Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
File:                     bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft (raw, json)
Hash identifier:          Gd/DmOy6TFer288B/sVDKlLP6TMNWwdWARFlPMIUoYg=
Subject key identifier:   7D:73:8C:7F:85:A6:2D:B4:59:C1:6A:90:33:46:F4:08:D6:4F:6D:5C
Authority key identifier: 6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A
Certificate issuer:       /CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
Certificate serial:       019FAABE88D25FEAF0673E9CD65F37602563
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 22:00:41 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:41 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:41 +0000
Files and hashes:         1: 14WxdiCVm4rnXK9-tDL_PXH0l8E.roa (hash: hqaflv4B62LQIs49QinUGmrt4sGWk2w+n2txj5z2H8I=)
                          2: 8QavD1xGOGIsFORO8QpTl9ze2qk.roa (hash: CP8EcYyC8MJCP4Qe6fiDSKdEQwvcsEiCEc0QZK7hpC4=)
                          3: E4bY0ltZvNP1-HupAPXY0-ZeBCU.roa (hash: 3KMhjTFJ+WQEHP63JQ46+UXmsQRLh8CZFZ+BiwZhaII=)
                          4: LaR2tR9VELkIqYB1KayofzhugrQ.roa (hash: IhBsr0UP82ELR6sQ5NhU1p2TkFx8sUm8QDTn1ahLei0=)
                          5: _NPYi_tgDVixqRihfPCnzEyteiA.roa (hash: a/DOqggraEPPchKDiC0Upq/MDsgJ2XWYLDm3YdovFlo=)
                          6: bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl (hash: a3n2g+6g2xPQx1oKl/wpZZND30NPMLtASIILk14b4xg=)
                          7: wswbiWhFN53OcrlAurii4-C90OY.roa (hash: FaPWRVidTojhM8z9Dp/5f4Ru4RTG3RuxDK7oQeJK2nY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:88:d2:5f:ea:f0:67:3e:9c:d6:5f:37:60:25:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d39ce4c29ab3f802f9de933f4495026c4d0ee4a
        Validity
            Not Before: Jul 28 22:00:41 2026 GMT
            Not After : Jul 29 22:00:41 2026 GMT
        Subject: CN=7d738c7f85a62db459c16a903346f408d64f6d5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:52:f1:49:a4:66:ff:bc:8b:54:5f:db:e4:c6:
                    27:8e:4a:a5:dd:fc:4b:37:bd:64:30:0a:1f:cf:13:
                    29:5d:f3:10:0a:a8:19:d8:2b:de:9d:fe:e9:19:62:
                    af:9c:00:63:79:10:46:a4:12:c1:0d:09:e7:64:f9:
                    82:68:2c:a6:64:15:89:97:7c:8b:b3:ed:57:bc:c0:
                    45:95:18:7a:75:04:0c:0c:b1:ba:83:88:86:56:30:
                    95:50:59:6b:2d:aa:cd:14:3a:95:65:33:35:47:b7:
                    99:f0:ec:75:3e:fa:57:52:a6:4d:59:24:51:b7:28:
                    bb:e0:71:ee:2b:f5:aa:b3:6f:66:19:fa:e4:74:bd:
                    26:ca:6a:68:a8:e9:1e:20:6e:4c:31:ff:74:1e:a2:
                    44:66:08:1f:d1:88:d9:30:83:ff:73:ab:6f:cb:46:
                    6e:ff:23:1f:2c:c8:f3:b6:9a:16:d9:f9:84:36:96:
                    f1:93:18:6e:4a:05:36:87:b5:21:22:8f:32:ca:b4:
                    25:f0:65:f2:f6:ce:3d:ac:fb:8c:00:a8:a0:f0:a4:
                    e8:fd:e9:b7:c5:d0:b2:5e:03:f8:72:f0:2c:4f:4c:
                    66:db:ce:fa:fb:11:9d:5f:3f:f5:99:b6:d7:77:67:
                    0c:b2:c7:da:25:eb:db:e5:5f:00:ae:8d:19:5e:f9:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:73:8C:7F:85:A6:2D:B4:59:C1:6A:90:33:46:F4:08:D6:4F:6D:5C
            X509v3 Authority Key Identifier:
                keyid:6D:39:CE:4C:29:AB:3F:80:2F:9D:E9:33:F4:49:50:26:C4:D0:EE:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTnOTCmrP4Avnekz9ElQJsTQ7ko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/44e8f5-3584-490e-9979-cdc31d5fb8a4/1/bTnOTCmrP4Avnekz9ElQJsTQ7ko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:25:66:02:12:7e:b0:e1:92:5f:a6:16:31:16:94:3f:3d:df:
         b8:cb:e4:1b:7c:1a:53:1b:ad:47:43:3f:29:40:83:56:98:9b:
         ce:4b:51:b0:66:05:5a:dd:f8:05:64:77:59:30:c6:fe:6f:53:
         5a:a4:12:8e:71:b5:f8:ae:c3:ee:eb:a9:1a:cc:2c:21:ec:af:
         30:ad:f7:05:f0:0b:af:98:0e:29:2f:16:17:5e:1b:f6:7d:e0:
         00:b2:79:c7:bc:03:e0:fe:6f:2a:96:5a:58:6a:b8:8f:b5:4a:
         fd:05:15:18:0b:32:92:36:49:7c:65:81:72:bb:de:1c:15:77:
         21:c5:c3:a7:e4:b1:a2:0e:24:39:34:e9:93:ea:c1:bd:d1:80:
         05:d4:47:68:3c:87:03:f4:f1:0a:31:b1:53:8d:bd:9e:ab:20:
         95:9d:21:83:63:07:5e:0b:35:fc:ed:3b:e1:f7:bb:87:cc:04:
         bf:22:7e:e3:43:ba:71:b0:98:26:e5:25:c8:7c:8b:85:82:3a:
         8d:70:e5:16:d5:9d:6c:25:bc:e1:4d:9a:8f:a7:c5:e2:0d:a1:
         91:57:ee:45:f5:5c:9e:42:bc:57:b5:9a:a0:32:15:1c:cb:35:
         0d:03:01:96:fe:b8:ee:c4:0a:1c:ee:4c:ac:ef:11:5b:0a:27:
         fc:45:f8:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvojSX+rwZz6c1l83YCVjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMzljZTRjMjlhYjNmODAyZjlkZTkzM2Y0NDk1MDI2YzRk
MGVlNGEwHhcNMjYwNzI4MjIwMDQxWhcNMjYwNzI5MjIwMDQxWjAzMTEwLwYDVQQD
Eyg3ZDczOGM3Zjg1YTYyZGI0NTljMTZhOTAzMzQ2ZjQwOGQ2NGY2ZDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFLxSaRm/7yLVF/b5MYnjkql3fxL
N71kMAofzxMpXfMQCqgZ2Cvenf7pGWKvnABjeRBGpBLBDQnnZPmCaCymZBWJl3yL
s+1XvMBFlRh6dQQMDLG6g4iGVjCVUFlrLarNFDqVZTM1R7eZ8Ox1PvpXUqZNWSRR
tyi74HHuK/Wqs29mGfrkdL0mympoqOkeIG5MMf90HqJEZggf0YjZMIP/c6tvy0Zu
/yMfLMjztpoW2fmENpbxkxhuSgU2h7UhIo8yyrQl8GXy9s49rPuMAKig8KTo/em3
xdCyXgP4cvAsT0xm2876+xGdXz/1mbbXd2cMssfaJevb5V8Aro0ZXvkurwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1zjH+Fpi20WcFqkDNG9AjWT21cMB8GA1UdIwQY
MBaAFG05zkwpqz+AL53pM/RJUCbE0O5KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5Nzkt
Y2RjMzFkNWZiOGE0LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80NGU4ZjUtMzU4NC00OTBlLTk5NzktY2RjMzFkNWZiOGE0
LzEvYlRuT1RDbXJQNEF2bmVrejlFbFFKc1RRN2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUCVmAhJ+
sOGSX6YWMRaUPz3fuMvkG3waUxutR0M/KUCDVpibzktRsGYFWt34BWR3WTDG/m9T
WqQSjnG1+K7D7uupGswsIeyvMK33BfALr5gOKS8WF14b9n3gALJ5x7wD4P5vKpZa
WGq4j7VK/QUVGAsykjZJfGWBcrveHBV3IcXDp+Sxog4kOTTpk+rBvdGABdRHaDyH
A/TxCjGxU429nqsglZ0hg2MHXgs1/O074fe7h8wEvyJ+40O6cbCYJuUlyHyLhYI6
jXDlFtWdbCW84U2aj6fF4g2hkVfuRfVcnkK8V7WaoDIVHMs1DQMBlv647sQKHO5M
rO8RWwon/EX4vQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:07:21 2026 by rpki-client