Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
File:                     CChUc8l4ylHOVGmqSu3KFkRb1lI.mft (raw, json)
Hash identifier:          I+pmEPs90bJ3/2Kvvo/qU5r+xX8R9Xoc8tb+Cg9LjYQ=
Subject key identifier:   50:F9:82:71:95:8F:52:BC:B2:57:6C:1F:12:07:AD:1A:0C:4B:5C:EA
Authority key identifier: 08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52
Certificate issuer:       /CN=08285473c978ca51ce5469aa4aedca16445bd652
Certificate serial:       019FA8998601086C01CD091F44366A87A68D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 12:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:01 +0000
Files and hashes:         1: CChUc8l4ylHOVGmqSu3KFkRb1lI.crl (hash: /NPeGasKjbnTorAmfvOA9/mcNfh5NoJbVPXYWWb28wc=)
                          2: KYwuzPdQcxFtvMJ482Z-no0-rlI.roa (hash: WFv3oIQNO2UW+gImEV96V10XtC3ybgEz6IBrXZKDplc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:86:01:08:6c:01:cd:09:1f:44:36:6a:87:a6:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08285473c978ca51ce5469aa4aedca16445bd652
        Validity
            Not Before: Jul 28 12:01:01 2026 GMT
            Not After : Jul 29 12:01:01 2026 GMT
        Subject: CN=50f98271958f52bcb2576c1f1207ad1a0c4b5cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:eb:27:b9:48:62:32:e2:4e:8a:76:7f:d5:4b:
                    e0:65:55:18:99:c5:d0:35:26:6e:eb:2f:4a:83:7f:
                    99:6c:e7:42:03:10:8c:50:ff:69:4c:85:7d:30:4c:
                    47:7d:14:31:95:05:6f:76:40:67:1a:c4:0c:1f:05:
                    54:6c:7b:ba:33:d1:7c:20:0d:3c:8e:86:c0:36:fc:
                    e3:b2:34:ec:29:70:cf:b5:73:b7:9b:cf:e3:3b:ab:
                    90:24:ef:31:84:97:4c:1c:3a:09:0b:5f:c8:b8:82:
                    50:23:2d:15:62:79:cf:94:86:9c:40:2a:26:ab:91:
                    f9:5f:fe:23:5c:dc:96:d6:77:94:68:0c:08:35:a2:
                    f9:ea:21:12:b7:af:33:5a:01:17:2e:de:f4:e4:1d:
                    d7:0d:2f:6e:80:f4:b2:84:b7:8f:8d:da:30:2d:e5:
                    24:50:28:2e:e7:10:66:33:ed:01:2f:68:9e:ad:a8:
                    98:0a:dc:d3:20:84:19:19:6c:23:13:72:a5:03:c4:
                    75:38:8f:d6:f7:a9:76:f6:8c:c8:57:ec:cf:3e:8c:
                    28:18:00:de:6f:88:1c:36:68:0a:c5:16:f2:da:1f:
                    73:cf:f4:ac:97:9a:b2:0b:4c:f5:fe:42:b0:0b:90:
                    87:bf:ce:c3:d4:95:ec:57:0a:25:ec:07:08:d8:79:
                    07:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F9:82:71:95:8F:52:BC:B2:57:6C:1F:12:07:AD:1A:0C:4B:5C:EA
            X509v3 Authority Key Identifier:
                keyid:08:28:54:73:C9:78:CA:51:CE:54:69:AA:4A:ED:CA:16:44:5B:D6:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CChUc8l4ylHOVGmqSu3KFkRb1lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bfb4f2-887a-4013-a8f8-8e300efd13bc/1/CChUc8l4ylHOVGmqSu3KFkRb1lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:19:f0:0d:6c:af:7e:22:43:da:f3:03:a8:86:c0:0a:07:23:
         87:6e:75:86:bb:f2:92:84:f2:fa:b8:08:2e:5b:4a:f5:c7:8f:
         30:26:fb:e3:6f:ee:54:2f:09:71:9b:d5:40:a7:2a:cc:02:57:
         5f:35:4a:3d:e1:41:67:54:b4:3c:1f:3c:2f:e5:22:54:2a:d0:
         b3:20:3e:23:b0:0a:61:87:3a:2f:b6:64:44:63:cb:98:b1:19:
         66:38:85:70:27:5e:63:80:1b:77:25:d7:2a:27:0e:28:c4:c2:
         ad:fb:fb:57:52:46:b9:f2:fd:26:21:e7:e4:66:f7:9f:3f:da:
         8a:fe:9c:87:bb:80:55:b7:b9:78:38:01:d2:82:95:3c:d8:08:
         b7:7e:a2:11:e1:05:25:b9:f7:41:6f:58:ff:31:44:69:9a:36:
         4e:54:87:03:08:29:f3:31:ee:c7:04:c7:f4:5e:cc:89:1b:85:
         b5:9d:30:62:f5:b2:38:26:be:44:4b:2c:9d:12:00:d5:f9:02:
         e2:fd:52:32:94:e6:02:82:7d:a8:17:26:00:df:2f:f6:5b:cc:
         02:1d:23:06:47:86:ae:7d:f7:f0:52:fb:54:bb:91:eb:c3:31:
         38:3e:90:c4:b3:7f:0a:73:b6:8f:23:80:7d:40:e9:92:f4:f7:
         05:9d:32:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omYYBCGwBzQkfRDZqh6aNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4Mjg1NDczYzk3OGNhNTFjZTU0NjlhYTRhZWRjYTE2NDQ1
YmQ2NTIwHhcNMjYwNzI4MTIwMTAxWhcNMjYwNzI5MTIwMTAxWjAzMTEwLwYDVQQD
Eyg1MGY5ODI3MTk1OGY1MmJjYjI1NzZjMWYxMjA3YWQxYTBjNGI1Y2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8esnuUhiMuJOinZ/1UvgZVUYmcXQ
NSZu6y9Kg3+ZbOdCAxCMUP9pTIV9MExHfRQxlQVvdkBnGsQMHwVUbHu6M9F8IA08
jobANvzjsjTsKXDPtXO3m8/jO6uQJO8xhJdMHDoJC1/IuIJQIy0VYnnPlIacQCom
q5H5X/4jXNyW1neUaAwINaL56iESt68zWgEXLt705B3XDS9ugPSyhLePjdowLeUk
UCgu5xBmM+0BL2ieraiYCtzTIIQZGWwjE3KlA8R1OI/W96l29ozIV+zPPowoGADe
b4gcNmgKxRby2h9zz/Ssl5qyC0z1/kKwC5CHv87D1JXsVwol7AcI2HkHewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFD5gnGVj1K8sldsHxIHrRoMS1zqMB8GA1UdIwQY
MBaAFAgoVHPJeMpRzlRpqkrtyhZEW9ZSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4Zjgt
OGUzMDBlZmQxM2JjLzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS9iZmI0ZjItODg3YS00MDEzLWE4ZjgtOGUzMDBlZmQxM2Jj
LzEvQ0NoVWM4bDR5bEhPVkdtcVN1M0tGa1JiMWxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBnwDWyv
fiJD2vMDqIbACgcjh251hrvykoTy+rgILltK9cePMCb742/uVC8JcZvVQKcqzAJX
XzVKPeFBZ1S0PB88L+UiVCrQsyA+I7AKYYc6L7ZkRGPLmLEZZjiFcCdeY4AbdyXX
KicOKMTCrfv7V1JGufL9JiHn5Gb3nz/aiv6ch7uAVbe5eDgB0oKVPNgIt36iEeEF
Jbn3QW9Y/zFEaZo2TlSHAwgp8zHuxwTH9F7MiRuFtZ0wYvWyOCa+REssnRIA1fkC
4v1SMpTmAoJ9qBcmAN8v9lvMAh0jBkeGrn338FL7VLuR68MxOD6QxLN/CnO2jyOA
fUDpkvT3BZ0yCA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:44 2026 by rpki-client