Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
File:                     7UzThqszeH_NQAJiK4OHZAb_8ZA.mft (raw, json)
Hash identifier:          mRsbUWjz5kekqK0mvyFPujYQDTOqfBlZYzn3UB4dzBA=
Subject key identifier:   5D:66:B1:8B:9E:6F:DE:7A:47:91:6D:1F:43:B8:73:47:3E:43:A7:FD
Authority key identifier: ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90
Certificate issuer:       /CN=ed4cd386ab33787fcd4002622b83876406fff190
Certificate serial:       019FABD14CD646E6E2F51E162B7ECBDFB11D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
Manifest number:          19D2
Signing time:             Wed 29 Jul 2026 03:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:48 +0000
Files and hashes:         1: 7UzThqszeH_NQAJiK4OHZAb_8ZA.crl (hash: yoxoXcFqG1XxYtTLf6Ia37QuHKclf8xXJvAcYjBh4Js=)
                          2: DLJ6Lc26hou-gghVAiRPeC5X_w0.roa (hash: 0ehkmbQVXLiYPEC/LI/+SW3yDQBg8UXsIn3OJpfQk0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:4c:d6:46:e6:e2:f5:1e:16:2b:7e:cb:df:b1:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed4cd386ab33787fcd4002622b83876406fff190
        Validity
            Not Before: Jul 29 03:00:48 2026 GMT
            Not After : Jul 30 03:00:48 2026 GMT
        Subject: CN=5d66b18b9e6fde7a47916d1f43b873473e43a7fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c1:55:3a:2c:1b:23:08:33:c9:49:e6:5a:f4:
                    87:d1:ea:f5:a4:6f:e7:50:85:55:46:72:0f:bc:35:
                    36:64:30:3b:b7:5f:2f:0d:dd:30:92:ff:8e:83:d0:
                    b4:dc:28:98:8e:d4:3f:fd:36:9c:a6:9f:65:16:7d:
                    c7:12:df:04:eb:c3:40:7c:d7:30:7d:ec:1a:0c:b1:
                    c6:f3:92:bd:6b:24:ff:72:a8:c9:b2:41:0c:06:e1:
                    51:68:a6:85:6c:53:20:36:3e:c1:35:4f:46:83:cd:
                    ab:0c:99:9b:23:0e:58:68:95:bb:dc:ac:9b:a6:12:
                    66:3b:a5:17:78:e3:74:db:aa:ad:9c:59:b8:83:88:
                    cb:9f:9a:80:cb:11:a7:87:8c:64:5a:36:4b:bf:31:
                    a5:22:83:6a:7f:7d:a4:ab:0e:c7:bc:cc:11:15:29:
                    dd:5d:61:dd:73:9d:bb:7a:15:e7:22:ae:8b:ca:7a:
                    90:e3:57:a5:31:5f:eb:3d:4c:a4:4e:2e:94:00:e5:
                    b6:ee:ec:94:86:97:38:4c:fd:9c:80:b6:8b:a1:67:
                    b0:e1:9d:a5:80:6f:ea:39:ca:7b:4f:2c:4a:a7:2f:
                    20:d4:9b:0a:06:d6:c7:70:47:52:53:86:db:69:5a:
                    40:06:72:e8:c6:71:5f:e9:55:a8:9f:f5:d5:0d:68:
                    c7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:66:B1:8B:9E:6F:DE:7A:47:91:6D:1F:43:B8:73:47:3E:43:A7:FD
            X509v3 Authority Key Identifier:
                keyid:ED:4C:D3:86:AB:33:78:7F:CD:40:02:62:2B:83:87:64:06:FF:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UzThqszeH_NQAJiK4OHZAb_8ZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/891fb6-7d26-4744-b5f9-51ff7daba4d5/1/7UzThqszeH_NQAJiK4OHZAb_8ZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:a4:28:6f:0e:bc:dd:d8:68:0f:35:02:1b:b2:4d:3f:0b:21:
         6b:b9:98:be:bb:5d:7c:54:32:e4:52:7b:42:4d:de:3e:55:1a:
         44:b1:98:e4:98:ea:ea:1b:0b:ad:aa:cf:d4:a1:6c:46:d8:7c:
         6b:6d:9c:ec:9f:1d:96:cd:ab:44:4b:db:23:8d:5e:90:bb:8e:
         bb:f1:e2:2c:aa:a3:9e:ad:d7:12:48:bd:29:8c:e3:5e:80:95:
         0c:68:f6:ba:b1:1b:59:b3:cd:3c:a0:c2:04:48:a5:d4:6e:9f:
         38:9e:58:21:de:20:60:ca:64:84:54:c9:3f:43:e4:c7:08:62:
         08:52:cb:2f:88:ea:44:30:44:18:e5:55:38:cc:31:0e:2d:81:
         93:8a:b4:4e:c1:d9:a6:ed:97:3e:db:1c:4c:d7:bc:5e:3a:11:
         67:1b:f7:a0:24:8f:52:73:70:11:d3:14:c3:0a:69:75:fd:8d:
         1e:a5:74:52:78:67:bc:46:8f:44:56:26:21:9a:d5:7d:7d:6b:
         43:69:bc:96:05:43:28:05:06:cf:33:dd:be:4d:41:ca:81:8f:
         d2:d7:0f:2e:7f:0e:7c:70:99:ac:63:d6:70:68:ff:9e:95:57:
         ed:de:4e:c9:47:34:ac:04:80:ad:3e:b0:81:82:4d:f9:2d:3a:
         c4:51:9a:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0UzWRubi9R4WK37L37EdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNGNkMzg2YWIzMzc4N2ZjZDQwMDI2MjJiODM4NzY0MDZm
ZmYxOTAwHhcNMjYwNzI5MDMwMDQ4WhcNMjYwNzMwMDMwMDQ4WjAzMTEwLwYDVQQD
Eyg1ZDY2YjE4YjllNmZkZTdhNDc5MTZkMWY0M2I4NzM0NzNlNDNhN2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsFVOiwbIwgzyUnmWvSH0er1pG/n
UIVVRnIPvDU2ZDA7t18vDd0wkv+Og9C03CiYjtQ//Tacpp9lFn3HEt8E68NAfNcw
fewaDLHG85K9ayT/cqjJskEMBuFRaKaFbFMgNj7BNU9Gg82rDJmbIw5YaJW73Kyb
phJmO6UXeON026qtnFm4g4jLn5qAyxGnh4xkWjZLvzGlIoNqf32kqw7HvMwRFSnd
XWHdc527ehXnIq6LynqQ41elMV/rPUykTi6UAOW27uyUhpc4TP2cgLaLoWew4Z2l
gG/qOcp7TyxKpy8g1JsKBtbHcEdSU4bbaVpABnLoxnFf6VWon/XVDWjHDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF1msYueb956R5FtH0O4c0c+Q6f9MB8GA1UdIwQY
MBaAFO1M04arM3h/zUACYiuDh2QG//GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1Zjkt
NTFmZjdkYWJhNGQ1LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS84OTFmYjYtN2QyNi00NzQ0LWI1ZjktNTFmZjdkYWJhNGQ1
LzEvN1V6VGhxc3plSF9OUUFKaUs0T0haQWJfOFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANaQobw68
3dhoDzUCG7JNPwsha7mYvrtdfFQy5FJ7Qk3ePlUaRLGY5Jjq6hsLrarP1KFsRth8
a22c7J8dls2rREvbI41ekLuOu/HiLKqjnq3XEki9KYzjXoCVDGj2urEbWbPNPKDC
BEil1G6fOJ5YId4gYMpkhFTJP0PkxwhiCFLLL4jqRDBEGOVVOMwxDi2Bk4q0TsHZ
pu2XPtscTNe8XjoRZxv3oCSPUnNwEdMUwwppdf2NHqV0UnhnvEaPRFYmIZrVfX1r
Q2m8lgVDKAUGzzPdvk1ByoGP0tcPLn8OfHCZrGPWcGj/npVX7d5OyUc0rASArT6w
gYJN+S06xFGalA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:33:58 2026 by rpki-client