Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
File:                     I7GUMIfOaWI-drIUWzR5rCBLock.mft (raw, json)
Hash identifier:          qs9V3HjCyaAl3zvs63DTyabnFDC98OwIaX/NdvXPZM8=
Subject key identifier:   15:79:4E:26:62:1B:8B:BF:DA:83:DB:A3:95:9B:FA:90:AF:16:1F:90
Authority key identifier: 23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9
Certificate issuer:       /CN=23b1943087ce69623e76b2145b3479ac204ba1c9
Certificate serial:       019FAAF560A8EE9BB9E79AF8C5E3AFF6332D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
Manifest number:          1912
Signing time:             Tue 28 Jul 2026 23:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:35 +0000
Files and hashes:         1: 78v4VJEfw5PVOd7xHPXoIyfNp48.roa (hash: 6qQ8BW5L0oi0uF4TdnOMiqJXcCMSoxgt26+h+J3CUsI=)
                          2: Di79UbTmbpFxSYwbXsMn-pZLrV8.roa (hash: tV65sDjzx9UVZdR97H6FDEjyFBVEvZi4/CVnig4SJ08=)
                          3: I7GUMIfOaWI-drIUWzR5rCBLock.crl (hash: x+0bEGA3k2hGca/gk+e2Hp62ncJq7Y1x8J1Ktn84pVI=)
                          4: Xy9KAo8RgHqzd9LCgtHpYYSq1Ws.roa (hash: pkyeg5y/UqA2MwW/DbnlFyqNjdMeUTSbZh1g/kjVAXE=)
                          5: fMLivNYCuxdhHtX3Ga7hVSkjoJM.roa (hash: 9AwEnRwEhqte/EFdOWwlxFhd4JAdP6+asha44+p++gg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:60:a8:ee:9b:b9:e7:9a:f8:c5:e3:af:f6:33:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b1943087ce69623e76b2145b3479ac204ba1c9
        Validity
            Not Before: Jul 28 23:00:35 2026 GMT
            Not After : Jul 29 23:00:35 2026 GMT
        Subject: CN=15794e26621b8bbfda83dba3959bfa90af161f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ab:df:6f:91:d8:56:d1:cd:27:fe:8e:ee:e0:
                    14:99:77:a5:0b:02:0f:8b:7c:80:33:99:61:d4:02:
                    2d:a2:2c:c7:fe:70:d7:3e:19:b5:bd:41:a5:92:c2:
                    f4:c4:a5:d0:b7:6b:44:56:d6:a6:3c:65:69:88:87:
                    ed:dc:0c:c7:07:23:18:15:b9:2b:77:4d:04:d0:62:
                    d3:68:c7:08:21:b9:2a:b5:a5:bd:00:36:35:7e:93:
                    ae:ad:e7:0e:9c:d9:c0:0d:9a:7b:37:8b:88:a3:42:
                    6e:f4:a1:26:2f:4a:d6:15:37:9e:eb:3d:d5:54:dc:
                    65:05:27:51:a6:ae:e9:30:e0:37:4e:64:5f:63:46:
                    b6:a0:84:b2:b5:87:b6:ad:a7:34:90:55:f1:b4:8c:
                    eb:11:cd:05:2f:82:48:e4:db:59:26:6d:1e:b2:20:
                    92:9e:a2:d2:b2:47:7f:14:39:41:ac:45:ad:5b:4d:
                    c3:bd:54:26:82:93:a5:9c:d2:26:bb:f8:5b:ea:b3:
                    fe:72:a2:ed:38:e9:8e:9f:4b:69:44:a4:56:3d:f2:
                    ba:80:b5:1f:c3:d4:7b:a5:78:f1:90:e9:0e:be:17:
                    d4:0c:7a:cc:60:b7:e7:b4:bc:7d:81:6d:8e:c4:88:
                    cc:d5:83:69:10:52:87:b6:b4:02:38:ce:03:a6:9c:
                    02:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:79:4E:26:62:1B:8B:BF:DA:83:DB:A3:95:9B:FA:90:AF:16:1F:90
            X509v3 Authority Key Identifier:
                keyid:23:B1:94:30:87:CE:69:62:3E:76:B2:14:5B:34:79:AC:20:4B:A1:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7GUMIfOaWI-drIUWzR5rCBLock.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/73f1c9-82b0-4ede-b899-f742f395aaf9/1/I7GUMIfOaWI-drIUWzR5rCBLock.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:41:9d:32:27:56:e2:c9:9d:aa:54:6a:f8:42:18:8d:6b:bf:
         c0:fc:03:a3:27:9e:b7:ca:ac:3c:c2:61:7d:15:cd:09:a6:16:
         e3:e3:c4:a2:b8:04:45:cb:0a:59:62:33:65:c0:15:b8:0b:d9:
         86:2c:a0:c8:33:72:ec:85:12:37:79:5e:7a:f4:8d:a9:15:1c:
         75:f3:d6:50:cf:94:7a:74:b1:06:3c:21:2e:21:37:c5:3c:fd:
         d8:0a:b4:63:02:89:fe:a3:8b:97:f2:5b:ba:b2:90:48:4f:cd:
         94:e4:ac:e3:a6:29:89:8d:13:29:ef:67:25:62:bb:30:99:cc:
         fd:9e:30:d5:e5:f3:8b:77:1d:1e:6c:3b:b4:a6:12:e8:48:d1:
         24:53:e6:c9:90:f7:10:cf:0f:65:54:24:c8:73:58:80:eb:aa:
         ef:e0:fa:d4:c1:ff:7b:24:8f:64:e5:c8:94:88:51:df:6c:93:
         e1:8d:8a:d8:ad:54:a0:52:3a:44:c1:f1:11:13:a6:1b:bf:61:
         29:51:d7:e8:a1:0c:c3:12:96:a4:01:30:0e:fd:09:16:6e:ae:
         64:38:27:48:ea:11:39:7a:90:34:88:b8:cd:59:ae:03:0c:58:
         fb:05:27:f6:31:78:2d:0c:21:b6:75:04:71:6d:13:58:69:ea:
         19:08:8e:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9WCo7pu555r4xeOv9jMtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYjE5NDMwODdjZTY5NjIzZTc2YjIxNDViMzQ3OWFjMjA0
YmExYzkwHhcNMjYwNzI4MjMwMDM1WhcNMjYwNzI5MjMwMDM1WjAzMTEwLwYDVQQD
EygxNTc5NGUyNjYyMWI4YmJmZGE4M2RiYTM5NTliZmE5MGFmMTYxZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6vfb5HYVtHNJ/6O7uAUmXelCwIP
i3yAM5lh1AItoizH/nDXPhm1vUGlksL0xKXQt2tEVtamPGVpiIft3AzHByMYFbkr
d00E0GLTaMcIIbkqtaW9ADY1fpOurecOnNnADZp7N4uIo0Ju9KEmL0rWFTee6z3V
VNxlBSdRpq7pMOA3TmRfY0a2oISytYe2rac0kFXxtIzrEc0FL4JI5NtZJm0esiCS
nqLSskd/FDlBrEWtW03DvVQmgpOlnNImu/hb6rP+cqLtOOmOn0tpRKRWPfK6gLUf
w9R7pXjxkOkOvhfUDHrMYLfntLx9gW2OxIjM1YNpEFKHtrQCOM4DppwCrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBV5TiZiG4u/2oPbo5Wb+pCvFh+QMB8GA1UdIwQY
MBaAFCOxlDCHzmliPnayFFs0eawgS6HJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTkt
Zjc0MmYzOTVhYWY5LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83M2YxYzktODJiMC00ZWRlLWI4OTktZjc0MmYzOTVhYWY5
LzEvSTdHVU1JZk9hV0ktZHJJVVd6UjVyQ0JMb2NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfkGdMidW
4smdqlRq+EIYjWu/wPwDoyeet8qsPMJhfRXNCaYW4+PEorgERcsKWWIzZcAVuAvZ
hiygyDNy7IUSN3leevSNqRUcdfPWUM+UenSxBjwhLiE3xTz92Aq0YwKJ/qOLl/Jb
urKQSE/NlOSs46YpiY0TKe9nJWK7MJnM/Z4w1eXzi3cdHmw7tKYS6EjRJFPmyZD3
EM8PZVQkyHNYgOuq7+D61MH/eySPZOXIlIhR32yT4Y2K2K1UoFI6RMHxEROmG79h
KVHX6KEMwxKWpAEwDv0JFm6uZDgnSOoROXqQNIi4zVmuAwxY+wUn9jF4LQwhtnUE
cW0TWGnqGQiOaA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:27:27 2026 by rpki-client