Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
File:                     ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json)
Hash identifier:          t59gZRChT+Vsxt1FrY0pzxV46D0Tlu3iSzVycJWrOLA=
Subject key identifier:   A9:CF:62:FA:3A:B9:96:4A:94:41:51:30:BC:AD:80:B1:4A:3E:55:24
Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71
Certificate issuer:       /CN=49c403d43b5f38fca2119cd1409a92763edefe71
Certificate serial:       019FAA1A2F3556A813ED5AAF8153FD36AF84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
Manifest number:          19DB
Signing time:             Tue 28 Jul 2026 19:01:10 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:10 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:10 +0000
Files and hashes:         1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=)
                          2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=)
                          3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=)
                          4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=)
                          5: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=)
                          6: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=)
                          7: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: 2gMDFDEfvEGp7wLuiN65ZEiWPIQaeSHeaQsomrgH0qc=)
                          8: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=)
                          9: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=)
                          10: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:2f:35:56:a8:13:ed:5a:af:81:53:fd:36:af:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71
        Validity
            Not Before: Jul 28 19:01:10 2026 GMT
            Not After : Jul 29 19:01:10 2026 GMT
        Subject: CN=a9cf62fa3ab9964a94415130bcad80b14a3e5524
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:61:93:7f:2b:02:42:2c:f2:07:23:3b:98:02:
                    ba:50:bc:a0:b7:d9:53:24:9a:18:e7:09:c7:19:65:
                    53:05:90:9f:2a:33:56:1a:20:26:0f:e9:ab:b5:4f:
                    bb:5b:7c:b1:c6:06:3f:fc:82:29:74:72:b0:30:39:
                    90:c5:9d:bf:a8:2d:11:c5:d6:8d:3e:2d:68:91:84:
                    6c:0c:13:31:cc:da:fc:00:67:b8:93:79:0b:37:3a:
                    d9:bf:89:13:aa:04:5e:7f:9c:c2:55:e6:fa:da:5a:
                    85:8b:28:e6:30:20:1b:92:f0:71:f1:53:2f:91:64:
                    7c:bd:d4:26:65:73:ec:37:fe:19:2f:10:05:69:27:
                    a8:84:ec:b4:a3:f1:3a:2b:33:1f:67:4f:a7:f7:3f:
                    75:18:ad:9c:1a:4a:60:c4:28:da:ba:24:42:9b:5d:
                    e8:be:78:fb:60:5f:23:ad:ff:00:72:2d:3e:8c:64:
                    bf:3a:38:4e:2c:bf:2c:8f:04:c7:12:bb:55:7d:58:
                    f2:8b:88:94:97:b3:5f:ed:35:5c:1f:96:c7:9c:3b:
                    3b:97:ee:f1:49:ad:34:4d:25:6a:a1:95:fa:4f:1c:
                    c3:2e:54:73:6c:30:24:6b:5f:a2:d9:0c:6d:4c:94:
                    5f:c2:0f:3f:59:1d:43:01:bd:e4:b8:34:6f:6f:13:
                    7b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:CF:62:FA:3A:B9:96:4A:94:41:51:30:BC:AD:80:B1:4A:3E:55:24
            X509v3 Authority Key Identifier:
                keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:cc:5b:c0:be:45:b3:d5:fc:ea:80:68:72:0c:7b:b0:2a:9d:
         36:f8:66:84:19:c0:3c:b3:a3:3c:6b:2f:7c:3f:45:b7:b2:cb:
         53:25:72:e4:c7:d7:64:0b:ca:fa:4e:98:8f:b6:f5:5f:80:58:
         cc:3b:85:94:d4:23:fd:ca:09:52:d3:5a:3f:32:b9:0a:e2:ae:
         67:cd:27:cc:4f:5b:d0:dd:5f:d0:c4:56:ef:78:30:35:65:d8:
         c4:78:3e:52:f6:cf:4a:99:68:20:35:cc:10:97:77:e0:c7:36:
         77:33:0f:f1:68:92:76:66:39:d3:cd:6f:d9:8d:58:07:e6:81:
         b8:10:8f:42:1a:93:83:aa:c9:2e:b2:48:5e:be:a0:8a:26:78:
         f1:5d:4d:ef:da:21:db:cd:a9:41:98:40:c0:48:dd:16:6e:a3:
         9d:04:ce:56:65:c1:c6:22:72:bd:bb:53:5a:c9:90:7d:5e:c8:
         45:2a:0f:33:3f:00:42:f8:f3:85:11:9c:6a:07:04:5b:ed:7b:
         02:57:0f:6d:cd:f9:4d:dd:ea:58:20:43:44:6c:6e:b3:9f:e7:
         a6:dd:99:15:2d:8e:09:a6:fc:15:89:1a:06:71:2a:69:6d:24:
         5e:d2:47:d5:dc:8a:c3:58:86:0c:43:92:2d:7e:20:ca:c5:37:
         82:a7:8f:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGi81VqgT7VqvgVP9Nq+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk
ZWZlNzEwHhcNMjYwNzI4MTkwMTEwWhcNMjYwNzI5MTkwMTEwWjAzMTEwLwYDVQQD
EyhhOWNmNjJmYTNhYjk5NjRhOTQ0MTUxMzBiY2FkODBiMTRhM2U1NTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmGTfysCQizyByM7mAK6ULygt9lT
JJoY5wnHGWVTBZCfKjNWGiAmD+mrtU+7W3yxxgY//IIpdHKwMDmQxZ2/qC0RxdaN
Pi1okYRsDBMxzNr8AGe4k3kLNzrZv4kTqgRef5zCVeb62lqFiyjmMCAbkvBx8VMv
kWR8vdQmZXPsN/4ZLxAFaSeohOy0o/E6KzMfZ0+n9z91GK2cGkpgxCjauiRCm13o
vnj7YF8jrf8Aci0+jGS/OjhOLL8sjwTHErtVfVjyi4iUl7Nf7TVcH5bHnDs7l+7x
Sa00TSVqoZX6TxzDLlRzbDAka1+i2QxtTJRfwg8/WR1DAb3kuDRvbxN7fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKnPYvo6uZZKlEFRMLytgLFKPlUkMB8GA1UdIwQY
MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt
Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx
LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8xbwL5F
s9X86oBocgx7sCqdNvhmhBnAPLOjPGsvfD9Ft7LLUyVy5MfXZAvK+k6Yj7b1X4BY
zDuFlNQj/coJUtNaPzK5CuKuZ80nzE9b0N1f0MRW73gwNWXYxHg+UvbPSploIDXM
EJd34Mc2dzMP8WiSdmY5081v2Y1YB+aBuBCPQhqTg6rJLrJIXr6giiZ48V1N79oh
282pQZhAwEjdFm6jnQTOVmXBxiJyvbtTWsmQfV7IRSoPMz8AQvjzhRGcagcEW+17
AlcPbc35Td3qWCBDRGxus5/npt2ZFS2OCab8FYkaBnEqaW0kXtJH1dyKw1iGDEOS
LX4gysU3gqePKg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:08:51 2026 by rpki-client