Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
File:                     maLC7PWMRLNaDaKVf_TcouYLaGo.mft (raw, json)
Hash identifier:          Aw89+UOBwVh4q/zyjBDTZrlnR8ps4dNJUbP3NGQP/uo=
Subject key identifier:   A8:DE:8B:61:1E:78:15:CC:F2:A7:7C:C8:15:82:7A:69:D7:0A:88:9E
Authority key identifier: 99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A
Certificate issuer:       /CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
Certificate serial:       019FA9E29885ABD398C95A285B174764B7D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
Manifest number:          19DD
Signing time:             Tue 28 Jul 2026 18:00:27 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:27 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:27 +0000
Files and hashes:         1: CQ22INHNBj4XjlCUrI5XIygZ-R0.roa (hash: XIhPQfL8JPX1XhK5bY8YDY2+uw01ecHaNFfLz05TOJ0=)
                          2: KJY5nxCnM8VflNqrt-fuQ6cuQes.roa (hash: CD+3ziwBgnP7/0qdqqYvm343nyyRQZA21pgLWpHPvXc=)
                          3: lnG5zaZt-7xO_hAn8wuZTfTqkgM.roa (hash: AlDx5dd5qCfr7Hi5X2lV2/K6+UMvJudIe04xWsHdrCg=)
                          4: maLC7PWMRLNaDaKVf_TcouYLaGo.crl (hash: TU/DohyGiXzkDX4qCUsDVfweb55Z1kWg9njdD35wIqI=)
                          5: pgw_vXBhOHyYYmolPmheFOInOlo.roa (hash: FBhZNS8WeqSQq7ASqmhTPAh4HzJGXnwv4pIHLO19zl4=)
                          6: vcqIh9RGrfqsmlHa25tlLbDVTfk.roa (hash: 8nj2WBXLZRsVEzQqCt+NovapA3YHbN5awEImncwyZTU=)
                          7: x1x-cyI_biGTaUkZngKWx4DjWCs.roa (hash: aGX6ptYmiAeod9VDsNlQzerfO//pVNDw6U3vNGlEKjM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:98:85:ab:d3:98:c9:5a:28:5b:17:47:64:b7:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a2c2ecf58c44b35a0da2957ff4dca2e60b686a
        Validity
            Not Before: Jul 28 18:00:27 2026 GMT
            Not After : Jul 29 18:00:27 2026 GMT
        Subject: CN=a8de8b611e7815ccf2a77cc815827a69d70a889e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6d:e9:9a:97:ae:92:68:82:f4:c2:c7:46:31:
                    20:5d:bc:12:7a:3f:2b:f1:de:f5:ba:2e:e9:e2:a1:
                    f2:18:f3:ae:db:7c:f0:c5:84:80:8d:42:d2:cf:7d:
                    13:d4:d4:96:55:47:30:8e:07:8c:e2:de:dc:3a:71:
                    f4:9e:88:35:fe:65:c8:fc:a7:32:bc:1e:bd:a3:a8:
                    07:24:f4:00:8d:8c:34:de:b0:97:b3:1d:e6:0c:7e:
                    c8:18:6e:d4:0c:cb:99:c0:4d:93:58:bf:a0:4d:88:
                    de:f5:18:8d:ef:67:12:29:e3:b6:01:6a:a3:f3:5a:
                    eb:cc:96:da:41:ef:d1:c1:5a:ca:a1:c0:3f:a2:5b:
                    17:f5:15:71:bf:c5:85:71:2b:26:64:aa:e6:93:e3:
                    84:39:fd:fe:05:52:73:c3:74:ec:97:53:6b:b1:3c:
                    f7:ca:9d:ae:8b:c6:2a:48:41:03:68:07:c7:52:d5:
                    50:2b:71:6a:93:49:23:1c:96:db:c4:7a:34:64:e8:
                    df:8a:af:b1:a4:a1:cf:e4:02:cb:27:4f:b9:35:a7:
                    31:a7:9b:e5:c8:3f:ce:a2:d5:46:fc:25:f9:7b:c5:
                    eb:9c:df:8e:b8:0a:ee:c3:70:c5:bf:5e:eb:71:f7:
                    af:19:28:93:d2:3c:c9:3c:4c:cb:70:a0:9b:c9:41:
                    0a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:DE:8B:61:1E:78:15:CC:F2:A7:7C:C8:15:82:7A:69:D7:0A:88:9E
            X509v3 Authority Key Identifier:
                keyid:99:A2:C2:EC:F5:8C:44:B3:5A:0D:A2:95:7F:F4:DC:A2:E6:0B:68:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maLC7PWMRLNaDaKVf_TcouYLaGo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/ba9674-e571-4e35-ab20-e5d507a826bf/1/maLC7PWMRLNaDaKVf_TcouYLaGo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9f:94:68:0c:5c:c1:26:6d:af:bd:6b:a4:be:1d:d8:0b:90:
         28:6f:ba:41:63:65:5f:c5:15:96:f6:2b:8d:a8:98:c7:cd:3d:
         fe:2c:11:07:c3:63:b6:05:00:88:e5:d1:01:dd:41:6a:06:0f:
         58:a0:fc:01:d8:10:67:eb:41:b4:a9:c1:da:49:f0:08:d5:0a:
         0a:1f:bf:a4:78:00:9d:0d:77:08:64:38:8e:92:de:28:1a:c6:
         7b:d2:9e:0f:62:5a:56:08:c8:f3:2f:11:00:e4:70:6f:91:01:
         98:70:11:75:58:7a:18:c0:0f:ed:4a:91:14:e8:01:88:f4:5e:
         0f:dd:f5:be:7c:b0:01:99:e4:15:90:29:4a:72:e5:08:40:4d:
         f3:63:85:75:4e:8c:a1:e9:50:83:8a:10:ba:49:ae:ae:6c:26:
         c9:b5:b4:04:e3:70:5f:37:b4:93:ca:78:75:1c:9b:36:84:34:
         48:d0:5d:64:c9:0c:b4:44:76:b4:ef:05:dd:af:f9:6e:1d:7c:
         6d:ee:32:b7:ec:23:3b:ae:67:dd:18:9a:9e:08:5b:11:57:88:
         5c:09:04:f5:7b:07:ec:24:33:54:d9:22:b6:73:1c:e8:47:c8:
         36:34:24:3d:e4:3c:87:75:59:0d:33:f7:50:94:ee:b4:84:91:
         ad:19:d6:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4piFq9OYyVooWxdHZLfUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTJjMmVjZjU4YzQ0YjM1YTBkYTI5NTdmZjRkY2EyZTYw
YjY4NmEwHhcNMjYwNzI4MTgwMDI3WhcNMjYwNzI5MTgwMDI3WjAzMTEwLwYDVQQD
EyhhOGRlOGI2MTFlNzgxNWNjZjJhNzdjYzgxNTgyN2E2OWQ3MGE4ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtW3pmpeukmiC9MLHRjEgXbwSej8r
8d71ui7p4qHyGPOu23zwxYSAjULSz30T1NSWVUcwjgeM4t7cOnH0nog1/mXI/Kcy
vB69o6gHJPQAjYw03rCXsx3mDH7IGG7UDMuZwE2TWL+gTYje9RiN72cSKeO2AWqj
81rrzJbaQe/RwVrKocA/olsX9RVxv8WFcSsmZKrmk+OEOf3+BVJzw3Tsl1NrsTz3
yp2ui8YqSEEDaAfHUtVQK3Fqk0kjHJbbxHo0ZOjfiq+xpKHP5ALLJ0+5Nacxp5vl
yD/OotVG/CX5e8XrnN+OuAruw3DFv17rcfevGSiT0jzJPEzLcKCbyUEKVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKjei2EeeBXM8qd8yBWCemnXCoieMB8GA1UdIwQY
MBaAFJmiwuz1jESzWg2ilX/03KLmC2hqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAt
ZTVkNTA3YTgyNmJmLzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iYTk2NzQtZTU3MS00ZTM1LWFiMjAtZTVkNTA3YTgyNmJm
LzEvbWFMQzdQV01STE5hRGFLVmZfVGNvdVlMYUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWZ+UaAxc
wSZtr71rpL4d2AuQKG+6QWNlX8UVlvYrjaiYx809/iwRB8NjtgUAiOXRAd1BagYP
WKD8AdgQZ+tBtKnB2knwCNUKCh+/pHgAnQ13CGQ4jpLeKBrGe9KeD2JaVgjI8y8R
AORwb5EBmHARdVh6GMAP7UqRFOgBiPReD931vnywAZnkFZApSnLlCEBN82OFdU6M
oelQg4oQukmurmwmybW0BONwXze0k8p4dRybNoQ0SNBdZMkMtER2tO8F3a/5bh18
be4yt+wjO65n3RianghbEVeIXAkE9XsH7CQzVNkitnMc6EfINjQkPeQ8h3VZDTP3
UJTutISRrRnWOg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:22:45 2026 by rpki-client