYLP1NGpIfOKwaF1N5hDLmOb+JFw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 05:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:98:81:7c:6b:19:85:a2:02:9e:38:47:ea:19:4a:d6:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90ae538e2a91346f0402598b0ff2fb9a95c07c39
        Validity
            Not Before: Jul 25 09:00:50 2026 GMT
            Not After : Jul 26 09:00:50 2026 GMT
        Subject: CN=e80351f469c54dd73bd1ffa7bb647c6d7f1862a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:52:42:98:f5:1f:dc:21:9c:70:2b:e2:df:a2:
                    80:cc:ac:a3:e3:b8:e8:e2:e7:6e:d1:17:18:a4:28:
                    90:21:cf:15:5a:08:e3:eb:a1:c2:49:04:41:db:93:
                    36:c5:93:2d:da:41:e5:ef:a5:92:fb:41:42:9b:15:
                    ff:dc:f0:22:a7:e0:ae:c5:5b:f4:49:c4:a5:46:0e:
                    87:de:2f:4a:b8:93:43:a6:bb:07:5a:b2:e3:41:a6:
                    a2:bb:3d:b5:e5:a8:e4:30:06:07:b9:38:84:41:3d:
                    c0:3e:f8:91:15:9e:5e:54:48:b7:03:26:08:21:ae:
                    10:0f:e0:23:45:14:3a:6c:9a:c1:20:10:12:8c:c1:
                    0d:50:0f:69:17:d3:f7:dd:c0:b7:f5:ae:46:93:e4:
                    cd:2e:55:93:03:f7:f6:5d:ef:da:fb:2a:33:11:10:
                    8b:86:0b:7c:c2:85:b9:ea:ff:40:64:3b:8d:60:5c:
                    e1:3e:c4:f2:86:f1:1d:f4:d8:f1:f8:93:5e:7c:3f:
                    46:ff:bd:08:b6:4c:00:f0:91:7b:23:df:51:6b:a2:
                    96:10:6c:8d:f0:79:40:62:35:0f:8b:ae:79:fc:81:
                    b7:fd:57:67:dd:67:33:a5:69:79:8d:8f:41:78:23:
                    08:91:c3:11:7c:14:3e:8b:fd:cc:c5:29:09:7c:7f:
                    de:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:03:51:F4:69:C5:4D:D7:3B:D1:FF:A7:BB:64:7C:6D:7F:18:62:A8
            X509v3 Authority Key Identifier:
                keyid:90:AE:53:8E:2A:91:34:6F:04:02:59:8B:0F:F2:FB:9A:95:C0:7C:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kK5TjiqRNG8EAlmLD_L7mpXAfDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/d47909-a560-409c-b839-c5e7821579f1/1/kK5TjiqRNG8EAlmLD_L7mpXAfDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:d9:6f:97:d1:ed:33:af:c7:70:63:d6:b5:f1:b7:71:92:9b:
         75:81:2a:13:3e:62:49:7e:e5:bb:c7:8e:b1:ff:90:63:db:bd:
         61:1f:94:70:a7:25:3d:03:2d:b1:fa:c3:f0:11:06:d9:a8:fc:
         48:38:c5:32:b3:7f:17:e2:fe:fd:dc:1e:a1:dd:f4:05:9b:9d:
         85:79:d9:72:a5:76:31:94:18:e2:21:36:b6:c7:f4:4f:9f:20:
         04:39:59:79:c5:3a:6d:32:8d:5b:40:a5:0c:f8:50:2d:51:1d:
         df:cc:35:46:77:ba:a8:a0:7a:4a:1b:ab:fa:d2:f5:64:6e:bb:
         60:a8:a3:36:db:f3:05:6c:2d:df:96:ee:ab:97:c8:f3:f6:da:
         4a:87:de:66:94:ba:8a:a2:64:b5:a3:55:5c:4a:6c:bd:79:41:
         a7:87:a9:2e:2d:52:16:24:ca:cb:2c:2b:2c:ae:37:b6:83:84:
         c4:72:24:03:f2:ee:d5:52:70:f0:2f:01:d4:9e:de:7e:7a:73:
         5d:95:38:b4:8c:67:66:1e:9a:ea:01:13:0a:2d:88:75:f4:cb:
         d7:01:b6:29:40:6f:67:29:d4:77:3b:07:4c:fa:10:59:93:86:
         88:cb:53:44:bb:91:b8:ad:19:9a:01:69:81:87:f0:86:b1:62:
         9b:df:5f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+YgXxrGYWiAp44R+oZStYXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYWU1MzhlMmE5MTM0NmYwNDAyNTk4YjBmZjJmYjlhOTVj
MDdjMzkwHhcNMjYwNzI1MDkwMDUwWhcNMjYwNzI2MDkwMDUwWjAzMTEwLwYDVQQD
EyhlODAzNTFmNDY5YzU0ZGQ3M2JkMWZmYTdiYjY0N2M2ZDdmMTg2MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8VJCmPUf3CGccCvi36KAzKyj47jo
4udu0RcYpCiQIc8VWgjj66HCSQRB25M2xZMt2kHl76WS+0FCmxX/3PAip+CuxVv0
ScSlRg6H3i9KuJNDprsHWrLjQaaiuz215ajkMAYHuTiEQT3APviRFZ5eVEi3AyYI
Ia4QD+AjRRQ6bJrBIBASjMENUA9pF9P33cC39a5Gk+TNLlWTA/f2Xe/a+yozERCL
hgt8woW56v9AZDuNYFzhPsTyhvEd9Njx+JNefD9G/70ItkwA8JF7I99Ra6KWEGyN
8HlAYjUPi655/IG3/Vdn3WczpWl5jY9BeCMIkcMRfBQ+i/3MxSkJfH/eawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgDUfRpxU3XO9H/p7tkfG1/GGKoMB8GA1UdIwQY
MBaAFJCuU44qkTRvBAJZiw/y+5qVwHw5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4Mzkt
YzVlNzgyMTU3OWYxLzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9kNDc5MDktYTU2MC00MDljLWI4MzktYzVlNzgyMTU3OWYx
LzEva0s1VGppcVJORzhFQWxtTERfTDdtcFhBZkRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNlvl9Ht
M6/HcGPWtfG3cZKbdYEqEz5iSX7lu8eOsf+QY9u9YR+UcKclPQMtsfrD8BEG2aj8
SDjFMrN/F+L+/dweod30BZudhXnZcqV2MZQY4iE2tsf0T58gBDlZecU6bTKNW0Cl
DPhQLVEd38w1Rne6qKB6Shur+tL1ZG67YKijNtvzBWwt35buq5fI8/baSofeZpS6
iqJktaNVXEpsvXlBp4epLi1SFiTKyywrLK43toOExHIkA/Lu1VJw8C8B1J7efnpz
XZU4tIxnZh6a6gETCi2IdfTL1wG2KUBvZynUdzsHTPoQWZOGiMtTRLuRuK0ZmgFp
gYfwhrFim99fzA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 15:10:18 2026 by rpki-client