Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
File:                     RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft (raw, json)
Hash identifier:          SOXGB2o6zh/ZCMDwqJzGmDPa5vBFDrQ26WxU/Ce+Pdg=
Subject key identifier:   D0:A5:93:DB:D0:E0:77:66:3F:9F:B6:7E:F6:75:8F:82:C8:53:B9:51
Authority key identifier: 44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8
Certificate issuer:       /CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
Certificate serial:       019FAABE5B41FE443C1DEE9F1A64DD2F9B79
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
Manifest number:          19E0
Signing time:             Tue 28 Jul 2026 22:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:29 +0000
Files and hashes:         1: 8fhYtKpVakt0uV4ZHUTjU4fIbFw.roa (hash: BUVZIDRFer90z5xzSe7ir9WDKqZ/aWAGvB26nEQK32A=)
                          2: RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl (hash: TbmjAUzLERiRtd7gH0lFKF4z5YVBquBm+XQ2q2ucmFc=)
                          3: TCAQGPQ0BZ8ud4Gm8UguZYpuzms.roa (hash: +Kmb6BumaUGSfi8TJeQxjsoBcMk+3PlRsvjbV5UF/c8=)
                          4: _xGsVJQeBzbBLpCkFLNfOvZbW4U.roa (hash: Y4500/iUXADzSRR+OyCO6ojWBN6EGiCPjwgXlWxzhhA=)
                          5: vcbEzvx1zie9dwpRKaaVwvTw4d4.roa (hash: s7dhy3Ht7fPj270WhKJcSmby6GyMwW0TOLWlYMocDDE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:5b:41:fe:44:3c:1d:ee:9f:1a:64:dd:2f:9b:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44a7e5a33d9c5a965d9fbfdeecdc871af0a5d4f8
        Validity
            Not Before: Jul 28 22:00:29 2026 GMT
            Not After : Jul 29 22:00:29 2026 GMT
        Subject: CN=d0a593dbd0e077663f9fb67ef6758f82c853b951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bb:0a:7a:ec:51:16:ec:d7:e6:1d:59:7d:d8:
                    59:ef:5f:93:bf:42:7c:fe:56:53:78:c2:55:5e:d0:
                    c8:e6:b4:49:ef:70:be:4f:36:b0:bc:2b:12:78:c8:
                    a7:31:c3:b5:e9:d9:66:ab:94:c0:46:71:a6:03:ad:
                    ac:54:9b:16:7e:be:fc:0d:e9:2b:94:f0:3c:9c:b6:
                    df:2a:da:3b:c6:24:24:de:08:b1:06:52:7d:ac:62:
                    05:02:3c:73:3a:e5:b6:5f:e3:9d:e3:43:bc:ab:ab:
                    39:12:8e:be:45:e2:9c:79:81:7c:f0:5f:c0:8a:26:
                    a1:44:25:96:ba:ca:f6:5a:07:22:b3:25:67:ac:86:
                    27:f3:4e:30:7b:2c:bb:29:cb:58:88:e9:8d:53:ab:
                    ad:88:3a:60:3d:8e:6c:0b:9c:e3:79:e9:f1:7c:cd:
                    9c:03:32:62:7c:c3:e9:cd:f2:4e:5e:1b:9e:c3:2d:
                    b7:38:05:72:e0:af:aa:dc:d2:a2:24:02:f9:f8:25:
                    e5:4a:35:99:23:ee:23:5b:c1:f7:87:87:2b:46:b5:
                    3a:ee:53:6f:04:ab:b2:7a:1b:b7:69:82:6d:fb:5a:
                    e7:ad:ea:a7:f4:74:15:dc:a5:33:91:62:d4:cf:39:
                    6e:a6:ef:16:d8:5e:62:dc:03:0f:ea:77:34:8e:20:
                    6b:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A5:93:DB:D0:E0:77:66:3F:9F:B6:7E:F6:75:8F:82:C8:53:B9:51
            X509v3 Authority Key Identifier:
                keyid:44:A7:E5:A3:3D:9C:5A:96:5D:9F:BF:DE:EC:DC:87:1A:F0:A5:D4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RKfloz2cWpZdn7_e7NyHGvCl1Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0d8088-ea93-4abb-8996-21cf56cbce12/1/RKfloz2cWpZdn7_e7NyHGvCl1Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:53:af:91:f5:ae:82:fe:23:57:da:90:c8:13:af:d7:69:07:
         ef:3e:78:87:83:44:0f:95:50:5a:9e:24:41:fc:02:99:4f:e8:
         45:cd:de:1a:e4:07:ae:41:2a:57:b2:2c:11:95:06:d2:71:ff:
         d3:e2:19:3d:4b:89:c5:24:7f:26:c2:40:d7:5b:ac:0e:93:06:
         8e:66:89:5c:d7:9e:ce:0a:21:d1:b2:49:65:b6:1d:ff:32:49:
         56:0a:35:a8:b6:1c:d7:85:5a:22:f9:71:2d:01:27:3e:d5:5e:
         5b:4d:8f:a4:2d:41:9b:cf:79:b6:9e:cb:5e:51:e2:77:6e:12:
         54:3a:fd:01:14:de:1c:b4:10:09:55:e7:68:e8:b7:20:6a:ce:
         8f:8b:85:bb:61:d5:69:9d:39:75:16:42:eb:7b:67:37:78:81:
         03:d5:a0:44:e7:37:41:61:11:fa:8b:16:33:08:55:7f:a6:90:
         18:f7:7e:5e:5b:f7:5a:3f:fc:8c:aa:22:df:73:ae:4b:45:ed:
         31:62:73:e9:b8:7e:35:63:32:74:3b:16:c5:b5:fa:c0:a5:17:
         ff:50:88:eb:67:be:6b:d2:e3:bd:71:3f:82:ac:f7:19:28:9f:
         e5:42:29:71:fe:ac:a8:ea:2e:48:d5:b2:8e:b9:4a:bb:35:c0:
         e1:a1:89:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvltB/kQ8He6fGmTdL5t5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YTdlNWEzM2Q5YzVhOTY1ZDlmYmZkZWVjZGM4NzFhZjBh
NWQ0ZjgwHhcNMjYwNzI4MjIwMDI5WhcNMjYwNzI5MjIwMDI5WjAzMTEwLwYDVQQD
EyhkMGE1OTNkYmQwZTA3NzY2M2Y5ZmI2N2VmNjc1OGY4MmM4NTNiOTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrsKeuxRFuzX5h1ZfdhZ71+Tv0J8
/lZTeMJVXtDI5rRJ73C+TzawvCsSeMinMcO16dlmq5TARnGmA62sVJsWfr78Dekr
lPA8nLbfKto7xiQk3gixBlJ9rGIFAjxzOuW2X+Od40O8q6s5Eo6+ReKceYF88F/A
iiahRCWWusr2WgcisyVnrIYn804weyy7KctYiOmNU6utiDpgPY5sC5zjeenxfM2c
AzJifMPpzfJOXhuewy23OAVy4K+q3NKiJAL5+CXlSjWZI+4jW8H3h4crRrU67lNv
BKuyehu3aYJt+1rnreqn9HQV3KUzkWLUzzlupu8W2F5i3AMP6nc0jiBrKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNClk9vQ4HdmP5+2fvZ1j4LIU7lRMB8GA1UdIwQY
MBaAFESn5aM9nFqWXZ+/3uzchxrwpdT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYt
MjFjZjU2Y2JjZTEyLzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8wZDgwODgtZWE5My00YWJiLTg5OTYtMjFjZjU2Y2JjZTEy
LzEvUktmbG96MmNXcFpkbjdfZTdOeUhHdkNsMVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP1OvkfWu
gv4jV9qQyBOv12kH7z54h4NED5VQWp4kQfwCmU/oRc3eGuQHrkEqV7IsEZUG0nH/
0+IZPUuJxSR/JsJA11usDpMGjmaJXNeezgoh0bJJZbYd/zJJVgo1qLYc14VaIvlx
LQEnPtVeW02PpC1Bm895tp7LXlHid24SVDr9ARTeHLQQCVXnaOi3IGrOj4uFu2HV
aZ05dRZC63tnN3iBA9WgROc3QWER+osWMwhVf6aQGPd+Xlv3Wj/8jKoi33OuS0Xt
MWJz6bh+NWMydDsWxbX6wKUX/1CI62e+a9LjvXE/gqz3GSif5UIpcf6sqOouSNWy
jrlKuzXA4aGJWQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:42 2026 by rpki-client