Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          k6tpICV8PNFN3sZpK/Yu6GTxC5Gl+FrzKoial/T5x2M=
Subject key identifier:   61:1E:01:4A:77:F4:33:36:C1:AF:60:C7:9D:A4:6B:F1:88:DB:35:71
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       019FD8AAD5D244A54434929B78876BD31889
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          19EC
Signing time:             Thu 06 Aug 2026 20:01:42 +0000
Manifest this update:     Thu 06 Aug 2026 20:01:42 +0000
Manifest next update:     Fri 07 Aug 2026 20:01:42 +0000
Files and hashes:         1: 9ZxAC10NuAqnXMcED-lsCy84WUc.roa (hash: 2Vs0nLDkGXSJoDb56Vxw17AmovqxUT3lVuAZuNKdDYU=)
                          2: JWBtzeLFUDlhmERoUCTbc_uAex0.roa (hash: kxreH6y2E+SNRj6sI1npU33Oy4JXyeQw/3NaAYiK4Gk=)
                          3: hbbJ0MKd5AI8GzkfAZt3l1L7uR8.roa (hash: qiesRgMfoPlRIvGxB5feazmMjwpZhmvrVOznCajAxhM=)
                          4: p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa (hash: OH559fj6Vr/ZVBWmRgyMZY/pv/BDJUIdzOx8psGNE+4=)
                          5: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: wWsEUyl9oK+/IFDbLHxtWbMlSFdfjHv1a5f0YwSfhCU=)
                          6: v7DRMSksGTlDfhs744praVhJlnw.roa (hash: whajyGy/1UYHTBKdIHCPuA5IumZDHCjke/Rcxhk8gpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Aug 2026 20:01:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:d8:aa:d5:d2:44:a5:44:34:92:9b:78:87:6b:d3:18:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Aug  6 20:01:42 2026 GMT
            Not After : Aug  7 20:01:42 2026 GMT
        Subject: CN=611e014a77f43336c1af60c79da46bf188db3571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:88:3c:a9:e5:73:0f:be:6a:d1:b3:53:15:b7:
                    e3:0d:bc:20:98:a6:95:86:fe:04:1f:4a:37:fa:e6:
                    40:c1:e2:6e:15:b1:50:fd:27:c7:84:4d:02:94:ca:
                    1b:f1:60:fb:e2:87:e2:b6:41:2d:72:d6:a9:1f:10:
                    16:53:19:2f:43:61:88:37:c2:ba:af:be:28:b6:0a:
                    31:ed:16:77:94:71:2f:d3:07:c7:14:e6:6a:06:8c:
                    32:de:6a:03:ee:2c:30:ef:11:a1:ea:f2:23:eb:19:
                    76:23:a3:0a:45:bf:3d:9e:24:e8:23:77:5d:88:c9:
                    2f:b6:b3:92:8f:8a:34:85:a5:38:62:f1:a8:a8:dc:
                    85:06:3e:bc:d8:3a:5d:1e:04:13:27:a1:03:04:00:
                    19:48:15:94:99:bd:d1:a4:59:0c:99:16:e6:c8:9f:
                    ba:9a:b7:35:9d:af:b9:fd:67:e0:37:8a:61:7a:6a:
                    7f:24:82:52:cd:1f:c2:bb:36:fb:ff:1b:41:f0:5c:
                    71:fc:93:d6:17:71:78:d9:6f:c9:9b:b3:3d:79:f7:
                    57:93:4c:53:5c:bb:59:c4:14:a8:58:a7:32:a6:d9:
                    5e:e7:ab:7b:28:04:c5:0e:a0:a5:c6:36:f6:17:37:
                    d6:31:ea:6f:7b:81:f2:d6:15:f2:d9:8c:d8:08:86:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:1E:01:4A:77:F4:33:36:C1:AF:60:C7:9D:A4:6B:F1:88:DB:35:71
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:05:d4:16:fe:10:7b:9e:3f:a3:c8:e8:20:6a:99:58:82:0a:
         62:f8:85:f6:7b:b9:03:3b:78:8c:c6:87:df:5b:af:76:99:52:
         60:52:13:47:be:16:d8:20:e7:db:42:28:4b:89:1e:dd:c4:88:
         eb:0e:10:c5:33:40:7e:0b:7a:0c:d7:cb:62:67:0b:b5:cb:e3:
         5c:17:54:31:75:0d:3e:7e:7c:4c:84:86:79:e3:3e:06:fd:cd:
         2f:4c:19:f8:7a:1b:71:02:60:fe:54:1c:41:3d:bf:2d:74:d3:
         0d:ec:65:ef:0a:5d:ff:ff:c8:c1:be:c1:f2:cd:12:75:5a:c1:
         c9:5c:13:71:fe:e5:da:31:72:c8:ec:07:43:35:89:bd:8a:79:
         9c:d6:93:3e:38:f0:8a:ce:21:c5:20:f1:e7:1d:4e:1e:ae:b8:
         22:89:46:38:d2:e2:7f:4a:12:ee:ea:d0:43:da:86:c7:ce:69:
         01:7a:96:fe:ea:a3:d8:fd:aa:43:52:09:31:c5:ee:58:15:ae:
         a5:7a:1e:64:01:67:ea:14:f4:61:81:ba:b5:b8:d1:09:90:f0:
         21:bb:92:80:a0:c1:6f:c4:d5:17:66:b9:94:8a:b0:b3:a7:c8:
         29:e6:42:dc:85:b7:f9:29:d2:71:cd:34:52:2e:59:8d:d9:c6:
         c3:6d:7e:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/YqtXSRKVENJKbeIdr0xiJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk
MGRjYmMwHhcNMjYwODA2MjAwMTQyWhcNMjYwODA3MjAwMTQyWjAzMTEwLwYDVQQD
Eyg2MTFlMDE0YTc3ZjQzMzM2YzFhZjYwYzc5ZGE0NmJmMTg4ZGIzNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA84g8qeVzD75q0bNTFbfjDbwgmKaV
hv4EH0o3+uZAweJuFbFQ/SfHhE0ClMob8WD74ofitkEtctapHxAWUxkvQ2GIN8K6
r74otgox7RZ3lHEv0wfHFOZqBowy3moD7iww7xGh6vIj6xl2I6MKRb89niToI3dd
iMkvtrOSj4o0haU4YvGoqNyFBj682DpdHgQTJ6EDBAAZSBWUmb3RpFkMmRbmyJ+6
mrc1na+5/WfgN4phemp/JIJSzR/Cuzb7/xtB8Fxx/JPWF3F42W/Jm7M9efdXk0xT
XLtZxBSoWKcyptle56t7KATFDqClxjb2FzfWMepve4Hy1hXy2YzYCIYryQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEeAUp39DM2wa9gx52ka/GI2zVxMB8GA1UdIwQY
MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt
YzUyZGY0YWE1MjFkLzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk
LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQXUFv4Q
e54/o8joIGqZWIIKYviF9nu5Azt4jMaH31uvdplSYFITR74W2CDn20IoS4ke3cSI
6w4QxTNAfgt6DNfLYmcLtcvjXBdUMXUNPn58TISGeeM+Bv3NL0wZ+HobcQJg/lQc
QT2/LXTTDexl7wpd///Iwb7B8s0SdVrByVwTcf7l2jFyyOwHQzWJvYp5nNaTPjjw
is4hxSDx5x1OHq64IolGONLif0oS7urQQ9qGx85pAXqW/uqj2P2qQ1IJMcXuWBWu
pXoeZAFn6hT0YYG6tbjRCZDwIbuSgKDBb8TVF2a5lIqws6fIKeZC3IW3+SnScc00
Ui5ZjdnGw21+cA==
-----END CERTIFICATE-----
Generated at Fri Aug 7 05:19:59 2026 by rpki-client