Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File:                     S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier:          N2XmJBBdFk2MYDiRdEfTtFbqRFaIAXA7vQlQsOtkTPA=
Subject key identifier:   D8:16:DC:28:D8:7F:49:DB:91:0F:B6:94:35:F0:FD:81:54:E8:96:67
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer:       /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial:       019FAB2C561A7735427389AA66C2F4744EE4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number:          19F6
Signing time:             Wed 29 Jul 2026 00:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:37 +0000
Files and hashes:         1: 3Vx1cnLpiAfNCzWy0I3_nXPcC9M.roa (hash: p+noQvGX+yQD2XLqg2x5Tru3ct/yVQ6G5E/ulPipjjA=)
                          2: H-3bQ-7Lc-BNSgANmO6MHSsPLSs.roa (hash: F2USW61FAReCMbWyEgVR2l80hK+ZfBgaE66ET3G7sBk=)
                          3: PQkXJQC844XrblWqXSwmAqWUi64.roa (hash: 2cLFr6U2XYR9sr+N19r2/hYJ/Yi/7BSVRT7pLcifiQg=)
                          4: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: ad5dPUEaJhSn1Lekw4kw8H3fE9oEnzOkPm3lvyaMfTw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:56:1a:77:35:42:73:89:aa:66:c2:f4:74:4e:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
        Validity
            Not Before: Jul 29 00:00:37 2026 GMT
            Not After : Jul 30 00:00:37 2026 GMT
        Subject: CN=d816dc28d87f49db910fb69435f0fd8154e89667
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c8:1f:32:f4:71:3b:5d:9d:c9:9d:99:cd:14:
                    7e:1f:90:44:98:b2:6f:38:d8:e8:5b:df:9b:66:96:
                    a9:41:ec:fa:45:de:dd:de:81:44:c5:7b:57:13:93:
                    26:26:10:c9:73:d0:02:20:4b:01:32:93:4f:cc:9c:
                    c5:26:1f:88:c9:54:a0:aa:ca:ce:bd:2e:ed:31:6a:
                    d9:0a:02:ce:38:75:26:a8:b9:21:d5:4f:8c:90:67:
                    bc:11:05:b5:98:4f:72:ae:47:7e:07:eb:f4:06:83:
                    c3:44:99:42:df:c3:e3:ae:ea:1a:64:6e:36:5a:21:
                    ec:52:a4:6a:b2:c7:83:9f:3c:ba:39:00:2e:a9:6c:
                    3e:bb:46:40:3f:66:35:83:6b:66:ab:9d:dd:2f:dc:
                    d2:99:0c:48:56:7a:cb:c2:94:05:8e:4b:96:3d:a3:
                    4a:b5:96:f5:22:18:2f:26:78:d7:19:f7:3a:cf:63:
                    f9:27:06:bf:ea:7b:39:43:9e:bf:79:5d:69:bc:e5:
                    10:ed:9f:95:b9:43:bc:0e:a1:21:84:f8:e2:ca:32:
                    fe:ec:72:c3:aa:58:4a:c9:16:45:fe:b2:95:b9:36:
                    64:57:fd:4d:33:ea:66:16:94:96:50:6a:dc:46:f1:
                    d3:a7:bd:44:26:e1:57:98:84:ad:cd:8a:82:0b:09:
                    ca:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:16:DC:28:D8:7F:49:DB:91:0F:B6:94:35:F0:FD:81:54:E8:96:67
            X509v3 Authority Key Identifier:
                keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:5b:53:c1:20:cc:84:3b:23:28:7c:74:01:0c:80:13:b5:c2:
         a4:53:a5:b0:26:85:6d:46:86:00:5e:98:e8:aa:72:d4:84:21:
         6d:24:7e:ac:17:72:b4:7f:29:67:ac:6d:38:58:45:ae:94:50:
         c8:61:bf:42:dc:41:96:b5:3d:6b:15:85:4b:b5:b1:41:2b:13:
         a2:9d:53:ee:ae:e2:d2:a9:79:17:d5:4c:c8:a3:12:28:46:9c:
         a2:07:79:42:e9:11:0c:6e:76:80:d1:bd:3c:a0:40:83:3b:0c:
         c6:c1:73:89:9c:14:ca:60:f2:de:06:51:42:93:bc:dc:c0:22:
         e2:78:03:4e:53:04:af:97:33:84:a0:b1:42:0f:26:ec:21:44:
         41:b8:a0:db:89:d8:d5:74:ca:c1:e4:0a:6f:90:17:96:3a:e2:
         ea:f7:2d:d5:45:c7:36:a6:2e:20:2d:45:5c:32:71:a9:72:7e:
         b7:d3:30:9f:91:c8:3d:91:b3:1e:55:b1:c3:ab:93:ed:20:fd:
         e2:5c:19:10:86:fb:1f:9d:52:84:b4:3c:b7:3f:31:1c:93:59:
         32:85:7d:91:22:cc:c2:e8:95:62:97:a8:14:84:37:73:79:76:
         a4:ad:d1:80:97:af:3e:b2:93:66:07:d7:ab:d3:c5:70:90:85:
         41:ab:42:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLFYadzVCc4mqZsL0dE7kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNDhjZjE0NmI0YzczZDI3NDA5NmQ3MDU3MDhkMjRiNzI5
MzI5ZjgwHhcNMjYwNzI5MDAwMDM3WhcNMjYwNzMwMDAwMDM3WjAzMTEwLwYDVQQD
EyhkODE2ZGMyOGQ4N2Y0OWRiOTEwZmI2OTQzNWYwZmQ4MTU0ZTg5NjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sgfMvRxO12dyZ2ZzRR+H5BEmLJv
ONjoW9+bZpapQez6Rd7d3oFExXtXE5MmJhDJc9ACIEsBMpNPzJzFJh+IyVSgqsrO
vS7tMWrZCgLOOHUmqLkh1U+MkGe8EQW1mE9yrkd+B+v0BoPDRJlC38PjruoaZG42
WiHsUqRqsseDnzy6OQAuqWw+u0ZAP2Y1g2tmq53dL9zSmQxIVnrLwpQFjkuWPaNK
tZb1IhgvJnjXGfc6z2P5Jwa/6ns5Q56/eV1pvOUQ7Z+VuUO8DqEhhPjiyjL+7HLD
qlhKyRZF/rKVuTZkV/1NM+pmFpSWUGrcRvHTp71EJuFXmIStzYqCCwnKSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgW3CjYf0nbkQ+2lDXw/YFU6JZnMB8GA1UdIwQY
MBaAFEtIzxRrTHPSdAltcFcI0ktykyn4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMt
NjRhNmEwNWI5OTA1LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi8zYmJiNTItMzkzZS00NzYyLWE3MGMtNjRhNmEwNWI5OTA1
LzEvUzBqUEZHdE1jOUowQ1cxd1Z3alNTM0tUS2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPltTwSDM
hDsjKHx0AQyAE7XCpFOlsCaFbUaGAF6Y6Kpy1IQhbSR+rBdytH8pZ6xtOFhFrpRQ
yGG/QtxBlrU9axWFS7WxQSsTop1T7q7i0ql5F9VMyKMSKEacogd5QukRDG52gNG9
PKBAgzsMxsFziZwUymDy3gZRQpO83MAi4ngDTlMEr5czhKCxQg8m7CFEQbig24nY
1XTKweQKb5AXljri6vct1UXHNqYuIC1FXDJxqXJ+t9Mwn5HIPZGzHlWxw6uT7SD9
4lwZEIb7H51ShLQ8tz8xHJNZMoV9kSLMwuiVYpeoFIQ3c3l2pK3RgJevPrKTZgfX
q9PFcJCFQatCzA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:21:21 2026 by rpki-client