Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File:                     mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier:          kBZ/mbSx7yULDK9iPdKTyvZlac9+ELSz/UkhBAktzXo=
Subject key identifier:   75:8B:14:C9:1E:7F:B2:09:CA:29:79:B5:BB:83:A7:99:2E:06:BC:B3
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer:       /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial:       019FA899712BC826AE79C5F46967A1EF1862
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number:          19D8
Signing time:             Tue 28 Jul 2026 12:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:55 +0000
Files and hashes:         1: 1-M17FsedROaF_Kne-5Hqf60_ZF0.roa (hash: dEdEroRDmqUptgIx5X9EfWXuPhIB2SKqFgAL57TKHAs=)
                          2: WMPpPZf121FGb5nB2wRyHO8v-RI.asa (hash: mKLFbSlwYIzmMfnFA89CJdrlniFC0Y+HVLJcXPAW800=)
                          3: iOPKRCMcUAyvxDbxa94mSh4aVLQ.roa (hash: 853t8WhJ4kw5HbkYp7EUF9CdroSNYLBypKw+/lvJndw=)
                          4: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: BrfQh71V6Avpu1BJ5OenrxNScqzjHDAVW9iGsjFoU0I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:71:2b:c8:26:ae:79:c5:f4:69:67:a1:ef:18:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
        Validity
            Not Before: Jul 28 12:00:55 2026 GMT
            Not After : Jul 29 12:00:55 2026 GMT
        Subject: CN=758b14c91e7fb209ca2979b5bb83a7992e06bcb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:30:46:5f:00:ab:79:d1:7d:7c:08:1b:94:30:
                    e5:16:36:3f:d8:b8:88:9c:be:8e:78:16:c6:40:d8:
                    f1:c1:9b:81:fa:ff:0c:1a:d1:9a:40:1e:12:fe:1a:
                    0f:2a:8c:7f:36:1d:a4:f3:e9:6b:f5:a9:b2:bb:88:
                    d5:31:ad:ef:af:59:a5:23:91:07:e3:0c:5d:49:45:
                    ea:e1:be:5d:b0:d2:4d:9d:4f:6d:b1:70:a7:f4:b0:
                    d4:63:bc:d3:86:70:ad:ed:86:6c:64:72:68:6c:88:
                    9b:f3:b5:26:aa:23:b7:56:4b:6d:6b:b4:5d:c1:de:
                    23:0c:1e:c1:d9:e1:4d:42:cf:00:e8:94:88:2a:76:
                    a9:41:cf:fb:5d:05:3a:21:27:8c:c5:93:1e:3e:c0:
                    f7:05:c2:fa:40:fc:6b:ab:41:00:ad:b8:fc:9e:17:
                    a0:dc:16:8e:34:77:1e:a4:1b:a9:0a:53:d0:e3:93:
                    63:fc:b2:6d:c6:2b:1d:5c:e1:8f:92:f6:93:24:d9:
                    f2:d9:67:7d:78:e2:fb:ac:34:ae:9c:0b:c7:a7:7b:
                    7e:05:44:cf:7c:80:74:89:f1:5e:4d:8e:bf:04:8d:
                    d3:7e:45:84:be:76:94:73:00:cf:73:7d:09:db:65:
                    52:1a:0d:12:66:67:6e:e0:a7:09:37:d7:69:88:7e:
                    c1:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8B:14:C9:1E:7F:B2:09:CA:29:79:B5:BB:83:A7:99:2E:06:BC:B3
            X509v3 Authority Key Identifier:
                keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cd:84:f4:b4:3d:af:e9:a4:46:90:df:28:7a:d7:54:2d:07:2f:
         23:9e:2b:05:e6:4c:f1:47:50:67:ff:ce:88:0f:63:56:b4:b6:
         1c:e9:c4:3f:bb:db:09:c4:c0:a3:ab:e1:aa:67:c2:eb:ac:74:
         5f:8f:a3:e1:17:6d:19:59:fb:97:cf:98:7c:b9:4e:d1:23:d4:
         93:be:f3:1b:6d:9c:9c:4c:43:2c:25:cf:35:05:5f:af:ad:8c:
         01:4f:1a:4f:d9:e2:74:ea:7a:d8:0c:01:2a:c9:d6:01:8b:c9:
         87:9d:34:dc:1e:18:0b:4c:d4:0f:8c:1f:93:29:89:c6:ef:29:
         23:1f:02:7a:94:30:df:f3:09:0c:13:2e:24:da:76:35:c7:7d:
         8c:6a:10:49:98:40:b6:35:8c:7e:6c:7d:e1:89:43:27:1f:5e:
         dd:69:b6:ea:00:85:76:ea:5f:1d:e1:56:3c:e9:75:4d:2d:ae:
         63:e3:f0:6a:3e:47:ee:de:4d:4b:0a:74:df:80:30:97:49:4d:
         d6:b4:9d:66:9d:f0:da:1f:d7:63:a9:38:a5:d0:d5:74:3d:49:
         0f:21:96:07:c2:11:7b:e3:0f:1c:e0:29:22:de:8a:92:27:93:
         ac:8c:6e:b6:6f:e2:c5:71:78:e7:9f:37:c5:0e:38:a7:39:f6:
         6a:16:f3:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omXEryCauecX0aWeh7xhiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ODRiOWViMTIyMjM3MTExYzFmOGNhNTc3MDdlYzczMDcy
OTFlZTgwHhcNMjYwNzI4MTIwMDU1WhcNMjYwNzI5MTIwMDU1WjAzMTEwLwYDVQQD
Eyg3NThiMTRjOTFlN2ZiMjA5Y2EyOTc5YjViYjgzYTc5OTJlMDZiY2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8jBGXwCredF9fAgblDDlFjY/2LiI
nL6OeBbGQNjxwZuB+v8MGtGaQB4S/hoPKox/Nh2k8+lr9amyu4jVMa3vr1mlI5EH
4wxdSUXq4b5dsNJNnU9tsXCn9LDUY7zThnCt7YZsZHJobIib87UmqiO3Vktta7Rd
wd4jDB7B2eFNQs8A6JSIKnapQc/7XQU6ISeMxZMePsD3BcL6QPxrq0EArbj8nheg
3BaONHcepBupClPQ45Nj/LJtxisdXOGPkvaTJNny2Wd9eOL7rDSunAvHp3t+BUTP
fIB0ifFeTY6/BI3TfkWEvnaUcwDPc30J22VSGg0SZmdu4KcJN9dpiH7BFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHWLFMkef7IJyil5tbuDp5kuBryzMB8GA1UdIwQY
MBaAFJmEuesSIjcRHB+MpXcH7HMHKR7oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTct
ZDVhYmY1MDMxZDIxLzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9iOWMxZDctMmFlZC00Njk2LTgwYTctZDVhYmY1MDMxZDIx
LzEvbVlTNTZ4SWlOeEVjSDR5bGR3ZnNjd2NwSHVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzYT0tD2v
6aRGkN8oetdULQcvI54rBeZM8UdQZ//OiA9jVrS2HOnEP7vbCcTAo6vhqmfC66x0
X4+j4RdtGVn7l8+YfLlO0SPUk77zG22cnExDLCXPNQVfr62MAU8aT9nidOp62AwB
KsnWAYvJh5003B4YC0zUD4wfkymJxu8pIx8CepQw3/MJDBMuJNp2Ncd9jGoQSZhA
tjWMfmx94YlDJx9e3Wm26gCFdupfHeFWPOl1TS2uY+Pwaj5H7t5NSwp034Awl0lN
1rSdZp3w2h/XY6k4pdDVdD1JDyGWB8IRe+MPHOApIt6KkieTrIxutm/ixXF45583
xQ44pzn2ahbzhw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:01 2026 by rpki-client