Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File:                     u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier:          efEn0uiqWQTqtwrecayj+D5N382CMg6tpp0N1mcOXKc=
Subject key identifier:   71:FC:11:6F:3A:FC:D5:F5:AE:06:9E:56:5C:2F:4F:25:A8:BD:0D:E4
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer:       /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial:       019FA9AB93C649D558AD6D53F6CD669621F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 17:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:21 +0000
Files and hashes:         1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
                          2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
                          3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: TOZNqhCGsQ8XwcsXpB8laqt0idYL8YGGWslq2sRWSHk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:93:c6:49:d5:58:ad:6d:53:f6:cd:66:96:21:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
        Validity
            Not Before: Jul 28 17:00:21 2026 GMT
            Not After : Jul 29 17:00:21 2026 GMT
        Subject: CN=71fc116f3afcd5f5ae069e565c2f4f25a8bd0de4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:63:b1:22:2c:3b:ed:e7:a9:07:c3:2f:4c:bf:
                    74:af:9a:35:af:d2:48:fb:ff:70:b4:f2:70:cf:bd:
                    11:1b:0d:1e:01:dc:27:6a:57:40:fb:a3:3a:1f:fd:
                    2e:f6:c1:74:e8:27:52:c0:cb:7f:3f:31:73:ea:c4:
                    18:e0:de:6f:50:12:6c:a1:81:b9:48:d5:62:9b:79:
                    5c:1f:d3:75:a3:1e:d0:53:e4:70:a1:5c:82:4b:42:
                    fb:c6:4a:4f:f3:2f:13:4e:31:bd:1e:79:f8:5a:e9:
                    5d:ca:d1:d2:80:a7:24:5c:4a:26:e6:68:75:e1:bf:
                    f8:b0:b7:21:2a:94:6e:6d:cb:8c:d0:dd:8b:47:53:
                    ef:d9:34:87:4b:35:81:cc:2c:52:77:f1:a8:d1:1a:
                    e5:27:24:31:da:9e:0a:0d:54:40:e2:48:75:8d:6a:
                    09:35:0a:81:97:eb:4a:e3:5e:46:83:97:bf:c1:cd:
                    65:04:69:ce:44:72:b5:83:14:b6:4f:a9:8a:92:29:
                    93:91:7f:05:44:21:93:63:35:c2:e1:69:0a:16:25:
                    ef:79:ce:a1:0c:f3:ae:e3:c5:ee:bb:2f:f8:e9:23:
                    be:2c:bc:6a:9f:8d:66:91:79:f4:26:4f:16:95:7d:
                    b9:ea:ac:3d:5d:ba:56:7d:76:c8:ad:30:17:81:7e:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FC:11:6F:3A:FC:D5:F5:AE:06:9E:56:5C:2F:4F:25:A8:BD:0D:E4
            X509v3 Authority Key Identifier:
                keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:10:71:60:5b:e9:1b:c0:99:5a:3f:0b:5b:2d:5b:77:f7:d7:
         e3:55:cf:e6:f5:b2:50:51:43:77:0e:6a:31:66:07:ba:6f:cd:
         1c:7b:78:e5:78:19:41:dd:1c:f8:1a:10:25:a7:c1:04:ac:7e:
         70:b9:ef:3e:7a:12:e2:08:9f:28:5a:d0:7d:4c:93:f0:c9:74:
         3b:76:ae:72:1c:41:57:b2:bb:79:c4:e8:95:7d:74:c6:91:39:
         42:30:13:db:7d:7b:3e:28:7a:91:e3:64:a0:21:83:48:93:c7:
         b0:fd:68:27:e4:21:a5:36:f3:96:30:56:b2:be:72:56:7e:f1:
         10:e4:cf:b9:22:0b:7d:4d:0a:8e:71:1a:be:2b:fb:f1:2f:44:
         c9:49:ee:5b:55:e0:70:6e:0b:7d:7d:2a:97:a7:d9:36:bb:aa:
         22:d1:0c:6b:8d:65:c9:ff:f0:44:e7:f6:bd:50:28:84:d1:fd:
         47:a2:a9:95:b4:92:7c:df:2a:63:c1:94:fd:e7:77:f7:3b:76:
         22:4d:84:b6:42:7a:70:51:7b:dd:33:6d:e4:87:9a:d0:8c:e2:
         60:32:35:4f:6b:c5:f8:98:d0:10:5f:9c:4e:2f:9e:b6:de:fc:
         c3:79:93:ee:e7:f1:cd:8d:86:31:a6:22:e5:60:ae:bc:15:16:
         25:78:7e:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq5PGSdVYrW1T9s1mliHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmIyYTQzMDIwOTRmNGMzZjViYWRhNTQ3ZWY0ZjdlZGUx
OGU5MDMwHhcNMjYwNzI4MTcwMDIxWhcNMjYwNzI5MTcwMDIxWjAzMTEwLwYDVQQD
Eyg3MWZjMTE2ZjNhZmNkNWY1YWUwNjllNTY1YzJmNGYyNWE4YmQwZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2OxIiw77eepB8MvTL90r5o1r9JI
+/9wtPJwz70RGw0eAdwnaldA+6M6H/0u9sF06CdSwMt/PzFz6sQY4N5vUBJsoYG5
SNVim3lcH9N1ox7QU+RwoVyCS0L7xkpP8y8TTjG9Hnn4WuldytHSgKckXEom5mh1
4b/4sLchKpRubcuM0N2LR1Pv2TSHSzWBzCxSd/Go0RrlJyQx2p4KDVRA4kh1jWoJ
NQqBl+tK415Gg5e/wc1lBGnORHK1gxS2T6mKkimTkX8FRCGTYzXC4WkKFiXvec6h
DPOu48Xuuy/46SO+LLxqn41mkXn0Jk8WlX256qw9XbpWfXbIrTAXgX62nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHH8EW86/NX1rgaeVlwvTyWovQ3kMB8GA1UdIwQY
MBaAFLu7KkMCCU9MP1utpUfvT37eGOkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAt
MzJiZjE2NDFmYjNiLzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9jMzk5YTQtNTNiNi00MjcxLTliOTAtMzJiZjE2NDFmYjNi
LzEvdTdzcVF3SUpUMHdfVzYybFItOVBmdDRZNlFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPRBxYFvp
G8CZWj8LWy1bd/fX41XP5vWyUFFDdw5qMWYHum/NHHt45XgZQd0c+BoQJafBBKx+
cLnvPnoS4gifKFrQfUyT8Ml0O3auchxBV7K7ecTolX10xpE5QjAT2317Pih6keNk
oCGDSJPHsP1oJ+QhpTbzljBWsr5yVn7xEOTPuSILfU0KjnEaviv78S9EyUnuW1Xg
cG4LfX0ql6fZNruqItEMa41lyf/wROf2vVAohNH9R6KplbSSfN8qY8GU/ed39zt2
Ik2EtkJ6cFF73TNt5Iea0IziYDI1T2vF+JjQEF+cTi+ett78w3mT7ufxzY2GMaYi
5WCuvBUWJXh+gA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:45:06 2026 by rpki-client