Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
File:                     9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft (raw, json)
Hash identifier:          odf8an/SbDtQvQDHUVWF1KTV3wmKVesfOoN1CZfVmCk=
Subject key identifier:   77:E8:D5:B7:48:F1:F5:08:A1:A3:27:82:DB:36:0A:D7:D9:15:77:1F
Authority key identifier: F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66
Certificate issuer:       /CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
Certificate serial:       019FAA19A5A47626405943AC9188EDA2C26E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 19:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:35 +0000
Files and hashes:         1: 9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl (hash: BQbXqmNktQsLzTqmbX02tUpxjsztHxafXwiwS+qHImY=)
                          2: b5rSVSE86TGLka-C9Y6AISDjJwY.roa (hash: 0t2RVqp+17d/DpuBSPwdIacfG2COXwMxK/FmGDoAc0c=)
                          3: ta-CNtfidcX1EjmoTR6fl18hgE0.roa (hash: q55VmsTObI5y8vc6bmzOo3ADkQ630TErDSQUk8EgGVc=)
                          4: yDp_cabLhHNgFb7Jj4kWSqbMiuk.roa (hash: v8TlzmItyWM72tUXJ5LijiOK5kdxTCw7SZEC3tomivk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:a5:a4:76:26:40:59:43:ac:91:88:ed:a2:c2:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4460d6554d581ebb80e39e45015cd7d36d93f66
        Validity
            Not Before: Jul 28 19:00:35 2026 GMT
            Not After : Jul 29 19:00:35 2026 GMT
        Subject: CN=77e8d5b748f1f508a1a32782db360ad7d915771f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5a:d9:b8:11:20:5f:f4:17:7b:43:37:a2:48:
                    f4:e1:22:26:c1:27:61:fc:37:9c:b1:3e:e8:76:f7:
                    71:df:26:5a:93:e7:81:74:d3:32:52:48:36:9c:53:
                    b4:68:09:49:ae:d0:3b:12:71:f3:0c:47:cf:cf:2c:
                    87:18:44:a5:8c:e9:2c:15:af:35:2c:b8:e3:b8:2e:
                    0a:2a:65:f6:23:9f:7d:d1:7b:68:d8:86:05:dd:44:
                    dd:1a:f1:8a:2b:c0:8e:fe:a3:5e:b5:5b:fd:22:41:
                    79:75:18:55:e1:02:ae:97:af:a4:c2:f8:f5:9a:32:
                    30:4c:f9:b6:60:5d:99:b1:e4:b5:1f:63:e7:ec:48:
                    6a:6c:9b:20:d0:ad:e4:a7:83:71:c5:91:cb:fb:3e:
                    a0:e9:49:14:76:90:df:9e:b3:fc:15:97:7f:30:34:
                    97:64:ae:87:7c:e9:1c:28:78:53:4d:79:ce:e6:54:
                    13:41:32:18:ec:95:97:2b:c9:f1:a8:85:00:d7:b1:
                    92:ac:c5:cb:d9:c4:16:e0:c3:f4:07:7d:64:96:e3:
                    8c:01:75:a1:e6:27:2c:ab:0e:e2:1d:40:4e:e8:f9:
                    08:70:9a:e6:9d:8f:f5:95:5f:9e:be:01:de:47:e3:
                    6b:41:55:b5:b5:2e:b6:e7:ee:9a:71:d8:84:47:34:
                    7a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:E8:D5:B7:48:F1:F5:08:A1:A3:27:82:DB:36:0A:D7:D9:15:77:1F
            X509v3 Authority Key Identifier:
                keyid:F4:46:0D:65:54:D5:81:EB:B8:0E:39:E4:50:15:CD:7D:36:D9:3F:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/455f56-1e6f-467d-b711-ebdf38b0095c/1/9EYNZVTVgeu4DjnkUBXNfTbZP2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:c0:8b:ed:4a:bf:da:c2:0f:e9:6a:6a:f1:ae:de:11:5a:93:
         88:f3:44:9d:8c:1c:7b:e6:da:21:9e:66:a4:96:81:a6:9e:df:
         ff:60:ba:70:ce:28:35:33:15:fa:04:0c:89:ff:6d:e6:7e:df:
         d5:d4:fc:5f:79:af:39:d8:4b:5c:06:0f:75:79:03:95:7b:52:
         dd:e1:d0:d1:1b:d3:38:bb:71:74:89:bc:ae:c8:5b:23:b5:c6:
         c7:e1:7a:18:dc:82:58:62:d2:af:b6:29:70:41:f5:c5:d4:11:
         02:81:d5:78:1e:c9:e6:61:e1:98:6b:c2:34:df:99:d8:d2:dd:
         c9:4d:9d:77:b2:56:b9:5c:93:c7:72:a1:ba:27:19:1e:0a:3c:
         3e:d2:5a:27:5e:37:07:4d:13:38:32:b4:2c:36:9b:7d:c1:89:
         87:5b:d5:0f:cc:26:a2:c0:80:8a:2a:f0:b1:3d:05:a7:a5:06:
         09:9a:8a:0a:9d:35:77:2f:cd:c7:6e:26:0b:37:d6:8d:2b:71:
         f0:52:b0:4e:1a:a4:7f:51:00:45:5e:ba:52:7d:55:7b:e4:00:
         86:38:13:f3:a4:f8:14:88:09:fa:4c:7b:cb:1d:00:05:1e:f2:
         6f:02:af:20:83:c9:1e:0e:fc:cd:26:6c:10:1a:28:3e:bc:a2:
         92:94:93:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGaWkdiZAWUOskYjtosJuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NDYwZDY1NTRkNTgxZWJiODBlMzllNDUwMTVjZDdkMzZk
OTNmNjYwHhcNMjYwNzI4MTkwMDM1WhcNMjYwNzI5MTkwMDM1WjAzMTEwLwYDVQQD
Eyg3N2U4ZDViNzQ4ZjFmNTA4YTFhMzI3ODJkYjM2MGFkN2Q5MTU3NzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVrZuBEgX/QXe0M3okj04SImwSdh
/DecsT7odvdx3yZak+eBdNMyUkg2nFO0aAlJrtA7EnHzDEfPzyyHGESljOksFa81
LLjjuC4KKmX2I5990Xto2IYF3UTdGvGKK8CO/qNetVv9IkF5dRhV4QKul6+kwvj1
mjIwTPm2YF2ZseS1H2Pn7EhqbJsg0K3kp4NxxZHL+z6g6UkUdpDfnrP8FZd/MDSX
ZK6HfOkcKHhTTXnO5lQTQTIY7JWXK8nxqIUA17GSrMXL2cQW4MP0B31kluOMAXWh
5icsqw7iHUBO6PkIcJrmnY/1lV+evgHeR+NrQVW1tS625+6acdiERzR6qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHfo1bdI8fUIoaMngts2CtfZFXcfMB8GA1UdIwQY
MBaAFPRGDWVU1YHruA455FAVzX022T9mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEt
ZWJkZjM4YjAwOTVjLzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi80NTVmNTYtMWU2Zi00NjdkLWI3MTEtZWJkZjM4YjAwOTVj
LzEvOUVZTlpWVFZnZXU0RGpua1VCWE5mVGJaUDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZcCL7Uq/
2sIP6Wpq8a7eEVqTiPNEnYwce+baIZ5mpJaBpp7f/2C6cM4oNTMV+gQMif9t5n7f
1dT8X3mvOdhLXAYPdXkDlXtS3eHQ0RvTOLtxdIm8rshbI7XGx+F6GNyCWGLSr7Yp
cEH1xdQRAoHVeB7J5mHhmGvCNN+Z2NLdyU2dd7JWuVyTx3KhuicZHgo8PtJaJ143
B00TODK0LDabfcGJh1vVD8wmosCAiirwsT0Fp6UGCZqKCp01dy/Nx24mCzfWjStx
8FKwThqkf1EARV66Un1Ve+QAhjgT86T4FIgJ+kx7yx0ABR7ybwKvIIPJHg78zSZs
EBooPryikpST9Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:45 2026 by rpki-client