Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
File:                     fusK7GOUn0ElxzqmF36gtyHVJ7s.mft (raw, json)
Hash identifier:          jPvJvVkACfGW82zzM3uTIOA6QXKCwWqkCvGg0Ri2CyA=
Subject key identifier:   A0:57:E7:A1:CF:C6:45:98:42:89:28:19:FD:98:02:0D:B4:17:64:16
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Certificate issuer:       /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial:       019F90C76E982DAFCE00102DC6FB70A5392E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
Manifest number:          1128
Signing time:             Thu 23 Jul 2026 21:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:16 +0000
Files and hashes:         1: 4lh6zuN-Tq_BcgExhVd8NBQchD4.roa (hash: P5LL4+rUzqUyR015fjGrIwNYgLO0xwDg5m3oq2ToJRo=)
                          2: fusK7GOUn0ElxzqmF36gtyHVJ7s.crl (hash: yciZExHTWdRCZwTAE5mXYmdDqCbntg8RSJrStpbp97E=)
                          3: gEJvFR8PsrUne5oELsB0PV7jSGU.roa (hash: mpcorMON4i4mafITifxuEzyDa+A1SVT5nIbq/8eGhJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:6e:98:2d:af:ce:00:10:2d:c6:fb:70:a5:39:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
        Validity
            Not Before: Jul 23 21:00:16 2026 GMT
            Not After : Jul 24 21:00:16 2026 GMT
        Subject: CN=a057e7a1cfc6459842892819fd98020db4176416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:c3:6a:10:a4:a2:83:88:97:d0:ff:f2:62:
                    3e:73:b2:8d:ee:7f:e9:16:14:64:7e:58:4f:dd:64:
                    a8:3f:17:c7:97:e1:a7:23:41:2f:ad:20:60:ce:dc:
                    86:d4:36:2b:4f:ec:19:6b:9d:89:5c:5f:00:d0:73:
                    6c:18:dc:ac:f8:4e:7a:22:61:a3:ec:d1:e6:88:07:
                    61:be:ab:2b:6a:58:af:c7:e5:99:8b:a5:f2:42:5a:
                    51:a4:e9:75:94:d9:81:77:c5:fb:f7:f1:a6:d8:78:
                    29:a9:93:b4:c3:d3:83:4b:8f:55:d8:5d:74:e6:17:
                    2d:6a:5b:0c:a5:ee:f8:c1:8d:fa:72:58:b0:6f:d1:
                    e0:ac:4c:59:66:83:fa:02:24:9d:3c:c4:98:88:d7:
                    34:74:f9:97:88:b5:67:3c:27:c3:6f:20:66:df:55:
                    5c:33:11:d8:2d:56:21:75:78:c6:07:7b:b7:82:ba:
                    87:8c:f6:26:a3:1c:64:db:e6:e3:57:9f:c2:b1:92:
                    21:c6:6d:30:0c:69:0e:4f:9d:c9:58:ff:d7:c0:01:
                    48:83:b8:a2:a7:21:5d:0e:59:f1:78:f1:01:5f:a6:
                    50:4e:cd:21:29:7a:c8:8b:19:7c:b4:a1:36:55:3e:
                    74:91:4f:10:11:3d:85:1b:d5:03:8b:26:f8:f4:18:
                    5f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:57:E7:A1:CF:C6:45:98:42:89:28:19:FD:98:02:0D:B4:17:64:16
            X509v3 Authority Key Identifier:
                keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2c:7d:b6:60:a1:e9:ae:90:45:49:98:3b:dd:30:67:1e:0c:
         95:13:4b:48:f2:07:98:6e:89:c8:30:bc:7f:c9:77:ab:1f:05:
         2d:a1:d9:08:ab:be:a0:03:cf:90:d6:3f:82:c4:a2:cf:25:8b:
         a1:55:cc:c2:5f:d7:67:b3:d8:aa:07:ed:9f:54:b3:2f:a7:b7:
         ca:a4:c4:55:7f:5d:82:4a:46:9b:40:2a:2b:89:76:b7:be:58:
         0b:2a:7e:67:82:1b:78:a4:9e:7c:13:c3:39:7f:56:d4:c3:b6:
         59:98:4b:45:cd:ae:8a:49:88:e8:82:bc:13:f4:73:cb:fa:c4:
         8a:ca:a1:91:94:1b:42:80:6c:fb:e3:5d:ff:dc:b5:fc:22:31:
         b2:e0:78:ba:06:d7:b4:07:38:95:e1:00:01:48:98:93:3a:9e:
         43:9e:14:0a:fe:04:aa:83:1d:80:2e:f4:92:b1:22:e9:8d:a3:
         4a:f7:08:ce:84:f6:0a:e6:0a:2c:e2:f4:fa:54:6d:79:64:27:
         7c:83:bd:ac:29:d2:ce:72:29:1d:b7:26:14:10:46:7d:e6:45:
         a9:ee:ab:4f:28:00:f9:7c:bf:b7:d9:ee:6e:89:96:de:98:9f:
         2b:97:9c:16:28:02:dc:d6:3c:f2:92:d7:bf:f6:4d:33:8d:47:
         33:6d:60:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx26YLa/OABAtxvtwpTkuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZWIwYWVjNjM5NDlmNDEyNWM3M2FhNjE3N2VhMGI3MjFk
NTI3YmIwHhcNMjYwNzIzMjEwMDE2WhcNMjYwNzI0MjEwMDE2WjAzMTEwLwYDVQQD
EyhhMDU3ZTdhMWNmYzY0NTk4NDI4OTI4MTlmZDk4MDIwZGI0MTc2NDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyLDahCkooOIl9D/8mI+c7KN7n/p
FhRkflhP3WSoPxfHl+GnI0EvrSBgztyG1DYrT+wZa52JXF8A0HNsGNys+E56ImGj
7NHmiAdhvqsralivx+WZi6XyQlpRpOl1lNmBd8X79/Gm2HgpqZO0w9ODS49V2F10
5hctalsMpe74wY36cliwb9HgrExZZoP6AiSdPMSYiNc0dPmXiLVnPCfDbyBm31Vc
MxHYLVYhdXjGB3u3grqHjPYmoxxk2+bjV5/CsZIhxm0wDGkOT53JWP/XwAFIg7ii
pyFdDlnxePEBX6ZQTs0hKXrIixl8tKE2VT50kU8QET2FG9UDiyb49Bhf/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKBX56HPxkWYQokoGf2YAg20F2QWMB8GA1UdIwQY
MBaAFH7rCuxjlJ9BJcc6phd+oLch1Se7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMt
ZDI2ZDdkNGMyNTA1LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMtZDI2ZDdkNGMyNTA1
LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWSx9tmCh
6a6QRUmYO90wZx4MlRNLSPIHmG6JyDC8f8l3qx8FLaHZCKu+oAPPkNY/gsSizyWL
oVXMwl/XZ7PYqgftn1SzL6e3yqTEVX9dgkpGm0AqK4l2t75YCyp+Z4IbeKSefBPD
OX9W1MO2WZhLRc2uikmI6IK8E/Rzy/rEisqhkZQbQoBs++Nd/9y1/CIxsuB4ugbX
tAc4leEAAUiYkzqeQ54UCv4EqoMdgC70krEi6Y2jSvcIzoT2CuYKLOL0+lRteWQn
fIO9rCnSznIpHbcmFBBGfeZFqe6rTygA+Xy/t9nubomW3pifK5ecFigC3NY88pLX
v/ZNM41HM21gnQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:52:12 2026 by rpki-client