Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
File:                     eaOyw2It-eh5guqDUJeKbJh1p8g.mft (raw, json)
Hash identifier:          BmhI8SpaClz2JUYDet1pQfDi821/RFjkyz9CsgbspIs=
Subject key identifier:   95:9A:F5:84:80:28:72:B2:9C:6C:14:A2:95:A7:BB:80:57:E0:5E:60
Authority key identifier: 79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8
Certificate issuer:       /CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
Certificate serial:       019FA97504D5CA9FA777674A58D3310D5D88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
Manifest number:          19DD
Signing time:             Tue 28 Jul 2026 16:00:46 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:46 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:46 +0000
Files and hashes:         1: bwuSOp298-dczsmqdU4uLpa6gjo.roa (hash: uzISkAnF902L3J+B/MyOvw4U5tLzeELoUDdqRYulmzE=)
                          2: eaOyw2It-eh5guqDUJeKbJh1p8g.crl (hash: z/sa3bcYBfRNi+7A/1kmDVfvfhaO8rQtUJHMO80fVr0=)
                          3: g2b0tfI5DAyRO9sqLcgf2kKw8tI.roa (hash: b/mHAHFQZqIoz/hcls8xHY15nIJE9JGUhZwiQd60kVE=)
                          4: ntyTSk72RSe0ZIrYeLH81RbxpHA.asa (hash: iPI512YEQ0gn5dd5DCMPxy3EAFdTv8AI/1+OEDUHbSc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:04:d5:ca:9f:a7:77:67:4a:58:d3:31:0d:5d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a3b2c3622df9e87982ea8350978a6c9875a7c8
        Validity
            Not Before: Jul 28 16:00:46 2026 GMT
            Not After : Jul 29 16:00:46 2026 GMT
        Subject: CN=959af584802872b29c6c14a295a7bb8057e05e60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:78:ac:46:d1:5a:b5:eb:a7:15:20:03:46:e4:
                    30:ef:e3:05:9f:8a:19:11:61:e9:58:b8:04:3f:cb:
                    d6:18:70:e6:02:c2:74:f1:61:96:af:b9:82:8d:31:
                    8c:46:21:4d:67:92:4f:f0:37:bc:ee:5e:5e:45:22:
                    a9:9b:c5:98:4a:6c:2e:62:00:ad:d7:f4:82:8b:37:
                    67:a6:a1:38:ea:57:08:4c:37:9b:69:03:6d:44:46:
                    e9:37:a9:a0:d1:e4:0a:7a:d6:3d:87:07:b6:cc:e4:
                    c8:ba:0f:18:90:3e:7b:b0:57:97:bc:45:ef:e3:26:
                    a8:a1:40:0b:e1:c1:92:b7:bd:e7:14:32:f9:23:d9:
                    f7:7b:43:6c:a5:63:39:cc:0f:82:47:2f:4f:1d:db:
                    9e:10:c0:5f:5f:69:cf:f9:ec:16:f2:6b:61:b4:8b:
                    20:51:b8:87:c7:de:af:a1:a8:45:94:a7:10:8a:46:
                    70:94:0f:e6:e1:ee:a2:1c:0a:66:69:5b:54:17:be:
                    e0:06:d8:71:fd:d7:a4:99:d2:9c:a6:c9:84:3a:bc:
                    c7:78:ca:9c:96:8f:06:b8:2d:0a:42:42:e1:2d:a5:
                    9b:33:3d:d9:1d:6c:e3:dd:70:3d:32:7b:60:5f:3e:
                    0f:49:c4:aa:0e:91:ad:46:3c:d2:d8:0c:d0:34:d7:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9A:F5:84:80:28:72:B2:9C:6C:14:A2:95:A7:BB:80:57:E0:5E:60
            X509v3 Authority Key Identifier:
                keyid:79:A3:B2:C3:62:2D:F9:E8:79:82:EA:83:50:97:8A:6C:98:75:A7:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eaOyw2It-eh5guqDUJeKbJh1p8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e5069b-1cad-45a4-a619-c24ff682f7ad/1/eaOyw2It-eh5guqDUJeKbJh1p8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:e3:93:01:96:b6:0d:a4:4e:b6:6c:ee:96:38:87:b3:61:9f:
         48:ee:19:e3:f6:88:3c:59:8a:fb:2c:b0:5d:2f:7d:44:05:3b:
         45:99:09:12:0d:86:d6:18:55:6a:8e:a8:44:15:d4:56:29:a7:
         a0:0e:e6:ee:b2:ee:bb:40:90:cf:1d:6b:00:48:00:b8:14:49:
         d4:6e:f6:fe:ad:00:19:3b:57:46:9e:bd:d2:a4:5a:55:7e:4d:
         44:23:46:a5:9d:44:b7:e6:c0:a1:e6:5c:15:ad:70:19:fc:3f:
         6c:17:b2:eb:66:c7:d2:56:21:2b:56:ff:d9:84:56:96:25:c8:
         8f:61:6f:9d:6d:45:84:b2:60:52:00:50:eb:a0:af:e6:73:6f:
         5e:08:9c:21:25:79:99:9a:12:3f:b4:02:96:58:17:9e:36:f5:
         bd:80:8e:07:6f:56:88:2b:a6:9d:10:f5:93:d4:10:1c:5c:45:
         91:02:ca:c4:9f:ff:9c:6e:6a:c3:49:e6:f4:1d:80:2c:0e:81:
         2b:8d:d2:08:73:26:44:63:5e:75:c3:52:c7:2d:f4:3d:9d:c7:
         7b:cb:76:4f:b6:5b:6e:bc:07:71:98:b6:8c:41:73:63:16:46:
         6b:20:d2:e6:64:50:9f:bd:f1:8b:aa:8b:52:72:3b:2b:6e:d5:
         9c:0b:47:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdQTVyp+nd2dKWNMxDV2IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5YTNiMmMzNjIyZGY5ZTg3OTgyZWE4MzUwOTc4YTZjOTg3
NWE3YzgwHhcNMjYwNzI4MTYwMDQ2WhcNMjYwNzI5MTYwMDQ2WjAzMTEwLwYDVQQD
Eyg5NTlhZjU4NDgwMjg3MmIyOWM2YzE0YTI5NWE3YmI4MDU3ZTA1ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9HisRtFateunFSADRuQw7+MFn4oZ
EWHpWLgEP8vWGHDmAsJ08WGWr7mCjTGMRiFNZ5JP8De87l5eRSKpm8WYSmwuYgCt
1/SCizdnpqE46lcITDebaQNtREbpN6mg0eQKetY9hwe2zOTIug8YkD57sFeXvEXv
4yaooUAL4cGSt73nFDL5I9n3e0NspWM5zA+CRy9PHdueEMBfX2nP+ewW8mthtIsg
UbiHx96voahFlKcQikZwlA/m4e6iHApmaVtUF77gBthx/dekmdKcpsmEOrzHeMqc
lo8GuC0KQkLhLaWbMz3ZHWzj3XA9MntgXz4PScSqDpGtRjzS2AzQNNemdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWa9YSAKHKynGwUopWnu4BX4F5gMB8GA1UdIwQY
MBaAFHmjssNiLfnoeYLqg1CXimyYdafIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTkt
YzI0ZmY2ODJmN2FkLzEvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lNTA2OWItMWNhZC00NWE0LWE2MTktYzI0ZmY2ODJmN2Fk
LzEvZWFPeXcySXQtZWg1Z3VxRFVKZUtiSmgxcDhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdeOTAZa2
DaROtmzuljiHs2GfSO4Z4/aIPFmK+yywXS99RAU7RZkJEg2G1hhVao6oRBXUVimn
oA7m7rLuu0CQzx1rAEgAuBRJ1G72/q0AGTtXRp690qRaVX5NRCNGpZ1Et+bAoeZc
Fa1wGfw/bBey62bH0lYhK1b/2YRWliXIj2FvnW1FhLJgUgBQ66Cv5nNvXgicISV5
mZoSP7QCllgXnjb1vYCOB29WiCumnRD1k9QQHFxFkQLKxJ//nG5qw0nm9B2ALA6B
K43SCHMmRGNedcNSxy30PZ3He8t2T7ZbbrwHcZi2jEFzYxZGayDS5mRQn73xi6qL
UnI7K27VnAtHaA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:22:42 2026 by rpki-client