Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
File:                     rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json)
Hash identifier:          0BTP1zFemyZz+5krjiGzBCLRmP0w5xpty1rY1HGgRYc=
Subject key identifier:   D1:55:49:65:69:28:75:9C:49:85:9E:B0:72:E5:40:FC:9C:F6:4E:92
Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9
Certificate issuer:       /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
Certificate serial:       019F9DDEDDF8F05E78B0C838E66C39B75D0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
Manifest number:          1894
Signing time:             Sun 26 Jul 2026 10:00:56 +0000
Manifest this update:     Sun 26 Jul 2026 10:00:56 +0000
Manifest next update:     Mon 27 Jul 2026 10:00:56 +0000
Files and hashes:         1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=)
                          2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=)
                          3: h_0cAkv9bRuqII55SmmjCPAtEkY.roa (hash: f3qXMN3stUSn8npXGtiCTxgNOHC/rASxYRfTCA56R9E=)
                          4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=)
                          5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=)
                          6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=)
                          7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: 5FoNl3xQnp1J3ylu7VsHda4nSxAQ+LZMG2SiXfLndHY=)
                          8: un_1tb4ETb7dJsP5Mq8V0llGT80.roa (hash: cP4I0MaCsjRNc87FbMAxnApmXsIjWX9M4UbopOynI2E=)
                          9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=)
                          10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 10:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9d:de:dd:f8:f0:5e:78:b0:c8:38:e6:6c:39:b7:5d:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9
        Validity
            Not Before: Jul 26 10:00:56 2026 GMT
            Not After : Jul 27 10:00:56 2026 GMT
        Subject: CN=d15549656928759c49859eb072e540fc9cf64e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:df:a5:b8:a1:b2:27:29:1c:5a:a5:29:12:f8:
                    e9:35:04:c0:71:59:02:b4:08:13:01:1d:fe:d7:81:
                    60:a0:34:76:6c:b6:5f:de:6a:20:d9:55:ce:ed:18:
                    62:c5:82:c5:4b:77:06:26:60:d0:3a:34:29:0f:72:
                    43:27:9f:41:9b:b2:f8:6b:81:3a:8e:37:6d:5b:75:
                    d8:32:38:9e:7d:06:f8:db:b6:5c:b1:e4:14:44:2e:
                    5f:af:5f:ec:15:d0:e3:5b:0d:1c:d9:b6:ec:c9:15:
                    3a:21:08:95:d1:c4:e9:d6:f7:49:70:5b:3a:54:49:
                    e9:08:30:cb:d6:bb:9a:10:bc:d9:5e:05:52:a0:6d:
                    3e:48:f2:16:e6:70:d3:d5:18:77:a0:eb:62:26:b5:
                    c2:60:09:85:06:66:91:80:6e:73:16:43:c9:5b:7e:
                    46:d9:fa:3f:14:32:30:23:ca:1c:46:72:52:77:7f:
                    f2:98:78:bb:45:a6:07:59:e9:2d:fd:d6:79:cb:98:
                    dd:a4:f0:af:42:ca:3f:20:e9:6c:1b:32:4c:72:2d:
                    96:1f:c0:8d:7c:fa:c7:c1:6b:ad:c9:22:00:d1:3b:
                    8d:42:d1:4b:ea:4a:69:55:a7:46:d2:38:55:b9:c6:
                    c9:28:0e:00:96:61:24:80:64:26:c7:4c:ba:70:79:
                    c0:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:55:49:65:69:28:75:9C:49:85:9E:B0:72:E5:40:FC:9C:F6:4E:92
            X509v3 Authority Key Identifier:
                keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c2:8e:78:66:24:5f:35:d3:29:66:e8:20:d2:2e:22:d6:d8:
         3c:fd:62:81:a0:32:b9:d0:7b:15:68:42:cd:49:15:70:3f:c9:
         d2:ae:64:c0:90:f8:75:04:7e:90:9c:d3:7c:71:9e:9c:bd:d0:
         4e:af:f2:54:91:9f:54:bb:21:b4:7a:0d:58:b0:60:ec:23:74:
         5b:97:0e:e7:fb:6b:a2:06:c2:e4:09:56:83:70:45:b3:d7:43:
         6c:31:ca:78:f4:50:28:3a:f7:8b:c2:51:73:35:40:35:d7:2c:
         af:10:88:95:da:cc:ae:1f:8c:54:02:02:ca:a4:d7:de:77:7c:
         2c:06:eb:38:97:af:0c:fd:10:52:fd:85:30:a0:d0:66:93:2b:
         30:9f:96:f2:98:e4:16:c3:c0:66:a5:38:de:dc:76:1b:19:82:
         42:84:78:0b:ea:e9:f2:9a:8f:01:c1:b0:9b:d2:18:ee:8e:9f:
         5b:de:9d:37:0e:fa:30:62:d5:ad:83:e6:1b:3b:b2:0b:b8:c5:
         cb:a3:c5:8f:67:77:1c:64:3c:f5:7e:f3:22:a6:5e:cc:29:c5:
         d7:ba:15:ea:00:31:69:55:6f:6c:47:04:a0:37:cd:0a:24:24:
         a5:c7:7c:58:1b:fd:18:06:62:3a:52:7c:73:97:5b:46:92:89:
         c1:71:7c:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+d3t348F54sMg45mw5t10NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1
MTBhYTkwHhcNMjYwNzI2MTAwMDU2WhcNMjYwNzI3MTAwMDU2WjAzMTEwLwYDVQQD
EyhkMTU1NDk2NTY5Mjg3NTljNDk4NTllYjA3MmU1NDBmYzljZjY0ZTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2t+luKGyJykcWqUpEvjpNQTAcVkC
tAgTAR3+14FgoDR2bLZf3mog2VXO7RhixYLFS3cGJmDQOjQpD3JDJ59Bm7L4a4E6
jjdtW3XYMjiefQb427ZcseQURC5fr1/sFdDjWw0c2bbsyRU6IQiV0cTp1vdJcFs6
VEnpCDDL1ruaELzZXgVSoG0+SPIW5nDT1Rh3oOtiJrXCYAmFBmaRgG5zFkPJW35G
2fo/FDIwI8ocRnJSd3/ymHi7RaYHWekt/dZ5y5jdpPCvQso/IOlsGzJMci2WH8CN
fPrHwWutySIA0TuNQtFL6kppVadG0jhVucbJKA4AlmEkgGQmx0y6cHnAfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFVSWVpKHWcSYWesHLlQPyc9k6SMB8GA1UdIwQY
MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt
M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3
LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8KOeGYk
XzXTKWboINIuItbYPP1igaAyudB7FWhCzUkVcD/J0q5kwJD4dQR+kJzTfHGenL3Q
Tq/yVJGfVLshtHoNWLBg7CN0W5cO5/trogbC5AlWg3BFs9dDbDHKePRQKDr3i8JR
czVANdcsrxCIldrMrh+MVAICyqTX3nd8LAbrOJevDP0QUv2FMKDQZpMrMJ+W8pjk
FsPAZqU43tx2GxmCQoR4C+rp8pqPAcGwm9IY7o6fW96dNw76MGLVrYPmGzuyC7jF
y6PFj2d3HGQ89X7zIqZezCnF17oV6gAxaVVvbEcEoDfNCiQkpcd8WBv9GAZiOlJ8
c5dbRpKJwXF8QQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 15:54:35 2026 by rpki-client