Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
File:                     aCyELfoqHnFHJ7zLlfFlNHED8nc.mft (raw, json)
Hash identifier:          f9ijfZm2VpnJvJJFQtVkUPB5HX4yFiafUGWxjOkVDh8=
Subject key identifier:   CD:68:59:CA:AC:A1:60:1F:BE:DE:A4:77:5C:26:03:8C:38:16:FC:28
Authority key identifier: 68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77
Certificate issuer:       /CN=682c842dfa2a1e714727bccb95f165347103f277
Certificate serial:       019FAC7611D5E4829BAA66722FAA70937D57
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
Manifest number:          19DB
Signing time:             Wed 29 Jul 2026 06:00:46 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:46 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:46 +0000
Files and hashes:         1: 8dtgaFANkeK8huuG3p8_JsPAwVY.roa (hash: hnOGO5yhOzCse60swZYvKqiyn0VjBoHkixTNWL2xNnI=)
                          2: Prdw3L1Fwkc8ytRFu-oUK_xAQuU.roa (hash: doY6BOzth/370lmaa2UkKcv45HRXOMVWu34UaSPlsc8=)
                          3: aCyELfoqHnFHJ7zLlfFlNHED8nc.crl (hash: mz55eWU9bOvGrTjILb+RyP2MIPcQ2GMe9N+URPZzgws=)
                          4: mQRanHoIY0IoJuE4VcyHEcinjeo.roa (hash: fBz0EC50LChidWvY4MFa5hHhW36+s8IY+jpOw7hyIu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:11:d5:e4:82:9b:aa:66:72:2f:aa:70:93:7d:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=682c842dfa2a1e714727bccb95f165347103f277
        Validity
            Not Before: Jul 29 06:00:46 2026 GMT
            Not After : Jul 30 06:00:46 2026 GMT
        Subject: CN=cd6859caaca1601fbedea4775c26038c3816fc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:52:97:20:de:eb:bd:09:f2:f4:6c:6e:d4:f1:
                    7e:de:25:e9:be:e5:f3:7a:0d:c6:06:67:dc:fa:46:
                    72:b8:84:4b:fc:b4:79:a6:3c:1a:f5:91:e2:12:6f:
                    38:7a:ae:f8:69:a6:49:c5:98:bb:59:bf:9e:35:9d:
                    db:d3:4f:c2:53:db:83:6b:ea:4a:0a:4f:63:91:0d:
                    68:47:0d:4c:e3:fc:18:a2:10:05:39:6b:3a:15:00:
                    6e:aa:39:51:cd:31:7e:9d:04:8e:ab:09:4c:11:0b:
                    14:5d:0a:e1:65:41:e6:da:1a:f7:a5:45:7a:4e:fa:
                    76:cf:ed:f4:18:60:0f:55:d5:a0:2e:04:e6:b4:68:
                    4d:bf:34:fc:e0:ad:f4:11:72:0e:db:ba:a1:f3:7a:
                    46:38:71:99:0a:96:8d:e6:56:b8:4c:b7:ea:b7:23:
                    13:11:9a:14:19:f7:9c:f6:c3:1d:99:78:95:13:d5:
                    ed:0e:67:d1:06:ae:67:4a:2d:e4:6d:00:21:45:2c:
                    da:95:b6:95:02:b9:30:a2:02:46:c4:bc:7a:90:ab:
                    a2:7f:79:54:75:07:f5:ce:29:14:c3:cf:f1:04:4a:
                    1f:ab:b9:69:ca:b2:80:12:32:6a:36:33:c5:e0:93:
                    37:4c:05:a7:04:ff:ad:e3:6a:53:ea:48:d0:7f:98:
                    8c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:68:59:CA:AC:A1:60:1F:BE:DE:A4:77:5C:26:03:8C:38:16:FC:28
            X509v3 Authority Key Identifier:
                keyid:68:2C:84:2D:FA:2A:1E:71:47:27:BC:CB:95:F1:65:34:71:03:F2:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aCyELfoqHnFHJ7zLlfFlNHED8nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/000465-83cb-41b4-8e60-08d65b38639d/1/aCyELfoqHnFHJ7zLlfFlNHED8nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:d6:79:10:f2:cf:16:5b:e4:11:1e:28:6f:d0:63:15:13:dd:
         72:5b:a5:05:cc:1b:91:e8:d9:c3:d1:65:3e:fa:fa:57:55:4e:
         5b:2a:36:31:1e:c9:08:eb:f7:30:14:d2:2d:2b:ae:fe:75:88:
         8a:d4:bf:7e:0c:f4:d9:5e:5e:28:bc:ec:8b:84:32:f6:1b:21:
         8a:28:b3:04:93:c8:7b:c2:21:3d:a4:36:e0:77:fd:2e:3e:98:
         a3:7e:45:75:39:df:fe:f6:1a:4f:68:d0:3a:e4:f1:14:a9:5c:
         4d:b3:fe:f4:93:ce:51:59:9a:7f:e7:75:81:82:19:17:3d:d5:
         18:9c:4d:95:37:c7:c5:f6:ca:2c:46:d0:e8:48:a8:b1:3b:9a:
         81:69:fd:b3:c1:a2:96:a0:27:aa:83:51:62:4c:2c:ea:c6:25:
         02:02:cc:d6:2e:a9:eb:08:44:1d:96:0b:ea:51:88:82:e8:c6:
         de:bd:84:96:80:e6:d5:de:1f:fc:df:cb:ef:c5:7b:b1:4a:78:
         03:10:b0:77:4f:f1:ac:87:81:71:80:c9:80:09:c6:fe:7f:2a:
         72:82:39:f9:63:18:8c:ff:59:df:ab:05:26:28:32:3d:58:3f:
         5d:29:aa:47:fc:af:cc:e0:e6:dc:41:c3:93:05:08:a9:0a:0a:
         0b:0d:0b:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdhHV5IKbqmZyL6pwk31XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MmM4NDJkZmEyYTFlNzE0NzI3YmNjYjk1ZjE2NTM0NzEw
M2YyNzcwHhcNMjYwNzI5MDYwMDQ2WhcNMjYwNzMwMDYwMDQ2WjAzMTEwLwYDVQQD
EyhjZDY4NTljYWFjYTE2MDFmYmVkZWE0Nzc1YzI2MDM4YzM4MTZmYzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FKXIN7rvQny9Gxu1PF+3iXpvuXz
eg3GBmfc+kZyuIRL/LR5pjwa9ZHiEm84eq74aaZJxZi7Wb+eNZ3b00/CU9uDa+pK
Ck9jkQ1oRw1M4/wYohAFOWs6FQBuqjlRzTF+nQSOqwlMEQsUXQrhZUHm2hr3pUV6
Tvp2z+30GGAPVdWgLgTmtGhNvzT84K30EXIO27qh83pGOHGZCpaN5la4TLfqtyMT
EZoUGfec9sMdmXiVE9XtDmfRBq5nSi3kbQAhRSzalbaVArkwogJGxLx6kKuif3lU
dQf1zikUw8/xBEofq7lpyrKAEjJqNjPF4JM3TAWnBP+t42pT6kjQf5iMAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM1oWcqsoWAfvt6kd1wmA4w4FvwoMB8GA1UdIwQY
MBaAFGgshC36Kh5xRye8y5XxZTRxA/J3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAt
MDhkNjViMzg2MzlkLzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi8wMDA0NjUtODNjYi00MWI0LThlNjAtMDhkNjViMzg2Mzlk
LzEvYUN5RUxmb3FIbkZISjd6TGxmRmxOSEVEOG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNZ5EPLP
FlvkER4ob9BjFRPdclulBcwbkejZw9FlPvr6V1VOWyo2MR7JCOv3MBTSLSuu/nWI
itS/fgz02V5eKLzsi4Qy9hshiiizBJPIe8IhPaQ24Hf9Lj6Yo35FdTnf/vYaT2jQ
OuTxFKlcTbP+9JPOUVmaf+d1gYIZFz3VGJxNlTfHxfbKLEbQ6EiosTuagWn9s8Gi
lqAnqoNRYkws6sYlAgLM1i6p6whEHZYL6lGIgujG3r2EloDm1d4f/N/L78V7sUp4
AxCwd0/xrIeBcYDJgAnG/n8qcoI5+WMYjP9Z36sFJigyPVg/XSmqR/yvzODm3EHD
kwUIqQoKCw0LAQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:14:00 2026 by rpki-client