Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
File:                     85SkZHKLgoVtwrlVzK6atbplOcg.mft (raw, json)
Hash identifier:          TF+cZrB0a+sY33ThRORr2dkx4ljCQfJlC+IZGZ9u+vU=
Subject key identifier:   E4:5A:63:C6:C6:13:18:7C:48:B0:1E:6F:79:68:E6:80:9F:A5:51:75
Authority key identifier: F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8
Certificate issuer:       /CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
Certificate serial:       019FAAF5EF0CB6CEBC3321830ABBB4459147
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 23:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:11 +0000
Files and hashes:         1: 83YQUlILQ7GDfrTJPK3LZaXUsK8.roa (hash: vNXxGjQTXNQA/zSyVijjMQoJOd0f9h52cpzw4JKC8XQ=)
                          2: 85SkZHKLgoVtwrlVzK6atbplOcg.crl (hash: 8Jdkp6cM5cMztm1A63Aj2CT5zUOVg7WJm2OgwmXZR9w=)
                          3: tZjW0PJX2KzKZhqd-IvCr2S66XA.roa (hash: 7bMA6kUNG6YTWVlD3a7zH0NzQxfAjb1JxS2t14+Bg1s=)
                          4: yX7-VtqrrdDv7vs2gdtp2PBHHms.roa (hash: 7Eaxb4xLBZMek5rOGdgNQUBxlSvYpqN5jH75GBFXgPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:ef:0c:b6:ce:bc:33:21:83:0a:bb:b4:45:91:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f394a464728b82856dc2b955ccae9ab5ba6539c8
        Validity
            Not Before: Jul 28 23:01:11 2026 GMT
            Not After : Jul 29 23:01:11 2026 GMT
        Subject: CN=e45a63c6c613187c48b01e6f7968e6809fa55175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d9:fb:5a:30:da:a7:07:a7:34:65:8d:b5:87:
                    e6:79:8b:14:f1:3d:ab:57:5a:cf:27:fd:07:8d:9c:
                    b2:f2:58:5c:a2:d3:c1:27:79:c6:f1:bc:a1:c2:bd:
                    b5:a5:f1:8f:3d:c1:86:f7:51:a6:0a:3b:e3:2f:38:
                    03:14:9b:bc:0f:c1:a3:00:5d:85:22:60:7e:16:d9:
                    11:93:9b:52:67:be:a1:8c:0c:fd:e7:f7:07:b9:14:
                    ad:6a:74:f4:a5:48:36:23:e0:57:b0:da:7c:85:00:
                    57:fb:cd:c9:9a:60:af:cb:a2:00:f6:e9:e2:87:45:
                    46:a6:4b:f1:a4:b8:0a:44:9f:70:48:f6:05:6a:8e:
                    06:ee:3f:a0:34:aa:21:ab:68:b2:70:5a:77:05:8e:
                    26:5f:61:81:a2:a3:05:0a:07:5d:d9:d8:37:e2:d1:
                    a9:43:17:b9:fb:76:98:0b:02:7c:70:69:c8:f3:b9:
                    d7:a4:a1:e4:4b:7a:ef:4a:6e:c0:f2:57:81:4f:84:
                    24:92:d3:b0:b0:1c:36:35:1b:73:b6:cc:5d:e9:90:
                    77:c2:1c:04:f5:d9:1b:62:1f:8f:d8:5e:de:71:bd:
                    53:07:2b:4f:df:11:3f:31:67:6b:7a:48:55:44:61:
                    2b:32:6a:41:f3:7f:af:66:17:1b:ed:5a:3f:11:99:
                    4e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5A:63:C6:C6:13:18:7C:48:B0:1E:6F:79:68:E6:80:9F:A5:51:75
            X509v3 Authority Key Identifier:
                keyid:F3:94:A4:64:72:8B:82:85:6D:C2:B9:55:CC:AE:9A:B5:BA:65:39:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/85SkZHKLgoVtwrlVzK6atbplOcg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/7db80c-5113-4e83-b2c8-f2664d1921d3/1/85SkZHKLgoVtwrlVzK6atbplOcg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:e4:97:63:f4:9b:7f:44:c3:95:13:7e:a9:f4:4e:d1:5d:18:
         ed:e3:cb:5a:93:b4:32:66:50:80:dc:d8:fc:76:b0:cc:cc:3b:
         3b:7c:19:b4:e2:b9:08:4b:71:09:1a:f3:84:0c:16:0d:b7:ee:
         b9:f4:37:b0:4b:57:1d:ba:e6:2b:8f:a9:61:15:e4:2c:4f:71:
         6b:2c:61:90:63:2c:04:3d:fe:a7:73:21:d8:88:d0:b8:1e:e5:
         f2:a2:13:b5:89:61:e5:58:8b:e0:5f:82:d6:a7:82:d1:56:7f:
         57:db:3f:e6:bf:47:41:fd:6d:75:7b:7e:46:09:d5:db:7a:ee:
         2d:26:9f:08:4b:70:15:c5:dc:27:21:a6:e2:9b:24:82:1c:bd:
         cc:08:8e:7f:a9:90:36:06:77:79:5f:47:86:b1:b3:86:84:9a:
         fc:a9:b2:0e:e1:54:6e:6e:ab:94:05:9f:fa:57:d7:3d:62:7e:
         90:e2:c3:aa:1b:c5:b3:8b:68:70:ab:0a:7f:9f:f7:c7:42:a4:
         78:34:ea:54:6d:21:21:79:da:a8:e5:a2:11:e5:f5:c2:3f:e8:
         4d:6a:8a:e9:34:6d:07:fe:65:4b:b3:f9:fd:fd:94:da:89:32:
         71:d4:16:45:1e:97:fa:2d:b8:80:31:50:3c:8f:3f:38:0a:1a:
         52:30:18:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9e8Mts68MyGDCru0RZFHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzOTRhNDY0NzI4YjgyODU2ZGMyYjk1NWNjYWU5YWI1YmE2
NTM5YzgwHhcNMjYwNzI4MjMwMTExWhcNMjYwNzI5MjMwMTExWjAzMTEwLwYDVQQD
EyhlNDVhNjNjNmM2MTMxODdjNDhiMDFlNmY3OTY4ZTY4MDlmYTU1MTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Nn7WjDapwenNGWNtYfmeYsU8T2r
V1rPJ/0HjZyy8lhcotPBJ3nG8byhwr21pfGPPcGG91GmCjvjLzgDFJu8D8GjAF2F
ImB+FtkRk5tSZ76hjAz95/cHuRStanT0pUg2I+BXsNp8hQBX+83JmmCvy6IA9uni
h0VGpkvxpLgKRJ9wSPYFao4G7j+gNKohq2iycFp3BY4mX2GBoqMFCgdd2dg34tGp
Qxe5+3aYCwJ8cGnI87nXpKHkS3rvSm7A8leBT4QkktOwsBw2NRtztsxd6ZB3whwE
9dkbYh+P2F7ecb1TBytP3xE/MWdrekhVRGErMmpB83+vZhcb7Vo/EZlOVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORaY8bGExh8SLAeb3lo5oCfpVF1MB8GA1UdIwQY
MBaAFPOUpGRyi4KFbcK5VcyumrW6ZTnIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgt
ZjI2NjRkMTkyMWQzLzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi83ZGI4MGMtNTExMy00ZTgzLWIyYzgtZjI2NjRkMTkyMWQz
LzEvODVTa1pIS0xnb1Z0d3JsVnpLNmF0YnBsT2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeSXY/Sb
f0TDlRN+qfRO0V0Y7ePLWpO0MmZQgNzY/HawzMw7O3wZtOK5CEtxCRrzhAwWDbfu
ufQ3sEtXHbrmK4+pYRXkLE9xayxhkGMsBD3+p3Mh2IjQuB7l8qITtYlh5ViL4F+C
1qeC0VZ/V9s/5r9HQf1tdXt+RgnV23ruLSafCEtwFcXcJyGm4pskghy9zAiOf6mQ
NgZ3eV9HhrGzhoSa/KmyDuFUbm6rlAWf+lfXPWJ+kOLDqhvFs4tocKsKf5/3x0Kk
eDTqVG0hIXnaqOWiEeX1wj/oTWqK6TRtB/5lS7P5/f2U2okycdQWRR6X+i24gDFQ
PI8/OAoaUjAY3w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:55:54 2026 by rpki-client