Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
File:                     rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft (raw, json)
Hash identifier:          Z0v4LZ4+MVCNJ6esOWhyV6TQw+g6L5p7/gPM7QYME4s=
Subject key identifier:   41:88:FE:90:71:7D:D8:50:9C:B6:C9:98:92:BB:FB:55:89:B5:9F:93
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Certificate issuer:       /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial:       019FA8D04A42C825BEAC0334588ACABC41B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
Manifest number:          19DB
Signing time:             Tue 28 Jul 2026 13:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 13:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 13:00:50 +0000
Files and hashes:         1: 0SdAWy5FbGh2pB-UZZKsGcwkt5M.roa (hash: +N3CbDkY0v4sIs+KAKMovKpqq8wIicumkVCtsw7Q2eE=)
                          2: 2RHf-9fOIvKsA2VNSiC87nFbCOs.roa (hash: dgDZc/LxnLIjKHM4eGdgAhe4w7g3MVLAoMHC9X1LCgI=)
                          3: STxyqEZJdelIgYwPQkrFzkgfanw.roa (hash: s65hDXY2ql7cBoPqQwS0YK+flCpqESibXFG1uh5dHgQ=)
                          4: qXgX-MgGakZBvHLGFfMng5J68aM.roa (hash: tdETsvPamgqJs8d2zdVQ7bKa0GNEeta7JZJxdAHdr5I=)
                          5: rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl (hash: 5Kk9l7emea86hxXmvxwe2E/QS66a0pJZWDoyam6tiVE=)
                          6: uljHeXtwPoXTWfqHenoj_DXb3ww.roa (hash: wGmp5Bh78//8aIg6gUIYujT06jT2kqD/3V641rlo7LY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:4a:42:c8:25:be:ac:03:34:58:8a:ca:bc:41:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
        Validity
            Not Before: Jul 28 13:00:50 2026 GMT
            Not After : Jul 29 13:00:50 2026 GMT
        Subject: CN=4188fe90717dd8509cb6c99892bbfb5589b59f93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:64:1c:15:e7:ff:5a:b4:d0:64:29:2f:17:3c:
                    1c:b2:79:d6:2a:eb:a3:94:74:af:7f:25:30:61:41:
                    6e:c4:c9:a2:2c:2e:ae:8e:1e:f4:ad:de:fd:d5:7b:
                    65:1c:cc:46:1d:e3:6e:44:3e:a3:fb:82:2e:4c:a1:
                    6e:34:ac:2c:91:ff:10:ba:72:92:cf:fb:db:68:f0:
                    30:ba:53:20:a4:24:62:53:46:74:2a:9b:33:90:c9:
                    d9:8b:54:7f:89:62:f7:e9:2c:b4:93:8c:9c:bd:2d:
                    d8:e7:42:c1:c9:f4:fb:d2:04:eb:a2:8a:18:57:f9:
                    d0:0a:f1:52:7e:56:3f:49:b6:41:df:4a:16:c5:67:
                    4e:3f:d8:db:75:9d:18:38:13:31:09:bf:a1:a6:71:
                    13:dd:a6:66:de:24:54:b7:1d:8a:8b:4d:4c:96:07:
                    62:13:86:c8:36:97:6b:1d:a1:13:c6:02:0e:6b:e8:
                    e0:ef:3a:b0:33:9f:46:54:13:f2:64:b1:02:ce:94:
                    a0:1c:a2:bd:5c:07:22:7b:5c:ce:fd:f4:4e:08:c5:
                    bf:72:44:83:65:74:79:a7:55:55:0d:8b:c4:ee:9d:
                    46:6e:37:29:c5:b8:f8:4a:93:92:46:da:4f:dc:5e:
                    27:ec:10:47:57:b0:91:4f:51:71:96:9d:72:07:cc:
                    f1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:88:FE:90:71:7D:D8:50:9C:B6:C9:98:92:BB:FB:55:89:B5:9F:93
            X509v3 Authority Key Identifier:
                keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:5a:41:b2:c2:03:98:7b:6d:c6:5e:7f:8a:14:1b:4b:ea:8f:
         20:c5:82:3a:f4:99:fa:64:a7:4f:e8:0e:93:2f:92:dc:66:cf:
         be:74:32:63:96:6a:1b:7f:8f:4e:1b:17:4a:2c:92:0d:f6:15:
         d1:ad:3a:3a:34:7b:8a:6f:34:e6:ad:ce:8b:94:df:7e:85:94:
         78:28:4e:f5:ff:89:06:4e:40:c8:c7:b1:fd:70:24:fc:6d:24:
         d8:6c:f9:38:89:58:16:cd:c9:62:6e:61:ff:e6:32:90:a3:de:
         d1:0a:61:18:ca:50:5c:38:df:51:a2:21:58:21:9f:6e:1e:c6:
         58:92:02:2e:37:8d:9b:f2:11:49:65:bb:b4:38:04:0f:e1:33:
         40:41:de:37:13:d0:05:e8:37:de:f9:f8:f3:8e:1a:8c:ab:c7:
         c4:c1:b8:4f:b3:8b:da:8c:20:72:32:d9:89:2f:df:6c:e7:40:
         c0:dd:d3:a8:05:25:c0:dd:af:38:f7:07:24:39:72:20:a3:2b:
         d4:dd:8d:81:dd:be:53:74:70:6b:12:5b:06:44:c9:fd:93:21:
         f8:07:39:89:f9:41:85:b8:01:e7:a8:e9:9b:6e:70:6a:d5:4e:
         39:37:af:34:07:2d:45:ea:ef:25:b0:8a:0b:12:41:5c:2f:be:
         2a:be:3a:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+o0EpCyCW+rAM0WIrKvEG4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTc3YzcwOGFmMGJhMWY4MTU0OWM5Zjg3MDg5NTU5Mzkw
MTY3YTUwHhcNMjYwNzI4MTMwMDUwWhcNMjYwNzI5MTMwMDUwWjAzMTEwLwYDVQQD
Eyg0MTg4ZmU5MDcxN2RkODUwOWNiNmM5OTg5MmJiZmI1NTg5YjU5ZjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWQcFef/WrTQZCkvFzwcsnnWKuuj
lHSvfyUwYUFuxMmiLC6ujh70rd791XtlHMxGHeNuRD6j+4IuTKFuNKwskf8QunKS
z/vbaPAwulMgpCRiU0Z0KpszkMnZi1R/iWL36Sy0k4ycvS3Y50LByfT70gTroooY
V/nQCvFSflY/SbZB30oWxWdOP9jbdZ0YOBMxCb+hpnET3aZm3iRUtx2Ki01Mlgdi
E4bINpdrHaETxgIOa+jg7zqwM59GVBPyZLECzpSgHKK9XAcie1zO/fROCMW/ckSD
ZXR5p1VVDYvE7p1Gbjcpxbj4SpOSRtpP3F4n7BBHV7CRT1Fxlp1yB8zxowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGI/pBxfdhQnLbJmJK7+1WJtZ+TMB8GA1UdIwQY
MBaAFKynfHCK8LofgVScn4cIlVk5AWelMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYt
MjhiMTllM2ZkNGE2LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS84ZmU3ZDgtMDE3Yi00MWFhLWE5MWYtMjhiMTllM2ZkNGE2
LzEvcktkOGNJcnd1aC1CVkp5Zmh3aVZXVGtCWjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ1pBssID
mHttxl5/ihQbS+qPIMWCOvSZ+mSnT+gOky+S3GbPvnQyY5ZqG3+PThsXSiySDfYV
0a06OjR7im805q3Oi5TffoWUeChO9f+JBk5AyMex/XAk/G0k2Gz5OIlYFs3JYm5h
/+YykKPe0QphGMpQXDjfUaIhWCGfbh7GWJICLjeNm/IRSWW7tDgED+EzQEHeNxPQ
Beg33vn4844ajKvHxMG4T7OL2owgcjLZiS/fbOdAwN3TqAUlwN2vOPcHJDlyIKMr
1N2Ngd2+U3RwaxJbBkTJ/ZMh+Ac5iflBhbgB56jpm25watVOOTevNActRervJbCK
CxJBXC++Kr46XQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:44:11 2026 by rpki-client