Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
File:                     Rs_EGkGae71tjoxO5oVZW2pAufE.mft (raw, json)
Hash identifier:          zQ6QJ7+xqY3nthziE5pNJj6kPhjfn5RrjNp7cMUCNcE=
Subject key identifier:   30:23:C6:05:BA:06:AD:B8:A9:8F:3D:1C:7A:0E:7C:46:5B:C3:78:80
Authority key identifier: 46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1
Certificate issuer:       /CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
Certificate serial:       019FAAF51FD1E7761654BF1CB426653AFBA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
Manifest number:          19D3
Signing time:             Tue 28 Jul 2026 23:00:18 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:18 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:18 +0000
Files and hashes:         1: PHd3RlGosSCiiJlgByr5DyGNERo.roa (hash: H4E9jAo8k6ZvIudithlFluMLgtGMVfZdqBunaDN8nQM=)
                          2: Rs_EGkGae71tjoxO5oVZW2pAufE.crl (hash: 7IiQU8Wt1BFA3l4d5R5EDwqXAa7X5oJ/ZMluavqGCUE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:1f:d1:e7:76:16:54:bf:1c:b4:26:65:3a:fb:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46cfc41a419a7bbd6d8e8c4ee685595b6a40b9f1
        Validity
            Not Before: Jul 28 23:00:18 2026 GMT
            Not After : Jul 29 23:00:18 2026 GMT
        Subject: CN=3023c605ba06adb8a98f3d1c7a0e7c465bc37880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:6f:6e:f0:d2:bb:ec:a2:be:5d:e6:56:3f:4e:
                    3f:de:d3:10:87:f8:95:81:2e:81:c9:04:ad:5d:4a:
                    8b:e2:dc:d7:88:e4:e5:7f:44:48:78:62:f2:0a:46:
                    c6:2e:48:6f:52:46:21:9f:44:0b:0c:b0:55:1b:c3:
                    33:c8:5a:43:a6:82:92:fe:e2:13:97:92:b7:c7:16:
                    b4:d8:8e:a7:fb:d9:a9:00:db:2c:b1:73:e5:75:b9:
                    94:c0:ce:55:72:3e:14:40:34:f5:89:7d:3c:55:66:
                    1d:fb:90:4d:9f:30:1c:f1:ba:c6:51:90:dc:7c:b6:
                    3b:a1:ac:55:93:fe:17:e1:cd:c5:07:e6:70:27:d5:
                    fc:03:ae:ef:e1:c2:d4:64:f8:5e:c5:a9:83:27:e5:
                    70:f4:b9:f7:68:c2:33:44:33:e9:05:a2:53:35:de:
                    0b:6f:99:17:61:94:d4:1a:83:86:b9:05:d2:96:db:
                    d2:6d:2c:26:37:ca:df:d4:e5:56:33:28:bb:b8:ce:
                    cf:d4:39:c4:32:14:7d:d7:d8:1b:1f:35:e4:17:df:
                    ee:e0:39:b5:78:ee:40:d4:14:a8:62:d3:99:d1:e1:
                    08:3a:62:1d:e2:bf:22:62:2c:d9:f1:37:14:8a:59:
                    07:22:4a:1f:96:17:9f:b7:ca:af:5c:bf:d8:cc:ce:
                    c2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:23:C6:05:BA:06:AD:B8:A9:8F:3D:1C:7A:0E:7C:46:5B:C3:78:80
            X509v3 Authority Key Identifier:
                keyid:46:CF:C4:1A:41:9A:7B:BD:6D:8E:8C:4E:E6:85:59:5B:6A:40:B9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rs_EGkGae71tjoxO5oVZW2pAufE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/2c237a-8bbc-49c3-adea-cc3376ef7300/1/Rs_EGkGae71tjoxO5oVZW2pAufE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:2a:b4:63:de:27:d6:10:fd:08:a7:6e:07:2e:a3:7e:ce:b3:
         7f:2f:85:49:92:1d:24:81:9a:f8:40:e6:7a:6b:6f:f0:f1:35:
         0e:ee:df:14:3c:e3:be:3e:16:ac:0e:38:9e:b4:6c:5f:c4:c6:
         d6:00:22:a1:a1:cf:8b:65:ea:ac:2f:26:93:31:e3:70:ca:0c:
         b4:cc:dc:8a:af:ea:01:80:b9:90:e2:bc:c2:02:bb:37:d5:29:
         14:f4:3e:2e:0b:08:dc:ad:19:01:19:dc:5e:bc:45:cf:d9:ba:
         2c:e8:39:b7:7d:9a:6e:8e:c9:7d:05:bc:88:13:fe:a0:0f:73:
         f0:43:01:d6:21:e2:8b:1c:8f:c1:3e:4f:5e:76:12:9c:95:b3:
         35:2b:ac:15:f1:c5:aa:53:2d:e0:7f:d0:64:9a:da:87:e4:38:
         f6:b4:13:51:ef:61:a1:d9:c5:f9:b6:83:2c:47:8a:1d:53:ee:
         4f:72:3d:f4:41:4f:08:4f:21:e5:d1:60:8f:8a:0a:25:24:9d:
         7c:26:68:02:c5:3c:8a:fb:83:2d:65:81:5e:44:d6:71:8c:36:
         8a:b9:65:95:70:9f:92:2e:f3:3c:70:cc:e8:1f:a8:68:da:a2:
         b0:d4:e6:4a:28:07:ed:67:56:c2:b2:58:fb:5a:af:48:06:e0:
         d6:d8:6e:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9R/R53YWVL8ctCZlOvunMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2Y2ZjNDFhNDE5YTdiYmQ2ZDhlOGM0ZWU2ODU1OTViNmE0
MGI5ZjEwHhcNMjYwNzI4MjMwMDE4WhcNMjYwNzI5MjMwMDE4WjAzMTEwLwYDVQQD
EygzMDIzYzYwNWJhMDZhZGI4YTk4ZjNkMWM3YTBlN2M0NjViYzM3ODgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4W9u8NK77KK+XeZWP04/3tMQh/iV
gS6ByQStXUqL4tzXiOTlf0RIeGLyCkbGLkhvUkYhn0QLDLBVG8MzyFpDpoKS/uIT
l5K3xxa02I6n+9mpANsssXPldbmUwM5Vcj4UQDT1iX08VWYd+5BNnzAc8brGUZDc
fLY7oaxVk/4X4c3FB+ZwJ9X8A67v4cLUZPhexamDJ+Vw9Ln3aMIzRDPpBaJTNd4L
b5kXYZTUGoOGuQXSltvSbSwmN8rf1OVWMyi7uM7P1DnEMhR919gbHzXkF9/u4Dm1
eO5A1BSoYtOZ0eEIOmId4r8iYizZ8TcUilkHIkoflheft8qvXL/YzM7CiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAjxgW6Bq24qY89HHoOfEZbw3iAMB8GA1UdIwQY
MBaAFEbPxBpBmnu9bY6MTuaFWVtqQLnxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEt
Y2MzMzc2ZWY3MzAwLzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8yYzIzN2EtOGJiYy00OWMzLWFkZWEtY2MzMzc2ZWY3MzAw
LzEvUnNfRUdrR2FlNzF0am94TzVvVlpXMnBBdWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOyq0Y94n
1hD9CKduBy6jfs6zfy+FSZIdJIGa+EDmemtv8PE1Du7fFDzjvj4WrA44nrRsX8TG
1gAioaHPi2XqrC8mkzHjcMoMtMzciq/qAYC5kOK8wgK7N9UpFPQ+LgsI3K0ZARnc
XrxFz9m6LOg5t32abo7JfQW8iBP+oA9z8EMB1iHiixyPwT5PXnYSnJWzNSusFfHF
qlMt4H/QZJrah+Q49rQTUe9hodnF+baDLEeKHVPuT3I99EFPCE8h5dFgj4oKJSSd
fCZoAsU8ivuDLWWBXkTWcYw2irlllXCfki7zPHDM6B+oaNqisNTmSigH7WdWwrJY
+1qvSAbg1thuRw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:43:36 2026 by rpki-client