Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File:                     deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier:          5W3kjML5c86Td6755XaqYErIT0do22msCKyJA5bXPI0=
Subject key identifier:   25:6B:33:EC:CF:0D:D3:AB:D5:A6:17:E7:64:37:81:69:6E:74:9D:B1
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer:       /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial:       019FA9AC0659C34C50B3E5290F4D593E8F97
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number:          19DE
Signing time:             Tue 28 Jul 2026 17:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:50 +0000
Files and hashes:         1: IKecYpJsyQoCMXhzFQm8qwezc6Q.roa (hash: AyBWoAIIW8QVXSZmJhv+7IehUMdxfXtLu4x8wnOD+Zo=)
                          2: Niz0xaF_UJO5sK6yvy3cMVF07nA.roa (hash: l65DOQXiJc/vw8R7nLx1kl+6tdgkTZuIaNzOHJm95Zo=)
                          3: WFTfI5tspGo4Ss0OCZAL-JGWw3k.roa (hash: ygHs+fWVxGVJnQRLr2/Xp2LQTIWtPolhwTvnQdcJhwg=)
                          4: Wrrx-J8255kGZZQo2Z_lshL_g94.roa (hash: RJwUNDcFiRkR23EOeiZYpldoRJTn3DHSqOqjyT0fbkQ=)
                          5: _RQQ5tVF2eFgG4W622rODRsfodw.roa (hash: tBfa8G6tBLKfwxInkvbCwg+hxTDjAv00awjpszqTn38=)
                          6: cKp2OZnMQ6gfuVdFBIpAAe-tLzE.roa (hash: mbO9zdERKtIWiDiD8x4e0EjpaANpcC71gfDZ39R7GH8=)
                          7: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: yvhdEvxDP+wruOcMJnRNzDXmuoxIQAKmwAfxDwcx+n8=)
                          8: p6DmQaVdSnpO0418vCwa-3h5IyU.roa (hash: oLcwvSqddOQ2Ul0V7nGknSGHPS/F0P9Nc73tzvsSSQ4=)
                          9: r2Y6Npuwz2fSFJGlB1IqT0Y2GL8.roa (hash: lnldbd2L1Ux8PYgmjwCpHbxAbqqtYXmXImm+n59vkVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:06:59:c3:4c:50:b3:e5:29:0f:4d:59:3e:8f:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
        Validity
            Not Before: Jul 28 17:00:50 2026 GMT
            Not After : Jul 29 17:00:50 2026 GMT
        Subject: CN=256b33eccf0dd3abd5a617e7643781696e749db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:09:51:f3:78:d3:e8:7b:55:d5:ce:74:62:d2:
                    b6:b9:f7:88:2d:31:76:7a:bf:3f:f8:ca:e2:b0:8e:
                    35:86:7c:a9:ff:71:8f:20:1d:91:ae:21:c3:a2:e3:
                    e1:d2:df:18:0c:a4:bb:a4:92:70:01:47:41:15:0f:
                    39:61:69:76:10:22:8a:39:6a:84:e9:8e:75:3d:9e:
                    e3:3c:69:dd:af:b7:be:8c:fa:ee:ce:cd:42:22:5f:
                    03:b0:13:18:ed:dc:cc:a4:3d:65:59:93:21:63:cd:
                    29:18:f9:1f:4a:77:f2:ba:f3:95:99:78:08:ed:d7:
                    04:d3:29:f4:49:51:c7:03:a8:f7:02:7d:75:97:51:
                    9a:ef:3f:1e:c7:6e:04:c0:41:00:1e:2d:0f:f7:1e:
                    9c:47:22:a0:d4:c2:82:b6:e2:ae:65:e0:00:81:47:
                    2c:32:2d:6b:df:f7:a5:02:ca:0d:6c:42:9c:30:a0:
                    1f:e2:a5:19:a5:a2:e3:90:2d:dc:dc:3d:70:06:b4:
                    0b:69:9d:7e:d1:5e:81:7b:1d:2d:91:ab:d9:dd:25:
                    15:d7:39:94:29:3a:24:dd:43:b7:da:d6:a6:5c:1c:
                    e0:cb:1c:09:c4:16:05:3a:47:87:8c:a8:7f:dc:3f:
                    50:a7:90:4f:f1:b8:b9:be:d5:e8:8b:75:2c:e0:d4:
                    c5:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:6B:33:EC:CF:0D:D3:AB:D5:A6:17:E7:64:37:81:69:6E:74:9D:B1
            X509v3 Authority Key Identifier:
                keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:53:88:57:14:ec:4e:17:02:ef:0f:42:14:5d:96:29:b2:f0:
         56:94:fd:67:d1:02:56:b0:f8:5e:a1:96:f5:13:3d:99:b7:54:
         27:42:61:4d:f5:f0:35:f3:68:7c:ce:cf:14:65:b3:d7:1b:4f:
         40:c2:26:5a:fd:74:42:44:3b:85:2f:11:f7:be:d9:39:b2:f7:
         a8:ac:5e:dd:5d:14:14:fd:69:65:46:21:74:aa:fe:cb:10:5a:
         4f:9b:4a:58:de:79:99:61:e7:b8:32:e2:fb:24:bf:61:49:3e:
         b3:3e:ca:ac:b6:8f:ed:c4:2f:bf:c9:d7:88:38:9d:c1:25:d9:
         1d:9f:c5:93:55:3a:77:af:88:cc:a3:75:fb:2e:70:8f:de:a5:
         d4:cc:2b:d6:11:f8:a5:c2:72:46:40:de:30:06:69:f3:50:23:
         7e:b1:ca:d5:66:a2:8b:c5:5b:fc:91:74:b6:fc:ee:72:11:39:
         95:29:a9:e7:ce:11:3b:a5:e6:c9:99:7e:5c:75:9d:82:6a:d6:
         6e:42:1d:4c:56:d1:5b:7b:2b:d5:64:2f:c1:60:d7:17:be:0a:
         41:99:eb:81:5b:0a:67:8e:91:c0:32:e0:f6:74:3d:f9:fd:43:
         03:96:ed:03:88:20:7b:db:09:e6:6b:9d:af:72:6b:a0:61:34:
         0d:d2:3c:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prAZZw0xQs+UpD01ZPo+XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj
ZTVhNGEwHhcNMjYwNzI4MTcwMDUwWhcNMjYwNzI5MTcwMDUwWjAzMTEwLwYDVQQD
EygyNTZiMzNlY2NmMGRkM2FiZDVhNjE3ZTc2NDM3ODE2OTZlNzQ5ZGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwlR83jT6HtV1c50YtK2ufeILTF2
er8/+MrisI41hnyp/3GPIB2RriHDouPh0t8YDKS7pJJwAUdBFQ85YWl2ECKKOWqE
6Y51PZ7jPGndr7e+jPruzs1CIl8DsBMY7dzMpD1lWZMhY80pGPkfSnfyuvOVmXgI
7dcE0yn0SVHHA6j3An11l1Ga7z8ex24EwEEAHi0P9x6cRyKg1MKCtuKuZeAAgUcs
Mi1r3/elAsoNbEKcMKAf4qUZpaLjkC3c3D1wBrQLaZ1+0V6Bex0tkavZ3SUV1zmU
KTok3UO32tamXBzgyxwJxBYFOkeHjKh/3D9Qp5BP8bi5vtXoi3Us4NTF/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVrM+zPDdOr1aYX52Q3gWludJ2xMB8GA1UdIwQY
MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct
ZDQ1YWI3ZGYyZGUxLzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx
LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFOIVxTs
ThcC7w9CFF2WKbLwVpT9Z9ECVrD4XqGW9RM9mbdUJ0JhTfXwNfNofM7PFGWz1xtP
QMImWv10QkQ7hS8R977ZObL3qKxe3V0UFP1pZUYhdKr+yxBaT5tKWN55mWHnuDLi
+yS/YUk+sz7KrLaP7cQvv8nXiDidwSXZHZ/Fk1U6d6+IzKN1+y5wj96l1Mwr1hH4
pcJyRkDeMAZp81AjfrHK1Waii8Vb/JF0tvzuchE5lSmp584RO6XmyZl+XHWdgmrW
bkIdTFbRW3sr1WQvwWDXF74KQZnrgVsKZ46RwDLg9nQ9+f1DA5btA4gge9sJ5mud
r3JroGE0DdI8hw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:51:02 2026 by rpki-client