Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
File:                     1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft (raw, json)
Hash identifier:          F1QlDPryYK2F1kSm3Oh4UZ4dbUBcoag/PUs8yu9t4zw=
Subject key identifier:   DA:D8:DD:49:5D:45:81:88:2B:FA:9F:57:E6:93:99:15:80:66:0D:B0
Authority key identifier: D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0
Certificate issuer:       /CN=d44bd5653013fa7ca34f52284309a688b249e7a0
Certificate serial:       019FAB6300A421B234D58F2F1D43B905D539
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 01:00:19 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:19 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:19 +0000
Files and hashes:         1: 1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl (hash: /tuzdVAsSqIG5TSDXmqPeKYyjbrwYrsJt3RyPB8j28Q=)
                          2: DyBrkSK4a6M3RlwftQhSDaHeKfM.roa (hash: h4xKh81GTCFolaSYT7/bVgNQm45KFUeIOt1K9PqX3Yc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:00:a4:21:b2:34:d5:8f:2f:1d:43:b9:05:d5:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d44bd5653013fa7ca34f52284309a688b249e7a0
        Validity
            Not Before: Jul 29 01:00:19 2026 GMT
            Not After : Jul 30 01:00:19 2026 GMT
        Subject: CN=dad8dd495d4581882bfa9f57e693991580660db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7b:2f:89:23:30:da:42:b8:89:f7:61:a2:23:
                    ae:8c:40:b7:1e:eb:c5:63:95:2e:1e:8c:b5:3b:ed:
                    91:03:a8:4b:73:44:09:01:63:94:7c:88:e3:0d:69:
                    6b:0c:b6:c2:fb:e2:52:79:49:55:6a:ce:f8:57:04:
                    dc:c2:71:f5:59:13:77:a9:c5:08:85:25:cd:bf:32:
                    50:86:e7:36:ba:86:a1:3f:71:03:42:82:7f:8a:bb:
                    74:eb:b0:dc:ea:44:75:00:3d:2d:f7:42:8c:6b:67:
                    07:c4:25:ef:2d:a5:0f:32:60:fd:14:31:2a:f3:b5:
                    37:86:66:0f:84:7c:8f:82:68:06:ce:6e:39:ed:99:
                    f3:f2:2c:69:27:84:8b:48:0e:2c:c2:3f:07:1d:43:
                    1b:85:12:1f:ff:da:af:43:84:ec:43:75:1f:82:b8:
                    21:01:3e:21:70:ff:60:15:72:85:63:5e:f0:fb:8b:
                    db:1c:97:68:f5:0a:99:de:32:3f:2b:83:f5:a2:b2:
                    8c:20:22:db:99:a7:d2:2c:40:78:0d:27:63:ce:ee:
                    a9:ee:be:60:16:fe:9b:30:e3:8d:4f:e2:a3:b7:5a:
                    8a:10:84:df:5e:a5:df:ae:d5:b4:6f:c5:c6:31:9a:
                    d5:8c:2d:23:c8:8e:99:f5:9f:be:48:ae:77:60:80:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D8:DD:49:5D:45:81:88:2B:FA:9F:57:E6:93:99:15:80:66:0D:B0
            X509v3 Authority Key Identifier:
                keyid:D4:4B:D5:65:30:13:FA:7C:A3:4F:52:28:43:09:A6:88:B2:49:E7:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EvVZTAT-nyjT1IoQwmmiLJJ56A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9a3f9b-1b87-4855-ba3c-b5012662020d/1/1EvVZTAT-nyjT1IoQwmmiLJJ56A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:dc:84:47:89:7f:86:97:43:20:9e:1e:b8:93:83:9a:11:48:
         4e:7f:58:d0:ac:8b:d0:63:c7:66:a2:29:8d:62:d7:c8:bc:07:
         3b:8d:7c:2c:84:ca:5a:d8:b4:2e:48:7e:19:5b:15:cb:34:c6:
         6c:fc:ab:54:10:91:e3:59:ed:f4:71:5f:58:aa:7c:56:fe:bf:
         67:66:ff:9d:c9:a8:44:2d:80:a9:47:5c:80:78:4d:2a:ac:56:
         60:6f:c6:68:a9:c5:db:30:eb:60:aa:ed:2c:e1:0b:b9:09:16:
         35:19:aa:0d:3b:80:fd:71:90:03:20:62:e2:ff:67:66:b1:d1:
         39:48:1d:9d:25:07:82:b1:f6:05:e2:b4:7a:76:f4:30:86:18:
         04:ae:cc:43:bf:2c:74:48:e8:21:f7:5b:e6:a5:25:04:80:6e:
         f9:89:db:38:e0:5b:f4:03:06:e9:1a:15:73:36:45:ea:74:a7:
         d2:d1:cf:de:b2:5e:94:e7:26:e5:79:44:48:4f:f4:4f:50:dc:
         a2:19:e0:d1:d5:65:2d:51:78:23:90:cb:20:67:ac:00:47:23:
         b4:d9:02:07:e6:91:58:e4:58:1d:5b:b6:3a:db:37:94:2e:53:
         84:bf:db:47:8e:3a:be:b0:c0:b4:4f:5f:c3:81:0c:0b:b6:43:
         a7:00:e2:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYwCkIbI01Y8vHUO5BdU5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NGJkNTY1MzAxM2ZhN2NhMzRmNTIyODQzMDlhNjg4YjI0
OWU3YTAwHhcNMjYwNzI5MDEwMDE5WhcNMjYwNzMwMDEwMDE5WjAzMTEwLwYDVQQD
EyhkYWQ4ZGQ0OTVkNDU4MTg4MmJmYTlmNTdlNjkzOTkxNTgwNjYwZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnsviSMw2kK4ifdhoiOujEC3HuvF
Y5UuHoy1O+2RA6hLc0QJAWOUfIjjDWlrDLbC++JSeUlVas74VwTcwnH1WRN3qcUI
hSXNvzJQhuc2uoahP3EDQoJ/irt067Dc6kR1AD0t90KMa2cHxCXvLaUPMmD9FDEq
87U3hmYPhHyPgmgGzm457Znz8ixpJ4SLSA4swj8HHUMbhRIf/9qvQ4TsQ3Ufgrgh
AT4hcP9gFXKFY17w+4vbHJdo9QqZ3jI/K4P1orKMICLbmafSLEB4DSdjzu6p7r5g
Fv6bMOONT+Kjt1qKEITfXqXfrtW0b8XGMZrVjC0jyI6Z9Z++SK53YICJFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrY3UldRYGIK/qfV+aTmRWAZg2wMB8GA1UdIwQY
MBaAFNRL1WUwE/p8o09SKEMJpoiySeegMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2Mt
YjUwMTI2NjIwMjBkLzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YTNmOWItMWI4Ny00ODU1LWJhM2MtYjUwMTI2NjIwMjBk
LzEvMUV2VlpUQVQtbnlqVDFJb1F3bW1pTEpKNTZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA29yER4l/
hpdDIJ4euJODmhFITn9Y0KyL0GPHZqIpjWLXyLwHO418LITKWti0Lkh+GVsVyzTG
bPyrVBCR41nt9HFfWKp8Vv6/Z2b/ncmoRC2AqUdcgHhNKqxWYG/GaKnF2zDrYKrt
LOELuQkWNRmqDTuA/XGQAyBi4v9nZrHROUgdnSUHgrH2BeK0enb0MIYYBK7MQ78s
dEjoIfdb5qUlBIBu+YnbOOBb9AMG6RoVczZF6nSn0tHP3rJelOcm5XlESE/0T1Dc
ohng0dVlLVF4I5DLIGesAEcjtNkCB+aRWORYHVu2Ots3lC5ThL/bR446vrDAtE9f
w4EMC7ZDpwDi8w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:05:04 2026 by rpki-client