Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
File:                     znBIWLZDJm98cQdyHJjyupPdUmU.mft (raw, json)
Hash identifier:          dka/f/RV5++YKfU3uIYs6MN1/aCR9iDHeydZzAMiV+E=
Subject key identifier:   04:FE:7F:9C:73:BE:43:2D:84:77:0C:2C:0D:CB:4A:E8:1E:6F:39:FD
Authority key identifier: CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65
Certificate issuer:       /CN=ce704858b643266f7c7107721c98f2ba93dd5265
Certificate serial:       019F40F64F545B84627DDFBB7ED41E0269F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
Manifest number:          19A1
Signing time:             Wed 08 Jul 2026 09:01:51 +0000
Manifest this update:     Wed 08 Jul 2026 09:01:51 +0000
Manifest next update:     Thu 09 Jul 2026 09:01:51 +0000
Files and hashes:         1: 4io-REhzFRxPhNR2ODLWtq5-pVg.roa (hash: wvYJq+OJ0yBLuz2nx1cnZCl0Nf5x5+pis6cfSb4TkHk=)
                          2: arrkUMPGlGp12fBDJz-y-TlydqE.roa (hash: FzEjkq/IJVG3rsaQp/9UZuy/iTz0QoR1J2fAeimur2Q=)
                          3: rDrbyqGHpXISP5iG3Y1GTyKdM24.roa (hash: IEFZML7lOlLhBvi4soPybXTGWqMozr/vczumNvS04HI=)
                          4: znBIWLZDJm98cQdyHJjyupPdUmU.crl (hash: 2hFdSz0epW7ZN0UOI/s9Ay7GdK9OIx5hxEcMkLfgdxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 09:01:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:40:f6:4f:54:5b:84:62:7d:df:bb:7e:d4:1e:02:69:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce704858b643266f7c7107721c98f2ba93dd5265
        Validity
            Not Before: Jul  8 09:01:51 2026 GMT
            Not After : Jul  9 09:01:51 2026 GMT
        Subject: CN=04fe7f9c73be432d84770c2c0dcb4ae81e6f39fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:7a:09:38:43:33:49:a2:f5:7c:2f:b1:92:
                    78:53:f2:ec:8a:c9:44:7b:bc:17:71:ae:9a:79:90:
                    2c:e2:be:65:5d:c0:bc:2c:2a:76:2a:68:e5:0f:00:
                    04:46:c4:0c:54:5e:94:7a:d7:d0:b7:4c:e3:11:cc:
                    e6:3b:3b:a9:06:ac:3b:3d:93:c3:a2:9c:56:0f:f0:
                    92:b0:83:30:8b:ee:d3:1f:c8:bf:e1:72:ff:9b:95:
                    f3:99:d8:17:da:14:6b:42:3f:8e:3a:5b:08:33:7b:
                    bb:08:9e:94:85:eb:2f:91:4d:23:31:c7:27:cb:6e:
                    c2:3a:0b:7a:fe:ba:4e:9a:22:4e:92:7a:29:ed:da:
                    a4:e4:6d:3c:71:fd:79:21:c2:d8:dc:5c:cb:0d:c5:
                    b5:54:07:42:58:c4:81:09:7b:ea:90:f9:b7:17:da:
                    ba:e6:98:5a:c5:52:7a:e0:5d:ff:73:59:13:e7:2b:
                    f7:a9:79:f5:a3:88:27:c1:8e:e7:46:91:b0:1b:ab:
                    0b:da:b1:59:72:8a:75:84:c5:04:f1:f1:f8:48:f3:
                    d0:c3:1f:12:35:dc:66:b3:4d:50:f0:7e:71:9b:ca:
                    84:e1:f1:92:21:b9:67:37:22:90:15:1e:76:91:33:
                    53:9d:58:32:36:04:a3:cc:51:7f:12:62:f4:b2:a7:
                    eb:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:FE:7F:9C:73:BE:43:2D:84:77:0C:2C:0D:CB:4A:E8:1E:6F:39:FD
            X509v3 Authority Key Identifier:
                keyid:CE:70:48:58:B6:43:26:6F:7C:71:07:72:1C:98:F2:BA:93:DD:52:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/znBIWLZDJm98cQdyHJjyupPdUmU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/027aae-4922-42a9-a4c9-38f80d6961ec/1/znBIWLZDJm98cQdyHJjyupPdUmU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:52:a5:1e:6c:6a:b2:5e:4c:b5:14:d1:6d:e0:b6:40:7a:b6:
         dc:11:17:0f:9c:22:2c:08:c2:17:62:e6:6d:1f:12:c0:06:02:
         8a:c2:0e:69:76:2d:31:40:db:f3:08:9b:5f:df:4e:13:b2:94:
         7f:cb:a0:e6:4b:1c:3d:31:bd:d0:5c:9c:ae:f2:bc:de:dd:36:
         2c:b1:fb:a0:6b:4d:5a:ae:cb:f9:54:b0:1f:73:7a:cd:23:c5:
         c7:7f:e3:12:ad:83:94:38:3f:5d:17:53:0a:41:62:3e:45:7d:
         a0:82:a3:0c:a1:2d:48:6a:00:d3:ba:3a:58:e5:ad:af:78:ed:
         eb:88:33:23:ec:69:76:67:36:e0:a1:34:37:b8:fc:85:14:14:
         17:29:f3:99:30:b5:bb:81:b7:67:02:d6:3a:b8:05:8e:f5:c1:
         05:cb:74:d6:bc:1b:69:48:3e:70:cb:01:45:79:ec:9c:b7:9a:
         f0:1f:7f:55:89:26:57:0d:24:c7:23:e6:b8:73:97:85:59:ff:
         0f:20:33:e5:59:d9:8d:8c:63:9b:9f:7f:97:27:39:e4:fa:22:
         aa:3e:f7:8b:d9:ea:68:be:78:dd:5f:00:bb:f2:08:eb:bd:19:
         90:e2:99:79:27:a2:d3:49:71:0e:19:c2:7a:4b:91:15:a9:56:
         9d:0d:9f:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9A9k9UW4Rifd+7ftQeAmn4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNlNzA0ODU4YjY0MzI2NmY3YzcxMDc3MjFjOThmMmJhOTNk
ZDUyNjUwHhcNMjYwNzA4MDkwMTUxWhcNMjYwNzA5MDkwMTUxWjAzMTEwLwYDVQQD
EygwNGZlN2Y5YzczYmU0MzJkODQ3NzBjMmMwZGNiNGFlODFlNmYzOWZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJR6CThDM0mi9XwvsZJ4U/LsislE
e7wXca6aeZAs4r5lXcC8LCp2KmjlDwAERsQMVF6UetfQt0zjEczmOzupBqw7PZPD
opxWD/CSsIMwi+7TH8i/4XL/m5XzmdgX2hRrQj+OOlsIM3u7CJ6UhesvkU0jMccn
y27COgt6/rpOmiJOknop7dqk5G08cf15IcLY3FzLDcW1VAdCWMSBCXvqkPm3F9q6
5phaxVJ64F3/c1kT5yv3qXn1o4gnwY7nRpGwG6sL2rFZcop1hMUE8fH4SPPQwx8S
Ndxms01Q8H5xm8qE4fGSIblnNyKQFR52kTNTnVgyNgSjzFF/EmL0sqfrDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAT+f5xzvkMthHcMLA3LSugebzn9MB8GA1UdIwQY
MBaAFM5wSFi2QyZvfHEHchyY8rqT3VJlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0Yzkt
MzhmODBkNjk2MWVjLzEvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC8wMjdhYWUtNDkyMi00MmE5LWE0YzktMzhmODBkNjk2MWVj
LzEvem5CSVdMWkRKbTk4Y1FkeUhKanl1cFBkVW1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp1KlHmxq
sl5MtRTRbeC2QHq23BEXD5wiLAjCF2LmbR8SwAYCisIOaXYtMUDb8wibX99OE7KU
f8ug5kscPTG90FycrvK83t02LLH7oGtNWq7L+VSwH3N6zSPFx3/jEq2DlDg/XRdT
CkFiPkV9oIKjDKEtSGoA07o6WOWtr3jt64gzI+xpdmc24KE0N7j8hRQUFynzmTC1
u4G3ZwLWOrgFjvXBBct01rwbaUg+cMsBRXnsnLea8B9/VYkmVw0kxyPmuHOXhVn/
DyAz5VnZjYxjm59/lyc55Poiqj73i9nqaL543V8Au/II670ZkOKZeSei00lxDhnC
ekuRFalWnQ2fAw==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:31:37 2026 by rpki-client