Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
File:                     B9dTNfd79CQJdid7HdDhm7I6jh0.mft (raw, json)
Hash identifier:          sTklG0e7A+yh1a5fHc7QyuWvbahGqJsKNouEhTSXg6Q=
Subject key identifier:   D0:9D:11:A8:1A:F5:26:96:43:C3:AD:09:39:20:A9:9A:65:AF:38:80
Authority key identifier: 07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D
Certificate issuer:       /CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
Certificate serial:       019FA906E51921C54462760919D64D6A45B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
Manifest number:          19D6
Signing time:             Tue 28 Jul 2026 14:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:29 +0000
Files and hashes:         1: B9dTNfd79CQJdid7HdDhm7I6jh0.crl (hash: XpBz7r/yXCEHphgiUdkyTjEamGPS3LokCBJoPUlF3/8=)
                          2: VuZOG8s543NfcGdXf57yIIrySJ8.roa (hash: Z7XKmPS1GYE3f8Q+rg/H8yChwaPlHaJspMgwTyoFFv0=)
                          3: sZxFDMEjV4E6bBsRgrZxjoy7_tk.roa (hash: zq0CNZddr6RR3XPpn+vNQeYgJJau/bg5D4OmfDaVY/s=)
                          4: tdeCucXFWGUBsGHwqe6hB6aeUEQ.roa (hash: enVyFjAXmV6jKlcwgcqYoRWX2/X4d1HEfq19dhiH9Q0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:e5:19:21:c5:44:62:76:09:19:d6:4d:6a:45:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07d75335f77bf4240976277b1dd0e19bb23a8e1d
        Validity
            Not Before: Jul 28 14:00:29 2026 GMT
            Not After : Jul 29 14:00:29 2026 GMT
        Subject: CN=d09d11a81af5269643c3ad093920a99a65af3880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:d3:27:bf:5e:69:24:e9:ed:00:53:86:37:d5:
                    fa:f7:2a:48:d3:35:39:72:b6:e4:6c:0f:46:a9:b5:
                    70:fe:83:cb:ca:cb:d0:7c:be:37:47:0b:9f:2e:73:
                    60:6c:ac:6f:5d:ba:04:e4:55:5d:cd:a0:e1:08:cb:
                    88:f1:c7:39:36:0d:8d:28:74:66:50:83:20:a7:c2:
                    85:ca:e0:fe:6f:c4:5d:54:df:18:8a:3e:83:54:bf:
                    75:09:78:61:bc:ff:d6:1f:eb:6b:ec:06:5a:ee:79:
                    de:9c:01:70:cd:ed:03:2c:e8:c2:d5:d1:a6:55:3b:
                    34:ac:c8:65:c5:06:d4:66:bf:12:8f:a3:cf:e6:4e:
                    96:f1:c8:68:d9:9c:fa:d1:46:c6:d2:74:9b:d1:c1:
                    02:cc:7a:31:20:b6:e2:24:5b:89:10:15:99:fb:c7:
                    8f:c1:54:a9:ec:f4:07:f5:a3:28:98:e8:d0:e8:d9:
                    42:a2:c8:5d:8f:1b:75:22:5f:bd:19:c5:cf:16:36:
                    e8:15:38:24:97:41:52:12:11:02:b7:0f:a8:13:32:
                    6e:ed:83:16:43:d5:6f:6e:4b:b7:1c:37:82:fb:8d:
                    84:69:81:1b:26:37:cf:54:5e:9c:6a:cb:9c:03:9f:
                    0a:96:95:ce:1d:40:1e:6a:e6:f1:2c:3b:c2:45:50:
                    28:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9D:11:A8:1A:F5:26:96:43:C3:AD:09:39:20:A9:9A:65:AF:38:80
            X509v3 Authority Key Identifier:
                keyid:07:D7:53:35:F7:7B:F4:24:09:76:27:7B:1D:D0:E1:9B:B2:3A:8E:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9dTNfd79CQJdid7HdDhm7I6jh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ce3fa7-fc88-4f48-a5ce-a45bbcb34de5/1/B9dTNfd79CQJdid7HdDhm7I6jh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         de:f3:5b:4f:38:ee:dd:35:a0:c4:30:3e:df:70:aa:8f:77:34:
         1e:d9:c9:16:73:43:8b:80:eb:90:0c:f9:05:ce:bc:f5:f6:8d:
         2d:da:46:a5:79:af:84:6d:05:2a:ef:27:ef:e6:d2:1d:65:b2:
         f5:5c:a6:5d:2a:36:45:36:b8:b6:1a:08:53:a9:a9:53:8d:54:
         d0:ab:82:89:94:2b:5d:87:2d:d8:2c:24:da:28:52:3a:e0:2c:
         26:9e:94:9b:11:2c:62:05:8c:d6:47:ee:e1:a4:00:a0:2a:b4:
         5f:91:ad:d6:32:05:eb:d1:6c:18:8e:a7:d3:17:92:07:24:56:
         99:12:e4:7f:c5:9f:14:2e:d5:ea:62:8a:d1:10:68:c0:77:5b:
         ff:d5:fe:8b:67:8c:91:26:1a:40:a6:64:57:79:62:dd:15:98:
         af:1f:e9:01:1a:37:f8:bb:5e:c4:45:d3:9f:7a:42:0a:64:62:
         e5:41:ec:24:6b:dd:18:44:9c:28:55:47:98:f3:3a:c2:51:09:
         e7:e5:3b:e6:1d:dc:cf:9f:bc:11:03:c7:0b:0a:62:79:23:0c:
         35:ed:9c:b7:8c:c0:d0:8b:9f:e4:ff:3f:6a:d4:11:b1:b1:51:
         29:03:4a:28:f5:c2:6a:03:4d:43:82:1c:e1:ac:60:2d:b7:81:
         9a:d0:e3:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBuUZIcVEYnYJGdZNakWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZDc1MzM1Zjc3YmY0MjQwOTc2Mjc3YjFkZDBlMTliYjIz
YThlMWQwHhcNMjYwNzI4MTQwMDI5WhcNMjYwNzI5MTQwMDI5WjAzMTEwLwYDVQQD
EyhkMDlkMTFhODFhZjUyNjk2NDNjM2FkMDkzOTIwYTk5YTY1YWYzODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0NMnv15pJOntAFOGN9X69ypI0zU5
crbkbA9GqbVw/oPLysvQfL43RwufLnNgbKxvXboE5FVdzaDhCMuI8cc5Ng2NKHRm
UIMgp8KFyuD+b8RdVN8Yij6DVL91CXhhvP/WH+tr7AZa7nnenAFwze0DLOjC1dGm
VTs0rMhlxQbUZr8Sj6PP5k6W8cho2Zz60UbG0nSb0cECzHoxILbiJFuJEBWZ+8eP
wVSp7PQH9aMomOjQ6NlCoshdjxt1Il+9GcXPFjboFTgkl0FSEhECtw+oEzJu7YMW
Q9Vvbku3HDeC+42EaYEbJjfPVF6casucA58KlpXOHUAeaubxLDvCRVAoAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCdEaga9SaWQ8OtCTkgqZplrziAMB8GA1UdIwQY
MBaAFAfXUzX3e/QkCXYnex3Q4ZuyOo4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2Ut
YTQ1YmJjYjM0ZGU1LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9jZTNmYTctZmM4OC00ZjQ4LWE1Y2UtYTQ1YmJjYjM0ZGU1
LzEvQjlkVE5mZDc5Q1FKZGlkN0hkRGhtN0k2amgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3vNbTzju
3TWgxDA+33Cqj3c0HtnJFnNDi4DrkAz5Bc689faNLdpGpXmvhG0FKu8n7+bSHWWy
9VymXSo2RTa4thoIU6mpU41U0KuCiZQrXYct2Cwk2ihSOuAsJp6UmxEsYgWM1kfu
4aQAoCq0X5Gt1jIF69FsGI6n0xeSByRWmRLkf8WfFC7V6mKK0RBowHdb/9X+i2eM
kSYaQKZkV3li3RWYrx/pARo3+LtexEXTn3pCCmRi5UHsJGvdGEScKFVHmPM6wlEJ
5+U75h3cz5+8EQPHCwpieSMMNe2ct4zA0Iuf5P8/atQRsbFRKQNKKPXCagNNQ4Ic
4axgLbeBmtDjOw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:25 2026 by rpki-client