Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
File:                     YbU0Q3UDZogVrdk80X0K0-GxqHc.mft (raw, json)
Hash identifier:          iBXY3COAAvTWI/mxi4lJ9ShIDGnLyr8dMnKBODAKEU8=
Subject key identifier:   F1:FE:0E:23:D7:7E:A4:05:4F:61:24:33:80:D7:C8:4A:29:6E:D0:F2
Authority key identifier: 61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77
Certificate issuer:       /CN=61b534437503668815add93cd17d0ad3e1b1a877
Certificate serial:       019F9700D47101A94E8CBB236D0E5C1DD21E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
Manifest number:          19DE
Signing time:             Sat 25 Jul 2026 02:00:41 +0000
Manifest this update:     Sat 25 Jul 2026 02:00:41 +0000
Manifest next update:     Sun 26 Jul 2026 02:00:41 +0000
Files and hashes:         1: 2v3v91RFQjN6l9mWptJO680RMkc.roa (hash: JpKAIgf5dUOG27b3V6ypmirRGf/czS7D9Bc0AguM208=)
                          2: 7eIzHvINnFqHZBOWvru0J6FjDb8.roa (hash: Dv2FZyAGPdsQN62gOmL7jMpfdjwxeMKFTL1oAf/BKfc=)
                          3: 8l0-rbUJJ5yl_F5t1WGOySUsQOI.roa (hash: 065Qj+kRYJW5mj1KN/1Un/hhPcBtSTaJS6BwFg5mPWw=)
                          4: QTFye-32ZtubZYZVN0cCrwUzz_s.roa (hash: Ou06XDdFUhQ2dykgxmyAA0EVBWVZBiN7PQ/FvfPl2a0=)
                          5: UsJrUy2UuzGGDnQa-en_vet84IU.roa (hash: anygphX/NHAj2pg72RtTsBDk/dlZBM2mWyxRgOxxXzo=)
                          6: YbU0Q3UDZogVrdk80X0K0-GxqHc.crl (hash: 2LLVlgCWBxEBdMtthOy0xnwABSuGtnB4UrFiTtrRw9k=)
                          7: o2wMPqpUwKK3k92hqD5HvK3oiiI.roa (hash: 0YGmH3GBpSNDcIwjVr7t8Bv7qy4ZPt0Vk2HKaZcbgtk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 26 Jul 2026 02:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:97:00:d4:71:01:a9:4e:8c:bb:23:6d:0e:5c:1d:d2:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b534437503668815add93cd17d0ad3e1b1a877
        Validity
            Not Before: Jul 25 02:00:41 2026 GMT
            Not After : Jul 26 02:00:41 2026 GMT
        Subject: CN=f1fe0e23d77ea4054f61243380d7c84a296ed0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:02:60:70:0b:df:df:09:75:f3:0d:28:2b:d5:
                    80:fa:bf:2d:d4:9b:0f:26:12:f2:3d:4f:a6:3d:43:
                    95:fe:a7:e5:9e:7f:15:c0:e1:ee:38:db:47:e3:61:
                    d7:67:85:9e:60:71:e9:40:e7:6f:5a:ac:ff:ea:37:
                    4b:ad:9e:8f:a1:fd:99:14:59:46:56:33:10:85:45:
                    e5:6b:0b:69:62:26:3b:13:ba:c9:3f:25:c1:ce:3e:
                    9a:26:2c:7d:5f:6c:41:a1:81:a5:bd:b0:79:6d:12:
                    9d:02:32:71:c2:a9:cb:a3:43:52:cd:9b:dc:a1:f6:
                    3b:72:1d:7b:8a:7a:c0:9b:93:b2:ea:5a:2d:17:71:
                    7c:ba:38:80:27:f1:b2:4a:ad:f4:29:06:b0:c7:84:
                    61:c3:aa:58:b8:bc:4f:29:fb:1c:43:eb:9d:3d:71:
                    bd:b4:84:12:d8:ed:3c:c5:c7:0f:8f:df:58:e6:a5:
                    8a:24:57:0d:18:72:80:b0:a8:01:46:1a:05:e2:ec:
                    c3:ec:33:d5:eb:e5:e9:16:b2:71:bb:81:a0:9d:e0:
                    f8:55:bf:18:b7:28:f5:2e:08:3e:2f:d8:bc:ff:1c:
                    9b:b3:64:39:a4:0b:a8:ae:7c:a9:c0:ee:54:75:c3:
                    c5:74:88:74:b3:8f:92:cb:03:ed:33:e5:f1:6e:e3:
                    05:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:0E:23:D7:7E:A4:05:4F:61:24:33:80:D7:C8:4A:29:6E:D0:F2
            X509v3 Authority Key Identifier:
                keyid:61:B5:34:43:75:03:66:88:15:AD:D9:3C:D1:7D:0A:D3:E1:B1:A8:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbU0Q3UDZogVrdk80X0K0-GxqHc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c1acd6-230a-4e36-a58f-f555e2e68a10/1/YbU0Q3UDZogVrdk80X0K0-GxqHc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:03:17:b4:89:24:b3:df:74:40:f5:de:ed:f5:d9:06:34:61:
         26:b2:c9:26:74:17:65:f0:86:22:e5:10:f3:3b:6f:cf:34:5a:
         81:10:ee:ab:41:90:f2:74:40:d9:1d:84:3a:56:06:1d:56:5b:
         44:a0:cf:84:7a:af:07:23:52:df:4d:36:39:56:11:73:72:6a:
         5a:82:14:35:56:90:29:58:87:f3:71:70:d9:2c:f5:6b:fd:cb:
         73:f2:b7:db:24:d5:f8:36:44:1e:16:41:72:9e:10:74:40:2f:
         77:9b:1f:30:65:50:ea:45:4e:d4:90:d1:96:23:7b:37:51:e3:
         53:58:b4:ef:49:6f:ec:a1:2a:11:0b:f1:54:d2:3d:b9:61:07:
         bc:79:36:53:14:f8:e0:84:23:c6:46:4d:39:ae:59:6a:14:2d:
         4a:ec:d9:76:19:d1:f9:e0:c2:db:0e:e7:72:ee:f6:a2:db:be:
         01:15:a7:e8:3b:1f:16:c5:18:1e:7b:74:52:39:15:4a:8d:85:
         17:49:19:de:b3:af:78:d0:b3:65:24:ed:f9:2d:cd:4d:ab:10:
         bc:a4:d5:d8:91:e6:1f:f2:a2:9b:a0:fe:0c:6b:d8:b2:b7:6d:
         a6:5d:0b:d8:4d:01:99:84:a5:b5:c8:a8:b1:21:52:0d:82:91:
         61:6a:73:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+XANRxAalOjLsjbQ5cHdIeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxYjUzNDQzNzUwMzY2ODgxNWFkZDkzY2QxN2QwYWQzZTFi
MWE4NzcwHhcNMjYwNzI1MDIwMDQxWhcNMjYwNzI2MDIwMDQxWjAzMTEwLwYDVQQD
EyhmMWZlMGUyM2Q3N2VhNDA1NGY2MTI0MzM4MGQ3Yzg0YTI5NmVkMGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAJgcAvf3wl18w0oK9WA+r8t1JsP
JhLyPU+mPUOV/qflnn8VwOHuONtH42HXZ4WeYHHpQOdvWqz/6jdLrZ6Pof2ZFFlG
VjMQhUXlawtpYiY7E7rJPyXBzj6aJix9X2xBoYGlvbB5bRKdAjJxwqnLo0NSzZvc
ofY7ch17inrAm5Oy6lotF3F8ujiAJ/GySq30KQawx4Rhw6pYuLxPKfscQ+udPXG9
tIQS2O08xccPj99Y5qWKJFcNGHKAsKgBRhoF4uzD7DPV6+XpFrJxu4GgneD4Vb8Y
tyj1Lgg+L9i8/xybs2Q5pAuornypwO5UdcPFdIh0s4+SywPtM+XxbuMFLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPH+DiPXfqQFT2EkM4DXyEopbtDyMB8GA1UdIwQY
MBaAFGG1NEN1A2aIFa3ZPNF9CtPhsah3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYt
ZjU1NWUyZTY4YTEwLzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9jMWFjZDYtMjMwYS00ZTM2LWE1OGYtZjU1NWUyZTY4YTEw
LzEvWWJVMFEzVURab2dWcmRrODBYMEswLUd4cUhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgMXtIkk
s990QPXe7fXZBjRhJrLJJnQXZfCGIuUQ8ztvzzRagRDuq0GQ8nRA2R2EOlYGHVZb
RKDPhHqvByNS3002OVYRc3JqWoIUNVaQKViH83Fw2Sz1a/3Lc/K32yTV+DZEHhZB
cp4QdEAvd5sfMGVQ6kVO1JDRliN7N1HjU1i070lv7KEqEQvxVNI9uWEHvHk2UxT4
4IQjxkZNOa5ZahQtSuzZdhnR+eDC2w7ncu72otu+ARWn6DsfFsUYHnt0UjkVSo2F
F0kZ3rOveNCzZSTt+S3NTasQvKTV2JHmH/Kim6D+DGvYsrdtpl0L2E0BmYSltcio
sSFSDYKRYWpzVA==
-----END CERTIFICATE-----
Generated at Sat Jul 25 10:26:01 2026 by rpki-client