Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
File:                     u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft (raw, json)
Hash identifier:          SkOrmKX/NYJMD9I0FHJT5skyzkLyDnNQ+G4KP93xLmM=
Subject key identifier:   79:3B:E6:D5:1B:7A:17:AB:7F:AB:75:17:08:E6:0F:8E:29:B0:7D:FD
Authority key identifier: BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77
Certificate issuer:       /CN=bbfbee4a968df0fac4751b4f49027fa095c65277
Certificate serial:       019FA3A9CC69EE03D0749238C298AAD71756
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
Manifest number:          19D6
Signing time:             Mon 27 Jul 2026 13:00:41 +0000
Manifest this update:     Mon 27 Jul 2026 13:00:41 +0000
Manifest next update:     Tue 28 Jul 2026 13:00:41 +0000
Files and hashes:         1: lBcSFM8OK1uzZB50zlLDxjTK2xU.roa (hash: 8pSOr2u3lgeMMUD0PcPdrmLPvUU4Aqiq7ol79EVGlVg=)
                          2: u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl (hash: aX0Dq5MjLFoVStN8hcoiqwoORptTicaR53VzI/KVwaU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:a9:cc:69:ee:03:d0:74:92:38:c2:98:aa:d7:17:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbfbee4a968df0fac4751b4f49027fa095c65277
        Validity
            Not Before: Jul 27 13:00:41 2026 GMT
            Not After : Jul 28 13:00:41 2026 GMT
        Subject: CN=793be6d51b7a17ab7fab751708e60f8e29b07dfd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:48:70:68:b3:f5:fd:1f:c4:d2:69:cf:19:a8:
                    d8:d3:fa:e1:b7:a6:b8:9b:fa:4e:e6:ae:e0:e3:a4:
                    26:85:f6:48:f1:b1:bc:d3:75:3d:38:f3:4e:14:8a:
                    03:eb:a9:d9:11:23:df:5e:ff:ee:51:8c:aa:05:1c:
                    72:97:e1:b9:fd:b1:d7:5a:82:ff:20:ba:7d:5d:77:
                    e0:ea:02:b4:24:26:bb:c6:73:f6:ce:6c:94:69:6d:
                    2c:67:a8:d9:bc:10:e4:25:02:cb:03:4f:f5:3e:6f:
                    35:f6:86:a9:a9:41:03:a7:e7:c0:cc:97:f6:3d:f3:
                    06:48:93:c4:5a:16:42:35:b6:ae:f1:3c:03:74:4c:
                    a9:e8:52:b1:46:b0:43:14:f6:57:5e:b6:0d:96:f5:
                    9e:bd:07:1d:ac:ce:2d:b9:a7:ea:ba:37:a5:e2:93:
                    c2:2d:08:b7:a7:b7:cb:68:e9:b9:a6:d6:97:8f:1f:
                    e3:48:c8:0b:2d:52:c8:1f:eb:a2:52:fa:5e:33:2f:
                    af:6c:47:56:ab:5a:f0:80:67:d8:5e:61:1e:53:f4:
                    13:2e:b6:e0:eb:8a:d6:4e:d0:2d:d4:c5:a5:86:a3:
                    c8:5b:47:ed:97:08:19:5d:2b:8a:cd:f7:01:75:2c:
                    a3:31:f6:c2:93:72:f3:d8:96:5f:66:cc:d0:59:89:
                    a4:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:3B:E6:D5:1B:7A:17:AB:7F:AB:75:17:08:E6:0F:8E:29:B0:7D:FD
            X509v3 Authority Key Identifier:
                keyid:BB:FB:EE:4A:96:8D:F0:FA:C4:75:1B:4F:49:02:7F:A0:95:C6:52:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/cd081e-89c2-4309-9490-0a89c6996fef/1/u_vuSpaN8PrEdRtPSQJ_oJXGUnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:4c:b9:1d:52:65:14:51:dc:6b:e2:27:3e:ca:c2:ad:0c:ab:
         3a:dc:b8:bb:f0:d0:82:95:13:42:c6:34:6a:60:8c:14:42:a1:
         07:36:73:2f:3a:42:fe:8b:0e:e0:fc:d2:86:07:f8:6a:92:9f:
         49:5f:e8:80:b8:de:f5:e0:72:48:c5:79:e7:bc:c3:59:5d:42:
         3e:41:6a:b0:e7:95:66:0e:97:85:65:61:e1:7a:2d:91:03:97:
         86:1f:3f:19:2a:d3:74:ff:6a:a5:63:7c:ce:e8:7b:d2:20:95:
         75:2b:dc:58:04:0a:4b:f5:49:bd:f0:61:66:a2:d5:d1:69:d7:
         6f:a0:75:f6:5e:6e:c9:67:ab:42:89:06:68:39:bd:16:6e:6e:
         7f:1d:6c:b8:ff:c5:be:4c:d7:43:d4:79:1e:83:53:0a:4b:70:
         de:e9:56:05:91:98:d8:2d:b0:0c:74:11:ae:f2:52:07:66:03:
         5c:8d:6a:25:1a:4a:ed:c3:6b:0d:3b:98:c3:ea:00:1b:58:8c:
         f2:c2:43:d9:85:e3:6e:a7:2a:47:c3:f9:9f:3a:4f:94:7c:f5:
         ea:f7:03:ec:c9:4e:0b:ac:67:47:8d:d0:ee:49:06:73:ba:71:
         9f:79:03:e0:80:74:89:c8:d7:e3:e9:98:69:5c:d9:a0:f6:d2:
         2e:3b:bc:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jqcxp7gPQdJI4wpiq1xdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmJlZTRhOTY4ZGYwZmFjNDc1MWI0ZjQ5MDI3ZmEwOTVj
NjUyNzcwHhcNMjYwNzI3MTMwMDQxWhcNMjYwNzI4MTMwMDQxWjAzMTEwLwYDVQQD
Eyg3OTNiZTZkNTFiN2ExN2FiN2ZhYjc1MTcwOGU2MGY4ZTI5YjA3ZGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUhwaLP1/R/E0mnPGajY0/rht6a4
m/pO5q7g46QmhfZI8bG803U9OPNOFIoD66nZESPfXv/uUYyqBRxyl+G5/bHXWoL/
ILp9XXfg6gK0JCa7xnP2zmyUaW0sZ6jZvBDkJQLLA0/1Pm819oapqUEDp+fAzJf2
PfMGSJPEWhZCNbau8TwDdEyp6FKxRrBDFPZXXrYNlvWevQcdrM4tuafqujel4pPC
LQi3p7fLaOm5ptaXjx/jSMgLLVLIH+uiUvpeMy+vbEdWq1rwgGfYXmEeU/QTLrbg
64rWTtAt1MWlhqPIW0ftlwgZXSuKzfcBdSyjMfbCk3Lz2JZfZszQWYmkUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk75tUbeherf6t1FwjmD44psH39MB8GA1UdIwQY
MBaAFLv77kqWjfD6xHUbT0kCf6CVxlJ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAt
MGE4OWM2OTk2ZmVmLzEvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9jZDA4MWUtODljMi00MzA5LTk0OTAtMGE4OWM2OTk2ZmVm
LzEvdV92dVNwYU44UHJFZFJ0UFNRSl9vSlhHVW5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEy5HVJl
FFHca+InPsrCrQyrOty4u/DQgpUTQsY0amCMFEKhBzZzLzpC/osO4PzShgf4apKf
SV/ogLje9eBySMV557zDWV1CPkFqsOeVZg6XhWVh4XotkQOXhh8/GSrTdP9qpWN8
zuh70iCVdSvcWAQKS/VJvfBhZqLV0WnXb6B19l5uyWerQokGaDm9Fm5ufx1suP/F
vkzXQ9R5HoNTCktw3ulWBZGY2C2wDHQRrvJSB2YDXI1qJRpK7cNrDTuYw+oAG1iM
8sJD2YXjbqcqR8P5nzpPlHz16vcD7MlOC6xnR43Q7kkGc7pxn3kD4IB0icjX4+mY
aVzZoPbSLju8aw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 19:25:11 2026 by rpki-client