Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
File:                     evZ3nmK0YSiH_m-NTpwONzH24Qg.mft (raw, json)
Hash identifier:          jJS9KwZlSf/HphPA+2iQ+/lT/KIzupnja3pF0uhjvic=
Subject key identifier:   B2:C1:D8:FB:4F:67:61:5C:7A:44:C4:18:57:A3:DD:B6:D5:40:8C:1E
Authority key identifier: 7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08
Certificate issuer:       /CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
Certificate serial:       019FAB63ED6EAE9AEF6927FF3E068061EEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
Manifest number:          19D6
Signing time:             Wed 29 Jul 2026 01:01:20 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:20 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:20 +0000
Files and hashes:         1: SSZdn02qDEwwqUSfTnOV3zXUcLo.roa (hash: y3a3/hKTKamWecmVmVYjV0+wFS3yke4xPMfZhOZPAII=)
                          2: WiOXXkvgTsUMJh2SB31kcxISa0I.roa (hash: Ug6Us7ZSr7Hic6TNnmKhB5WDJGEDtwfaBPHgJG/vxFQ=)
                          3: evZ3nmK0YSiH_m-NTpwONzH24Qg.crl (hash: Y6GwVxCx2xGjnCDUVmhSMjE2ctmd+EResNttbR4YIPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:ed:6e:ae:9a:ef:69:27:ff:3e:06:80:61:ee:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7af6779e62b4612887fe6f8d4e9c0e3731f6e108
        Validity
            Not Before: Jul 29 01:01:20 2026 GMT
            Not After : Jul 30 01:01:20 2026 GMT
        Subject: CN=b2c1d8fb4f67615c7a44c41857a3ddb6d5408c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:f7:31:b6:72:33:7a:07:31:b2:81:ca:61:
                    2a:2e:18:8c:a2:53:f3:29:cc:2c:16:94:3e:1d:1e:
                    d2:aa:64:bd:b2:ce:4e:c5:22:77:5d:c7:c8:3d:68:
                    ec:8f:b7:17:b1:da:45:ac:80:66:ef:d6:ee:e4:6a:
                    d8:74:13:5c:a8:18:e8:cd:f3:c9:e2:70:2c:cd:eb:
                    f8:f0:89:76:de:60:0c:95:44:89:10:7a:08:f4:5c:
                    34:7e:8b:f0:30:a0:d1:83:92:15:da:75:51:dc:16:
                    78:ab:e9:f6:9f:f6:49:a4:3e:8e:b2:eb:ad:64:ab:
                    4d:0c:81:d6:28:1a:a7:bd:46:db:d0:71:ee:0b:92:
                    51:f8:da:32:bb:82:82:58:26:73:08:0e:bc:5a:87:
                    c8:11:ec:0b:3c:4f:26:fc:29:16:0b:4a:45:6d:69:
                    9f:95:e4:ad:d7:c6:24:41:93:b8:b5:32:34:f4:e7:
                    74:5a:72:c8:97:b2:35:53:d4:45:83:a2:74:6b:35:
                    5e:16:3c:39:3a:6f:39:61:b4:22:28:95:38:b1:df:
                    bb:5f:59:bd:d9:ab:01:04:73:f1:16:12:60:97:a0:
                    5a:9c:37:b9:41:53:fd:26:cc:a3:23:00:93:0a:87:
                    e0:d6:e3:15:ff:2f:55:89:08:43:ba:a0:95:72:16:
                    eb:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C1:D8:FB:4F:67:61:5C:7A:44:C4:18:57:A3:DD:B6:D5:40:8C:1E
            X509v3 Authority Key Identifier:
                keyid:7A:F6:77:9E:62:B4:61:28:87:FE:6F:8D:4E:9C:0E:37:31:F6:E1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/evZ3nmK0YSiH_m-NTpwONzH24Qg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/30b124-87f2-4c7a-bc0e-790775c779c5/1/evZ3nmK0YSiH_m-NTpwONzH24Qg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:3e:8f:7f:8c:df:f1:7c:c2:48:58:aa:b6:e9:ec:51:57:59:
         32:fe:d7:c4:5c:47:f6:18:83:b5:fc:d9:2b:a1:6a:8e:8b:de:
         b3:45:1c:24:bf:b0:21:b3:d7:95:68:56:25:2d:26:21:ae:6f:
         79:6d:f7:8c:3a:f0:44:df:16:8d:ba:62:3d:5f:ff:1e:0a:08:
         db:ea:db:d4:4c:4e:d0:a7:a3:8e:18:e3:da:d9:13:a8:51:3c:
         d5:bd:d3:39:5d:f4:32:4d:f6:35:9d:de:27:3b:bd:17:28:12:
         eb:32:9a:fd:a8:6c:83:8f:98:19:b3:c8:54:61:f3:ef:bc:96:
         e0:83:e3:ad:b1:96:e9:19:81:86:65:90:1c:2b:0e:e0:39:e8:
         61:98:50:6d:0e:ff:ae:89:15:11:e0:9f:4f:b8:9d:0b:f8:1f:
         87:b2:63:f2:ee:bd:87:0d:8b:ed:81:ff:e9:f3:de:72:eb:e8:
         1d:f0:56:4d:32:27:3e:82:00:7a:26:24:e1:97:ec:e3:b6:f5:
         34:97:77:58:4b:ee:66:90:af:84:2b:b2:d3:6a:d2:d6:fb:7f:
         a8:eb:8e:20:ee:ca:a8:9a:ee:b3:84:08:7d:e6:22:b8:d3:d2:
         f3:99:0e:52:df:94:17:db:8e:09:fa:85:10:15:89:2d:aa:44:
         6e:dd:d9:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY+1urprvaSf/PgaAYe7gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhZjY3NzllNjJiNDYxMjg4N2ZlNmY4ZDRlOWMwZTM3MzFm
NmUxMDgwHhcNMjYwNzI5MDEwMTIwWhcNMjYwNzMwMDEwMTIwWjAzMTEwLwYDVQQD
EyhiMmMxZDhmYjRmNjc2MTVjN2E0NGM0MTg1N2EzZGRiNmQ1NDA4YzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj/3MbZyM3oHMbKBymEqLhiMolPz
KcwsFpQ+HR7SqmS9ss5OxSJ3XcfIPWjsj7cXsdpFrIBm79bu5GrYdBNcqBjozfPJ
4nAszev48Il23mAMlUSJEHoI9Fw0fovwMKDRg5IV2nVR3BZ4q+n2n/ZJpD6Osuut
ZKtNDIHWKBqnvUbb0HHuC5JR+Noyu4KCWCZzCA68WofIEewLPE8m/CkWC0pFbWmf
leSt18YkQZO4tTI09Od0WnLIl7I1U9RFg6J0azVeFjw5Om85YbQiKJU4sd+7X1m9
2asBBHPxFhJgl6BanDe5QVP9JsyjIwCTCofg1uMV/y9ViQhDuqCVchbr6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLLB2PtPZ2FcekTEGFej3bbVQIweMB8GA1UdIwQY
MBaAFHr2d55itGEoh/5vjU6cDjcx9uEIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUt
NzkwNzc1Yzc3OWM1LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS8zMGIxMjQtODdmMi00YzdhLWJjMGUtNzkwNzc1Yzc3OWM1
LzEvZXZaM25tSzBZU2lIX20tTlRwd09OekgyNFFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKD6Pf4zf
8XzCSFiqtunsUVdZMv7XxFxH9hiDtfzZK6Fqjoves0UcJL+wIbPXlWhWJS0mIa5v
eW33jDrwRN8WjbpiPV//HgoI2+rb1ExO0Kejjhjj2tkTqFE81b3TOV30Mk32NZ3e
Jzu9FygS6zKa/ahsg4+YGbPIVGHz77yW4IPjrbGW6RmBhmWQHCsO4DnoYZhQbQ7/
rokVEeCfT7idC/gfh7Jj8u69hw2L7YH/6fPecuvoHfBWTTInPoIAeiYk4Zfs47b1
NJd3WEvuZpCvhCuy02rS1vt/qOuOIO7KqJrus4QIfeYiuNPS85kOUt+UF9uOCfqF
EBWJLapEbt3Zcg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:48:08 2026 by rpki-client