Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
File:                     89SUuLJxr7fGLxOX9xLPLc02QYU.mft (raw, json)
Hash identifier:          vvaQITayI0rrmJrjbT4eFAdxtLCRdVqQgcPoz5zwBO0=
Subject key identifier:   16:38:D9:6B:98:32:94:17:70:86:1F:EA:53:13:98:CF:3F:27:E8:C4
Authority key identifier: F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85
Certificate issuer:       /CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
Certificate serial:       019FAC759E39D0B9445984CDAD9B6FCC394F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 06:00:16 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:16 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:16 +0000
Files and hashes:         1: 89SUuLJxr7fGLxOX9xLPLc02QYU.crl (hash: I9zMRExFt30CvE/+SFvz5UHfGvnjtOYUsuT5JbXADO4=)
                          2: mhvprDFBImPl7iFEWW3FxFWOZ6g.roa (hash: YcvQtGrqc9rsfbkzmvXWNEdP5V2+qw1zO++Zl2+6+Eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:9e:39:d0:b9:44:59:84:cd:ad:9b:6f:cc:39:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3d494b8b271afb7c62f1397f712cf2dcd364185
        Validity
            Not Before: Jul 29 06:00:16 2026 GMT
            Not After : Jul 30 06:00:16 2026 GMT
        Subject: CN=1638d96b9832941770861fea531398cf3f27e8c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7d:a5:ce:94:57:41:50:1b:eb:d8:d2:a4:fb:
                    9e:58:76:16:8a:a5:90:24:0c:9d:49:72:24:11:9b:
                    98:77:4f:21:1b:54:54:e5:e6:3f:de:a7:ad:3b:fe:
                    78:1a:48:00:82:a9:b4:6d:9e:9c:e6:8a:ed:20:88:
                    82:90:36:58:06:52:78:46:0c:01:27:33:49:a7:0b:
                    19:7b:aa:44:20:d3:0b:da:12:6e:b8:2f:55:70:5f:
                    86:a8:65:b2:30:94:26:47:69:f9:c7:92:df:60:c1:
                    0a:57:a0:29:de:16:ad:b9:bf:db:fb:3c:f0:3e:d9:
                    3d:e2:03:25:e0:bd:48:c6:9c:a7:98:fe:52:3b:d7:
                    d6:8a:46:0a:aa:31:6e:42:de:77:de:07:40:ef:ac:
                    a2:32:6c:78:ce:fe:bc:0a:cf:eb:bf:25:42:b2:d3:
                    58:ff:24:cf:6f:44:16:57:a1:bc:77:5e:9f:45:be:
                    f4:21:82:66:5c:ca:f0:fd:2e:34:13:3e:ab:da:bf:
                    7e:62:43:2c:96:1a:de:f7:43:9a:9f:d5:3e:d9:cc:
                    f8:3d:bc:8d:a2:34:7f:db:b3:51:66:16:d7:ab:3d:
                    36:0b:e1:c9:99:ec:70:13:5a:99:2c:99:24:22:e0:
                    24:86:81:d4:49:20:e7:cf:5f:a4:cb:9d:2b:91:d7:
                    12:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:38:D9:6B:98:32:94:17:70:86:1F:EA:53:13:98:CF:3F:27:E8:C4
            X509v3 Authority Key Identifier:
                keyid:F3:D4:94:B8:B2:71:AF:B7:C6:2F:13:97:F7:12:CF:2D:CD:36:41:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/89SUuLJxr7fGLxOX9xLPLc02QYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/128588-3207-4f36-983c-f79ad8122ef5/1/89SUuLJxr7fGLxOX9xLPLc02QYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:f4:c9:28:10:9f:cb:15:73:ff:7a:f5:9a:75:bd:c3:df:d8:
         82:0a:08:6a:9a:25:dc:ed:1f:38:71:bd:b4:3b:aa:84:33:a3:
         85:b7:30:ac:1d:1e:56:95:e7:1c:e0:20:f8:da:7a:2e:91:96:
         89:3d:8e:bb:a1:81:83:29:f0:57:73:fd:e1:89:98:6b:7b:d5:
         2a:c8:02:6d:75:cf:7f:e5:b0:0b:3d:a8:46:89:a5:f9:d5:41:
         e1:a8:5f:73:4b:4d:66:ac:45:92:19:88:dc:a6:58:6f:52:3f:
         fd:f6:79:f1:71:af:bd:8e:87:43:d7:a6:21:ee:96:4f:04:5f:
         e0:61:0b:91:4b:92:78:6c:b7:02:f4:2f:a6:7d:8b:29:a3:21:
         1f:bc:6f:b3:f8:fa:ab:c8:e1:a4:b4:be:19:19:9c:cb:4f:64:
         50:6c:8e:7e:99:e3:1c:77:71:e8:08:fe:ed:9c:2f:60:78:4a:
         44:d1:29:11:90:db:12:b5:81:29:c7:dc:41:bb:32:68:ae:1c:
         50:20:a2:53:22:75:47:79:ea:ac:0a:cd:da:39:1e:bc:ab:e7:
         92:15:fd:14:02:fa:37:50:c7:f6:bf:69:cc:40:20:ea:8a:b7:
         86:da:37:6f:5f:63:0b:94:a5:26:e6:19:99:85:1f:fd:67:70:
         a1:23:a3:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdZ450LlEWYTNrZtvzDlPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzZDQ5NGI4YjI3MWFmYjdjNjJmMTM5N2Y3MTJjZjJkY2Qz
NjQxODUwHhcNMjYwNzI5MDYwMDE2WhcNMjYwNzMwMDYwMDE2WjAzMTEwLwYDVQQD
EygxNjM4ZDk2Yjk4MzI5NDE3NzA4NjFmZWE1MzEzOThjZjNmMjdlOGM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqn2lzpRXQVAb69jSpPueWHYWiqWQ
JAydSXIkEZuYd08hG1RU5eY/3qetO/54GkgAgqm0bZ6c5ortIIiCkDZYBlJ4RgwB
JzNJpwsZe6pEINML2hJuuC9VcF+GqGWyMJQmR2n5x5LfYMEKV6Ap3hatub/b+zzw
Ptk94gMl4L1IxpynmP5SO9fWikYKqjFuQt533gdA76yiMmx4zv68Cs/rvyVCstNY
/yTPb0QWV6G8d16fRb70IYJmXMrw/S40Ez6r2r9+YkMslhre90Oan9U+2cz4PbyN
ojR/27NRZhbXqz02C+HJmexwE1qZLJkkIuAkhoHUSSDnz1+ky50rkdcS+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBY42WuYMpQXcIYf6lMTmM8/J+jEMB8GA1UdIwQY
MBaAFPPUlLiyca+3xi8Tl/cSzy3NNkGFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2Mt
Zjc5YWQ4MTIyZWY1LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8xMjg1ODgtMzIwNy00ZjM2LTk4M2MtZjc5YWQ4MTIyZWY1
LzEvODlTVXVMSnhyN2ZHTHhPWDl4TFBMYzAyUVlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW/TJKBCf
yxVz/3r1mnW9w9/YggoIapol3O0fOHG9tDuqhDOjhbcwrB0eVpXnHOAg+Np6LpGW
iT2Ou6GBgynwV3P94YmYa3vVKsgCbXXPf+WwCz2oRoml+dVB4ahfc0tNZqxFkhmI
3KZYb1I//fZ58XGvvY6HQ9emIe6WTwRf4GELkUuSeGy3AvQvpn2LKaMhH7xvs/j6
q8jhpLS+GRmcy09kUGyOfpnjHHdx6Aj+7ZwvYHhKRNEpEZDbErWBKcfcQbsyaK4c
UCCiUyJ1R3nqrArN2jkevKvnkhX9FAL6N1DH9r9pzEAg6oq3hto3b19jC5SlJuYZ
mYUf/WdwoSOjeQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:35:51 2026 by rpki-client