Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File:                     iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier:          yQufK52UFpMDHFYZw6LoyrpOr12uUvFIq64bOPpslCE=
Subject key identifier:   77:58:0D:3C:19:6B:7F:96:33:B9:EC:9E:87:6A:05:AF:B7:BC:16:74
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer:       /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial:       019FABD107CA12A5FB15589B6F62DAF57824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number:          19AB
Signing time:             Wed 29 Jul 2026 03:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:30 +0000
Files and hashes:         1: bze-DpbDaFlTujNEYrBpzXK9-lM.roa (hash: ooe09J/1o8+6+gKFLqTffzTatPXG8lw2mIe4kZHRs+0=)
                          2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: DAXVSpOy6gj7REVTXOufd2rrulmMaYhc8tBBt9JLJa4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:07:ca:12:a5:fb:15:58:9b:6f:62:da:f5:78:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
        Validity
            Not Before: Jul 29 03:00:30 2026 GMT
            Not After : Jul 30 03:00:30 2026 GMT
        Subject: CN=77580d3c196b7f9633b9ec9e876a05afb7bc1674
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:66:db:50:10:20:a3:72:f6:4b:20:96:ce:94:
                    63:e4:3d:38:c2:86:43:08:a9:58:b5:dd:ff:94:62:
                    20:ff:24:23:fd:62:07:64:34:47:fc:5a:9f:3b:29:
                    b5:6e:f1:34:76:8a:5c:ee:02:24:95:ae:4d:24:d2:
                    7d:e7:44:0b:e1:03:3c:83:f8:56:7a:60:55:58:13:
                    3a:bf:fa:4c:41:e3:bc:5b:a1:60:1a:ba:3c:b0:dc:
                    9e:5f:23:bf:27:fe:30:9d:00:1f:1d:d4:cc:b9:ca:
                    96:b6:37:70:68:ed:15:d9:67:7f:24:ab:69:44:09:
                    9d:85:9d:d5:71:e9:64:ac:a0:cd:b9:e2:c6:4e:aa:
                    62:38:1b:d8:ea:79:71:87:ca:32:b1:52:5d:25:31:
                    39:41:03:d7:db:0b:e6:82:9c:99:11:26:3c:68:a9:
                    77:64:29:13:57:8c:10:d9:ce:00:d8:f7:23:b4:a3:
                    b1:21:3a:76:1b:fa:32:3f:e9:65:5f:c7:2a:71:1c:
                    a3:4b:54:eb:dd:53:1a:ae:87:55:75:0c:19:15:8c:
                    ae:09:66:d4:4e:ef:fd:b2:13:c5:33:9e:c7:00:b3:
                    4e:ec:d1:15:60:13:ef:af:46:36:8f:93:84:77:18:
                    84:67:cc:8a:1b:83:10:be:21:20:bd:48:54:09:cd:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:58:0D:3C:19:6B:7F:96:33:B9:EC:9E:87:6A:05:AF:B7:BC:16:74
            X509v3 Authority Key Identifier:
                keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:fd:be:56:0c:0d:0c:e7:0a:87:5f:4c:5c:98:c3:d3:73:c6:
         87:66:05:5d:50:5a:5d:05:11:d7:92:c9:a4:0a:7f:2f:f3:a7:
         67:9b:d0:40:e0:8a:a8:0d:cd:18:a8:54:d8:aa:6e:37:d2:a7:
         05:3e:24:58:8f:58:3d:c8:b1:ac:dd:39:d9:0f:45:fa:4f:4e:
         bd:f7:2d:4a:61:b3:ed:36:14:f2:5c:6b:5c:e7:c8:5b:06:9a:
         01:14:78:0b:02:32:60:91:e0:ca:1f:4f:d5:fd:65:96:bc:bc:
         9b:eb:24:d2:1f:3f:3f:1e:62:b9:2c:e0:43:17:04:07:de:4d:
         7f:cb:31:27:1a:50:05:81:08:f2:42:c8:19:2b:07:ad:d7:26:
         f6:5e:43:50:af:27:a3:e9:8e:1b:a3:e9:89:e9:ee:d7:de:5e:
         3c:e4:81:1b:47:ae:51:16:33:e6:f7:c9:0e:f0:4f:a1:57:9a:
         5d:56:c9:9e:48:c3:3e:92:f5:11:61:92:73:03:0f:2e:31:31:
         9e:fe:92:b8:bd:07:88:5f:1a:a4:ba:bf:72:21:e3:c8:ef:e2:
         ff:83:5d:3e:cb:8a:d2:ee:bb:17:e5:ee:85:3e:67:11:44:70:
         c5:de:ed:36:f6:20:57:77:c2:fc:6c:aa:51:8e:f0:26:40:55:
         db:04:f9:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0QfKEqX7FVibb2La9XgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTM5ZmYxMjkzYjdlMjI3NzlmYzU1YjRjODNmMTNlNTJl
OTQ0MjgwHhcNMjYwNzI5MDMwMDMwWhcNMjYwNzMwMDMwMDMwWjAzMTEwLwYDVQQD
Eyg3NzU4MGQzYzE5NmI3Zjk2MzNiOWVjOWU4NzZhMDVhZmI3YmMxNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArmbbUBAgo3L2SyCWzpRj5D04woZD
CKlYtd3/lGIg/yQj/WIHZDRH/FqfOym1bvE0dopc7gIkla5NJNJ950QL4QM8g/hW
emBVWBM6v/pMQeO8W6FgGro8sNyeXyO/J/4wnQAfHdTMucqWtjdwaO0V2Wd/JKtp
RAmdhZ3VcelkrKDNueLGTqpiOBvY6nlxh8oysVJdJTE5QQPX2wvmgpyZESY8aKl3
ZCkTV4wQ2c4A2PcjtKOxITp2G/oyP+llX8cqcRyjS1Tr3VMarodVdQwZFYyuCWbU
Tu/9shPFM57HALNO7NEVYBPvr0Y2j5OEdxiEZ8yKG4MQviEgvUhUCc3FKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdYDTwZa3+WM7nsnodqBa+3vBZ0MB8GA1UdIwQY
MBaAFImTn/EpO34id5/FW0yD8T5S6UQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYt
MGU2ODAwMGIzNTM3LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYtMGU2ODAwMGIzNTM3
LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAf2+VgwN
DOcKh19MXJjD03PGh2YFXVBaXQUR15LJpAp/L/OnZ5vQQOCKqA3NGKhU2KpuN9Kn
BT4kWI9YPcixrN052Q9F+k9OvfctSmGz7TYU8lxrXOfIWwaaARR4CwIyYJHgyh9P
1f1llry8m+sk0h8/Px5iuSzgQxcEB95Nf8sxJxpQBYEI8kLIGSsHrdcm9l5DUK8n
o+mOG6Ppienu195ePOSBG0euURYz5vfJDvBPoVeaXVbJnkjDPpL1EWGScwMPLjEx
nv6SuL0HiF8apLq/ciHjyO/i/4NdPsuK0u67F+XuhT5nEURwxd7tNvYgV3fC/Gyq
UY7wJkBV2wT5Rg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:03:44 2026 by rpki-client