Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
File:                     DDY1dImAYOG2pIysPx8ryzbIbU4.mft (raw, json)
Hash identifier:          QkHGM8H9ooTLb9uNvPNQl0SPyvCTa8+qAtMHhz6ACtY=
Subject key identifier:   23:59:D0:6E:C9:59:40:9C:47:FE:EF:69:F1:CA:FD:ED:35:FD:12:B7
Authority key identifier: 0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E
Certificate issuer:       /CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
Certificate serial:       019FA7197357699E82E8E12D9C6BADA5851C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
Manifest number:          19D2
Signing time:             Tue 28 Jul 2026 05:01:30 +0000
Manifest this update:     Tue 28 Jul 2026 05:01:30 +0000
Manifest next update:     Wed 29 Jul 2026 05:01:30 +0000
Files and hashes:         1: DDY1dImAYOG2pIysPx8ryzbIbU4.crl (hash: zOpDy9KFt+RgbXru8j35f/veRTv1LozFjpdoqE0dp5k=)
                          2: L-I_vi73nF4X50y77Nj4pc6tO3Q.roa (hash: JkXJproHbfGeicYSovdpj1lTU8shuNCsjUwqjSmsDCk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 05:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:19:73:57:69:9e:82:e8:e1:2d:9c:6b:ad:a5:85:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c363574898060e1b6a48cac3f1f2bcb36c86d4e
        Validity
            Not Before: Jul 28 05:01:30 2026 GMT
            Not After : Jul 29 05:01:30 2026 GMT
        Subject: CN=2359d06ec959409c47feef69f1cafded35fd12b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d4:d6:5d:0a:d8:fe:35:8a:73:c7:40:2d:83:
                    6f:11:79:09:83:01:3c:ce:5b:ee:33:ce:4a:7d:e3:
                    12:33:05:4a:06:d1:ac:3e:0c:11:15:75:57:ed:37:
                    86:f7:9a:27:09:62:f6:f1:6d:d4:83:bc:cc:73:21:
                    8e:88:9e:f3:5a:e4:17:3e:ee:53:99:66:74:ba:9e:
                    f2:b9:cb:f1:01:83:27:4e:cc:69:dc:74:9c:99:c9:
                    a4:ed:30:c7:50:bf:be:5b:7b:c6:87:73:53:c9:3f:
                    82:19:0f:e2:8f:30:c1:23:62:ee:5d:c7:55:39:b7:
                    24:f9:ed:16:c4:c0:33:33:e6:04:ca:d6:81:70:cf:
                    4d:ab:df:54:ea:20:ef:a4:65:b0:60:a8:97:a3:aa:
                    f4:29:c4:94:fa:2e:0e:e6:81:ab:12:e1:9b:19:63:
                    60:4d:29:05:6e:da:9e:6e:d9:2e:87:c8:c6:50:4a:
                    38:87:54:93:0f:c4:ab:00:e6:e6:f9:b4:a6:67:6d:
                    70:a0:1d:62:7b:74:3d:69:95:4f:f4:46:d7:25:58:
                    48:72:22:a9:da:66:37:8b:d8:44:75:12:5c:ba:f1:
                    57:71:f8:6e:f7:2f:7e:db:c9:e1:ed:63:27:dd:02:
                    e4:68:c0:36:4d:f8:0f:83:c7:bf:ea:cf:fd:e3:02:
                    b3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:59:D0:6E:C9:59:40:9C:47:FE:EF:69:F1:CA:FD:ED:35:FD:12:B7
            X509v3 Authority Key Identifier:
                keyid:0C:36:35:74:89:80:60:E1:B6:A4:8C:AC:3F:1F:2B:CB:36:C8:6D:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DDY1dImAYOG2pIysPx8ryzbIbU4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/566932-dea6-4dfc-8616-ba901a5fcb74/1/DDY1dImAYOG2pIysPx8ryzbIbU4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:7e:3c:8b:c4:54:f8:b7:5f:68:3a:4a:46:04:6d:ac:9b:53:
         d4:d5:75:dd:e5:af:27:6c:d0:3b:3f:6a:35:34:7a:88:f2:2f:
         7f:ef:7a:00:6d:68:03:11:02:2b:bb:c5:f9:a5:94:e4:5b:d6:
         c6:76:0f:f8:a4:5f:51:fd:74:c6:c1:49:59:f7:3f:02:6a:9a:
         77:71:06:5b:6c:42:21:8c:ca:7d:40:c9:4a:50:04:70:96:00:
         ed:3a:8d:30:83:38:99:cb:ef:e4:3e:00:ef:b4:36:82:bc:42:
         a1:ea:27:d5:a9:4f:9c:d0:b2:03:0a:30:82:cc:f7:d8:4a:be:
         c6:c5:eb:04:55:29:2d:a0:e0:94:73:39:92:ae:b9:c4:12:86:
         78:bd:1f:a6:d4:11:a6:40:82:a5:4c:08:78:79:8f:06:32:28:
         39:e0:a6:7e:9b:2e:25:dc:fc:a9:67:92:b2:6b:94:f7:43:b8:
         ad:ae:8e:c9:4d:55:bf:64:59:e2:59:56:83:4d:22:0e:bf:b8:
         fe:44:e9:0b:ee:6d:a1:4a:69:65:bd:9a:37:b4:ad:d8:ee:ec:
         31:b5:70:68:9f:cc:ae:2f:18:4c:68:26:9e:5b:dc:63:5e:b0:
         36:10:1b:c6:bd:75:4e:e7:52:86:08:10:64:7f:c7:c2:51:99:
         5a:fe:ff:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nGXNXaZ6C6OEtnGutpYUcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjMzYzNTc0ODk4MDYwZTFiNmE0OGNhYzNmMWYyYmNiMzZj
ODZkNGUwHhcNMjYwNzI4MDUwMTMwWhcNMjYwNzI5MDUwMTMwWjAzMTEwLwYDVQQD
EygyMzU5ZDA2ZWM5NTk0MDljNDdmZWVmNjlmMWNhZmRlZDM1ZmQxMmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9TWXQrY/jWKc8dALYNvEXkJgwE8
zlvuM85KfeMSMwVKBtGsPgwRFXVX7TeG95onCWL28W3Ug7zMcyGOiJ7zWuQXPu5T
mWZ0up7yucvxAYMnTsxp3HScmcmk7TDHUL++W3vGh3NTyT+CGQ/ijzDBI2LuXcdV
Obck+e0WxMAzM+YEytaBcM9Nq99U6iDvpGWwYKiXo6r0KcSU+i4O5oGrEuGbGWNg
TSkFbtqebtkuh8jGUEo4h1STD8SrAObm+bSmZ21woB1ie3Q9aZVP9EbXJVhIciKp
2mY3i9hEdRJcuvFXcfhu9y9+28nh7WMn3QLkaMA2TfgPg8e/6s/94wKzNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNZ0G7JWUCcR/7vafHK/e01/RK3MB8GA1UdIwQY
MBaAFAw2NXSJgGDhtqSMrD8fK8s2yG1OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYt
YmE5MDFhNWZjYjc0LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NjY5MzItZGVhNi00ZGZjLTg2MTYtYmE5MDFhNWZjYjc0
LzEvRERZMWRJbUFZT0cycEl5c1B4OHJ5emJJYlU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPn48i8RU
+LdfaDpKRgRtrJtT1NV13eWvJ2zQOz9qNTR6iPIvf+96AG1oAxECK7vF+aWU5FvW
xnYP+KRfUf10xsFJWfc/Amqad3EGW2xCIYzKfUDJSlAEcJYA7TqNMIM4mcvv5D4A
77Q2grxCoeon1alPnNCyAwowgsz32Eq+xsXrBFUpLaDglHM5kq65xBKGeL0fptQR
pkCCpUwIeHmPBjIoOeCmfpsuJdz8qWeSsmuU90O4ra6OyU1Vv2RZ4llWg00iDr+4
/kTpC+5toUppZb2aN7St2O7sMbVwaJ/Mri8YTGgmnlvcY16wNhAbxr11TudShggQ
ZH/HwlGZWv7/Xw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:52:14 2026 by rpki-client