Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
File:                     xuHIxlyG6NJt2-toZYo5p6jieGY.mft (raw, json)
Hash identifier:          Gz9AQdkwO4vzr+CMXDoXnUP9AiZwdPCXEaa1x9fqQH4=
Subject key identifier:   42:9D:BB:76:EA:15:23:07:8A:56:85:49:73:FB:C8:FD:0E:68:29:90
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Certificate issuer:       /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial:       019F871FE3F4E02A4B44C6F0BF8D6E07DE43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
Manifest number:          19F9
Signing time:             Wed 22 Jul 2026 00:00:41 +0000
Manifest this update:     Wed 22 Jul 2026 00:00:41 +0000
Manifest next update:     Thu 23 Jul 2026 00:00:41 +0000
Files and hashes:         1: bnPEqM7jNSwDSsLoYqaQdeOAVmc.roa (hash: RzuAcC2bIf2stLK6Oo7aC6xahH/u0bP2SAQTbqYBz+Q=)
                          2: gFBkxLXifB1pizDwpQxGt50lx-w.roa (hash: CRzzcHfWnFO/NYye+zBKmrkrfDfUSQ88HqZjIhac8Z8=)
                          3: jdER3phX5mbgg6aj7xFihDYqyto.roa (hash: Gf4TEMTFntYzNK0gZEShHChZxR+vxTAfCM1wkhuszWc=)
                          4: l85MsveVC4VRyta1Pr3Wv2Mz9Uc.roa (hash: 1339z7QQmPfUk60TSdZgZE0hq+KiRCqz1Ride8dk8So=)
                          5: xuHIxlyG6NJt2-toZYo5p6jieGY.crl (hash: FZgxXafg6PhKyd2Yg5lh7CNo0CbVfjhTaBjwoWXGlck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:87:1f:e3:f4:e0:2a:4b:44:c6:f0:bf:8d:6e:07:de:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
        Validity
            Not Before: Jul 22 00:00:41 2026 GMT
            Not After : Jul 23 00:00:41 2026 GMT
        Subject: CN=429dbb76ea1523078a56854973fbc8fd0e682990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f5:7e:b5:8f:4f:80:97:78:ea:30:59:1c:3b:
                    dc:eb:d1:fc:cb:15:dd:df:04:5f:8a:03:93:eb:c4:
                    8b:88:24:1c:f9:24:f0:5c:50:3b:cd:f9:ca:36:8b:
                    06:7f:f9:f9:a3:2a:c9:7f:28:6b:bd:3b:3e:b5:09:
                    7e:c6:87:a8:b6:15:9b:79:90:67:3e:52:2b:b8:56:
                    ee:ed:dd:13:0d:80:0c:78:73:b4:55:49:4c:19:03:
                    30:71:9e:ad:37:cd:a4:36:8e:b6:93:65:f7:64:e7:
                    12:c8:61:79:6b:e8:66:1a:dd:59:e2:ed:79:47:5f:
                    2e:93:fb:15:00:5c:69:63:ee:a8:a3:5b:4f:32:f4:
                    30:cf:f6:25:5e:3b:97:72:e4:f8:67:a4:ef:40:d2:
                    6e:8c:8c:73:39:d8:b2:c5:04:1f:7a:4c:d3:f0:f9:
                    16:8a:83:40:aa:51:ea:f6:a2:25:15:59:0e:68:16:
                    71:ff:3f:dd:8f:6e:c4:24:0b:8b:b2:69:96:fb:ac:
                    4f:f2:01:bc:cd:71:ad:02:7e:02:87:92:62:a2:97:
                    34:6e:b9:ee:9f:76:e3:cc:af:e1:cc:ae:a9:e2:55:
                    74:dd:ec:70:f6:b2:4c:b5:ec:7f:ff:fb:e0:be:8c:
                    f5:ce:0c:0f:3d:df:ef:73:5f:42:34:03:0c:11:51:
                    96:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9D:BB:76:EA:15:23:07:8A:56:85:49:73:FB:C8:FD:0E:68:29:90
            X509v3 Authority Key Identifier:
                keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9e:cc:21:6c:16:fa:68:b3:c2:82:5a:67:bb:c8:59:b5:ec:
         b8:79:8b:62:08:8b:d2:07:27:8a:85:bd:94:46:f5:00:c2:37:
         ce:ff:b1:1e:27:43:82:18:82:98:4a:17:48:36:e7:16:7d:c3:
         9a:73:a7:3d:72:be:a2:b9:ad:0b:6f:d5:27:4f:5a:6a:9d:b4:
         dd:7a:6c:18:97:ed:28:06:27:a9:fb:bf:9b:94:39:97:14:7d:
         2e:d0:80:a8:e3:21:27:d7:94:68:90:0f:a9:fc:f2:52:c1:45:
         02:0a:22:1a:f3:48:f9:f6:5c:0c:e4:28:ee:b6:b0:c6:b8:61:
         94:82:72:d5:82:61:c5:e9:07:a7:8b:97:ff:c6:93:09:26:b9:
         37:ee:6c:4d:9d:a1:1a:b8:a5:0f:58:f4:80:a7:4f:1c:f1:bd:
         27:1f:80:37:54:85:e5:6c:28:26:a4:91:48:81:42:1b:f9:c5:
         52:d7:4d:78:bb:f8:98:2d:a5:2a:cb:0f:8f:99:84:7b:ca:f5:
         3b:b8:5b:ec:6b:ff:c5:ea:b2:d5:48:e8:f0:96:f2:87:2d:9f:
         7c:da:24:43:39:a2:26:4d:73:fc:24:ca:b0:88:34:9e:ba:57:
         20:91:22:79:55:af:f2:44:a7:41:bf:4a:84:dc:1f:2c:a1:ee:
         a6:71:8f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+HH+P04CpLRMbwv41uB95DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2ZTFjOGM2NWM4NmU4ZDI2ZGRiZWI2ODY1OGEzOWE3YThl
Mjc4NjYwHhcNMjYwNzIyMDAwMDQxWhcNMjYwNzIzMDAwMDQxWjAzMTEwLwYDVQQD
Eyg0MjlkYmI3NmVhMTUyMzA3OGE1Njg1NDk3M2ZiYzhmZDBlNjgyOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5/V+tY9PgJd46jBZHDvc69H8yxXd
3wRfigOT68SLiCQc+STwXFA7zfnKNosGf/n5oyrJfyhrvTs+tQl+xoeothWbeZBn
PlIruFbu7d0TDYAMeHO0VUlMGQMwcZ6tN82kNo62k2X3ZOcSyGF5a+hmGt1Z4u15
R18uk/sVAFxpY+6oo1tPMvQwz/YlXjuXcuT4Z6TvQNJujIxzOdiyxQQfekzT8PkW
ioNAqlHq9qIlFVkOaBZx/z/dj27EJAuLsmmW+6xP8gG8zXGtAn4Ch5Jiopc0brnu
n3bjzK/hzK6p4lV03exw9rJMtex///vgvoz1zgwPPd/vc19CNAMMEVGWbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEKdu3bqFSMHilaFSXP7yP0OaCmQMB8GA1UdIwQY
MBaAFMbhyMZchujSbdvraGWKOaeo4nhmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEt
Y2U1ZTAxZTcxYzkxLzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS9hNDUzZmUtYTY2NC00N2EyLThiOGEtY2U1ZTAxZTcxYzkx
LzEveHVISXhseUc2Tkp0Mi10b1pZbzVwNmppZUdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASJ7MIWwW
+mizwoJaZ7vIWbXsuHmLYgiL0gcnioW9lEb1AMI3zv+xHidDghiCmEoXSDbnFn3D
mnOnPXK+ormtC2/VJ09aap203XpsGJftKAYnqfu/m5Q5lxR9LtCAqOMhJ9eUaJAP
qfzyUsFFAgoiGvNI+fZcDOQo7rawxrhhlIJy1YJhxekHp4uX/8aTCSa5N+5sTZ2h
GrilD1j0gKdPHPG9Jx+AN1SF5WwoJqSRSIFCG/nFUtdNeLv4mC2lKssPj5mEe8r1
O7hb7Gv/xeqy1Ujo8Jbyhy2ffNokQzmiJk1z/CTKsIg0nrpXIJEieVWv8kSnQb9K
hNwfLKHupnGPwg==
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:08:45 2026 by rpki-client