Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
File:                     V0zKiZ71v0I38Pa90XeSIbIAUvM.mft (raw, json)
Hash identifier:          26aDTXnMdqEXdrH5VUbDR/v0X1L38MI4ekpPcl4o9MI=
Subject key identifier:   A3:5C:08:41:FE:2C:69:53:39:2C:4D:52:13:19:41:E3:13:DA:CB:28
Authority key identifier: 57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3
Certificate issuer:       /CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
Certificate serial:       019FAAF6085AECEA7737A6BB3CDC1104955D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
Manifest number:          19DD
Signing time:             Tue 28 Jul 2026 23:01:18 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:18 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:18 +0000
Files and hashes:         1: LEuYoFCXhInzPdNgWnas4QB6xcE.asa (hash: 9rbkn1NHCcTS6LE4JL5/e1dtTrb/DOIhiwih8TaALY0=)
                          2: V0zKiZ71v0I38Pa90XeSIbIAUvM.crl (hash: MDWmRY3flTb2+Vo1xInIqlxNDacFqZBQcNZRKh80SZA=)
                          3: hUSppmm3TUDUe9c3zKVYGDhp5FI.roa (hash: wajskwcklMoTdKJT16kOKBQL/f8FpnT58RrghPxKbEc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:08:5a:ec:ea:77:37:a6:bb:3c:dc:11:04:95:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=574cca899ef5bf4237f0f6bdd1779221b20052f3
        Validity
            Not Before: Jul 28 23:01:18 2026 GMT
            Not After : Jul 29 23:01:18 2026 GMT
        Subject: CN=a35c0841fe2c6953392c4d52131941e313dacb28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ca:7f:e4:a6:1c:7c:ab:bf:e4:6f:7c:cd:2b:
                    42:8d:c4:b4:6e:a0:d5:2e:de:2d:58:89:eb:ea:fe:
                    d1:0b:25:c4:9e:a0:66:51:f0:6d:2a:82:d4:40:64:
                    36:21:74:c6:3a:b4:35:1a:35:f7:67:09:de:08:ff:
                    30:bc:11:ec:23:e0:01:c3:f6:a6:39:b6:69:c9:91:
                    e8:3f:82:4f:9b:79:98:b8:1c:3f:d7:ea:63:83:09:
                    52:32:9d:0d:09:a0:d5:bb:ef:e2:71:48:3d:f1:f0:
                    fd:39:d0:5b:8c:78:96:5f:a1:92:8a:ef:0c:5f:88:
                    90:97:a7:73:74:89:23:b1:dd:3a:5e:e4:d0:5a:e0:
                    f4:67:36:0a:f9:4d:82:cf:d9:43:34:28:f6:67:05:
                    82:2d:e5:14:ef:6c:78:82:64:97:fb:cf:6f:71:dc:
                    2e:80:b8:e2:a0:28:32:4c:4b:b0:1a:70:2e:6a:8d:
                    00:65:ec:02:68:bf:05:e3:6d:4f:3a:53:9e:00:03:
                    55:a7:e8:52:54:2f:cc:9a:8d:8d:3c:d8:cd:de:9d:
                    63:e1:ed:0d:53:86:2b:b0:27:f1:fd:13:a5:f6:cd:
                    96:c3:e9:04:75:99:09:60:2a:4f:f3:7b:8a:12:cb:
                    69:af:02:3b:6c:e6:47:62:7e:21:dd:45:b5:55:2f:
                    97:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:5C:08:41:FE:2C:69:53:39:2C:4D:52:13:19:41:E3:13:DA:CB:28
            X509v3 Authority Key Identifier:
                keyid:57:4C:CA:89:9E:F5:BF:42:37:F0:F6:BD:D1:77:92:21:B2:00:52:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V0zKiZ71v0I38Pa90XeSIbIAUvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/938abd-1019-4e7a-aa82-ee1126a28195/1/V0zKiZ71v0I38Pa90XeSIbIAUvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:be:99:be:f2:ad:44:39:a4:6b:bf:eb:0f:44:7f:7c:be:b3:
         1a:6f:fa:d2:e5:b6:2c:55:40:20:d1:c4:45:92:73:b9:7b:27:
         4b:50:26:63:b5:d9:e9:1f:cc:15:28:73:29:9f:9f:4d:3c:e2:
         52:c1:4f:cd:22:51:3b:cc:cc:2c:81:0d:a8:f6:1a:aa:52:d2:
         ae:5b:4a:61:28:6f:5f:d8:75:1a:99:aa:30:37:bf:63:48:e6:
         47:37:40:f1:5c:c3:02:c7:15:bd:8b:78:e5:4f:a9:f6:88:ce:
         79:9f:87:f3:2f:80:c1:93:79:5d:2f:9f:a9:59:92:d7:d8:31:
         fe:da:9a:3d:ce:8f:6c:b4:5b:e8:fe:b6:68:70:b1:bf:22:e8:
         e1:7b:10:c8:5c:75:39:a6:79:09:07:ee:16:8e:e0:33:62:de:
         0d:54:ae:20:08:9f:1a:37:e1:28:fb:cd:a2:4d:bf:e5:7b:06:
         81:55:d7:30:b5:c4:85:bf:dc:16:28:2e:48:66:7c:b1:20:68:
         e4:a0:ba:a6:cd:c3:aa:2d:b7:68:92:a7:33:13:4b:8c:4c:23:
         df:06:5b:96:fa:ef:89:df:ae:18:73:76:96:d0:06:22:14:66:
         8e:6d:82:65:b2:09:21:c2:df:21:83:d9:4d:de:86:91:b8:8d:
         f1:55:55:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9gha7Op3N6a7PNwRBJVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NGNjYTg5OWVmNWJmNDIzN2YwZjZiZGQxNzc5MjIxYjIw
MDUyZjMwHhcNMjYwNzI4MjMwMTE4WhcNMjYwNzI5MjMwMTE4WjAzMTEwLwYDVQQD
EyhhMzVjMDg0MWZlMmM2OTUzMzkyYzRkNTIxMzE5NDFlMzEzZGFjYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysp/5KYcfKu/5G98zStCjcS0bqDV
Lt4tWInr6v7RCyXEnqBmUfBtKoLUQGQ2IXTGOrQ1GjX3ZwneCP8wvBHsI+ABw/am
ObZpyZHoP4JPm3mYuBw/1+pjgwlSMp0NCaDVu+/icUg98fD9OdBbjHiWX6GSiu8M
X4iQl6dzdIkjsd06XuTQWuD0ZzYK+U2Cz9lDNCj2ZwWCLeUU72x4gmSX+89vcdwu
gLjioCgyTEuwGnAuao0AZewCaL8F421POlOeAANVp+hSVC/Mmo2NPNjN3p1j4e0N
U4YrsCfx/ROl9s2Ww+kEdZkJYCpP83uKEstprwI7bOZHYn4h3UW1VS+XNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKNcCEH+LGlTOSxNUhMZQeMT2ssoMB8GA1UdIwQY
MBaAFFdMyome9b9CN/D2vdF3kiGyAFLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODIt
ZWUxMTI2YTI4MTk1LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC85MzhhYmQtMTAxOS00ZTdhLWFhODItZWUxMTI2YTI4MTk1
LzEvVjB6S2laNzF2MEkzOFBhOTBYZVNJYklBVXZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlb6ZvvKt
RDmka7/rD0R/fL6zGm/60uW2LFVAINHERZJzuXsnS1AmY7XZ6R/MFShzKZ+fTTzi
UsFPzSJRO8zMLIENqPYaqlLSrltKYShvX9h1GpmqMDe/Y0jmRzdA8VzDAscVvYt4
5U+p9ojOeZ+H8y+AwZN5XS+fqVmS19gx/tqaPc6PbLRb6P62aHCxvyLo4XsQyFx1
OaZ5CQfuFo7gM2LeDVSuIAifGjfhKPvNok2/5XsGgVXXMLXEhb/cFiguSGZ8sSBo
5KC6ps3Dqi23aJKnMxNLjEwj3wZblvrvid+uGHN2ltAGIhRmjm2CZbIJIcLfIYPZ
Td6GkbiN8VVVGg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:27:29 2026 by rpki-client