Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
File:                     08YXj7A0kFEwrwzhzSdRVPK1m3g.mft (raw, json)
Hash identifier:          seHgwzm5AacgMDNHZrXUAZ+nv2NyT8ohrjaA9WNpfiA=
Subject key identifier:   1C:7C:3D:5B:D1:0B:63:5F:DE:C0:9B:29:C6:3C:C1:1C:D5:96:CE:6C
Authority key identifier: D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78
Certificate issuer:       /CN=d3c6178fb034905130af0ce1cd275154f2b59b78
Certificate serial:       019FAA1A015621A6F90908F721F735ACD1A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 19:00:58 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:58 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:58 +0000
Files and hashes:         1: 08YXj7A0kFEwrwzhzSdRVPK1m3g.crl (hash: kGa6+vdPPie8IYgjqgHBUFAcidmufEb1NArYGJwp7nA=)
                          2: TkVIENg5yxh_iBn69iwP-Gzs7M0.roa (hash: XN4b40QKJDQSEm8B3f99MTAbjS4H9rL0ddzhBtlCaKw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:01:56:21:a6:f9:09:08:f7:21:f7:35:ac:d1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3c6178fb034905130af0ce1cd275154f2b59b78
        Validity
            Not Before: Jul 28 19:00:58 2026 GMT
            Not After : Jul 29 19:00:58 2026 GMT
        Subject: CN=1c7c3d5bd10b635fdec09b29c63cc11cd596ce6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:c0:85:54:4d:18:9d:57:97:a9:c6:38:1d:
                    1c:12:bc:fd:14:92:a9:82:89:d7:84:6c:9b:8d:9d:
                    5d:8b:e4:30:d8:c7:f2:e6:35:6e:4d:00:8d:2a:94:
                    1c:ca:6a:a7:9a:1a:0d:ee:77:20:19:63:4f:5c:bb:
                    59:18:de:31:66:c7:d8:7c:d7:89:5e:c1:e7:e6:9c:
                    ce:b0:d2:e9:9f:68:25:9d:96:ba:d6:f1:36:6c:63:
                    af:74:f3:41:4c:c3:4d:7e:87:4f:98:fd:b6:af:67:
                    d9:4c:50:16:d6:9f:b6:75:12:cd:d5:24:3e:ad:c0:
                    1a:93:0b:cb:f2:20:7e:bf:6d:c5:e4:9e:9a:fb:c0:
                    78:1a:8a:31:9a:94:48:7c:44:20:9d:c0:b5:30:a9:
                    28:59:bc:71:f9:64:50:9f:3e:f8:8c:c7:f3:39:ca:
                    5d:3f:1f:32:cc:f8:bd:43:9b:94:14:47:7f:ad:d3:
                    76:2f:2b:fd:a8:52:95:42:52:ae:80:9f:2a:26:e6:
                    c5:dd:ad:79:5c:70:4d:a3:71:b4:ee:bf:bc:4e:3a:
                    49:4f:ba:46:51:a8:72:60:9c:fa:6a:6d:db:5c:ca:
                    00:9a:f8:a7:d9:7b:d9:99:e4:ed:68:7b:06:1b:38:
                    91:d2:11:50:85:ce:62:d1:aa:bc:1c:6d:ea:99:ac:
                    f1:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7C:3D:5B:D1:0B:63:5F:DE:C0:9B:29:C6:3C:C1:1C:D5:96:CE:6C
            X509v3 Authority Key Identifier:
                keyid:D3:C6:17:8F:B0:34:90:51:30:AF:0C:E1:CD:27:51:54:F2:B5:9B:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08YXj7A0kFEwrwzhzSdRVPK1m3g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/78fde9-6df0-4ae2-9b37-a7c4b2f6e276/1/08YXj7A0kFEwrwzhzSdRVPK1m3g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:ec:18:e0:b9:f2:f7:c4:a4:ab:d4:4f:12:24:18:0d:01:52:
         1e:d8:00:68:49:d2:03:e4:24:ce:ad:f9:bd:6d:69:d5:19:45:
         37:82:40:f9:e5:58:c7:3f:14:77:00:bb:d0:4a:f4:f5:2d:7f:
         b8:e4:66:a3:e0:0e:8c:dd:0c:7d:16:ec:b0:2d:c2:82:ae:1b:
         2f:87:d0:3a:1b:25:39:e9:da:ed:ec:04:b8:b0:89:92:ed:47:
         7b:c6:98:bd:c4:60:fd:ad:44:de:b1:f9:3f:61:db:79:17:48:
         fb:0f:e1:8c:c1:15:09:1e:3a:32:eb:76:57:d9:98:19:94:cc:
         e4:a8:31:08:16:f1:24:5b:68:ac:12:fc:1b:5e:4f:dd:65:75:
         75:38:41:13:08:07:71:6f:5f:9b:85:4d:d1:a2:0d:c0:76:d7:
         f9:0f:da:4f:f5:35:13:a9:35:03:12:71:e2:34:11:1e:b9:62:
         39:1f:d7:c5:2f:7a:18:56:59:a3:02:2c:83:e1:78:18:1d:98:
         d9:35:17:2f:a6:9c:19:b2:d2:0d:42:20:e7:33:8d:34:2a:e6:
         d6:ae:94:14:4a:c8:7f:64:b8:8a:f9:73:cd:37:bc:36:7f:10:
         76:24:8b:6d:fb:de:4a:7a:57:db:a8:2c:39:d4:21:12:18:71:
         ea:9e:a1:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGgFWIab5CQj3Ifc1rNGlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYzYxNzhmYjAzNDkwNTEzMGFmMGNlMWNkMjc1MTU0ZjJi
NTliNzgwHhcNMjYwNzI4MTkwMDU4WhcNMjYwNzI5MTkwMDU4WjAzMTEwLwYDVQQD
EygxYzdjM2Q1YmQxMGI2MzVmZGVjMDliMjljNjNjYzExY2Q1OTZjZTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVnAhVRNGJ1Xl6nGOB0cErz9FJKp
gonXhGybjZ1di+Qw2Mfy5jVuTQCNKpQcymqnmhoN7ncgGWNPXLtZGN4xZsfYfNeJ
XsHn5pzOsNLpn2glnZa61vE2bGOvdPNBTMNNfodPmP22r2fZTFAW1p+2dRLN1SQ+
rcAakwvL8iB+v23F5J6a+8B4GooxmpRIfEQgncC1MKkoWbxx+WRQnz74jMfzOcpd
Px8yzPi9Q5uUFEd/rdN2Lyv9qFKVQlKugJ8qJubF3a15XHBNo3G07r+8TjpJT7pG
UahyYJz6am3bXMoAmvin2XvZmeTtaHsGGziR0hFQhc5i0aq8HG3qmazxqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx8PVvRC2Nf3sCbKcY8wRzVls5sMB8GA1UdIwQY
MBaAFNPGF4+wNJBRMK8M4c0nUVTytZt4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzct
YTdjNGIyZjZlMjc2LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83OGZkZTktNmRmMC00YWUyLTliMzctYTdjNGIyZjZlMjc2
LzEvMDhZWGo3QTBrRkV3cnd6aHpTZFJWUEsxbTNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+wY4Lny
98Skq9RPEiQYDQFSHtgAaEnSA+Qkzq35vW1p1RlFN4JA+eVYxz8UdwC70Er09S1/
uORmo+AOjN0MfRbssC3Cgq4bL4fQOhslOena7ewEuLCJku1He8aYvcRg/a1E3rH5
P2HbeRdI+w/hjMEVCR46Mut2V9mYGZTM5KgxCBbxJFtorBL8G15P3WV1dThBEwgH
cW9fm4VN0aINwHbX+Q/aT/U1E6k1AxJx4jQRHrliOR/XxS96GFZZowIsg+F4GB2Y
2TUXL6acGbLSDUIg5zONNCrm1q6UFErIf2S4ivlzzTe8Nn8QdiSLbfveSnpX26gs
OdQhEhhx6p6hNw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:12:59 2026 by rpki-client