Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
File:                     j4aF263_sB3czmxNgql_M8BA7S0.mft (raw, json)
Hash identifier:          IitOdtUi4vPhbUJsOVNtJdh3OR4oTyu6AR3aMpRbHOw=
Subject key identifier:   8A:0D:35:EE:AF:4A:6F:D9:62:D1:DE:DB:BB:33:E7:16:41:2E:CB:70
Authority key identifier: 8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D
Certificate issuer:       /CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
Certificate serial:       019FA97552BEDDE310F301A1C79B555D7F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
Manifest number:          19D1
Signing time:             Tue 28 Jul 2026 16:01:05 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:05 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:05 +0000
Files and hashes:         1: 6hjRC5CVze9zc5X-ahmmHNfkYUE.roa (hash: MyI+C5KzfoPCsm1Iwk5YmiKlS7nD2ofoSW1+cSi8FPo=)
                          2: 7K9m9Kycpc1qpPWI_C3HXeWSciA.asa (hash: mkrh2h8wld/NXnmNI/HnVxSUQPGYzzYW0qlsCvuzWyk=)
                          3: gzObw2J4J3BeeVX0bL5o0YuIhUc.asa (hash: D5KeTzlvp8nEOE8QlkcJQrt0bgljUWnLu1dF7FqKvu8=)
                          4: j4aF263_sB3czmxNgql_M8BA7S0.crl (hash: vCmgE/55CxMD+woAKiIgBulMhpIWVRF703GEME8Os1k=)
                          5: tXAbUuk7SL2rOH5gbCm1KKsZ2vI.roa (hash: /jEXCHymtq+ciP4tXZBHOUmRqWEl2SIJoHoomzd+470=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:52:be:dd:e3:10:f3:01:a1:c7:9b:55:5d:7f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f8685dbadffb01ddcce6c4d82a97f33c040ed2d
        Validity
            Not Before: Jul 28 16:01:05 2026 GMT
            Not After : Jul 29 16:01:05 2026 GMT
        Subject: CN=8a0d35eeaf4a6fd962d1dedbbb33e716412ecb70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a6:61:36:3a:31:2b:65:81:fe:cb:20:3b:54:
                    6d:09:69:96:2d:42:38:5b:9b:3f:ca:b3:42:13:6c:
                    d4:49:5f:25:84:88:9b:9b:94:89:0e:83:b4:fa:e0:
                    b0:a5:29:37:7c:b5:ee:17:97:60:21:22:bd:c8:55:
                    82:20:f3:60:3a:4f:b0:b4:96:0d:a5:ef:da:17:18:
                    4e:23:07:d3:dd:7f:e7:2f:47:06:8a:06:8e:eb:07:
                    63:db:b4:a5:8d:f8:a5:70:bf:cb:90:73:8e:6b:3a:
                    14:59:5e:26:21:7d:a0:91:58:50:29:1f:35:ae:8d:
                    bd:97:0c:49:7f:e0:c8:c4:4d:26:df:62:50:07:9c:
                    8d:ab:3d:ec:c7:02:f6:6d:a2:d9:b7:68:ba:fb:fa:
                    3c:24:81:f9:89:64:68:c0:18:9e:a2:0a:96:6d:4c:
                    56:1b:a1:07:03:3e:d8:91:b9:41:97:ee:57:da:72:
                    95:06:bf:2c:6d:58:c0:15:f3:de:d4:e3:26:4e:5a:
                    7f:be:24:d2:9d:10:ea:a1:c0:93:7e:95:2f:3b:38:
                    7b:ec:f0:e7:bb:66:2a:ef:0e:12:4e:45:84:eb:4b:
                    1a:4a:b4:c5:cd:45:71:2d:86:b4:1d:e4:d6:73:42:
                    03:4b:1d:29:a4:68:2f:2e:22:94:b6:d6:eb:77:cf:
                    bc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0D:35:EE:AF:4A:6F:D9:62:D1:DE:DB:BB:33:E7:16:41:2E:CB:70
            X509v3 Authority Key Identifier:
                keyid:8F:86:85:DB:AD:FF:B0:1D:DC:CE:6C:4D:82:A9:7F:33:C0:40:ED:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j4aF263_sB3czmxNgql_M8BA7S0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/712f03-afe9-4f65-acec-67cfe3067b2a/1/j4aF263_sB3czmxNgql_M8BA7S0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:52:8a:1f:b2:19:41:e4:5a:ca:50:11:c0:59:99:2f:8d:49:
         46:8a:65:6a:29:71:66:7b:5d:69:47:45:ce:a8:04:52:44:7f:
         29:fb:78:5b:ba:39:93:f5:3e:60:91:8d:16:65:cd:d2:ed:39:
         fc:97:ae:d4:cb:88:97:fb:dd:01:42:a5:e1:3b:58:3b:db:7d:
         43:d5:61:a4:f5:b7:65:3c:ff:be:9a:eb:2f:a2:7a:70:89:0c:
         7d:19:5d:5a:bd:fb:87:f0:b1:83:18:5b:8a:fa:f9:28:c7:a5:
         01:bb:d6:6d:4e:c4:c9:26:ed:c3:59:75:c5:d8:48:11:6b:9a:
         b6:48:5a:2a:5d:a9:8b:7d:bc:29:bd:7d:bf:cc:cf:bb:c6:82:
         4b:96:45:da:db:77:fe:5b:50:7b:f1:0f:f4:09:85:58:4b:ea:
         fb:b9:4b:ff:0f:54:87:90:5f:63:91:d7:35:18:f9:b9:96:99:
         84:6e:62:a9:3c:0a:c2:eb:53:d9:52:df:00:41:fd:e6:ec:87:
         cf:8f:4e:11:20:6e:97:df:88:6b:1c:af:64:34:1e:95:05:a0:
         33:16:c9:28:41:9e:8e:34:78:cd:da:74:5c:dd:24:9f:cb:88:
         6d:60:d5:27:14:3a:95:0a:a9:b0:3f:39:da:1f:cb:b3:fb:e0:
         f4:e6:e2:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdVK+3eMQ8wGhx5tVXX8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmODY4NWRiYWRmZmIwMWRkY2NlNmM0ZDgyYTk3ZjMzYzA0
MGVkMmQwHhcNMjYwNzI4MTYwMTA1WhcNMjYwNzI5MTYwMTA1WjAzMTEwLwYDVQQD
Eyg4YTBkMzVlZWFmNGE2ZmQ5NjJkMWRlZGJiYjMzZTcxNjQxMmVjYjcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqZhNjoxK2WB/ssgO1RtCWmWLUI4
W5s/yrNCE2zUSV8lhIibm5SJDoO0+uCwpSk3fLXuF5dgISK9yFWCIPNgOk+wtJYN
pe/aFxhOIwfT3X/nL0cGigaO6wdj27SljfilcL/LkHOOazoUWV4mIX2gkVhQKR81
ro29lwxJf+DIxE0m32JQB5yNqz3sxwL2baLZt2i6+/o8JIH5iWRowBieogqWbUxW
G6EHAz7YkblBl+5X2nKVBr8sbVjAFfPe1OMmTlp/viTSnRDqocCTfpUvOzh77PDn
u2Yq7w4STkWE60saSrTFzUVxLYa0HeTWc0IDSx0ppGgvLiKUttbrd8+8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoNNe6vSm/ZYtHe27sz5xZBLstwMB8GA1UdIwQY
MBaAFI+Ghdut/7Ad3M5sTYKpfzPAQO0tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMt
NjdjZmUzMDY3YjJhLzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS83MTJmMDMtYWZlOS00ZjY1LWFjZWMtNjdjZmUzMDY3YjJh
LzEvajRhRjI2M19zQjNjem14TmdxbF9NOEJBN1MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe1KKH7IZ
QeRaylARwFmZL41JRoplailxZntdaUdFzqgEUkR/Kft4W7o5k/U+YJGNFmXN0u05
/Jeu1MuIl/vdAUKl4TtYO9t9Q9VhpPW3ZTz/vprrL6J6cIkMfRldWr37h/Cxgxhb
ivr5KMelAbvWbU7EySbtw1l1xdhIEWuatkhaKl2pi328Kb19v8zPu8aCS5ZF2tt3
/ltQe/EP9AmFWEvq+7lL/w9Uh5BfY5HXNRj5uZaZhG5iqTwKwutT2VLfAEH95uyH
z49OESBul9+IaxyvZDQelQWgMxbJKEGejjR4zdp0XN0kn8uIbWDVJxQ6lQqpsD85
2h/Ls/vg9ObiyQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:27 2026 by rpki-client