Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
File:                     TsOgYsuW2aPyGostqEj4HG9zv5U.mft (raw, json)
Hash identifier:          hTdwdZ8fMIDCzBS2MQA63y0RGLJLJbQ2Bmkw84qrGCA=
Subject key identifier:   FB:74:0C:63:D7:09:BA:48:0F:2D:DE:E8:A3:9B:84:76:07:85:7B:3D
Authority key identifier: 4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95
Certificate issuer:       /CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
Certificate serial:       019FAB63C1AF9EFF8699089B338D8E72E67A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
Manifest number:          196F
Signing time:             Wed 29 Jul 2026 01:01:09 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:09 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:09 +0000
Files and hashes:         1: TsOgYsuW2aPyGostqEj4HG9zv5U.crl (hash: It7OHBSBfLp8ZB/cdv6lMvqUaLMr7YuY5zvgw9ALplY=)
                          2: cMSq_NcYXBjORlEeP54TeKaU-zc.roa (hash: AnKK7epayFvj9OjYad7fK2xMQOaLyQs9vYbQVKbmXI8=)
                          3: svmsZH4j3FCzPSNp-bJETBP8qzs.roa (hash: enOf8GhkIm48YbUB7aWnRSzpdWjW5NG5zxx4fZ/PPB4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:c1:af:9e:ff:86:99:08:9b:33:8d:8e:72:e6:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ec3a062cb96d9a3f21a8b2da848f81c6f73bf95
        Validity
            Not Before: Jul 29 01:01:09 2026 GMT
            Not After : Jul 30 01:01:09 2026 GMT
        Subject: CN=fb740c63d709ba480f2ddee8a39b847607857b3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:69:94:07:dc:89:f6:85:7a:26:30:cc:a5:ec:
                    4c:51:b0:cf:09:11:49:95:e6:0a:4b:b2:9c:a3:dd:
                    00:3f:89:a0:11:f7:b1:48:cf:7f:df:8b:53:79:fb:
                    73:73:73:cc:2b:3d:3a:72:5a:9e:9a:31:1a:3d:17:
                    00:05:a3:79:72:3a:7a:d0:0d:7f:8a:8c:fa:c1:c5:
                    91:0b:34:4d:96:09:d3:bf:d2:46:a0:2b:f5:73:be:
                    86:c5:c2:d0:1a:fd:d8:38:ab:e5:22:e0:4e:c1:7a:
                    e6:99:54:86:02:f2:14:e0:21:3a:06:bb:38:b3:68:
                    d5:a6:de:45:a4:42:ab:01:5a:1b:0d:ab:90:72:f0:
                    e0:1a:1e:39:08:15:61:9b:d6:1a:49:30:99:f8:c5:
                    e0:57:2d:a5:4c:ff:64:ef:9f:82:d6:58:0a:d3:25:
                    fc:8c:29:18:12:e1:f8:f4:42:81:03:c9:e8:8f:7a:
                    ab:71:0e:05:4a:03:bd:e4:bc:03:76:df:a9:dc:cb:
                    2f:a7:73:f8:3e:0c:90:b1:28:e6:ee:ff:06:15:95:
                    3b:a5:34:fd:e2:a1:b7:9a:ba:5b:5a:4e:a9:e0:49:
                    03:52:73:3b:ce:8e:ea:34:bf:a5:e3:3f:73:71:6d:
                    46:32:23:94:e5:da:a8:50:4b:d8:6b:5f:5f:c6:14:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:74:0C:63:D7:09:BA:48:0F:2D:DE:E8:A3:9B:84:76:07:85:7B:3D
            X509v3 Authority Key Identifier:
                keyid:4E:C3:A0:62:CB:96:D9:A3:F2:1A:8B:2D:A8:48:F8:1C:6F:73:BF:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TsOgYsuW2aPyGostqEj4HG9zv5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/786b51-e2df-4fd6-9c9b-f567c3e9f5ff/1/TsOgYsuW2aPyGostqEj4HG9zv5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5f:a4:80:10:8e:6c:18:7f:b8:1f:c6:50:af:fc:43:75:98:
         18:31:a2:68:93:aa:76:d5:d5:ee:05:d8:34:4a:e1:0f:a4:97:
         b0:eb:ca:89:35:48:fb:6c:1b:fa:63:f4:bb:c3:ad:bd:d6:a7:
         39:55:56:1a:0f:d6:b5:80:b0:1d:c2:b3:33:bf:77:66:e4:86:
         93:b7:1f:0e:8c:96:23:29:1d:a4:15:b7:a8:8a:1d:a7:55:95:
         83:b6:93:8c:2e:17:21:75:3f:e8:66:71:c7:35:d2:74:09:67:
         9b:15:88:c9:75:e7:a9:24:fa:ce:93:3c:a8:a2:fd:73:a6:c8:
         85:6d:2e:b1:50:0a:b1:32:5b:18:0a:c3:1c:b0:71:29:04:53:
         78:c1:f7:a0:7d:19:a1:f4:b3:8d:18:e4:43:3e:6f:19:ba:34:
         b1:09:a8:db:10:e8:f5:e9:14:d5:49:20:11:03:04:0a:2b:40:
         ab:84:90:15:18:0e:39:87:08:22:8e:15:43:23:af:f6:d7:99:
         76:30:70:93:9f:47:51:83:85:9f:1a:17:1f:99:42:59:3a:d4:
         f0:4a:fe:b5:a3:85:9f:58:2f:8e:21:f3:47:e9:0f:cc:c0:08:
         25:c6:c5:c6:d6:72:c9:b7:dd:1e:33:13:f5:ee:79:48:56:70:
         9c:55:f4:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY8Gvnv+GmQibM42OcuZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlYzNhMDYyY2I5NmQ5YTNmMjFhOGIyZGE4NDhmODFjNmY3
M2JmOTUwHhcNMjYwNzI5MDEwMTA5WhcNMjYwNzMwMDEwMTA5WjAzMTEwLwYDVQQD
EyhmYjc0MGM2M2Q3MDliYTQ4MGYyZGRlZThhMzliODQ3NjA3ODU3YjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA92mUB9yJ9oV6JjDMpexMUbDPCRFJ
leYKS7Kco90AP4mgEfexSM9/34tTeftzc3PMKz06clqemjEaPRcABaN5cjp60A1/
ioz6wcWRCzRNlgnTv9JGoCv1c76GxcLQGv3YOKvlIuBOwXrmmVSGAvIU4CE6Brs4
s2jVpt5FpEKrAVobDauQcvDgGh45CBVhm9YaSTCZ+MXgVy2lTP9k75+C1lgK0yX8
jCkYEuH49EKBA8noj3qrcQ4FSgO95LwDdt+p3Msvp3P4PgyQsSjm7v8GFZU7pTT9
4qG3mrpbWk6p4EkDUnM7zo7qNL+l4z9zcW1GMiOU5dqoUEvYa19fxhREfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt0DGPXCbpIDy3e6KObhHYHhXs9MB8GA1UdIwQY
MBaAFE7DoGLLltmj8hqLLahI+Bxvc7+VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWIt
ZjU2N2MzZTlmNWZmLzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi83ODZiNTEtZTJkZi00ZmQ2LTljOWItZjU2N2MzZTlmNWZm
LzEvVHNPZ1lzdVcyYVB5R29zdHFFajRIRzl6djVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAil+kgBCO
bBh/uB/GUK/8Q3WYGDGiaJOqdtXV7gXYNErhD6SXsOvKiTVI+2wb+mP0u8Otvdan
OVVWGg/WtYCwHcKzM793ZuSGk7cfDoyWIykdpBW3qIodp1WVg7aTjC4XIXU/6GZx
xzXSdAlnmxWIyXXnqST6zpM8qKL9c6bIhW0usVAKsTJbGArDHLBxKQRTeMH3oH0Z
ofSzjRjkQz5vGbo0sQmo2xDo9ekU1UkgEQMECitAq4SQFRgOOYcIIo4VQyOv9teZ
djBwk59HUYOFnxoXH5lCWTrU8Er+taOFn1gvjiHzR+kPzMAIJcbFxtZyybfdHjMT
9e55SFZwnFX0Qw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:23 2026 by rpki-client