Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
File:                     0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft (raw, json)
Hash identifier:          1fkc6LMZmQye7+nu/YhJxGaS/qt21sfAiPk+kic3IqA=
Subject key identifier:   A6:10:7C:D4:9A:E6:31:FB:15:FF:96:7E:10:13:03:6D:67:7E:47:F8
Authority key identifier: D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56
Certificate issuer:       /CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
Certificate serial:       019FA974F690FF776FF3017F891000FE667A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 16:00:42 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:42 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:42 +0000
Files and hashes:         1: 0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl (hash: 1KBV+arSJULLMCx8YBd5YjgfoU0n4wEMBqWgAph2/rw=)
                          2: DCqk_IhQ4FSiE_K9oD22DV8FaxY.roa (hash: NtlKgarvCVLW792kP4u1993m8xjj7hSbfL1JoLagIyE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:f6:90:ff:77:6f:f3:01:7f:89:10:00:fe:66:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d22e95c4519de9208e3d22332aabec6b1a2ea756
        Validity
            Not Before: Jul 28 16:00:42 2026 GMT
            Not After : Jul 29 16:00:42 2026 GMT
        Subject: CN=a6107cd49ae631fb15ff967e1013036d677e47f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:2c:7f:0f:e5:01:50:db:21:fa:7c:ff:01:25:
                    ba:3f:4c:e8:8a:e5:3a:8e:d3:ae:b3:2c:99:46:09:
                    5e:5e:f6:c4:27:da:d2:f5:c3:e8:2e:d5:17:39:78:
                    60:3e:48:a2:74:5b:2c:56:bf:ee:db:7a:7c:a4:50:
                    88:82:87:5d:47:10:c3:07:be:34:94:43:e1:99:a8:
                    9b:3d:fa:13:13:f9:e1:1b:f3:84:a9:91:d1:4b:98:
                    0d:27:ff:96:e4:e7:40:33:5a:96:cb:1b:bd:85:0a:
                    0f:c1:3f:d4:d1:7e:4e:47:2c:02:6d:09:13:1f:64:
                    ae:5b:c6:8b:d9:ea:70:fb:2e:5d:32:b9:3c:5c:59:
                    aa:d1:91:3a:05:e9:3a:dd:c4:60:50:b1:63:a6:03:
                    97:90:f2:3a:c1:71:4d:36:65:92:c2:79:f4:0f:af:
                    ce:ec:58:d6:2a:fe:8a:c5:aa:43:30:4a:29:42:46:
                    2d:fa:52:fe:4a:39:c8:89:56:4b:87:23:1a:f6:24:
                    ce:e2:49:bd:99:f5:9e:d7:a0:da:ca:9c:1b:5a:64:
                    ea:9b:45:07:97:91:7e:ce:c7:21:ed:9a:83:a5:34:
                    59:bc:9a:d8:65:67:c5:fb:b6:d1:0e:e5:68:d2:eb:
                    ac:0d:cc:ba:ff:8d:64:f5:5c:20:fa:ea:e6:5e:de:
                    6e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:10:7C:D4:9A:E6:31:FB:15:FF:96:7E:10:13:03:6D:67:7E:47:F8
            X509v3 Authority Key Identifier:
                keyid:D2:2E:95:C4:51:9D:E9:20:8E:3D:22:33:2A:AB:EC:6B:1A:2E:A7:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0i6VxFGd6SCOPSIzKqvsaxoup1Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/99153d-4702-4375-8e44-f2e54ddea3b3/1/0i6VxFGd6SCOPSIzKqvsaxoup1Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:7d:7f:59:b2:a5:1e:a1:9f:17:19:01:7b:8a:7e:6f:47:de:
         5a:30:1a:65:18:ee:bc:48:33:1a:39:54:af:44:55:10:b9:71:
         45:3f:62:56:e5:cf:10:de:ef:62:03:c1:7b:b4:fb:b3:70:75:
         98:04:46:84:e7:44:86:c1:96:f4:12:a0:0a:77:3e:9f:96:3f:
         61:64:9e:88:3d:c5:19:03:aa:8a:27:a5:ba:17:c8:95:33:7c:
         12:e4:22:b8:c4:46:14:f5:bc:2d:b0:04:cf:6f:ea:74:6d:04:
         ff:e7:96:30:52:5a:5e:77:7d:79:8c:1f:34:2c:ff:30:a1:09:
         fe:77:ca:30:db:21:9c:7b:fe:90:2e:2c:5c:09:79:98:8a:5a:
         68:96:bd:ef:b1:71:dd:46:86:57:62:ea:7e:ee:04:02:5f:cb:
         f4:98:88:44:7d:25:cc:a9:e9:e2:f8:65:de:fb:e4:a8:62:2f:
         60:99:be:5a:cb:aa:48:39:03:52:85:c6:89:47:b0:69:68:aa:
         79:55:16:93:84:8d:d9:4a:46:85:06:79:dc:31:6c:b3:da:85:
         50:3a:06:2d:7f:d0:1e:0b:6c:7b:0b:36:79:02:00:d8:c9:fe:
         7f:99:96:6c:61:2d:c0:86:be:d1:06:6b:6e:ba:b8:75:9a:2c:
         62:43:a5:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdPaQ/3dv8wF/iRAA/mZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyMmU5NWM0NTE5ZGU5MjA4ZTNkMjIzMzJhYWJlYzZiMWEy
ZWE3NTYwHhcNMjYwNzI4MTYwMDQyWhcNMjYwNzI5MTYwMDQyWjAzMTEwLwYDVQQD
EyhhNjEwN2NkNDlhZTYzMWZiMTVmZjk2N2UxMDEzMDM2ZDY3N2U0N2Y4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCx/D+UBUNsh+nz/ASW6P0zoiuU6
jtOusyyZRgleXvbEJ9rS9cPoLtUXOXhgPkiidFssVr/u23p8pFCIgoddRxDDB740
lEPhmaibPfoTE/nhG/OEqZHRS5gNJ/+W5OdAM1qWyxu9hQoPwT/U0X5ORywCbQkT
H2SuW8aL2epw+y5dMrk8XFmq0ZE6Bek63cRgULFjpgOXkPI6wXFNNmWSwnn0D6/O
7FjWKv6KxapDMEopQkYt+lL+SjnIiVZLhyMa9iTO4km9mfWe16DaypwbWmTqm0UH
l5F+zsch7ZqDpTRZvJrYZWfF+7bRDuVo0uusDcy6/41k9Vwg+urmXt5uVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKYQfNSa5jH7Ff+WfhATA21nfkf4MB8GA1UdIwQY
MBaAFNIulcRRnekgjj0iMyqr7GsaLqdWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQt
ZjJlNTRkZGVhM2IzLzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC85OTE1M2QtNDcwMi00Mzc1LThlNDQtZjJlNTRkZGVhM2Iz
LzEvMGk2VnhGR2Q2U0NPUFNJektxdnNheG91cDFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHH1/WbKl
HqGfFxkBe4p+b0feWjAaZRjuvEgzGjlUr0RVELlxRT9iVuXPEN7vYgPBe7T7s3B1
mARGhOdEhsGW9BKgCnc+n5Y/YWSeiD3FGQOqiieluhfIlTN8EuQiuMRGFPW8LbAE
z2/qdG0E/+eWMFJaXnd9eYwfNCz/MKEJ/nfKMNshnHv+kC4sXAl5mIpaaJa977Fx
3UaGV2Lqfu4EAl/L9JiIRH0lzKnp4vhl3vvkqGIvYJm+WsuqSDkDUoXGiUewaWiq
eVUWk4SN2UpGhQZ53DFss9qFUDoGLX/QHgtsews2eQIA2Mn+f5mWbGEtwIa+0QZr
brq4dZosYkOlBw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:10:43 2026 by rpki-client