Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
File:                     1MOxLI1jUZDskoQ3u9bLDow4-ak.mft (raw, json)
Hash identifier:          FjvzbpMG5xtKJnyD4q+y+yP7qz5a5ml1bFBFoSnP5PM=
Subject key identifier:   52:EE:A6:DF:E7:4A:52:06:27:E3:4A:13:47:A9:BF:A9:F8:07:E2:FD
Authority key identifier: D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9
Certificate issuer:       /CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
Certificate serial:       019FA97567F21555269E9F708EF79739290E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
Manifest number:          19E3
Signing time:             Tue 28 Jul 2026 16:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:11 +0000
Files and hashes:         1: 0xrZEj05nZklKXgoWScPIF2_55I.roa (hash: /xHv98UagMpY7p7/l707cOwppDtpfGRBySWTV/pX6Bo=)
                          2: 1MOxLI1jUZDskoQ3u9bLDow4-ak.crl (hash: 6qGxXb2V3KHtjYbHGBlYkuGkrHbmgNGVOvUbxcunuEk=)
                          3: 2_chmdN9KFFBZIvF9VY89f23PGs.roa (hash: oIVNlGlquIUtlwcT49BOjBM2tIxXAOLbTnaR8cakqIw=)
                          4: oSGKhwEc_oyA4GgI1H0hJOveCVI.roa (hash: 1SINNHx3FHxT/JXf8IpEHqdou86CS2g7FnWo+nB+dSQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:67:f2:15:55:26:9e:9f:70:8e:f7:97:39:29:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d4c3b12c8d635190ec928437bbd6cb0e8c38f9a9
        Validity
            Not Before: Jul 28 16:01:11 2026 GMT
            Not After : Jul 29 16:01:11 2026 GMT
        Subject: CN=52eea6dfe74a520627e34a1347a9bfa9f807e2fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:db:be:81:30:9a:ad:c1:f6:f9:3e:07:04:4c:
                    b3:7c:74:60:5b:d2:a4:9a:64:b1:73:b2:d3:96:81:
                    d9:a0:fd:a4:8c:da:b8:3b:13:d9:da:23:6a:3e:80:
                    49:bf:6c:fd:80:a6:72:3b:28:dc:03:7a:d5:ab:fb:
                    77:b3:c6:55:65:2e:6a:7a:d7:79:db:55:20:33:3a:
                    97:4f:1a:f6:30:39:f6:56:39:9d:23:12:bf:81:ad:
                    44:65:16:ca:ae:d4:13:1d:c8:e4:a9:c3:2c:b0:ff:
                    87:2a:55:29:dd:01:c7:f3:a6:55:04:46:bb:b5:8e:
                    2d:14:20:aa:f1:db:7f:35:90:30:a7:a2:d7:c4:a3:
                    3e:52:16:ff:f2:48:81:2c:74:84:26:73:f5:d7:22:
                    26:c8:a6:a8:93:42:d3:6c:03:07:ff:eb:fe:e7:08:
                    fd:95:9e:e5:d8:00:af:15:84:92:ad:2f:44:2c:95:
                    7b:ac:a2:41:d9:b4:48:40:14:f8:91:52:a2:60:99:
                    36:a6:09:29:1c:0e:fb:08:b9:d7:74:c6:32:92:84:
                    e0:d5:c3:f5:6c:ea:6f:10:09:2b:e4:a1:36:6b:cf:
                    e9:d9:6b:48:e9:bc:0a:1a:08:b3:ba:1b:a7:fc:ed:
                    2e:db:cc:cc:09:d0:94:b2:7e:be:6e:8c:53:b9:fb:
                    e1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EE:A6:DF:E7:4A:52:06:27:E3:4A:13:47:A9:BF:A9:F8:07:E2:FD
            X509v3 Authority Key Identifier:
                keyid:D4:C3:B1:2C:8D:63:51:90:EC:92:84:37:BB:D6:CB:0E:8C:38:F9:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1MOxLI1jUZDskoQ3u9bLDow4-ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb593-43f5-4db7-9819-0f9d57a5d4fa/1/1MOxLI1jUZDskoQ3u9bLDow4-ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:d3:e5:49:04:98:0b:16:6c:07:42:6f:45:be:d3:43:e8:30:
         d4:12:51:bd:d2:8d:53:92:24:8d:70:34:7c:89:b0:51:3b:8d:
         da:46:5d:9a:5b:3d:b7:ec:03:97:fc:8c:54:a4:e7:97:09:4c:
         3e:3f:78:d5:d6:04:02:1e:b3:64:82:9a:a3:3e:73:27:95:44:
         c0:aa:d7:b6:9f:14:88:36:4a:02:ba:70:59:e9:80:a4:85:e5:
         2f:08:db:0b:64:32:0c:05:1e:36:33:61:6d:11:e6:f4:c5:a3:
         f5:29:ee:b0:a2:55:08:00:4e:0b:0e:87:6f:e1:9d:d9:f8:1f:
         e8:d3:3b:f7:03:6e:fe:73:21:f0:95:85:4a:bf:7f:e0:91:c7:
         f6:bf:27:6e:e7:1d:29:2d:5e:cb:25:13:2f:ae:51:f2:64:b4:
         e1:a7:ed:11:07:aa:9a:18:bb:7c:88:49:f0:00:f1:d4:59:62:
         40:81:62:af:3c:81:9c:8f:3e:61:c3:4c:de:ad:57:bd:72:b5:
         17:af:fd:d8:bb:ed:b9:2b:b8:c1:d8:4f:c1:a3:7c:0d:5c:0a:
         0d:2e:81:ec:e7:ad:66:ae:30:ca:e5:0b:25:6f:1c:83:bc:fc:
         52:e9:d0:9c:e1:8f:b5:8b:f5:d7:c8:1d:34:ef:ba:da:4b:8e:
         f4:cd:e0:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdWfyFVUmnp9wjveXOSkOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0YzNiMTJjOGQ2MzUxOTBlYzkyODQzN2JiZDZjYjBlOGMz
OGY5YTkwHhcNMjYwNzI4MTYwMTExWhcNMjYwNzI5MTYwMTExWjAzMTEwLwYDVQQD
Eyg1MmVlYTZkZmU3NGE1MjA2MjdlMzRhMTM0N2E5YmZhOWY4MDdlMmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1du+gTCarcH2+T4HBEyzfHRgW9Kk
mmSxc7LTloHZoP2kjNq4OxPZ2iNqPoBJv2z9gKZyOyjcA3rVq/t3s8ZVZS5qetd5
21UgMzqXTxr2MDn2VjmdIxK/ga1EZRbKrtQTHcjkqcMssP+HKlUp3QHH86ZVBEa7
tY4tFCCq8dt/NZAwp6LXxKM+Uhb/8kiBLHSEJnP11yImyKaok0LTbAMH/+v+5wj9
lZ7l2ACvFYSSrS9ELJV7rKJB2bRIQBT4kVKiYJk2pgkpHA77CLnXdMYykoTg1cP1
bOpvEAkr5KE2a8/p2WtI6bwKGgizuhun/O0u28zMCdCUsn6+boxTufvhtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFLupt/nSlIGJ+NKE0epv6n4B+L9MB8GA1UdIwQY
MBaAFNTDsSyNY1GQ7JKEN7vWyw6MOPmpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTkt
MGY5ZDU3YTVkNGZhLzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZmI1OTMtNDNmNS00ZGI3LTk4MTktMGY5ZDU3YTVkNGZh
LzEvMU1PeExJMWpVWkRza29RM3U5YkxEb3c0LWFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNPlSQSY
CxZsB0JvRb7TQ+gw1BJRvdKNU5IkjXA0fImwUTuN2kZdmls9t+wDl/yMVKTnlwlM
Pj941dYEAh6zZIKaoz5zJ5VEwKrXtp8UiDZKArpwWemApIXlLwjbC2QyDAUeNjNh
bRHm9MWj9SnusKJVCABOCw6Hb+Gd2fgf6NM79wNu/nMh8JWFSr9/4JHH9r8nbucd
KS1eyyUTL65R8mS04aftEQeqmhi7fIhJ8ADx1FliQIFirzyBnI8+YcNM3q1XvXK1
F6/92LvtuSu4wdhPwaN8DVwKDS6B7OetZq4wyuULJW8cg7z8UunQnOGPtYv118gd
NO+62kuO9M3gNw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:04:19 2026 by rpki-client