Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File:                     85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier:          TDEhvqMBXaV+RGrYj2CmSDuxKaeb+6CHB46+NAEDE00=
Subject key identifier:   6F:48:97:98:AD:8D:1A:00:E7:AF:0C:99:71:13:A7:A7:27:8E:B5:BD
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer:       /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial:       019F8455FB2DB478B5B6AD95C5E2601065F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number:          19BF
Signing time:             Tue 21 Jul 2026 11:00:55 +0000
Manifest this update:     Tue 21 Jul 2026 11:00:55 +0000
Manifest next update:     Wed 22 Jul 2026 11:00:55 +0000
Files and hashes:         1: 83YQUlILQ7GDfrTJPK3LZaXUsK8.roa (hash: vNXxGjQTXNQA/zSyVijjMQoJOd0f9h52cpzw4JKC8XQ=)
                          2: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: cNkhMQyRq2U7GrmAEd9rW9hIneatJ30HR0G7+MAkcYI=)
                          3: tZjW0PJX2KzKZhqd-IvCr2S66XA.roa (hash: 7bMA6kUNG6YTWVlD3a7zH0NzQxfAjb1JxS2t14+Bg1s=)
                          4: yX7-VtqrrdDv7vs2gdtp2PBHHms.roa (hash: 7Eaxb4xLBZMek5rOGdgNQUBxlSvYpqN5jH75GBFXgPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:55:fb:2d:b4:78:b5:b6:ad:95:c5:e2:60:10:65:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
        Validity
            Not Before: Jul 21 11:00:55 2026 GMT
            Not After : Jul 22 11:00:55 2026 GMT
        Subject: CN=6f489798ad8d1a00e7af0c997113a7a7278eb5bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:63:f1:e1:be:a5:47:9a:65:c7:26:ac:22:b9:
                    df:62:50:8a:5d:9e:d3:ca:99:ce:aa:c7:1d:12:6d:
                    c6:33:9d:02:32:46:d7:67:84:c8:57:e9:89:54:c2:
                    63:dc:e1:7a:ff:db:72:ef:4c:f1:a2:59:d8:66:48:
                    d2:01:83:9c:31:c2:80:60:33:a6:fd:56:90:03:0a:
                    b2:58:16:d4:85:d6:2d:3a:3d:db:35:e4:73:eb:03:
                    6b:9d:55:4b:17:c7:43:74:90:09:c4:20:42:9e:70:
                    82:d1:b8:ab:fd:ee:db:04:1b:6f:05:0c:ff:91:d0:
                    60:6b:29:38:59:ae:37:b7:1b:98:7c:fc:1a:f9:86:
                    d3:a8:88:33:8d:d2:56:21:34:8b:9d:4c:db:b4:2d:
                    fb:96:db:58:74:27:b5:ec:2e:e6:d9:5c:42:47:49:
                    ec:62:f2:e8:29:51:87:74:5a:b4:82:80:f5:2a:66:
                    a4:9d:b9:1a:58:5e:3c:a5:14:75:9d:0c:06:83:33:
                    5d:85:93:f2:f4:ef:6c:b2:26:38:21:c1:fe:0c:00:
                    ac:a7:8e:6c:3e:37:cb:08:5c:be:a7:d2:8a:7a:9c:
                    e4:3a:90:a0:6c:e4:cc:b0:f6:e7:62:66:2a:5a:22:
                    33:d3:95:54:e3:bb:25:39:a6:76:aa:fb:4b:87:4a:
                    bc:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:48:97:98:AD:8D:1A:00:E7:AF:0C:99:71:13:A7:A7:27:8E:B5:BD
            X509v3 Authority Key Identifier:
                keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:4d:c1:3a:ba:00:88:17:27:4e:ea:b4:da:69:bf:db:08:02:
         71:0a:c2:eb:8a:0e:60:97:22:d5:80:5a:2a:eb:90:ab:76:eb:
         5e:5a:c2:79:e9:c9:a5:d1:72:0d:a0:9f:9e:b2:24:0d:50:e2:
         49:0d:48:f9:86:04:18:b0:7e:4d:8f:cb:f9:e1:7e:bb:88:70:
         31:19:7b:d0:72:db:d1:39:0f:50:00:6a:2f:7e:89:33:c9:77:
         8d:80:d0:c8:64:e3:d4:33:45:c4:ab:14:27:60:3c:82:29:68:
         5d:b4:bc:fd:87:36:25:80:fc:cb:05:5a:af:a9:36:dc:e8:98:
         18:93:e5:7f:23:20:7a:1e:f8:5b:34:c2:59:c2:14:3a:f1:ea:
         58:73:c6:88:9e:7c:9a:fd:a2:41:2b:a9:7b:a8:b7:5d:0c:38:
         35:33:d6:ea:82:cd:ed:99:57:44:9a:12:71:db:af:7a:f4:13:
         2c:8e:cf:d5:d1:0b:ea:39:04:0d:d7:6e:53:8a:b8:a5:a2:76:
         6b:21:08:85:9a:8f:88:19:ef:44:f8:d1:04:68:6e:38:bb:2a:
         81:dc:23:63:0c:0e:c5:28:cc:b0:8b:19:67:b9:d4:f7:99:03:
         14:89:23:10:8e:1d:ba:42:0b:fe:09:c5:ee:f0:bc:7b:68:aa:
         ab:eb:cf:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EVfsttHi1tq2VxeJgEGX3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOTRhNDY0NzI4YjgyODU2ZGMyYjk1NWNjYWU5YWI1YmE2
NTM5YzgwHhcNMjYwNzIxMTEwMDU1WhcNMjYwNzIyMTEwMDU1WjAzMTEwLwYDVQQD
Eyg2ZjQ4OTc5OGFkOGQxYTAwZTdhZjBjOTk3MTEzYTdhNzI3OGViNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32Px4b6lR5plxyasIrnfYlCKXZ7T
ypnOqscdEm3GM50CMkbXZ4TIV+mJVMJj3OF6/9ty70zxolnYZkjSAYOcMcKAYDOm
/VaQAwqyWBbUhdYtOj3bNeRz6wNrnVVLF8dDdJAJxCBCnnCC0bir/e7bBBtvBQz/
kdBgayk4Wa43txuYfPwa+YbTqIgzjdJWITSLnUzbtC37lttYdCe17C7m2VxCR0ns
YvLoKVGHdFq0goD1KmaknbkaWF48pRR1nQwGgzNdhZPy9O9ssiY4IcH+DACsp45s
PjfLCFy+p9KKepzkOpCgbOTMsPbnYmYqWiIz05VU47slOaZ2qvtLh0q8DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9Il5itjRoA568MmXETp6cnjrW9MB8GA1UdIwQY
MBaAFPOUpGRyi4KFbcK5VcyumrW6ZTnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgt
ZjI2NjRkMTkyMWQzLzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgtZjI2NjRkMTkyMWQz
LzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUk3BOroA
iBcnTuq02mm/2wgCcQrC64oOYJci1YBaKuuQq3brXlrCeenJpdFyDaCfnrIkDVDi
SQ1I+YYEGLB+TY/L+eF+u4hwMRl70HLb0TkPUABqL36JM8l3jYDQyGTj1DNFxKsU
J2A8giloXbS8/Yc2JYD8ywVar6k23OiYGJPlfyMgeh74WzTCWcIUOvHqWHPGiJ58
mv2iQSupe6i3XQw4NTPW6oLN7ZlXRJoScduvevQTLI7P1dEL6jkEDdduU4q4paJ2
ayEIhZqPiBnvRPjRBGhuOLsqgdwjYwwOxSjMsIsZZ7nU95kDFIkjEI4dukIL/gnF
7vC8e2iqq+vPAQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 17:36:56 2026 by rpki-client