Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
File:                     yFP7eYikLzmDixx_nwQAaS6Sldc.mft (raw, json)
Hash identifier:          FLcPkZiMIM43zyOU3rKkbM7VuKzkLxQL6/V3k9Fe4R8=
Subject key identifier:   10:74:71:F7:1B:23:6A:3A:2A:AB:CE:93:C7:24:98:F7:1B:B3:C7:83
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Certificate issuer:       /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial:       019F916DBDEA44D39F9A9E783511D74A39E7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
Manifest number:          0539
Signing time:             Fri 24 Jul 2026 00:01:56 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:56 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:56 +0000
Files and hashes:         1: TTJb2RAURlKPWvYkNwaWkyT09qY.roa (hash: lOE8Ruv9RewYP7cpvq3aqRSVFYYOIUiYC9/cShdcpDM=)
                          2: Y6tlWJsn2-eO2pGWaQiPAUkPW7g.roa (hash: uARQVpL4FEL+I59HsU9UtUVf5F4ZPPjEs1mpi4DNxXs=)
                          3: yFP7eYikLzmDixx_nwQAaS6Sldc.crl (hash: vuE/fNZHDXg3HES5sTnwAehBkTx+5RxYmHLvA2KIOHU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:bd:ea:44:d3:9f:9a:9e:78:35:11:d7:4a:39:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
        Validity
            Not Before: Jul 24 00:01:56 2026 GMT
            Not After : Jul 25 00:01:56 2026 GMT
        Subject: CN=107471f71b236a3a2aabce93c72498f71bb3c783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:71:dd:92:a7:4a:01:b4:d3:e5:a0:ca:cc:6f:
                    1d:71:0b:74:56:fa:2e:a5:33:a0:40:43:62:13:c3:
                    92:bd:a6:25:75:f9:5a:a6:e3:0e:52:55:e1:a1:67:
                    be:ab:b2:14:17:eb:e6:14:b3:cc:e1:24:7b:90:fc:
                    17:a2:5e:ef:02:b7:95:0a:b5:6c:39:78:e9:a0:e2:
                    20:c1:fc:7b:6b:23:f5:39:75:81:8f:d9:fa:70:d7:
                    33:41:90:6e:5f:45:ac:d5:96:8a:e4:5b:11:41:f6:
                    64:41:fe:c1:ac:cb:20:38:8c:63:ab:4f:67:b9:da:
                    60:4e:02:ab:1b:a4:09:6e:fd:1b:e0:aa:ca:33:cf:
                    c9:8f:c7:fa:6a:a1:0d:6d:2a:2f:16:e4:f5:2a:fa:
                    5a:9e:a3:b4:e2:1b:0a:af:4b:49:77:58:f1:50:26:
                    07:ad:f5:cb:2e:9a:26:ff:de:93:9a:3a:cf:2b:d7:
                    27:70:59:fe:08:35:6b:91:19:d7:a0:56:40:1c:b4:
                    80:35:3e:cf:9d:01:bd:e3:da:35:83:fc:04:e8:fb:
                    04:64:b3:05:c5:ae:a1:b6:a1:2d:ba:dc:e2:77:c2:
                    aa:ab:f2:c4:20:79:ff:af:f0:c1:61:75:75:97:5e:
                    a3:ae:1e:3c:ee:73:73:c1:c3:8b:b6:b3:8d:f2:2c:
                    17:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:74:71:F7:1B:23:6A:3A:2A:AB:CE:93:C7:24:98:F7:1B:B3:C7:83
            X509v3 Authority Key Identifier:
                keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:db:34:16:c1:80:4b:19:61:bc:51:ca:64:53:01:a8:da:30:
         cf:b2:e6:db:fc:d9:43:e1:90:ad:a2:0e:f2:22:8e:20:7a:76:
         96:b0:c9:a6:82:45:eb:98:95:f2:e8:9b:65:1e:ba:9b:99:04:
         75:d8:5c:31:7b:9a:ee:c9:cc:14:5b:eb:e2:50:55:d6:17:1c:
         83:37:d2:a1:df:c9:5f:e9:97:f2:09:f0:25:a3:e6:36:1a:f5:
         be:d6:df:64:6f:f0:a9:41:22:02:77:19:7d:87:79:c9:68:39:
         87:e2:95:e3:8d:9a:82:13:40:24:89:38:ed:26:b2:53:41:2e:
         bd:33:08:5b:04:8a:2d:6d:53:7b:e5:d3:a4:40:16:3c:ff:e0:
         45:1f:9f:a7:b3:fe:8a:41:32:a1:15:4d:e3:46:0c:ad:cc:ef:
         f7:8a:d2:5a:00:e6:8c:8b:9c:0c:a4:70:21:13:6b:4b:37:26:
         89:48:07:69:3a:64:8e:6c:27:f0:44:7e:78:44:16:b0:03:d1:
         12:6f:02:df:f8:78:ae:5b:2e:ef:da:88:df:26:1d:ca:9b:7f:
         84:7d:9f:e6:51:49:f5:35:1d:fa:ce:85:e6:9a:4a:e1:f5:04:
         45:19:7a:aa:0e:2d:a2:2d:3b:4e:fd:23:4d:39:e9:02:d3:83:
         90:83:7b:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Rbb3qRNOfmp54NRHXSjnnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM4NTNmYjc5ODhhNDJmMzk4MzhiMWM3ZjlmMDQwMDY5MmU5
Mjk1ZDcwHhcNMjYwNzI0MDAwMTU2WhcNMjYwNzI1MDAwMTU2WjAzMTEwLwYDVQQD
EygxMDc0NzFmNzFiMjM2YTNhMmFhYmNlOTNjNzI0OThmNzFiYjNjNzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3HHdkqdKAbTT5aDKzG8dcQt0Vvou
pTOgQENiE8OSvaYldflapuMOUlXhoWe+q7IUF+vmFLPM4SR7kPwXol7vAreVCrVs
OXjpoOIgwfx7ayP1OXWBj9n6cNczQZBuX0Ws1ZaK5FsRQfZkQf7BrMsgOIxjq09n
udpgTgKrG6QJbv0b4KrKM8/Jj8f6aqENbSovFuT1KvpanqO04hsKr0tJd1jxUCYH
rfXLLpom/96TmjrPK9cncFn+CDVrkRnXoFZAHLSANT7PnQG949o1g/wE6PsEZLMF
xa6htqEtutzid8Kqq/LEIHn/r/DBYXV1l16jrh487nNzwcOLtrON8iwXsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBB0cfcbI2o6KqvOk8ckmPcbs8eDMB8GA1UdIwQY
MBaAFMhT+3mIpC85g4scf58EAGkukpXXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODIt
MWU3YmRiN2YzMGY2LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi8wYzYxYTYtZTBmYS00MDE3LTk1ODItMWU3YmRiN2YzMGY2
LzEveUZQN2VZaWtMem1EaXh4X253UUFhUzZTbGRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkds0FsGA
SxlhvFHKZFMBqNowz7Lm2/zZQ+GQraIO8iKOIHp2lrDJpoJF65iV8uibZR66m5kE
ddhcMXua7snMFFvr4lBV1hccgzfSod/JX+mX8gnwJaPmNhr1vtbfZG/wqUEiAncZ
fYd5yWg5h+KV442aghNAJIk47SayU0EuvTMIWwSKLW1Te+XTpEAWPP/gRR+fp7P+
ikEyoRVN40YMrczv94rSWgDmjIucDKRwIRNrSzcmiUgHaTpkjmwn8ER+eEQWsAPR
Em8C3/h4rlsu79qI3yYdypt/hH2f5lFJ9TUd+s6F5ppK4fUERRl6qg4toi07Tv0j
TTnpAtODkIN7yQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:11:33 2026 by rpki-client