Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
File:                     V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft (raw, json)
Hash identifier:          wq4vkrNNTTov3zHDf34tUhWsi+rrWIx3RKc8oyDeeIM=
Subject key identifier:   62:5B:DE:35:6C:7F:13:4E:83:24:46:78:0B:B4:78:68:E0:A6:1B:38
Authority key identifier: 57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0
Certificate issuer:       /CN=579d549a3316e42571cca5f8380e2df59c2b34a0
Certificate serial:       019FAC3F3959CDD5F63E7F16AA03CA011743
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
Manifest number:          3C
Signing time:             Wed 29 Jul 2026 05:00:52 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:52 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:52 +0000
Files and hashes:         1: HXHjwpKZ0hUuhA-ecTFWovLriWw.roa (hash: /sTU1en73B/4P9sdmgCdOcbF8vhNLR8j5kj2wC8xqfE=)
                          2: V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl (hash: AvEBG4TL2uNJ+Mf8CEW7eMf/g1SlNMUTIKKBbf834hQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:39:59:cd:d5:f6:3e:7f:16:aa:03:ca:01:17:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579d549a3316e42571cca5f8380e2df59c2b34a0
        Validity
            Not Before: Jul 29 05:00:52 2026 GMT
            Not After : Jul 30 05:00:52 2026 GMT
        Subject: CN=625bde356c7f134e832446780bb47868e0a61b38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d7:62:86:53:b8:96:c9:c6:7b:7d:f6:3e:03:
                    cf:e3:ad:02:ec:7f:ca:c2:c1:6b:5f:ca:2d:a0:ac:
                    dc:af:61:0c:1a:ec:c3:62:f8:26:5d:59:61:15:4c:
                    e4:e5:f2:87:bc:41:3f:99:b7:80:e2:29:d5:88:1a:
                    0a:d1:25:e2:13:c1:30:56:15:d3:eb:f9:1f:17:64:
                    ed:0c:d4:a8:44:39:05:89:4f:d9:22:ba:56:8d:90:
                    33:f2:cf:77:ad:eb:88:45:b3:42:c1:1e:94:be:82:
                    14:a7:80:5a:32:5e:bc:37:48:f9:57:d9:48:26:73:
                    f7:84:34:09:b6:6f:fc:eb:fa:af:87:b3:5d:c4:29:
                    13:27:8b:55:66:40:71:41:7d:39:af:ff:ff:59:cb:
                    a5:6e:d0:66:d8:4e:92:ac:22:3f:69:a1:84:cf:81:
                    e7:9b:8d:f4:6d:dd:9e:35:96:48:8c:ac:99:5b:2c:
                    0d:e1:38:2f:fa:11:87:58:b1:d7:9e:b2:81:12:1b:
                    37:5c:a2:a0:6d:4f:67:ef:50:4c:94:47:e9:89:f4:
                    b6:7d:66:bc:4a:59:44:db:0b:8c:9b:37:77:a5:b8:
                    6d:9d:ab:d7:01:e6:75:cf:89:91:4d:32:e3:20:34:
                    24:24:e7:62:34:de:10:a2:84:b4:9d:29:f2:39:55:
                    f8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:5B:DE:35:6C:7F:13:4E:83:24:46:78:0B:B4:78:68:E0:A6:1B:38
            X509v3 Authority Key Identifier:
                keyid:57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:3b:4e:a5:0f:f9:7d:fa:09:fb:d8:8c:f0:9c:11:7f:9b:a5:
         0b:59:d3:a9:ef:f6:45:3b:cb:56:ee:f4:b1:ba:20:8b:2d:52:
         1b:91:5f:f9:1d:88:f7:20:e4:ab:f7:11:e4:cf:5b:88:4e:84:
         5b:57:ae:d8:2b:e7:7b:21:59:c6:ec:d1:55:3e:cd:e3:ff:e1:
         90:e3:e7:1c:9b:3c:25:0c:49:5c:bd:20:c0:95:db:1d:bc:a2:
         fa:91:39:68:98:45:bb:87:8d:48:0c:05:1e:08:36:e0:01:74:
         64:1f:8d:f5:f7:6a:75:7c:6f:8d:d1:46:e9:d7:58:89:c3:2e:
         44:41:cd:e3:1a:4f:29:13:82:d7:6e:f8:4a:ec:c3:17:37:99:
         bf:1f:6b:c7:2b:a4:da:0f:a4:25:af:b5:06:28:ea:e3:af:9c:
         15:17:4e:7e:e6:ea:bc:7a:67:a6:56:c1:6a:34:66:cd:75:ff:
         7c:54:96:79:e6:cc:a2:85:ab:e1:70:6d:fb:be:54:81:8a:bc:
         5d:08:25:2e:b7:23:60:61:c3:a1:62:57:62:52:65:dd:78:dd:
         a5:31:f4:84:c5:2c:98:73:ec:c3:16:99:eb:34:4a:74:6e:81:
         94:b4:9a:7a:0a:3a:d5:0a:08:69:48:ed:61:9f:e0:7e:84:c6:
         7c:60:15:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPzlZzdX2Pn8WqgPKARdDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3OWQ1NDlhMzMxNmU0MjU3MWNjYTVmODM4MGUyZGY1OWMy
YjM0YTAwHhcNMjYwNzI5MDUwMDUyWhcNMjYwNzMwMDUwMDUyWjAzMTEwLwYDVQQD
Eyg2MjViZGUzNTZjN2YxMzRlODMyNDQ2NzgwYmI0Nzg2OGUwYTYxYjM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtdihlO4lsnGe332PgPP460C7H/K
wsFrX8otoKzcr2EMGuzDYvgmXVlhFUzk5fKHvEE/mbeA4inViBoK0SXiE8EwVhXT
6/kfF2TtDNSoRDkFiU/ZIrpWjZAz8s93reuIRbNCwR6UvoIUp4BaMl68N0j5V9lI
JnP3hDQJtm/86/qvh7NdxCkTJ4tVZkBxQX05r///WculbtBm2E6SrCI/aaGEz4Hn
m430bd2eNZZIjKyZWywN4Tgv+hGHWLHXnrKBEhs3XKKgbU9n71BMlEfpifS2fWa8
SllE2wuMmzd3pbhtnavXAeZ1z4mRTTLjIDQkJOdiNN4QooS0nSnyOVX4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJb3jVsfxNOgyRGeAu0eGjgphs4MB8GA1UdIwQY
MBaAFFedVJozFuQlccyl+DgOLfWcKzSgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjUxVW1qTVc1Q1Z4ektYNE9BNHQ5WndyTktBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8yNDE0NWItMjMyNC00MzBkLWIwMmIt
NGE0NGViMGVhZjg2LzEvVjUxVW1qTVc1Q1Z4ektYNE9BNHQ5WndyTktBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS8yNDE0NWItMjMyNC00MzBkLWIwMmItNGE0NGViMGVhZjg2
LzEvVjUxVW1qTVc1Q1Z4ektYNE9BNHQ5WndyTktBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTtOpQ/5
ffoJ+9iM8JwRf5ulC1nTqe/2RTvLVu70sbogiy1SG5Ff+R2I9yDkq/cR5M9biE6E
W1eu2CvneyFZxuzRVT7N4//hkOPnHJs8JQxJXL0gwJXbHbyi+pE5aJhFu4eNSAwF
Hgg24AF0ZB+N9fdqdXxvjdFG6ddYicMuREHN4xpPKROC1274SuzDFzeZvx9rxyuk
2g+kJa+1Bijq46+cFRdOfubqvHpnplbBajRmzXX/fFSWeebMooWr4XBt+75UgYq8
XQglLrcjYGHDoWJXYlJl3XjdpTH0hMUsmHPswxaZ6zRKdG6BlLSaego61QoIaUjt
YZ/gfoTGfGAV/w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:24:13 2026 by rpki-client