Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
File:                     Fm9ncLp34DLn59HXMtl1AkHhGfk.mft (raw, json)
Hash identifier:          QAxwsHDxwdRfHw/oNy+k+3FsRQ89fTErLHrVU7l3ytQ=
Subject key identifier:   8E:66:B1:17:36:7D:42:13:C5:C3:46:B9:35:2A:88:3D:70:36:69:E1
Authority key identifier: 16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9
Certificate issuer:       /CN=166f6770ba77e032e7e7d1d732d9750241e119f9
Certificate serial:       019F8FEC51177F052CB1BD753120C5CC2B90
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
Manifest number:          07F8
Signing time:             Thu 23 Jul 2026 17:00:56 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:56 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:56 +0000
Files and hashes:         1: Bv7qdIynKdZMI-P6-xF9VWllpNs.roa (hash: bLK9TvfWN2sH1qp924dJMpWvZP4Q59J3E6kgUjRdOMk=)
                          2: Fm9ncLp34DLn59HXMtl1AkHhGfk.crl (hash: ZLUssT+VfCsmR4qInFsnChbxH4BpWo8GDtZEh+8dqNA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:51:17:7f:05:2c:b1:bd:75:31:20:c5:cc:2b:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=166f6770ba77e032e7e7d1d732d9750241e119f9
        Validity
            Not Before: Jul 23 17:00:56 2026 GMT
            Not After : Jul 24 17:00:56 2026 GMT
        Subject: CN=8e66b117367d4213c5c346b9352a883d703669e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b1:0d:74:31:dd:2b:7f:35:e8:be:5b:5d:8f:
                    f0:ae:55:b1:06:d8:f7:64:db:87:f1:70:63:c4:c9:
                    3d:a9:b9:9d:f3:d1:13:d5:66:7b:ea:50:75:ff:be:
                    35:35:8e:f2:d0:d5:9d:07:7a:c1:a2:23:24:7f:ba:
                    3c:73:3b:5b:4e:72:1c:ca:5d:ad:46:10:6a:6e:46:
                    d1:00:df:d8:70:f5:42:4a:e5:06:ab:d6:86:88:a0:
                    db:10:98:c2:4e:4f:04:22:4a:71:4c:28:39:44:f7:
                    88:de:af:82:21:ae:77:c2:67:69:be:8f:fd:04:c5:
                    4a:29:19:d1:30:ba:9e:9a:2c:c7:24:6c:be:56:d6:
                    6e:06:0a:32:43:8e:3b:aa:15:b0:27:6a:20:7e:8b:
                    bc:c4:a6:77:8d:14:26:ea:c8:92:6d:bb:6b:9f:54:
                    d3:64:f9:da:ee:56:af:b6:c7:e6:c4:f0:0b:0f:b5:
                    87:3c:72:e3:a9:73:df:88:98:1b:36:0b:17:89:f4:
                    3d:31:cd:dd:1c:37:77:38:f7:2d:b3:f1:48:98:9b:
                    ff:6b:55:40:6a:f1:22:c6:e4:53:60:2a:a4:16:6c:
                    52:77:f6:0d:d8:89:d0:7f:1f:ae:fb:34:0a:73:6d:
                    5e:09:36:39:f9:e4:22:57:81:eb:be:98:4d:53:0c:
                    83:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:66:B1:17:36:7D:42:13:C5:C3:46:B9:35:2A:88:3D:70:36:69:E1
            X509v3 Authority Key Identifier:
                keyid:16:6F:67:70:BA:77:E0:32:E7:E7:D1:D7:32:D9:75:02:41:E1:19:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fm9ncLp34DLn59HXMtl1AkHhGfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/7bdc41-1875-4e50-b3d4-069c10dafb07/1/Fm9ncLp34DLn59HXMtl1AkHhGfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:e7:c0:df:15:8f:91:2d:23:97:b3:45:42:c1:7f:d4:24:53:
         76:2e:e9:12:56:24:06:d8:d6:8d:91:84:f2:39:55:17:4a:53:
         2c:e4:12:fe:86:49:83:06:62:4a:52:f1:84:7a:77:c4:a9:df:
         78:9b:2b:b6:f8:f6:1b:e0:8d:1c:7c:9e:53:7a:50:a7:45:4c:
         98:a3:92:c8:7f:49:66:aa:7f:20:5c:0f:33:fb:a0:2d:d4:f9:
         35:d8:f4:ed:22:dc:39:91:b8:a8:2b:a7:92:e9:72:27:7d:a4:
         17:e2:2d:ba:c6:2f:87:cf:b5:ee:e1:23:ab:b3:0f:4d:2a:f8:
         1c:bb:55:90:bf:74:ea:da:a3:ce:71:63:42:e1:3d:ed:05:ad:
         be:f7:a2:28:2a:b4:cc:ba:bd:a3:95:b1:a9:0a:46:d7:6c:02:
         ce:26:71:fe:48:6a:e7:5d:fb:66:db:fb:d7:a5:f7:b4:4d:43:
         90:01:64:81:c2:93:bf:0b:62:ac:d9:e5:04:10:cc:61:4c:c4:
         1f:40:74:01:21:49:f5:7f:65:cd:e3:9e:56:51:e7:ef:d2:bc:
         9e:69:c0:62:5a:e1:77:45:ac:33:ae:0f:d1:93:e7:40:ac:8c:
         32:06:ba:b1:5a:25:10:15:2a:b1:e5:79:92:fe:42:c8:b7:fe:
         06:50:f8:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7FEXfwUssb11MSDFzCuQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2NmY2NzcwYmE3N2UwMzJlN2U3ZDFkNzMyZDk3NTAyNDFl
MTE5ZjkwHhcNMjYwNzIzMTcwMDU2WhcNMjYwNzI0MTcwMDU2WjAzMTEwLwYDVQQD
Eyg4ZTY2YjExNzM2N2Q0MjEzYzVjMzQ2YjkzNTJhODgzZDcwMzY2OWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLENdDHdK3816L5bXY/wrlWxBtj3
ZNuH8XBjxMk9qbmd89ET1WZ76lB1/741NY7y0NWdB3rBoiMkf7o8cztbTnIcyl2t
RhBqbkbRAN/YcPVCSuUGq9aGiKDbEJjCTk8EIkpxTCg5RPeI3q+CIa53wmdpvo/9
BMVKKRnRMLqemizHJGy+VtZuBgoyQ447qhWwJ2ogfou8xKZ3jRQm6siSbbtrn1TT
ZPna7lavtsfmxPALD7WHPHLjqXPfiJgbNgsXifQ9Mc3dHDd3OPcts/FImJv/a1VA
avEixuRTYCqkFmxSd/YN2InQfx+u+zQKc21eCTY5+eQiV4HrvphNUwyDRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI5msRc2fUITxcNGuTUqiD1wNmnhMB8GA1UdIwQY
MBaAFBZvZ3C6d+Ay5+fR1zLZdQJB4Rn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQt
MDY5YzEwZGFmYjA3LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy83YmRjNDEtMTg3NS00ZTUwLWIzZDQtMDY5YzEwZGFmYjA3
LzEvRm05bmNMcDM0RExuNTlIWE10bDFBa0hoR2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANOfA3xWP
kS0jl7NFQsF/1CRTdi7pElYkBtjWjZGE8jlVF0pTLOQS/oZJgwZiSlLxhHp3xKnf
eJsrtvj2G+CNHHyeU3pQp0VMmKOSyH9JZqp/IFwPM/ugLdT5Ndj07SLcOZG4qCun
kulyJ32kF+ItusYvh8+17uEjq7MPTSr4HLtVkL906tqjznFjQuE97QWtvveiKCq0
zLq9o5WxqQpG12wCziZx/khq5137Ztv716X3tE1DkAFkgcKTvwtirNnlBBDMYUzE
H0B0ASFJ9X9lzeOeVlHn79K8nmnAYlrhd0WsM64P0ZPnQKyMMga6sVolEBUqseV5
kv5CyLf+BlD4GA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:38:21 2026 by rpki-client