Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
File:                     adXUUqjtU1KH_rNlFLyHwCI1WkM.mft (raw, json)
Hash identifier:          9b5tGzuPHDDkibOqeAvoki1oi1dzHkzxqpPxTbZ13WE=
Subject key identifier:   63:D0:D4:FB:A9:15:F2:AC:9B:7A:82:95:41:82:94:2B:C0:0D:1E:F4
Authority key identifier: 69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43
Certificate issuer:       /CN=69d5d452a8ed535287feb36514bc87c022355a43
Certificate serial:       019FAABEB8733C4392D533B8B23537A2C394
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
Manifest number:          19D5
Signing time:             Tue 28 Jul 2026 22:00:53 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:53 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:53 +0000
Files and hashes:         1: adXUUqjtU1KH_rNlFLyHwCI1WkM.crl (hash: rdAXaVhjKEtoTB6xHvtOv38++XwqSTY6o4hm9FDnDJg=)
                          2: c7nHfsLGVr2Hpf16MebsVtcpfOw.roa (hash: E4vHcrI652reSIpSis98/0RensPsP0hINBPiLEQ2aFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:b8:73:3c:43:92:d5:33:b8:b2:35:37:a2:c3:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69d5d452a8ed535287feb36514bc87c022355a43
        Validity
            Not Before: Jul 28 22:00:53 2026 GMT
            Not After : Jul 29 22:00:53 2026 GMT
        Subject: CN=63d0d4fba915f2ac9b7a82954182942bc00d1ef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:af:dc:93:89:d9:5a:0e:4b:bb:7a:97:17:65:
                    2a:a2:85:8f:5c:e0:04:fb:81:e9:c0:92:9d:f7:13:
                    e4:00:6c:e0:4b:97:07:06:b7:23:fa:e8:ab:94:48:
                    36:95:bd:66:b6:2c:f8:ee:68:6e:1c:53:3b:64:dc:
                    31:98:df:ca:1e:8d:ac:bd:1f:99:6a:54:dd:7c:98:
                    39:1f:5a:9f:a9:93:b5:9e:16:16:68:04:7b:79:f9:
                    7c:f3:a7:e2:b1:7b:2d:7e:d4:92:51:b4:2a:73:98:
                    7c:9d:7f:d1:56:9d:25:d0:d4:bc:c6:12:1e:69:52:
                    d4:e3:39:36:85:ec:6e:0d:85:92:f5:12:c7:97:1d:
                    5c:4d:ad:70:28:b6:75:1d:af:fe:15:f9:50:b6:1f:
                    63:11:ae:6d:56:b4:19:14:42:0c:37:c1:6d:58:40:
                    0b:75:af:f8:49:ee:5f:69:dd:1e:dd:77:3a:f8:88:
                    d4:6b:ce:0a:72:f4:eb:8d:7e:cf:b1:73:35:3b:9b:
                    d8:a3:6a:32:a2:16:8c:10:57:cc:1c:af:54:fd:64:
                    44:e3:fe:a8:e3:2c:76:15:96:b7:cd:86:59:8e:94:
                    3d:41:46:49:da:64:c2:79:88:de:a3:f0:84:3d:be:
                    ea:15:06:91:91:07:7d:09:a7:40:68:80:87:b5:05:
                    cd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:D0:D4:FB:A9:15:F2:AC:9B:7A:82:95:41:82:94:2B:C0:0D:1E:F4
            X509v3 Authority Key Identifier:
                keyid:69:D5:D4:52:A8:ED:53:52:87:FE:B3:65:14:BC:87:C0:22:35:5A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adXUUqjtU1KH_rNlFLyHwCI1WkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/8e88a7-0232-4055-a5cf-dd9443579ed5/1/adXUUqjtU1KH_rNlFLyHwCI1WkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:61:8d:ba:27:11:2f:f0:4f:92:22:43:c3:b6:81:cd:8c:37:
         ce:fe:36:00:d0:25:6f:bd:63:84:93:2b:6f:38:c5:0f:92:e7:
         1c:c8:35:9d:e6:b1:4e:16:60:9d:5b:46:35:d8:87:f8:c5:4c:
         9a:8d:d1:bd:98:7f:d8:55:e6:b7:da:83:00:cd:54:53:db:45:
         8a:33:49:97:30:08:4e:f7:d4:ce:63:3e:52:48:c9:10:a3:5f:
         32:0d:21:4c:3d:f2:77:23:2c:66:73:c4:7a:8a:e5:b7:64:4f:
         c2:46:c1:cc:77:33:f8:48:8b:d0:fb:eb:b3:e5:cc:d9:57:ef:
         3c:98:60:af:3d:85:ce:1a:20:95:4d:4f:1b:20:59:2a:31:00:
         d1:de:d1:c4:59:24:dc:a0:55:54:e8:0b:95:da:64:6d:03:95:
         ac:f1:3b:1e:20:ce:22:64:01:ce:0e:63:8a:6c:76:a3:75:76:
         38:16:cb:fc:80:29:a6:27:c6:8c:f9:7d:b1:02:88:f2:eb:37:
         c9:0b:d0:9d:42:49:b6:4c:22:1a:80:c2:2a:16:bd:10:ba:f8:
         76:79:57:b4:30:bf:b2:2e:2b:87:8d:be:43:7a:e2:ca:df:46:
         e9:e9:56:dc:b9:0b:f5:1b:21:f5:e5:42:4e:6a:47:56:07:cd:
         4e:e8:f6:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvrhzPEOS1TO4sjU3osOUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDVkNDUyYThlZDUzNTI4N2ZlYjM2NTE0YmM4N2MwMjIz
NTVhNDMwHhcNMjYwNzI4MjIwMDUzWhcNMjYwNzI5MjIwMDUzWjAzMTEwLwYDVQQD
Eyg2M2QwZDRmYmE5MTVmMmFjOWI3YTgyOTU0MTgyOTQyYmMwMGQxZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvK/ck4nZWg5Lu3qXF2UqooWPXOAE
+4HpwJKd9xPkAGzgS5cHBrcj+uirlEg2lb1mtiz47mhuHFM7ZNwxmN/KHo2svR+Z
alTdfJg5H1qfqZO1nhYWaAR7efl886fisXstftSSUbQqc5h8nX/RVp0l0NS8xhIe
aVLU4zk2hexuDYWS9RLHlx1cTa1wKLZ1Ha/+FflQth9jEa5tVrQZFEIMN8FtWEAL
da/4Se5fad0e3Xc6+IjUa84KcvTrjX7PsXM1O5vYo2oyohaMEFfMHK9U/WRE4/6o
4yx2FZa3zYZZjpQ9QUZJ2mTCeYjeo/CEPb7qFQaRkQd9CadAaICHtQXN+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPQ1PupFfKsm3qClUGClCvADR70MB8GA1UdIwQY
MBaAFGnV1FKo7VNSh/6zZRS8h8AiNVpDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2Yt
ZGQ5NDQzNTc5ZWQ1LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS84ZTg4YTctMDIzMi00MDU1LWE1Y2YtZGQ5NDQzNTc5ZWQ1
LzEvYWRYVVVxanRVMUtIX3JObEZMeUh3Q0kxV2tNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR2GNuicR
L/BPkiJDw7aBzYw3zv42ANAlb71jhJMrbzjFD5LnHMg1neaxThZgnVtGNdiH+MVM
mo3RvZh/2FXmt9qDAM1UU9tFijNJlzAITvfUzmM+UkjJEKNfMg0hTD3ydyMsZnPE
eorlt2RPwkbBzHcz+EiL0Pvrs+XM2VfvPJhgrz2FzhoglU1PGyBZKjEA0d7RxFkk
3KBVVOgLldpkbQOVrPE7HiDOImQBzg5jimx2o3V2OBbL/IAppifGjPl9sQKI8us3
yQvQnUJJtkwiGoDCKha9ELr4dnlXtDC/si4rh42+Q3riyt9G6elW3LkL9Rsh9eVC
TmpHVgfNTuj23w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:07:17 2026 by rpki-client