Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
File:                     rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft (raw, json)
Hash identifier:          izCJbZgmXRpmmOFhk62KKfJXNeK91WEqpCbZdH2rwPI=
Subject key identifier:   A2:00:43:86:70:CA:D5:65:A3:18:31:CC:E8:67:E7:5E:32:B1:24:AC
Authority key identifier: AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94
Certificate issuer:       /CN=af121cd6e11da095f856d79deec469d0c6358494
Certificate serial:       019FA9750BEB8A3E1AA0F1D1C4A3B85CE3C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
Manifest number:          1519
Signing time:             Tue 28 Jul 2026 16:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:47 +0000
Files and hashes:         1: Kt3WssTVExomZWHJCqXl8pbqTeI.roa (hash: sMdfEY5PN8jhtfsylFmunzan1olQaOOSvuDOe68g4ws=)
                          2: KzmoITHkJpLOR4Tlul5pobyRKM4.roa (hash: AsqRiFYDTCnKZFcWZmiW079vgPj+Gpml9bimn7NxEjY=)
                          3: LeESlSzWIvuQdTBNS-mk1tTyv7E.roa (hash: WD96tCmI2Z4zPrVkF6yX9hz40ljCQT+UIo7XuVxQtwE=)
                          4: rXLsHixYlq3Kcw9EvhZkSV4zLvI.roa (hash: xL1IzYaCYhuM2YhqoZfpmf/cRlZ3zbvhm0l28fnKcTk=)
                          5: rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl (hash: RNbiTWXgEWxyhMrx8xp/Hhip6VLni+ZzNb5HOBR9Ah4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:0b:eb:8a:3e:1a:a0:f1:d1:c4:a3:b8:5c:e3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af121cd6e11da095f856d79deec469d0c6358494
        Validity
            Not Before: Jul 28 16:00:47 2026 GMT
            Not After : Jul 29 16:00:47 2026 GMT
        Subject: CN=a200438670cad565a31831cce867e75e32b124ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d2:75:31:97:67:09:73:07:83:0e:7b:10:0b:
                    1d:16:53:7d:c5:60:f0:1e:55:4d:67:27:cb:b3:db:
                    98:5c:e5:7f:d1:24:9f:16:0a:3f:a3:24:1d:3b:4e:
                    e2:0d:58:28:72:32:e8:3c:9e:15:38:70:55:23:bb:
                    1a:21:4a:ce:d0:eb:ff:7a:d8:58:7e:b9:f2:63:24:
                    ba:ae:f5:e4:d7:47:22:63:3c:8a:11:d0:93:51:4b:
                    29:49:30:5e:ec:15:d0:94:72:f3:cc:7e:6f:5e:e4:
                    a1:cc:4f:db:9d:ed:1c:58:f4:59:8f:9a:93:89:33:
                    8d:e9:11:35:3d:6c:a2:03:a5:5b:ad:ca:3d:4c:dc:
                    cd:f3:67:51:91:33:e9:5e:e5:f5:b3:6b:2f:b2:01:
                    63:ad:17:46:20:56:11:a1:b1:c9:2b:89:9d:90:71:
                    5a:79:f0:e7:8f:8a:bf:4c:70:bb:0d:0d:bf:41:96:
                    37:3f:ab:55:a3:ac:66:f7:62:9a:8b:11:d4:1b:ec:
                    3f:0d:5f:52:76:42:fe:85:4b:77:c9:ab:92:e3:f4:
                    85:2e:2a:4f:fb:83:ea:60:87:25:55:63:39:a7:2a:
                    05:68:97:41:7e:ee:33:f6:40:fe:6c:13:67:05:cc:
                    f8:12:90:11:04:fa:19:bb:9d:52:35:1e:91:09:07:
                    20:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:00:43:86:70:CA:D5:65:A3:18:31:CC:E8:67:E7:5E:32:B1:24:AC
            X509v3 Authority Key Identifier:
                keyid:AF:12:1C:D6:E1:1D:A0:95:F8:56:D7:9D:EE:C4:69:D0:C6:35:84:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxIc1uEdoJX4Vted7sRp0MY1hJQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/fd6069-4179-45be-b82a-af3f794ae607/1/rxIc1uEdoJX4Vted7sRp0MY1hJQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:7b:85:e7:b1:5b:ef:da:a3:8a:ba:d0:59:fb:05:93:ae:11:
         14:a3:1e:96:42:57:d3:e3:25:4d:57:85:86:d1:e8:20:47:68:
         ed:07:4f:a7:67:ae:30:19:c1:62:0f:fe:93:11:c6:dd:19:6c:
         ae:cd:51:8e:a1:59:61:10:00:5b:20:e5:7c:f7:b2:aa:a7:9b:
         ff:af:a8:8e:a2:a0:7e:8e:f4:d9:02:6a:55:89:9a:5c:b8:18:
         c9:5a:33:7e:9e:68:14:c6:56:83:fe:cf:6b:2e:f8:53:b7:90:
         e7:64:cd:b0:5d:c5:33:7c:0b:c6:0f:00:ee:d8:5f:cc:68:be:
         b1:fc:da:25:fb:87:11:46:89:63:12:2d:c3:e8:ce:77:8e:06:
         d3:1c:ba:75:ad:11:a1:5c:f5:16:5b:2d:8c:b1:0c:1f:7e:4a:
         c8:12:77:ae:44:64:8d:23:9a:e6:43:5c:78:d1:6c:2a:f2:f1:
         06:fe:98:43:74:39:35:23:82:ba:64:e0:48:01:a1:95:1c:f4:
         76:11:15:a3:63:79:f3:1b:92:af:b5:65:28:17:57:81:a2:67:
         6c:8f:db:14:36:60:9c:76:bb:d9:9a:79:d1:3a:78:83:83:6d:
         36:65:de:0c:f6:6f:a3:43:55:bc:35:10:40:2b:63:da:3d:3f:
         08:26:5b:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdQvrij4aoPHRxKO4XOPGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMTIxY2Q2ZTExZGEwOTVmODU2ZDc5ZGVlYzQ2OWQwYzYz
NTg0OTQwHhcNMjYwNzI4MTYwMDQ3WhcNMjYwNzI5MTYwMDQ3WjAzMTEwLwYDVQQD
EyhhMjAwNDM4NjcwY2FkNTY1YTMxODMxY2NlODY3ZTc1ZTMyYjEyNGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9J1MZdnCXMHgw57EAsdFlN9xWDw
HlVNZyfLs9uYXOV/0SSfFgo/oyQdO07iDVgocjLoPJ4VOHBVI7saIUrO0Ov/ethY
frnyYyS6rvXk10ciYzyKEdCTUUspSTBe7BXQlHLzzH5vXuShzE/bne0cWPRZj5qT
iTON6RE1PWyiA6Vbrco9TNzN82dRkTPpXuX1s2svsgFjrRdGIFYRobHJK4mdkHFa
efDnj4q/THC7DQ2/QZY3P6tVo6xm92KaixHUG+w/DV9SdkL+hUt3yauS4/SFLipP
+4PqYIclVWM5pyoFaJdBfu4z9kD+bBNnBcz4EpARBPoZu51SNR6RCQcgowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIAQ4ZwytVloxgxzOhn514ysSSsMB8GA1UdIwQY
MBaAFK8SHNbhHaCV+FbXne7EadDGNYSUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEt
YWYzZjc5NGFlNjA3LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Zi9mZDYwNjktNDE3OS00NWJlLWI4MmEtYWYzZjc5NGFlNjA3
LzEvcnhJYzF1RWRvSlg0VnRlZDdzUnAwTVkxaEpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3uF57Fb
79qjirrQWfsFk64RFKMelkJX0+MlTVeFhtHoIEdo7QdPp2euMBnBYg/+kxHG3Rls
rs1RjqFZYRAAWyDlfPeyqqeb/6+ojqKgfo702QJqVYmaXLgYyVozfp5oFMZWg/7P
ay74U7eQ52TNsF3FM3wLxg8A7thfzGi+sfzaJfuHEUaJYxItw+jOd44G0xy6da0R
oVz1FlstjLEMH35KyBJ3rkRkjSOa5kNceNFsKvLxBv6YQ3Q5NSOCumTgSAGhlRz0
dhEVo2N58xuSr7VlKBdXgaJnbI/bFDZgnHa72Zp50Tp4g4NtNmXeDPZvo0NVvDUQ
QCtj2j0/CCZbXw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:29:55 2026 by rpki-client