Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
File:                     0e1mT0ry-OEZuHomjF1DA_uzYRY.mft (raw, json)
Hash identifier:          NhMn5hgnoOPTUPUfNW2fMqd8tfbY56ndW8jj/CfdPtw=
Subject key identifier:   BA:C5:B9:37:18:BF:A3:6A:23:5E:AC:6A:41:BB:30:B8:9B:37:69:E5
Authority key identifier: D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16
Certificate issuer:       /CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
Certificate serial:       019F90C797696D3EADCA2E09138268877FF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
Manifest number:          02F3
Signing time:             Thu 23 Jul 2026 21:00:27 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:27 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:27 +0000
Files and hashes:         1: 0e1mT0ry-OEZuHomjF1DA_uzYRY.crl (hash: cN9zcjEb7yrrfTn/H8oLvOu6LcZw1M+ONOt7EBFQFog=)
                          2: BMvBIwftHVjOq-ECziUj7FT9eNs.roa (hash: VyJ9dmhC8T/OTxMz+hnV4q4zH9/xxLGMFMd7o25VL7A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:97:69:6d:3e:ad:ca:2e:09:13:82:68:87:7f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1ed664f4af2f8e119b87a268c5d4303fbb36116
        Validity
            Not Before: Jul 23 21:00:27 2026 GMT
            Not After : Jul 24 21:00:27 2026 GMT
        Subject: CN=bac5b93718bfa36a235eac6a41bb30b89b3769e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:da:d2:40:58:f6:83:17:1a:46:c3:3d:0b:8c:
                    32:30:6d:3f:2f:e6:6a:43:51:3a:4e:c3:cc:be:b1:
                    a7:b1:b1:92:52:a3:a5:34:c5:b4:4a:46:8e:a3:56:
                    8c:9c:bd:fb:de:4a:ec:07:0f:7e:c7:e6:97:58:29:
                    fb:3c:d5:fd:68:4c:99:08:5b:8b:18:2d:be:a8:57:
                    a6:7c:25:93:10:45:4c:66:93:40:d8:72:5b:41:a8:
                    1c:a7:ba:63:af:26:10:99:51:2e:5b:bc:b8:3b:59:
                    1d:be:d2:3b:fa:e1:07:39:34:74:7f:f6:92:25:05:
                    9a:09:61:20:16:9b:ea:c2:b7:8c:81:be:7c:93:20:
                    5b:4d:c6:6d:d7:27:9b:58:a3:ce:bd:22:28:69:71:
                    b1:78:e5:2a:1b:54:f7:2b:99:ea:b3:42:53:67:4d:
                    8b:55:ca:dc:b0:90:07:bb:b5:3b:9f:e1:bb:4c:cd:
                    48:90:4b:79:7c:3e:d3:0a:fd:24:f1:75:18:3a:31:
                    ce:6a:a8:63:bf:7f:f4:e5:a0:ca:e8:9c:cf:3d:7a:
                    34:02:02:1a:28:5b:ba:41:90:c8:44:42:cc:63:c7:
                    98:19:23:23:31:9d:4c:28:6e:29:3c:d3:4f:66:19:
                    e0:1b:68:b4:e4:73:29:b0:86:4b:07:9c:04:0a:d2:
                    1e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:C5:B9:37:18:BF:A3:6A:23:5E:AC:6A:41:BB:30:B8:9B:37:69:E5
            X509v3 Authority Key Identifier:
                keyid:D1:ED:66:4F:4A:F2:F8:E1:19:B8:7A:26:8C:5D:43:03:FB:B3:61:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e1mT0ry-OEZuHomjF1DA_uzYRY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cf736d-3b8b-40f5-97cc-4b9529b48cea/1/0e1mT0ry-OEZuHomjF1DA_uzYRY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:39:fe:b6:67:79:0d:f9:1f:b0:99:30:5f:83:c1:0d:5b:56:
         50:6d:53:fe:b3:cf:61:30:d6:2d:63:6b:2b:62:09:42:41:b5:
         7f:13:38:7f:7a:f0:3a:62:7d:e3:15:85:25:a7:c5:29:73:c7:
         1c:4b:f1:4d:43:ff:bf:d2:93:33:73:78:f9:6f:d4:35:6e:18:
         b6:38:fe:00:16:6d:a9:3f:5c:d6:54:fa:d6:f8:f5:74:22:7b:
         ab:33:cb:5c:1b:cb:a6:9b:8f:97:91:02:9f:7b:38:55:b7:2f:
         57:b6:88:54:94:e6:50:b6:fb:d2:b4:95:36:2e:14:63:79:c3:
         e5:ca:c7:e0:46:bd:05:85:6f:e6:a0:44:ce:12:2a:34:ca:00:
         83:3e:ec:10:79:75:da:64:72:9b:30:6e:45:0a:8a:a7:1c:c2:
         59:64:44:84:e3:d2:a2:57:5a:bc:2a:12:12:7c:7a:87:d4:94:
         57:02:57:17:ff:a8:e9:05:c7:b2:6c:c4:51:f0:ee:1e:81:01:
         3a:b5:63:c8:3b:80:ea:b6:17:d7:6e:79:89:55:de:09:f3:b9:
         02:d2:eb:40:3e:f6:2b:c3:2d:d9:8e:7d:f1:dc:78:30:c3:57:
         12:43:5c:7a:0b:e1:fd:86:96:9e:14:f7:4d:ed:63:a7:36:1a:
         be:9c:98:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx5dpbT6tyi4JE4Joh3/1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZWQ2NjRmNGFmMmY4ZTExOWI4N2EyNjhjNWQ0MzAzZmJi
MzYxMTYwHhcNMjYwNzIzMjEwMDI3WhcNMjYwNzI0MjEwMDI3WjAzMTEwLwYDVQQD
EyhiYWM1YjkzNzE4YmZhMzZhMjM1ZWFjNmE0MWJiMzBiODliMzc2OWU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4drSQFj2gxcaRsM9C4wyMG0/L+Zq
Q1E6TsPMvrGnsbGSUqOlNMW0SkaOo1aMnL373krsBw9+x+aXWCn7PNX9aEyZCFuL
GC2+qFemfCWTEEVMZpNA2HJbQagcp7pjryYQmVEuW7y4O1kdvtI7+uEHOTR0f/aS
JQWaCWEgFpvqwreMgb58kyBbTcZt1yebWKPOvSIoaXGxeOUqG1T3K5nqs0JTZ02L
VcrcsJAHu7U7n+G7TM1IkEt5fD7TCv0k8XUYOjHOaqhjv3/05aDK6JzPPXo0AgIa
KFu6QZDIRELMY8eYGSMjMZ1MKG4pPNNPZhngG2i05HMpsIZLB5wECtIeJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrFuTcYv6NqI16sakG7MLibN2nlMB8GA1UdIwQY
MBaAFNHtZk9K8vjhGbh6JoxdQwP7s2EWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2Mt
NGI5NTI5YjQ4Y2VhLzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9jZjczNmQtM2I4Yi00MGY1LTk3Y2MtNGI5NTI5YjQ4Y2Vh
LzEvMGUxbVQwcnktT0VadUhvbWpGMURBX3V6WVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAojn+tmd5
DfkfsJkwX4PBDVtWUG1T/rPPYTDWLWNrK2IJQkG1fxM4f3rwOmJ94xWFJafFKXPH
HEvxTUP/v9KTM3N4+W/UNW4Ytjj+ABZtqT9c1lT61vj1dCJ7qzPLXBvLppuPl5EC
n3s4VbcvV7aIVJTmULb70rSVNi4UY3nD5crH4Ea9BYVv5qBEzhIqNMoAgz7sEHl1
2mRymzBuRQqKpxzCWWREhOPSoldavCoSEnx6h9SUVwJXF/+o6QXHsmzEUfDuHoEB
OrVjyDuA6rYX1255iVXeCfO5AtLrQD72K8Mt2Y598dx4MMNXEkNcegvh/YaWnhT3
Te1jpzYavpyYsg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:39:37 2026 by rpki-client