Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
File:                     SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft (raw, json)
Hash identifier:          S6bcmYftWmsy4m2wFZNVKrgmGJmaI1HoG3on/0RihHk=
Subject key identifier:   21:2B:93:73:65:13:69:A9:4F:60:6D:BD:28:31:0E:78:F7:61:7D:5A
Authority key identifier: 4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6
Certificate issuer:       /CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
Certificate serial:       019FAA88BC3708F3FBFB5BC940EE7422E2D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
Manifest number:          149E
Signing time:             Tue 28 Jul 2026 21:01:55 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:55 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:55 +0000
Files and hashes:         1: 7Z28ccV7b3JOrHBg1UIO3OEvwT0.roa (hash: 1nSmk3+PfoqP0CPu2acD9nLC2qFRu+YJXluMww4fQsw=)
                          2: E3n9esmOrOiobKpJnsNX1UEdPcY.roa (hash: dbM92eMK8IhOySdV1MJ9MEgIxZl7Dktml8lfCphXSgw=)
                          3: SWLNmYYm6Zq0D2jQ9d5JvtPt1cA.roa (hash: jzLKP/SbyyXvM8oP+/GO3/4crN42V8JTzUOZ8ggXFRk=)
                          4: SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl (hash: sxnSsfbr1vqLfPe9D0q5dTp9WFQClEZUwgwjlMtHxrY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:bc:37:08:f3:fb:fb:5b:c9:40:ee:74:22:e2:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a9c5e56aacd01ffb2825a931ed5ede41c3f92e6
        Validity
            Not Before: Jul 28 21:01:55 2026 GMT
            Not After : Jul 29 21:01:55 2026 GMT
        Subject: CN=212b9373651369a94f606dbd28310e78f7617d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:d8:a0:f4:52:9d:31:52:91:86:17:b2:07:
                    52:a3:52:06:ac:5b:86:bc:c0:f1:41:45:9a:4b:51:
                    dd:62:2f:8e:87:19:e8:d0:7c:82:6e:fd:5d:32:48:
                    b7:5b:ee:7a:9f:ad:ed:0b:7a:a2:18:49:99:22:fb:
                    4b:21:58:86:48:bc:9f:cf:1b:5d:90:ed:d8:74:5c:
                    9e:17:9d:6f:63:08:6d:fb:7c:b1:7e:af:73:1f:47:
                    95:b3:0a:c3:39:d1:97:26:a9:16:a3:50:72:3a:74:
                    e0:8f:d9:92:ab:e1:02:c9:cb:19:64:0f:9c:5e:7c:
                    66:07:b6:53:bf:21:72:35:84:c0:32:4c:a2:3b:1d:
                    fe:56:52:3b:a7:4f:65:18:e3:aa:eb:25:43:f3:a0:
                    6d:1a:13:45:93:60:83:a1:27:da:6d:67:d2:d1:ec:
                    32:38:5c:28:db:b3:bf:96:a9:30:f7:46:cc:f3:57:
                    10:81:83:17:a7:4f:9b:bb:52:ab:bc:d8:93:40:03:
                    b7:dc:5f:c8:f5:ec:8a:19:c6:e6:6e:92:1b:9b:cc:
                    6f:48:6a:00:1e:20:58:b1:4d:2c:da:3f:87:b8:15:
                    ee:41:79:78:cf:24:87:2d:d2:56:7a:6d:7a:16:21:
                    fc:e5:83:6e:43:a2:20:0d:88:f7:e3:ab:15:ce:43:
                    d6:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:2B:93:73:65:13:69:A9:4F:60:6D:BD:28:31:0E:78:F7:61:7D:5A
            X509v3 Authority Key Identifier:
                keyid:4A:9C:5E:56:AA:CD:01:FF:B2:82:5A:93:1E:D5:ED:E4:1C:3F:92:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SpxeVqrNAf-yglqTHtXt5Bw_kuY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c010dc-0910-4341-8b33-2e694b339933/1/SpxeVqrNAf-yglqTHtXt5Bw_kuY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:0a:a5:93:3b:81:43:2e:e5:90:e1:f7:0e:d6:e6:e6:f9:
         71:0b:95:7b:86:f5:35:15:e8:cc:46:58:86:79:1b:09:6f:50:
         8f:e0:48:df:01:00:90:1c:e7:0b:8e:4f:b8:1b:1f:ff:3f:50:
         47:6a:54:bd:17:9e:9e:64:78:e6:94:62:da:9a:4c:6b:2b:12:
         b1:a0:68:9e:b1:21:8b:a5:e2:f6:24:b7:3a:8e:2e:9c:e3:f4:
         75:9f:fb:91:8e:6f:bc:16:68:59:76:7c:fc:a6:07:0c:81:44:
         c3:f8:10:f2:de:b9:9f:40:4d:bc:99:9e:ee:17:f4:f6:b8:fc:
         c1:c5:1e:12:df:d1:f4:cb:2f:45:0a:c2:4a:eb:b8:1f:f1:ce:
         c4:c8:3a:6d:1c:af:d9:4f:15:45:ca:04:e3:f1:f6:f2:8b:32:
         20:8a:b0:d5:3c:70:16:6a:49:b0:95:14:fd:6a:34:78:76:02:
         65:bd:0f:55:55:3b:94:24:fd:a8:ea:2b:9b:ce:79:21:9b:9c:
         2c:f0:47:89:11:36:d3:0b:c3:ae:20:f8:d6:10:93:e2:eb:25:
         c9:d2:5a:a4:d0:f6:dc:65:44:8e:87:fe:06:8d:80:ac:ab:1d:
         d7:ac:6c:16:20:de:c2:39:67:b1:5c:f9:64:20:53:91:19:5f:
         3e:97:57:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiLw3CPP7+1vJQO50IuLXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhOWM1ZTU2YWFjZDAxZmZiMjgyNWE5MzFlZDVlZGU0MWMz
ZjkyZTYwHhcNMjYwNzI4MjEwMTU1WhcNMjYwNzI5MjEwMTU1WjAzMTEwLwYDVQQD
EygyMTJiOTM3MzY1MTM2OWE5NGY2MDZkYmQyODMxMGU3OGY3NjE3ZDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWDYoPRSnTFSkYYXsgdSo1IGrFuG
vMDxQUWaS1HdYi+Ohxno0HyCbv1dMki3W+56n63tC3qiGEmZIvtLIViGSLyfzxtd
kO3YdFyeF51vYwht+3yxfq9zH0eVswrDOdGXJqkWo1ByOnTgj9mSq+ECycsZZA+c
XnxmB7ZTvyFyNYTAMkyiOx3+VlI7p09lGOOq6yVD86BtGhNFk2CDoSfabWfS0ewy
OFwo27O/lqkw90bM81cQgYMXp0+bu1KrvNiTQAO33F/I9eyKGcbmbpIbm8xvSGoA
HiBYsU0s2j+HuBXuQXl4zySHLdJWem16FiH85YNuQ6IgDYj346sVzkPWoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCErk3NlE2mpT2BtvSgxDnj3YX1aMB8GA1UdIwQY
MBaAFEqcXlaqzQH/soJakx7V7eQcP5LmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMt
MmU2OTRiMzM5OTMzLzEvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jMDEwZGMtMDkxMC00MzQxLThiMzMtMmU2OTRiMzM5OTMz
LzEvU3B4ZVZxck5BZi15Z2xxVEh0WHQ1Qndfa3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAocgKpZM7
gUMu5ZDh9w7W5ub5cQuVe4b1NRXozEZYhnkbCW9Qj+BI3wEAkBznC45PuBsf/z9Q
R2pUvReenmR45pRi2ppMaysSsaBonrEhi6Xi9iS3Oo4unOP0dZ/7kY5vvBZoWXZ8
/KYHDIFEw/gQ8t65n0BNvJme7hf09rj8wcUeEt/R9MsvRQrCSuu4H/HOxMg6bRyv
2U8VRcoE4/H28osyIIqw1TxwFmpJsJUU/Wo0eHYCZb0PVVU7lCT9qOorm855IZuc
LPBHiRE20wvDriD41hCT4uslydJapND23GVEjof+Bo2ArKsd16xsFiDewjlnsVz5
ZCBTkRlfPpdXIg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:39:50 2026 by rpki-client