Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
File:                     RmSbV7gX7BQ93LfXcSwiux8orHU.mft (raw, json)
Hash identifier:          mFN2dtbp1tWdfIIwxttFRlMvIhyPDVveWXT2Wt3rvrg=
Subject key identifier:   2E:AB:72:F2:CD:DC:BD:39:E6:9F:CB:7B:B2:F5:FC:15:72:FB:05:71
Authority key identifier: 46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75
Certificate issuer:       /CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
Certificate serial:       019FAB6342E754CDEC820F5F0D7793DAADC4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
Manifest number:          19AE
Signing time:             Wed 29 Jul 2026 01:00:36 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:36 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:36 +0000
Files and hashes:         1: FN53nLLPikhn5-nY05Uj4mP3Vj4.roa (hash: qx+sQ+sLjcsImqJ84C9BFMVyXO8qcwSUngwbw+Vb2nk=)
                          2: RmSbV7gX7BQ93LfXcSwiux8orHU.crl (hash: mL6YPV4KkvyGf9173fFecnXKBFzgTmE2Z2KpBJHwZPc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:42:e7:54:cd:ec:82:0f:5f:0d:77:93:da:ad:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46649b57b817ec143ddcb7d7712c22bb1f28ac75
        Validity
            Not Before: Jul 29 01:00:36 2026 GMT
            Not After : Jul 30 01:00:36 2026 GMT
        Subject: CN=2eab72f2cddcbd39e69fcb7bb2f5fc1572fb0571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:69:24:76:3d:c6:2f:38:82:69:92:e4:2e:
                    81:3e:db:bb:3f:95:b4:1d:bf:9f:2d:44:e5:82:fc:
                    e4:4f:5f:f3:d4:5a:e4:2e:af:d0:d2:ae:1f:07:ab:
                    4f:2b:cf:d5:47:f3:f4:ef:14:34:fb:d9:58:39:a8:
                    7c:e6:e4:3d:89:6c:c0:f3:44:1a:1a:2f:6c:d6:ec:
                    3b:24:68:0d:34:ce:02:f0:aa:1c:5b:99:42:ee:f4:
                    19:51:74:1d:40:91:f8:dc:a0:cb:92:59:38:ac:f0:
                    d0:0b:89:dc:2f:1d:75:9d:d6:98:b6:1b:af:5a:51:
                    31:95:de:9a:22:f7:61:ff:b8:9f:99:ce:72:d8:54:
                    2b:cb:e0:3b:37:98:4e:97:00:d4:25:f0:db:f2:61:
                    68:bf:02:7f:76:e6:46:f0:aa:05:75:13:75:10:5e:
                    6c:11:ef:63:2d:d7:8c:00:36:5e:c4:cc:35:ef:5a:
                    f5:b9:03:14:47:eb:37:ae:ab:be:12:2a:0e:72:10:
                    69:47:3b:41:35:66:41:1b:67:d3:79:a4:d1:2c:26:
                    1f:1b:37:98:4e:63:0d:3a:33:bc:fd:a6:a7:29:a0:
                    8b:10:e7:8c:3f:43:cc:ab:55:39:eb:8e:5f:60:b1:
                    db:fb:82:60:57:69:18:38:a0:4f:15:19:4c:2b:30:
                    f7:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:AB:72:F2:CD:DC:BD:39:E6:9F:CB:7B:B2:F5:FC:15:72:FB:05:71
            X509v3 Authority Key Identifier:
                keyid:46:64:9B:57:B8:17:EC:14:3D:DC:B7:D7:71:2C:22:BB:1F:28:AC:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSbV7gX7BQ93LfXcSwiux8orHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/858454-a18d-4040-ab3c-ca8fba595d4f/1/RmSbV7gX7BQ93LfXcSwiux8orHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:c9:4e:9f:ea:90:38:2d:3a:69:fd:66:96:75:a5:86:8f:c6:
         f7:3e:92:39:4f:00:21:d5:d4:30:28:2a:c1:db:1f:51:53:6c:
         b1:96:2f:3e:74:93:78:71:24:5c:b3:18:be:00:c2:26:13:4a:
         29:f3:4c:8f:c1:80:15:83:9f:19:dc:78:95:f7:ca:a5:7f:4f:
         94:4c:5c:09:db:a3:6b:05:a6:1c:b1:17:38:55:22:bb:05:7b:
         bb:c7:82:cd:e0:62:f1:8f:eb:59:31:b7:8e:34:9d:49:27:1a:
         ec:8a:10:9d:88:14:48:39:a4:64:1f:16:13:8b:c1:f4:6f:42:
         30:d8:65:56:ed:cc:53:39:42:09:62:40:04:65:60:e6:2c:15:
         a8:53:1f:69:e9:18:24:10:45:d1:ec:06:53:ef:40:d5:24:fc:
         4a:26:f1:b6:e8:eb:9f:f2:44:84:c7:c2:c8:4b:b6:53:7e:bd:
         3f:a1:9a:02:50:75:79:93:74:45:b6:37:01:6f:c7:97:d6:f7:
         c1:d4:f6:3a:f1:1e:bd:5c:4d:b0:bd:b9:89:e5:1e:41:ca:2f:
         bf:19:a1:ab:d1:a8:fe:66:ad:8e:b7:1c:01:a5:e8:5e:ec:c9:
         5e:f4:97:45:39:22:84:20:16:55:96:33:2e:f7:71:b8:66:42:
         b8:68:6f:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY0LnVM3sgg9fDXeT2q3EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjQ5YjU3YjgxN2VjMTQzZGRjYjdkNzcxMmMyMmJiMWYy
OGFjNzUwHhcNMjYwNzI5MDEwMDM2WhcNMjYwNzMwMDEwMDM2WjAzMTEwLwYDVQQD
EygyZWFiNzJmMmNkZGNiZDM5ZTY5ZmNiN2JiMmY1ZmMxNTcyZmIwNTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1BpJHY9xi84gmmS5C6BPtu7P5W0
Hb+fLUTlgvzkT1/z1FrkLq/Q0q4fB6tPK8/VR/P07xQ0+9lYOah85uQ9iWzA80Qa
Gi9s1uw7JGgNNM4C8KocW5lC7vQZUXQdQJH43KDLklk4rPDQC4ncLx11ndaYthuv
WlExld6aIvdh/7ifmc5y2FQry+A7N5hOlwDUJfDb8mFovwJ/duZG8KoFdRN1EF5s
Ee9jLdeMADZexMw171r1uQMUR+s3rqu+EioOchBpRztBNWZBG2fTeaTRLCYfGzeY
TmMNOjO8/aanKaCLEOeMP0PMq1U5645fYLHb+4JgV2kYOKBPFRlMKzD3WwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6rcvLN3L055p/Le7L1/BVy+wVxMB8GA1UdIwQY
MBaAFEZkm1e4F+wUPdy313EsIrsfKKx1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2Mt
Y2E4ZmJhNTk1ZDRmLzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy84NTg0NTQtYTE4ZC00MDQwLWFiM2MtY2E4ZmJhNTk1ZDRm
LzEvUm1TYlY3Z1g3QlE5M0xmWGNTd2l1eDhvckhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADMlOn+qQ
OC06af1mlnWlho/G9z6SOU8AIdXUMCgqwdsfUVNssZYvPnSTeHEkXLMYvgDCJhNK
KfNMj8GAFYOfGdx4lffKpX9PlExcCdujawWmHLEXOFUiuwV7u8eCzeBi8Y/rWTG3
jjSdSSca7IoQnYgUSDmkZB8WE4vB9G9CMNhlVu3MUzlCCWJABGVg5iwVqFMfaekY
JBBF0ewGU+9A1ST8Sibxtujrn/JEhMfCyEu2U369P6GaAlB1eZN0RbY3AW/Hl9b3
wdT2OvEevVxNsL25ieUeQcovvxmhq9Go/matjrccAaXoXuzJXvSXRTkihCAWVZYz
LvdxuGZCuGhvwg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:53:21 2026 by rpki-client