Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
File:                     16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft (raw, json)
Hash identifier:          3mXJc/P5iPdGTRpaLze/C0f+j2F0QJ1UAkwz8DGTrYQ=
Subject key identifier:   26:B9:0B:6A:B7:18:03:C2:48:CD:8E:1D:14:BD:94:0C:0F:1D:C2:A6
Authority key identifier: D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6
Certificate issuer:       /CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
Certificate serial:       019FA82B054DB38441B258B1F722C5FC7D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
Manifest number:          19CF
Signing time:             Tue 28 Jul 2026 10:00:19 +0000
Manifest this update:     Tue 28 Jul 2026 10:00:19 +0000
Manifest next update:     Wed 29 Jul 2026 10:00:19 +0000
Files and hashes:         1: 16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl (hash: 7wdWrcLRseA/Gi//IeX274SRnJJQvI4EV5qPXv3cmvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:05:4d:b3:84:41:b2:58:b1:f7:22:c5:fc:7d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7a4ff663fa6715db0c6bfe79a9287eada6cb3e6
        Validity
            Not Before: Jul 28 10:00:19 2026 GMT
            Not After : Jul 29 10:00:19 2026 GMT
        Subject: CN=26b90b6ab71803c248cd8e1d14bd940c0f1dc2a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:f3:4d:4a:5e:42:f9:81:35:c6:05:15:29:87:
                    a9:64:e8:a9:53:c5:f0:cf:b5:17:b8:b6:96:5f:96:
                    56:8a:73:ff:72:b3:78:66:a5:33:2f:ed:b7:69:0f:
                    10:8b:5f:9a:ba:78:f1:67:78:21:0b:43:41:f5:56:
                    39:88:27:2a:20:ee:3b:7f:f4:a7:af:7d:e7:c5:50:
                    25:0d:4e:cd:cc:12:1c:1f:3b:8e:9d:ec:bf:28:48:
                    87:54:1c:08:70:fb:0d:9c:58:f0:25:f7:e2:29:fa:
                    56:d9:ed:77:9a:42:ab:56:93:f2:71:95:34:53:01:
                    88:25:35:d5:b2:d3:e7:75:1a:a2:14:e2:b1:25:c5:
                    d0:ea:09:8a:0a:cd:b6:d1:c5:41:c0:71:ff:53:58:
                    44:30:67:b6:c9:f2:18:bb:87:33:18:8a:b2:4e:06:
                    15:84:eb:de:7d:52:2a:e4:5b:27:08:e5:4d:07:46:
                    de:33:ac:fd:29:96:52:7a:48:73:ce:82:02:10:c8:
                    de:76:19:5e:e0:f6:4c:bb:92:28:5c:29:b6:d1:a7:
                    1a:aa:7b:e4:c8:5b:96:5c:6b:73:f7:a1:de:b5:1a:
                    50:05:12:8a:ae:9a:5a:de:dc:17:a1:97:1a:c3:6a:
                    43:f5:02:3c:84:db:11:7c:cf:41:ea:fb:ca:3e:10:
                    2e:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B9:0B:6A:B7:18:03:C2:48:CD:8E:1D:14:BD:94:0C:0F:1D:C2:A6
            X509v3 Authority Key Identifier:
                keyid:D7:A4:FF:66:3F:A6:71:5D:B0:C6:BF:E7:9A:92:87:EA:DA:6C:B3:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/16T_Zj-mcV2wxr_nmpKH6tpss-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/0aab87-c85b-4a8a-9dc5-6ce67e0f2593/1/16T_Zj-mcV2wxr_nmpKH6tpss-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:79:f8:a6:ec:a3:0f:59:35:3c:71:d9:8a:3a:6c:c5:d6:cc:
         a7:8e:29:ba:da:ef:ba:04:90:17:44:ec:dd:b3:1a:cf:ae:74:
         86:c7:7e:68:14:d3:3d:0b:ab:7f:d9:9e:ba:9c:ab:96:bf:29:
         8f:a6:5d:11:18:fc:a1:ef:ee:99:06:f7:41:74:25:f1:72:4d:
         f5:4a:1c:e9:1c:ce:6e:24:a3:ac:be:8b:3e:43:b7:56:28:94:
         46:7d:0a:df:de:fb:f1:3a:d9:02:42:28:58:ec:e5:39:83:93:
         01:24:89:90:35:8c:92:6f:3d:11:69:1b:ac:b8:f2:ae:74:72:
         48:44:b9:e6:c7:6a:dc:7f:7a:fd:9b:59:5d:5c:d4:8c:b1:bb:
         ca:98:b5:b4:57:e6:7a:c0:22:9f:57:7b:14:fa:6e:6b:37:5b:
         97:bb:90:09:2a:a9:51:2d:5a:d6:b1:9a:9a:df:07:74:97:d1:
         f2:f6:c7:d1:03:a1:cf:cc:b5:5d:53:0e:ae:2f:2a:65:3d:cf:
         66:21:96:e6:a6:c6:c5:8e:a2:65:ef:1e:93:da:9e:7a:fc:e4:
         c0:ef:bf:67:9e:c1:77:2c:1a:dc:22:dd:d0:68:40:45:b8:54:
         57:56:d7:d0:77:26:62:a3:2f:47:d0:9b:bf:04:98:08:8e:9e:
         89:c1:d1:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oKwVNs4RBslix9yLF/H00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YTRmZjY2M2ZhNjcxNWRiMGM2YmZlNzlhOTI4N2VhZGE2
Y2IzZTYwHhcNMjYwNzI4MTAwMDE5WhcNMjYwNzI5MTAwMDE5WjAzMTEwLwYDVQQD
EygyNmI5MGI2YWI3MTgwM2MyNDhjZDhlMWQxNGJkOTQwYzBmMWRjMmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PNNSl5C+YE1xgUVKYepZOipU8Xw
z7UXuLaWX5ZWinP/crN4ZqUzL+23aQ8Qi1+aunjxZ3ghC0NB9VY5iCcqIO47f/Sn
r33nxVAlDU7NzBIcHzuOney/KEiHVBwIcPsNnFjwJffiKfpW2e13mkKrVpPycZU0
UwGIJTXVstPndRqiFOKxJcXQ6gmKCs220cVBwHH/U1hEMGe2yfIYu4czGIqyTgYV
hOvefVIq5FsnCOVNB0beM6z9KZZSekhzzoICEMjedhle4PZMu5IoXCm20acaqnvk
yFuWXGtz96HetRpQBRKKrppa3twXoZcaw2pD9QI8hNsRfM9B6vvKPhAuPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa5C2q3GAPCSM2OHRS9lAwPHcKmMB8GA1UdIwQY
MBaAFNek/2Y/pnFdsMa/55qSh+rabLPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8wYWFiODctYzg1Yi00YThhLTlkYzUt
NmNlNjdlMGYyNTkzLzEvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS8wYWFiODctYzg1Yi00YThhLTlkYzUtNmNlNjdlMGYyNTkz
LzEvMTZUX1pqLW1jVjJ3eHJfbm1wS0g2dHBzcy1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArHn4puyj
D1k1PHHZijpsxdbMp44putrvugSQF0Ts3bMaz650hsd+aBTTPQurf9meupyrlr8p
j6ZdERj8oe/umQb3QXQl8XJN9Uoc6RzObiSjrL6LPkO3ViiURn0K39778TrZAkIo
WOzlOYOTASSJkDWMkm89EWkbrLjyrnRySES55sdq3H96/ZtZXVzUjLG7ypi1tFfm
esAin1d7FPpuazdbl7uQCSqpUS1a1rGamt8HdJfR8vbH0QOhz8y1XVMOri8qZT3P
ZiGW5qbGxY6iZe8ek9qeevzkwO+/Z57Bdywa3CLd0GhARbhUV1bX0HcmYqMvR9Cb
vwSYCI6eicHR1A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:38:27 2026 by rpki-client