Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File:                     K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier:          AIyAnXXlfb7y2LVZ8sAHwVdOJOqqVnELY6diB5jFGxc=
Subject key identifier:   7E:CC:08:9C:34:A9:93:55:F9:56:51:18:43:56:62:A7:32:9E:11:75
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer:       /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial:       019F8EA2887DB4F7C45980CF53E615F6133C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number:          0B83
Signing time:             Thu 23 Jul 2026 11:00:44 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:44 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:44 +0000
Files and hashes:         1: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
                          2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: GYRMgh4n10EGPAsqjspoKjbGVd54HWitR6ouombRnpU=)
                          3: qjaJHwzc1W-wHJ5kuxqOmW74G_s.asa (hash: R4ifag0KL4ofvb+CfHhgXUOYRgZ/gtNDck18NNBrhqc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:88:7d:b4:f7:c4:59:80:cf:53:e6:15:f6:13:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
        Validity
            Not Before: Jul 23 11:00:44 2026 GMT
            Not After : Jul 24 11:00:44 2026 GMT
        Subject: CN=7ecc089c34a99355f9565118435662a7329e1175
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:c6:5d:cf:c3:2a:cb:a8:ea:2d:5b:e0:a3:a5:
                    a5:94:21:f0:04:f6:cc:fd:de:6e:2c:f2:6b:6d:34:
                    ad:ed:69:4c:d1:68:28:d3:87:61:f4:16:c8:19:8d:
                    3c:c6:81:92:00:b0:a6:67:40:2c:67:b8:d3:e3:44:
                    5c:a1:6d:f7:7a:e5:27:c8:5c:dc:c9:fc:d2:27:e3:
                    5c:83:5e:d4:17:1b:5c:b6:a3:5b:5e:70:d8:90:ed:
                    16:b3:d5:b9:a6:88:60:41:a8:11:c6:ab:9a:c7:84:
                    63:2c:24:24:3b:d3:7d:4f:df:2a:69:c7:be:6e:93:
                    c9:7d:c7:0d:ec:b7:f2:af:3e:b4:14:79:e2:4d:42:
                    76:5d:de:6f:7e:ec:0a:cc:e0:d8:2f:75:3b:3a:f7:
                    a2:fd:57:76:1f:e7:24:1f:26:f8:07:2c:4a:66:a3:
                    cd:cd:f6:96:45:47:ac:2a:e8:82:56:21:4c:f6:29:
                    5d:c4:31:67:ac:bd:33:27:3a:eb:d5:ac:4e:02:15:
                    ea:67:eb:ec:5b:08:46:3f:c5:55:6a:89:3d:db:4c:
                    8a:31:dd:1e:07:ca:30:6f:0a:ce:88:bd:dd:30:5a:
                    6f:f9:88:08:b9:39:5b:70:df:aa:5a:72:9d:f0:2c:
                    5a:a6:1a:3d:66:60:80:ce:4e:9f:ae:aa:04:c5:00:
                    f6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CC:08:9C:34:A9:93:55:F9:56:51:18:43:56:62:A7:32:9E:11:75
            X509v3 Authority Key Identifier:
                keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:bc:80:e6:16:55:9a:91:2b:b5:a4:aa:9a:a7:e7:e4:92:53:
         1e:cf:18:e5:af:ac:da:94:8f:f4:57:d6:fa:8c:d7:b7:fa:1b:
         58:c3:b3:20:3c:63:82:4a:8d:0f:9d:a4:4d:dc:bb:10:51:16:
         72:cb:83:e8:ae:6f:f3:16:f2:15:9c:cf:8c:cd:34:eb:24:0b:
         6d:fd:49:4a:0e:d8:1a:38:5e:60:72:4f:e4:fa:34:99:c5:e1:
         13:d4:d4:96:dc:a3:87:41:1e:c0:c6:be:08:c8:c3:31:6e:26:
         85:77:18:59:6a:1d:26:5d:1c:ea:65:05:0a:f5:44:af:8c:4f:
         59:61:0b:6b:5f:f3:45:45:4e:1e:71:f7:42:40:d8:69:00:c0:
         1e:94:77:d1:6a:a7:a9:c6:83:5e:b1:c0:95:55:3d:54:79:f7:
         86:1d:7b:f7:a7:b0:0e:d9:80:ad:10:93:86:b3:9a:ef:b6:47:
         99:a9:7b:cc:68:fd:69:8c:a7:3e:62:06:f1:be:0f:ef:9a:92:
         16:c1:da:60:f2:4b:77:20:8f:35:b6:bf:18:20:c4:97:c0:ea:
         6a:81:9f:4c:d7:dc:dd:06:d3:f0:07:77:30:4d:f8:c7:2a:ec:
         8d:1f:1c:cd:1f:f6:d3:dc:a5:82:ad:0b:8a:87:73:0f:67:43:
         ba:a9:a0:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oooh9tPfEWYDPU+YV9hM8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiYWVlN2VhNDgyZDYyYTY3MTA2M2VhYzgzNzg5YWYzOWYz
OTBiNzQwHhcNMjYwNzIzMTEwMDQ0WhcNMjYwNzI0MTEwMDQ0WjAzMTEwLwYDVQQD
Eyg3ZWNjMDg5YzM0YTk5MzU1Zjk1NjUxMTg0MzU2NjJhNzMyOWUxMTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cZdz8Mqy6jqLVvgo6WllCHwBPbM
/d5uLPJrbTSt7WlM0Wgo04dh9BbIGY08xoGSALCmZ0AsZ7jT40RcoW33euUnyFzc
yfzSJ+Ncg17UFxtctqNbXnDYkO0Ws9W5pohgQagRxquax4RjLCQkO9N9T98qace+
bpPJfccN7Lfyrz60FHniTUJ2Xd5vfuwKzODYL3U7Ovei/Vd2H+ckHyb4ByxKZqPN
zfaWRUesKuiCViFM9ildxDFnrL0zJzrr1axOAhXqZ+vsWwhGP8VVaok920yKMd0e
B8owbwrOiL3dMFpv+YgIuTlbcN+qWnKd8Cxapho9ZmCAzk6frqoExQD2DQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7MCJw0qZNV+VZRGENWYqcynhF1MB8GA1UdIwQY
MBaAFCuu5+pILWKmcQY+rIN4mvOfOQt0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQt
NzUyMWFmMWNlMjU5LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8wMTU3ODQtMzcwNS00MThhLWI5OTQtNzUyMWFmMWNlMjU5
LzEvSzY3bjZrZ3RZcVp4Qmo2c2czaWE4NTg1QzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbyA5hZV
mpErtaSqmqfn5JJTHs8Y5a+s2pSP9FfW+ozXt/obWMOzIDxjgkqND52kTdy7EFEW
csuD6K5v8xbyFZzPjM006yQLbf1JSg7YGjheYHJP5Po0mcXhE9TUltyjh0EewMa+
CMjDMW4mhXcYWWodJl0c6mUFCvVEr4xPWWELa1/zRUVOHnH3QkDYaQDAHpR30Wqn
qcaDXrHAlVU9VHn3hh1796ewDtmArRCThrOa77ZHmal7zGj9aYynPmIG8b4P75qS
FsHaYPJLdyCPNba/GCDEl8DqaoGfTNfc3QbT8Ad3ME34xyrsjR8czR/209ylgq0L
iodzD2dDuqmg4g==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:15 2026 by rpki-client