Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
File:                     fEuRfckEagZWeK4N9NPjA2nFnGk.mft (raw, json)
Hash identifier:          /MuDdICZmnovF08rPT7rAQMzfgrSQvcvZ4bOHPRDzns=
Subject key identifier:   29:4E:4C:C9:53:C7:7D:D6:4C:82:AA:30:A0:14:F9:B5:53:60:80:A1
Authority key identifier: 7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69
Certificate issuer:       /CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
Certificate serial:       019FA9E2887DAA46CA4B60B149A736128246
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
Manifest number:          19DB
Signing time:             Tue 28 Jul 2026 18:00:23 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:23 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:23 +0000
Files and hashes:         1: 2WzfG0V96raprl5tsrksiHfaCdM.roa (hash: cj3zFnBwwSp9dR2SjduOa1CA7OqZ5tws9MqCW7cLVIs=)
                          2: GwGQYsMzCM-acyFwRTD_V6RJb1M.roa (hash: yUvTGQ5x8/a8Em1WiCW5G1UcimmI7vXu3ljW5sL9lrQ=)
                          3: ay0zAsb-sMRwuqTNi_w0IDfhaZI.roa (hash: 3u1jyhcVn10YQbx/gEpZqXx9qUydqj7K6pIwggoaC9c=)
                          4: fEuRfckEagZWeK4N9NPjA2nFnGk.crl (hash: EfigHe8QlEGt3rb7V775olKgaREaiDdt72OXgKnTTVo=)
                          5: rjeQuso8QDTQv-e8DadgkyEpULg.roa (hash: 4fHbwtCeYsUoufkC59D0UmTlBIXmN4qyj78Mnr4mr2Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:88:7d:aa:46:ca:4b:60:b1:49:a7:36:12:82:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c4b917dc9046a065678ae0df4d3e30369c59c69
        Validity
            Not Before: Jul 28 18:00:23 2026 GMT
            Not After : Jul 29 18:00:23 2026 GMT
        Subject: CN=294e4cc953c77dd64c82aa30a014f9b5536080a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:3e:bd:04:12:36:ba:8e:f1:58:aa:15:8b:09:
                    e6:38:5e:46:67:1f:87:3f:f3:bb:a3:90:97:a7:7d:
                    61:2e:ba:bf:5c:42:78:54:d7:50:ea:f0:06:f5:75:
                    bd:a2:50:a1:52:13:28:32:0e:f8:6f:c9:05:a6:a8:
                    55:ef:0a:ca:70:06:6a:87:df:d1:35:95:5d:b0:18:
                    c3:17:14:41:7c:ae:ff:4c:73:71:e7:dc:a1:d0:f2:
                    68:7c:71:09:c9:fc:73:97:42:79:79:3f:4d:a8:5b:
                    26:11:4d:aa:a8:32:05:1d:fe:2f:6d:81:d3:74:cb:
                    3f:51:44:ec:1f:dd:71:0c:10:f3:45:18:0a:45:01:
                    e9:cd:56:91:31:cd:5d:5f:2e:c5:77:bf:fb:e8:76:
                    6e:3b:a6:c4:f0:c8:53:c1:cf:18:46:58:4e:3c:01:
                    44:88:67:c7:8e:23:95:98:87:6b:62:39:f9:b3:a0:
                    b7:c6:4f:33:cf:2a:3b:18:03:42:75:0d:2e:70:a0:
                    33:57:ef:2e:b4:63:48:4a:1d:fd:cc:fe:30:79:3d:
                    17:3d:db:db:7d:0f:75:89:8a:67:b8:99:c0:9f:02:
                    70:65:60:8c:cd:c3:08:00:bb:87:02:42:e7:1b:79:
                    5c:4c:2e:a7:dd:46:dd:db:d1:0f:fc:74:a7:a2:b9:
                    b3:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:4E:4C:C9:53:C7:7D:D6:4C:82:AA:30:A0:14:F9:B5:53:60:80:A1
            X509v3 Authority Key Identifier:
                keyid:7C:4B:91:7D:C9:04:6A:06:56:78:AE:0D:F4:D3:E3:03:69:C5:9C:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fEuRfckEagZWeK4N9NPjA2nFnGk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8d85d7-4049-4b5a-9bf7-91c70f61a067/1/fEuRfckEagZWeK4N9NPjA2nFnGk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:58:ba:54:97:b5:8f:2a:c7:3a:3e:1f:2a:7b:5c:60:2e:47:
         85:ac:f7:59:69:24:fd:f8:a5:2d:c0:b4:f3:c3:f7:d1:36:98:
         9a:e5:e5:2e:db:61:a3:23:18:76:45:d5:91:d8:c7:fb:2e:1e:
         ae:61:96:ce:d9:93:46:1a:35:6a:9c:b4:8b:6b:99:a2:ee:7c:
         1b:72:df:98:78:d2:3e:44:a4:3b:55:63:53:e1:3e:26:21:93:
         c5:17:21:4d:aa:9a:73:d7:1b:69:26:37:70:62:6d:54:6a:88:
         3c:3d:97:b1:e7:1d:35:0a:88:f8:71:62:93:62:cf:9f:0f:52:
         c8:9b:71:39:a7:bd:7e:bb:6c:77:4d:61:4e:0a:da:a9:3a:d3:
         27:f2:ce:50:d6:e5:a9:59:e5:73:48:dc:4b:9e:d8:19:1e:a6:
         fc:79:4c:26:5a:5a:ef:5a:4d:7f:ca:2d:82:19:48:7e:32:20:
         61:18:4e:2f:7c:49:4b:93:e5:a5:f9:9c:f8:0e:79:7a:51:b7:
         f6:3b:89:b7:93:9c:d7:f2:3f:71:af:92:31:09:ee:5e:58:7b:
         f8:43:ef:65:65:18:b1:46:9f:08:df:a1:0b:db:fc:53:f2:46:
         30:59:a9:5f:68:69:db:1e:c1:b2:81:dd:44:92:c5:fa:cc:46:
         b5:a7:d4:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4oh9qkbKS2CxSac2EoJGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjNGI5MTdkYzkwNDZhMDY1Njc4YWUwZGY0ZDNlMzAzNjlj
NTljNjkwHhcNMjYwNzI4MTgwMDIzWhcNMjYwNzI5MTgwMDIzWjAzMTEwLwYDVQQD
EygyOTRlNGNjOTUzYzc3ZGQ2NGM4MmFhMzBhMDE0ZjliNTUzNjA4MGExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D69BBI2uo7xWKoViwnmOF5GZx+H
P/O7o5CXp31hLrq/XEJ4VNdQ6vAG9XW9olChUhMoMg74b8kFpqhV7wrKcAZqh9/R
NZVdsBjDFxRBfK7/THNx59yh0PJofHEJyfxzl0J5eT9NqFsmEU2qqDIFHf4vbYHT
dMs/UUTsH91xDBDzRRgKRQHpzVaRMc1dXy7Fd7/76HZuO6bE8MhTwc8YRlhOPAFE
iGfHjiOVmIdrYjn5s6C3xk8zzyo7GANCdQ0ucKAzV+8utGNISh39zP4weT0XPdvb
fQ91iYpnuJnAnwJwZWCMzcMIALuHAkLnG3lcTC6n3Ubd29EP/HSnormzgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClOTMlTx33WTIKqMKAU+bVTYIChMB8GA1UdIwQY
MBaAFHxLkX3JBGoGVniuDfTT4wNpxZxpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjct
OTFjNzBmNjFhMDY3LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi84ZDg1ZDctNDA0OS00YjVhLTliZjctOTFjNzBmNjFhMDY3
LzEvZkV1UmZja0VhZ1pXZUs0TjlOUGpBMm5GbkdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkli6VJe1
jyrHOj4fKntcYC5Hhaz3WWkk/filLcC088P30TaYmuXlLtthoyMYdkXVkdjH+y4e
rmGWztmTRho1apy0i2uZou58G3LfmHjSPkSkO1VjU+E+JiGTxRchTaqac9cbaSY3
cGJtVGqIPD2XsecdNQqI+HFik2LPnw9SyJtxOae9frtsd01hTgraqTrTJ/LOUNbl
qVnlc0jcS57YGR6m/HlMJlpa71pNf8otghlIfjIgYRhOL3xJS5Plpfmc+A55elG3
9juJt5Oc1/I/ca+SMQnuXlh7+EPvZWUYsUafCN+hC9v8U/JGMFmpX2hp2x7BsoHd
RJLF+sxGtafU/A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:04 2026 by rpki-client