Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
File:                     gOYgXCohD1f7cfJ_PEuq61PdXjM.mft (raw, json)
Hash identifier:          ZFeiRIpVjPs/I71er9OlYC2LgYdl+aGKhP3L2NBKs/s=
Subject key identifier:   9F:78:91:9B:2A:D0:22:8D:40:34:13:30:0C:72:AA:58:47:E8:31:91
Authority key identifier: 80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33
Certificate issuer:       /CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
Certificate serial:       019FA2CED34EB2E662682208B775F2F85FE9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
Manifest number:          19D1
Signing time:             Mon 27 Jul 2026 09:01:31 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:31 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:31 +0000
Files and hashes:         1: Eem6lQDzbWDlak-nZB_Bf8He75M.roa (hash: ZzOVUO8wZ7TV8kgImjTpS5+JQRY7+t53hqDT5EgusSo=)
                          2: gOYgXCohD1f7cfJ_PEuq61PdXjM.crl (hash: HLenlc9ziKiH1piM1az60asd0hGyGA5LQZluKwVSPt8=)
                          3: kon4zfs2HtDhvjqeOBwf_dgUsWY.roa (hash: 12l1CUBpxL/JHum213e97OtzfcKLInprTcMxMlTQ8tk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:d3:4e:b2:e6:62:68:22:08:b7:75:f2:f8:5f:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e6205c2a210f57fb71f27f3c4baaeb53dd5e33
        Validity
            Not Before: Jul 27 09:01:31 2026 GMT
            Not After : Jul 28 09:01:31 2026 GMT
        Subject: CN=9f78919b2ad0228d403413300c72aa5847e83191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:04:bb:ef:57:98:a1:1a:54:eb:6f:db:9e:46:
                    d2:8b:ce:b0:a3:12:5f:6a:f6:16:f1:9e:84:9d:8e:
                    db:32:e6:bc:d7:4a:b4:6d:1c:7a:3f:7c:f7:9f:c2:
                    1e:19:f1:74:86:6d:ba:1c:3a:d0:63:ae:e2:16:c5:
                    a1:bc:b8:37:8a:20:6f:87:6f:e1:dd:30:ea:77:a8:
                    db:44:83:fe:d9:08:96:80:9e:b4:6d:c7:d0:44:2a:
                    6f:91:c0:70:19:3e:f6:50:8c:eb:26:d0:ff:0b:f7:
                    16:77:38:dd:8d:57:f3:c7:55:7e:d3:6e:07:f0:01:
                    03:e7:5c:50:c3:cc:c3:d0:fb:9b:66:4c:b2:21:47:
                    95:bd:26:aa:fc:8e:94:81:96:cf:2e:b2:42:05:8b:
                    d7:d0:d4:88:1e:9f:12:f2:eb:3c:7d:6d:2b:c2:12:
                    f9:a2:41:34:9e:18:30:c2:18:38:cd:60:e0:6b:b0:
                    82:e9:1a:ef:94:6a:80:84:d9:8c:63:ff:17:38:b8:
                    4a:40:f4:c6:1e:68:76:43:c4:c0:0f:e1:f1:58:ef:
                    8f:dc:f7:bb:3a:9e:bb:9e:d8:10:ba:8e:29:97:81:
                    88:21:ba:1d:bc:77:10:90:2b:91:df:70:5e:b5:c9:
                    d1:7e:5f:d4:58:7f:77:c6:b6:bf:37:73:f9:59:2e:
                    50:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:78:91:9B:2A:D0:22:8D:40:34:13:30:0C:72:AA:58:47:E8:31:91
            X509v3 Authority Key Identifier:
                keyid:80:E6:20:5C:2A:21:0F:57:FB:71:F2:7F:3C:4B:AA:EB:53:DD:5E:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gOYgXCohD1f7cfJ_PEuq61PdXjM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/1f74e4-dc68-4b2e-8eb1-7b8d7ee9f411/1/gOYgXCohD1f7cfJ_PEuq61PdXjM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:d1:1d:ab:2b:e8:43:e6:5a:1a:a7:88:02:4b:ed:bb:f9:d6:
         96:06:90:fd:33:44:98:17:99:23:72:09:16:86:a5:65:f0:71:
         ad:8a:3a:4a:7a:2d:14:08:df:84:c7:83:19:e2:54:65:b8:44:
         f1:a7:6b:03:66:e7:93:5d:70:64:14:07:af:e6:cd:20:54:d9:
         c4:ed:51:37:bc:41:58:84:f5:40:b3:2e:33:18:2e:53:29:d9:
         77:09:94:ec:8c:ad:be:46:15:15:47:22:6f:00:b1:9c:b3:b1:
         20:26:ab:ed:02:94:7c:53:79:5e:d7:21:25:86:d0:99:86:99:
         c4:96:f9:e7:f2:d7:aa:3e:25:ae:ab:ee:65:c0:b0:8b:ce:b1:
         3f:c0:f3:6e:1b:6b:dc:35:79:3b:88:31:d9:71:f0:8e:32:77:
         c0:c3:a2:6a:be:39:77:fe:9d:35:b4:57:2c:4f:71:ec:54:2b:
         80:25:41:91:76:85:a4:b4:20:cc:18:f9:51:46:d7:f2:31:d3:
         34:ef:a2:79:ec:52:20:59:7b:04:39:dd:87:15:4f:7e:82:86:
         43:f9:7c:55:81:55:78:5e:5a:f7:37:ea:69:6e:c9:d5:5e:b3:
         97:8e:60:66:fa:43:6a:8e:5b:db:6e:f3:d0:ef:08:65:6d:ac:
         b3:b4:17:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iztNOsuZiaCIIt3Xy+F/pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwZTYyMDVjMmEyMTBmNTdmYjcxZjI3ZjNjNGJhYWViNTNk
ZDVlMzMwHhcNMjYwNzI3MDkwMTMxWhcNMjYwNzI4MDkwMTMxWjAzMTEwLwYDVQQD
Eyg5Zjc4OTE5YjJhZDAyMjhkNDAzNDEzMzAwYzcyYWE1ODQ3ZTgzMTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wS771eYoRpU62/bnkbSi86woxJf
avYW8Z6EnY7bMua810q0bRx6P3z3n8IeGfF0hm26HDrQY67iFsWhvLg3iiBvh2/h
3TDqd6jbRIP+2QiWgJ60bcfQRCpvkcBwGT72UIzrJtD/C/cWdzjdjVfzx1V+024H
8AED51xQw8zD0PubZkyyIUeVvSaq/I6UgZbPLrJCBYvX0NSIHp8S8us8fW0rwhL5
okE0nhgwwhg4zWDga7CC6RrvlGqAhNmMY/8XOLhKQPTGHmh2Q8TAD+HxWO+P3Pe7
Op67ntgQuo4pl4GIIbodvHcQkCuR33BetcnRfl/UWH93xra/N3P5WS5QywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ94kZsq0CKNQDQTMAxyqlhH6DGRMB8GA1UdIwQY
MBaAFIDmIFwqIQ9X+3HyfzxLqutT3V4zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEt
N2I4ZDdlZTlmNDExLzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC8xZjc0ZTQtZGM2OC00YjJlLThlYjEtN2I4ZDdlZTlmNDEx
LzEvZ09ZZ1hDb2hEMWY3Y2ZKX1BFdXE2MVBkWGpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgtEdqyvo
Q+ZaGqeIAkvtu/nWlgaQ/TNEmBeZI3IJFoalZfBxrYo6SnotFAjfhMeDGeJUZbhE
8adrA2bnk11wZBQHr+bNIFTZxO1RN7xBWIT1QLMuMxguUynZdwmU7IytvkYVFUci
bwCxnLOxICar7QKUfFN5XtchJYbQmYaZxJb55/LXqj4lrqvuZcCwi86xP8Dzbhtr
3DV5O4gx2XHwjjJ3wMOiar45d/6dNbRXLE9x7FQrgCVBkXaFpLQgzBj5UUbX8jHT
NO+ieexSIFl7BDndhxVPfoKGQ/l8VYFVeF5a9zfqaW7J1V6zl45gZvpDao5b227z
0O8IZW2ss7QX6Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:48:05 2026 by rpki-client