Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File:                     tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier:          7az4f6zXrLw1XaC1fG4buSm5K2zJQ3iE2g04zHOQKT8=
Subject key identifier:   E5:08:EB:3A:31:B0:55:70:73:84:54:09:81:C0:88:EC:EF:FB:07:7C
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer:       /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial:       019FA1F24BA04D45250A300638C66A9A76DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 05:00:38 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:38 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:38 +0000
Files and hashes:         1: HcAxRHlj0nNsddOnk3-AZGCTXRU.roa (hash: cRJ8+jwNN/ircPlR4b+1JeuhRjmkUt6+fqyC3j2Aye8=)
                          2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: BZCr7Y6HRXH7blytUaxE5RuEgXeqkKMEG7qz+iLw5LU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:4b:a0:4d:45:25:0a:30:06:38:c6:6a:9a:76:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
        Validity
            Not Before: Jul 27 05:00:38 2026 GMT
            Not After : Jul 28 05:00:38 2026 GMT
        Subject: CN=e508eb3a31b055707384540981c088eceffb077c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8c:98:0b:97:d9:c8:49:96:11:6c:14:31:26:
                    27:63:d8:5a:75:d7:8d:0d:f5:5c:1e:a5:3c:82:0c:
                    20:1d:44:55:dc:62:9c:51:be:22:20:90:89:6e:39:
                    13:f6:ea:77:4d:bc:b1:49:42:46:f3:04:4a:11:2c:
                    ef:c0:8a:32:84:04:41:c1:1b:37:2f:db:1d:63:ce:
                    7e:59:74:6e:36:78:92:c8:fd:f7:14:2c:79:90:91:
                    a0:07:10:f5:63:e5:35:80:d1:50:37:1b:dc:f5:ba:
                    69:54:5c:65:79:ab:30:00:30:62:42:77:d3:e1:f9:
                    1f:43:b0:2d:f6:fd:54:fc:2d:76:26:b3:8f:f7:80:
                    38:21:2a:a4:74:46:f0:a2:8c:51:9b:cc:31:2d:1a:
                    fc:d0:5d:52:8f:fc:f2:28:fc:f0:8d:a2:84:ee:4f:
                    5d:4c:fb:a7:b7:28:52:40:9b:51:8f:39:d5:83:9a:
                    5e:1f:4c:32:a1:62:13:dc:a9:a9:fb:eb:fe:fc:03:
                    8d:5a:a7:c9:1a:47:86:54:1a:28:64:f4:2b:27:01:
                    27:52:2b:f3:8b:11:94:98:da:5a:d3:83:14:3f:34:
                    14:7f:7e:9c:2f:7b:d2:43:c5:7c:66:58:64:68:53:
                    ab:ed:66:81:50:79:90:a2:86:5d:30:4a:06:74:e9:
                    ec:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:08:EB:3A:31:B0:55:70:73:84:54:09:81:C0:88:EC:EF:FB:07:7C
            X509v3 Authority Key Identifier:
                keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:30:e5:e0:54:5e:52:06:78:27:de:c0:16:fb:2f:bf:be:33:
         95:25:22:80:41:07:f9:bd:22:47:6e:24:e0:0f:9b:e8:8b:ba:
         ba:3f:5c:4c:ef:37:97:e8:a1:b9:5a:b3:4e:e8:55:20:a5:76:
         67:5d:74:9e:62:ce:3e:13:76:5b:de:23:f9:30:81:3f:49:7e:
         64:25:8d:05:b9:c2:7e:00:f3:9d:c7:bd:09:dd:44:79:5a:bb:
         00:c9:e2:cf:0b:e4:bb:bd:cc:76:54:3e:66:5d:8c:79:13:35:
         83:1a:3f:7a:9f:0f:08:55:47:8c:63:0d:dc:4c:38:84:8d:df:
         97:6d:6d:b5:54:66:e5:8d:4f:a4:ce:c7:45:70:63:cd:a6:db:
         54:29:b4:b2:66:5d:d3:97:c2:14:67:dc:33:38:bc:d7:be:c7:
         e8:68:e4:dc:3f:f1:03:56:cd:67:cc:f6:89:45:9f:e1:64:9f:
         11:2a:45:b6:43:42:75:39:67:26:be:d3:f2:88:22:ae:22:68:
         19:0c:32:4e:f0:7a:5b:80:49:ad:1d:0c:db:27:54:d0:2f:9a:
         90:af:b5:c2:cf:f9:13:89:db:91:de:59:03:8c:a3:48:83:5e:
         e0:5e:b7:7a:3b:84:5b:09:0c:0f:fc:b6:a6:0a:21:7e:8e:f2:
         31:fb:d5:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8kugTUUlCjAGOMZqmnbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjYzMjk3MjU0NzY3M2RmMGY3NWFhYmM4MzlhMjQyMjg1
NGEyMmEwHhcNMjYwNzI3MDUwMDM4WhcNMjYwNzI4MDUwMDM4WjAzMTEwLwYDVQQD
EyhlNTA4ZWIzYTMxYjA1NTcwNzM4NDU0MDk4MWMwODhlY2VmZmIwNzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoyYC5fZyEmWEWwUMSYnY9haddeN
DfVcHqU8ggwgHURV3GKcUb4iIJCJbjkT9up3TbyxSUJG8wRKESzvwIoyhARBwRs3
L9sdY85+WXRuNniSyP33FCx5kJGgBxD1Y+U1gNFQNxvc9bppVFxleaswADBiQnfT
4fkfQ7At9v1U/C12JrOP94A4ISqkdEbwooxRm8wxLRr80F1Sj/zyKPzwjaKE7k9d
TPuntyhSQJtRjznVg5peH0wyoWIT3Kmp++v+/AONWqfJGkeGVBooZPQrJwEnUivz
ixGUmNpa04MUPzQUf36cL3vSQ8V8ZlhkaFOr7WaBUHmQooZdMEoGdOnsIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUI6zoxsFVwc4RUCYHAiOzv+wd8MB8GA1UdIwQY
MBaAFLW2MpclR2c98Pdaq8g5okIoVKIqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGIt
YTZhYmIxMjE1ZGVjLzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8xYzA2OGUtODg5Yy00MmJlLWJkOGItYTZhYmIxMjE1ZGVj
LzEvdGJZeWx5VkhaejN3OTFxcnlEbWlRaWhVb2lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTDl4FRe
UgZ4J97AFvsvv74zlSUigEEH+b0iR24k4A+b6Iu6uj9cTO83l+ihuVqzTuhVIKV2
Z110nmLOPhN2W94j+TCBP0l+ZCWNBbnCfgDznce9Cd1EeVq7AMnizwvku73MdlQ+
Zl2MeRM1gxo/ep8PCFVHjGMN3Ew4hI3fl21ttVRm5Y1PpM7HRXBjzabbVCm0smZd
05fCFGfcMzi8177H6Gjk3D/xA1bNZ8z2iUWf4WSfESpFtkNCdTlnJr7T8ogiriJo
GQwyTvB6W4BJrR0M2ydU0C+akK+1ws/5E4nbkd5ZA4yjSINe4F63ejuEWwkMD/y2
pgohfo7yMfvVwQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:29:32 2026 by rpki-client