Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
File:                     j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft (raw, json)
Hash identifier:          5PlVQHmdq/Z5KwwsmdAkXvp64SVqA8AhijFRSPuMhC8=
Subject key identifier:   3B:AC:30:E4:6D:74:37:08:75:85:75:05:73:03:10:01:C2:45:DC:7B
Authority key identifier: 8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1
Certificate issuer:       /CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
Certificate serial:       019FA9E2832717DAF5C3DDA7C3083632C544
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
Manifest number:          19EA
Signing time:             Tue 28 Jul 2026 18:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:21 +0000
Files and hashes:         1: 41oXR0Dcl8hEJOhB0K8Qrklv49c.roa (hash: TTWK0RRIlbuhKut+ATLmSdEPI+QN808VYnN7Vid5qyQ=)
                          2: Dv951AUIUaLuX0MPAgSurBs_Q4o.roa (hash: 3zxZnskXEXOtDhz+ouG2z/QdauveqbNwr6CiV/4QdDc=)
                          3: K9WiUPnzKMk0kTn3YOAAeGsJ3EI.roa (hash: dUaZk3IlcqCI85S/6UCtSKIbamHpI107QQx2h8oykGA=)
                          4: LxOq1v5UAj3ExgdR-fIgrMVK-BY.roa (hash: /x4igD0ebKYVQZig1vtn+O0OtoMkLAFpYnPG8GiLvWI=)
                          5: U-2sblCAHu3qIKD-Lrud2Vu1jU0.roa (hash: QBCXbXwqQu101TJcQB50Hnn/s+aowNHvXExjcnPeLEI=)
                          6: j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl (hash: YwDvgV5r/WpOfEhPdRx6tGnemXF8F2E97pWFs3KI+k4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:83:27:17:da:f5:c3:dd:a7:c3:08:36:32:c5:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f4669216a2078cb024231f4632eab4da7ee4bc1
        Validity
            Not Before: Jul 28 18:00:21 2026 GMT
            Not After : Jul 29 18:00:21 2026 GMT
        Subject: CN=3bac30e46d7437087585750573031001c245dc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:43:16:15:5a:ab:00:80:9b:39:58:0f:60:d8:
                    e4:28:21:42:0d:15:53:e0:49:ae:e4:65:68:58:27:
                    c9:e5:97:8c:06:0d:f9:70:1a:72:b0:0f:a2:19:fb:
                    23:c4:1a:ad:1e:b9:b5:48:5c:be:1d:cf:14:8c:62:
                    ab:d9:51:0b:00:c2:d6:fe:3c:a9:f3:af:9b:d6:29:
                    b8:b3:d4:c3:42:35:61:21:54:a7:3b:d6:78:d0:dd:
                    10:a5:3f:97:2f:d8:47:00:9e:73:8e:50:01:0a:87:
                    86:0c:17:f2:ea:64:64:8b:9a:e2:63:18:5d:33:e5:
                    e0:2a:c2:f9:bb:34:16:f5:20:ff:d9:e9:c3:e2:d4:
                    4e:19:5a:4c:83:ba:33:a6:4d:87:a4:5a:d6:88:66:
                    d8:f9:9a:b0:92:69:28:e7:63:ca:9c:c3:51:68:c3:
                    0c:51:a3:ff:e4:c4:e1:e9:60:7a:07:f1:e5:75:fd:
                    e1:3a:8b:99:95:25:34:0d:d0:3d:b5:18:1d:04:70:
                    a1:11:cb:38:83:ff:19:9c:07:c6:1e:06:c6:89:d6:
                    da:be:72:3c:bd:7d:26:ee:0a:dd:42:08:53:fb:41:
                    bf:0e:a1:37:65:93:27:5c:0b:bf:f7:c7:0e:83:3f:
                    61:31:91:17:e1:9b:83:f8:59:53:9b:19:7b:ae:44:
                    76:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AC:30:E4:6D:74:37:08:75:85:75:05:73:03:10:01:C2:45:DC:7B
            X509v3 Authority Key Identifier:
                keyid:8F:46:69:21:6A:20:78:CB:02:42:31:F4:63:2E:AB:4D:A7:EE:4B:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j0ZpIWogeMsCQjH0Yy6rTafuS8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/da48e2-ff63-4bcd-82a2-d7b8eb4608e2/1/j0ZpIWogeMsCQjH0Yy6rTafuS8E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:14:b1:22:2a:a3:b7:2e:89:1d:ac:68:1b:c1:b5:09:4b:ae:
         50:81:5f:5c:54:7e:ee:91:78:45:4f:0b:73:a7:f2:22:9c:97:
         6f:7e:f5:e9:31:7c:17:b3:ef:df:45:00:7d:29:fc:c3:cd:33:
         51:89:61:56:94:76:31:a6:14:38:18:45:85:f1:15:72:d8:02:
         56:c4:1b:e3:5b:8d:09:c4:b9:56:c7:8a:ff:d4:16:6f:65:af:
         61:68:2b:ac:ca:3d:b2:7a:2c:5e:08:85:0a:99:ec:dd:f5:60:
         1d:aa:f6:94:e2:9b:71:d9:d6:c5:26:81:38:80:1e:32:e0:f8:
         a2:bd:97:46:95:59:2f:8f:3a:1c:a4:c2:47:71:1d:7f:dd:59:
         7e:03:d5:95:a4:db:75:b2:ee:e6:0c:ba:00:86:58:c0:75:dd:
         0b:94:c5:ac:7e:f4:06:61:a2:08:f2:d8:e8:b2:49:e1:60:60:
         41:22:f5:a6:ad:d2:75:72:68:10:80:f0:0f:f1:58:6f:27:5b:
         13:03:3d:fe:0d:1d:e9:7b:7f:e1:9b:0f:75:70:e3:89:37:58:
         f3:82:46:a7:40:aa:41:ed:ff:90:e8:5c:b7:43:5c:a0:4d:76:
         b9:59:8b:ba:b9:96:97:6d:9f:06:4d:ed:71:39:34:e6:9c:cb:
         77:4b:2b:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4oMnF9r1w92nwwg2MsVEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNDY2OTIxNmEyMDc4Y2IwMjQyMzFmNDYzMmVhYjRkYTdl
ZTRiYzEwHhcNMjYwNzI4MTgwMDIxWhcNMjYwNzI5MTgwMDIxWjAzMTEwLwYDVQQD
EygzYmFjMzBlNDZkNzQzNzA4NzU4NTc1MDU3MzAzMTAwMWMyNDVkYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUMWFVqrAICbOVgPYNjkKCFCDRVT
4Emu5GVoWCfJ5ZeMBg35cBpysA+iGfsjxBqtHrm1SFy+Hc8UjGKr2VELAMLW/jyp
86+b1im4s9TDQjVhIVSnO9Z40N0QpT+XL9hHAJ5zjlABCoeGDBfy6mRki5riYxhd
M+XgKsL5uzQW9SD/2enD4tROGVpMg7ozpk2HpFrWiGbY+Zqwkmko52PKnMNRaMMM
UaP/5MTh6WB6B/Hldf3hOouZlSU0DdA9tRgdBHChEcs4g/8ZnAfGHgbGidbavnI8
vX0m7grdQghT+0G/DqE3ZZMnXAu/98cOgz9hMZEX4ZuD+FlTmxl7rkR2vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDusMORtdDcIdYV1BXMDEAHCRdx7MB8GA1UdIwQY
MBaAFI9GaSFqIHjLAkIx9GMuq02n7kvBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTIt
ZDdiOGViNDYwOGUyLzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9kYTQ4ZTItZmY2My00YmNkLTgyYTItZDdiOGViNDYwOGUy
LzEvajBacElXb2dlTXNDUWpIMFl5NnJUYWZ1UzhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxSxIiqj
ty6JHaxoG8G1CUuuUIFfXFR+7pF4RU8Lc6fyIpyXb3716TF8F7Pv30UAfSn8w80z
UYlhVpR2MaYUOBhFhfEVctgCVsQb41uNCcS5VseK/9QWb2WvYWgrrMo9snosXgiF
Cpns3fVgHar2lOKbcdnWxSaBOIAeMuD4or2XRpVZL486HKTCR3Edf91ZfgPVlaTb
dbLu5gy6AIZYwHXdC5TFrH70BmGiCPLY6LJJ4WBgQSL1pq3SdXJoEIDwD/FYbydb
EwM9/g0d6Xt/4ZsPdXDjiTdY84JGp0CqQe3/kOhct0NcoE12uVmLurmWl22fBk3t
cTk05pzLd0srlQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:55:47 2026 by rpki-client