Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
File:                     ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft (raw, json)
Hash identifier:          0gQhDh+TREKabn+GsN5T1PKFRYDo1XyYiA72k2w41MI=
Subject key identifier:   1F:CE:90:77:4E:F2:04:51:28:18:61:79:8C:73:9D:B6:6E:B6:6F:59
Authority key identifier: CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5
Certificate issuer:       /CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
Certificate serial:       019FAA19D2C7D5DDE08922259234C5671C37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
Manifest number:          133D
Signing time:             Tue 28 Jul 2026 19:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:46 +0000
Files and hashes:         1: 16Fc5-LnF5siMEpZnuR4lKcQNuI.roa (hash: /DFWjdkQzHlEBKOGD6xuczzfIPaMRVwEIuK9rhvSJyI=)
                          2: II2FD1f4xCm3D1NbPKz8FS6h0Jc.roa (hash: 7LsFeRZGlNF+Y+qphYoLdVC4raU4LnXBUOFidUeAFTk=)
                          3: XO1viMFitX_oQoNKUBYNw7H6D54.roa (hash: jVh+iUQm/gwRWI08v+pcXmrPul1qy5rkSN9bPBWuSAg=)
                          4: ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl (hash: BvkmSZGOWyvRrFjDfDf7W6h8H8carZcjprlUOE1p44k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:d2:c7:d5:dd:e0:89:22:25:92:34:c5:67:1c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cac9804e227eaac9ac09b0821fc07ee2817777b5
        Validity
            Not Before: Jul 28 19:00:46 2026 GMT
            Not After : Jul 29 19:00:46 2026 GMT
        Subject: CN=1fce90774ef20451281861798c739db66eb66f59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:61:ca:60:04:ba:c0:65:7c:10:a4:f1:58:56:
                    a4:e5:07:01:55:f2:36:34:e5:18:58:76:f2:e8:36:
                    3c:5b:a6:4d:69:a2:ac:f0:af:d3:d7:90:5e:dd:1c:
                    37:1b:5a:48:41:b8:43:ea:c9:86:0e:e1:27:c9:e2:
                    d2:c7:37:65:9e:e4:f3:35:fe:4a:37:58:b5:13:37:
                    67:2e:24:e0:8a:10:1b:50:e5:37:7e:3a:6f:c5:6a:
                    6a:e1:f6:f3:05:92:19:b8:10:74:64:66:cc:8f:f4:
                    50:91:c3:13:c3:e1:a8:39:fc:b0:b9:55:72:16:9a:
                    e2:50:44:6f:f5:5e:f6:8a:a3:4c:65:f8:32:6e:b8:
                    a4:06:31:ad:5f:bf:2a:08:be:96:8b:f5:ea:d2:2b:
                    d6:0e:5d:c1:9b:78:4d:8c:20:29:50:93:46:5e:fc:
                    3a:b6:73:09:a8:54:3e:df:6e:a6:ee:58:6d:a7:2a:
                    c6:65:25:e0:2c:8a:97:46:78:b2:1a:d8:5c:5f:19:
                    c4:8e:06:00:88:29:83:13:67:fe:aa:9e:d1:5b:85:
                    9c:61:fb:19:c4:40:9c:83:50:13:a2:2e:c2:78:27:
                    ff:5f:3c:b2:de:ee:c1:f0:c0:d9:31:d8:cf:6d:cd:
                    e1:4a:6a:fe:e4:08:c7:7d:15:b7:36:63:f8:c8:32:
                    c9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CE:90:77:4E:F2:04:51:28:18:61:79:8C:73:9D:B6:6E:B6:6F:59
            X509v3 Authority Key Identifier:
                keyid:CA:C9:80:4E:22:7E:AA:C9:AC:09:B0:82:1F:C0:7E:E2:81:77:77:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ysmATiJ-qsmsCbCCH8B-4oF3d7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/bcea5d-514e-4f52-b49a-90fb57d40ca7/1/ysmATiJ-qsmsCbCCH8B-4oF3d7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:bc:14:c6:29:d9:53:da:23:55:87:ab:35:f8:2a:eb:e5:78:
         39:e5:70:dc:87:ce:5a:08:24:3e:1b:c6:2d:7c:86:4c:a3:83:
         51:f7:74:ac:53:4a:12:c6:f0:9f:ce:41:98:cd:14:47:f3:81:
         d5:fa:a2:49:df:5c:4c:85:eb:47:74:52:b4:dd:1e:52:bb:78:
         9e:b7:05:61:07:7e:31:c6:bf:b0:d5:30:1f:35:81:63:10:9c:
         e7:0f:2e:ed:1c:16:a3:f4:b6:58:25:12:9c:51:3f:dd:98:6b:
         1c:d2:00:3c:b2:b0:25:d4:38:97:20:84:18:97:81:86:f3:e3:
         0c:22:45:91:09:06:3e:79:e6:e6:95:57:e2:5d:a0:d3:7c:82:
         cd:d4:a6:f4:40:18:b4:29:50:4e:76:8e:7f:77:0a:64:96:17:
         29:e8:b9:03:92:a8:a4:e6:ed:b9:f7:de:e2:11:a4:d4:07:4e:
         f0:2f:cd:b3:89:5d:72:8b:42:bd:ba:ff:47:60:ea:91:82:2b:
         48:ec:31:b8:78:e1:62:9f:b2:9f:a4:20:f0:23:43:90:45:01:
         8f:39:e4:a9:2a:8a:f7:c6:62:63:95:99:7a:02:6b:da:c5:a1:
         64:f7:6a:1f:06:b0:c8:8e:00:82:f8:2a:02:65:15:db:c0:72:
         6d:6d:a8:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGdLH1d3giSIlkjTFZxw3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNhYzk4MDRlMjI3ZWFhYzlhYzA5YjA4MjFmYzA3ZWUyODE3
Nzc3YjUwHhcNMjYwNzI4MTkwMDQ2WhcNMjYwNzI5MTkwMDQ2WjAzMTEwLwYDVQQD
EygxZmNlOTA3NzRlZjIwNDUxMjgxODYxNzk4YzczOWRiNjZlYjY2ZjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWHKYAS6wGV8EKTxWFak5QcBVfI2
NOUYWHby6DY8W6ZNaaKs8K/T15Be3Rw3G1pIQbhD6smGDuEnyeLSxzdlnuTzNf5K
N1i1EzdnLiTgihAbUOU3fjpvxWpq4fbzBZIZuBB0ZGbMj/RQkcMTw+GoOfywuVVy
FpriUERv9V72iqNMZfgybrikBjGtX78qCL6Wi/Xq0ivWDl3Bm3hNjCApUJNGXvw6
tnMJqFQ+326m7lhtpyrGZSXgLIqXRniyGthcXxnEjgYAiCmDE2f+qp7RW4WcYfsZ
xECcg1AToi7CeCf/Xzyy3u7B8MDZMdjPbc3hSmr+5AjHfRW3NmP4yDLJrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/OkHdO8gRRKBhheYxznbZutm9ZMB8GA1UdIwQY
MBaAFMrJgE4ifqrJrAmwgh/AfuKBd3e1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEt
OTBmYjU3ZDQwY2E3LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9iY2VhNWQtNTE0ZS00ZjUyLWI0OWEtOTBmYjU3ZDQwY2E3
LzEveXNtQVRpSi1xc21zQ2JDQ0g4Qi00b0YzZDdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx7wUxinZ
U9ojVYerNfgq6+V4OeVw3IfOWggkPhvGLXyGTKODUfd0rFNKEsbwn85BmM0UR/OB
1fqiSd9cTIXrR3RStN0eUrt4nrcFYQd+Mca/sNUwHzWBYxCc5w8u7RwWo/S2WCUS
nFE/3ZhrHNIAPLKwJdQ4lyCEGJeBhvPjDCJFkQkGPnnm5pVX4l2g03yCzdSm9EAY
tClQTnaOf3cKZJYXKei5A5KopObtuffe4hGk1AdO8C/Ns4ldcotCvbr/R2DqkYIr
SOwxuHjhYp+yn6Qg8CNDkEUBjznkqSqK98ZiY5WZegJr2sWhZPdqHwawyI4Agvgq
AmUV28BybW2oLA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:31:29 2026 by rpki-client