Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
File:                     miM7vd_kOGRvWG8IXl3w15vfufw.mft (raw, json)
Hash identifier:          d4zcPl18Ul2bmabpW0gbCnOZk6/UOs/qdVeIBKZEeM4=
Subject key identifier:   65:AB:8B:66:8B:F8:4C:5E:E7:FA:92:FA:20:AE:A3:6A:09:81:2E:2D
Authority key identifier: 9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC
Certificate issuer:       /CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
Certificate serial:       019F91DAE837AAD6440872FB14B1496A0BBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
Manifest number:          08BD
Signing time:             Fri 24 Jul 2026 02:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:10 +0000
Files and hashes:         1: M1ruMNKluNAuiHKd8f6PvAhDGEs.roa (hash: FWsTJhEBrkq8kPBWZ62T1F7ClTwy4cYS4tWh5TLbeTA=)
                          2: XNKWPCMOPLauToaa-Vtz2zcauoc.roa (hash: luJuVPoWx92bH75pBWbCMtwrgqr+Km6/eamqOW1HDZc=)
                          3: dyhz1TfOcl672ykR-umzk8d_7AQ.roa (hash: i2scR6hBPf9EaO7J0DMnFp1+UeNi6vv8mMyfEjaxgaY=)
                          4: miM7vd_kOGRvWG8IXl3w15vfufw.crl (hash: HgFtzrd7qa9PQ/uWDTSfbzEb0wWfYEgxf8exGZcGpxo=)
                          5: nl8rJp2Gx045j4pPDWegyHxSDoU.roa (hash: 2GNCXLXhx5YXmc3JB/+CLbWieU0ZOSqkjHUYlGnPA30=)
                          6: vhhE0LlaMoAC65mEN3TyEobLF50.roa (hash: Us5rGsyQlFj4bRY6YlCqwzJno3k3/qLxqTpPkFS4SJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:e8:37:aa:d6:44:08:72:fb:14:b1:49:6a:0b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a233bbddfe438646f586f085e5df0d79bdfb9fc
        Validity
            Not Before: Jul 24 02:01:10 2026 GMT
            Not After : Jul 25 02:01:10 2026 GMT
        Subject: CN=65ab8b668bf84c5ee7fa92fa20aea36a09812e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7e:1b:c5:ae:99:81:b7:93:d6:9e:2d:b6:1f:
                    20:80:ae:6d:c7:99:89:9d:c4:97:04:fa:23:18:13:
                    90:bf:64:d5:52:04:9f:7e:52:c2:ad:85:a9:87:d2:
                    da:f9:e8:fd:1e:0f:c3:6c:44:7d:42:20:fe:6f:6e:
                    5c:0e:73:58:c8:cc:f0:ad:8a:18:d2:cc:c0:fa:e2:
                    37:63:df:27:b3:20:9f:c2:df:0d:83:b7:ee:62:a3:
                    9c:70:4d:c4:c8:71:0a:44:5b:b3:c6:8c:f5:00:ff:
                    0f:ce:09:af:49:62:7d:84:01:7c:5e:c8:85:2d:f8:
                    02:71:2a:12:61:9f:1a:7c:fa:62:eb:dc:78:eb:ca:
                    ec:c0:d1:64:af:ed:b4:08:84:7a:78:45:86:4b:01:
                    50:d7:9b:8a:48:c7:8b:89:6b:4f:ab:77:2b:b4:51:
                    86:4d:01:1a:ae:f7:93:0f:29:02:1f:ab:d5:5a:bf:
                    02:6b:16:42:50:3a:ca:b2:c0:9b:45:4b:db:22:e7:
                    aa:68:5a:5e:fb:7c:ff:71:90:50:05:ce:3f:74:02:
                    c6:63:72:5b:d8:05:d3:35:a5:04:15:da:8c:10:2b:
                    5e:3f:fd:03:c9:92:2d:4f:65:6f:64:79:ae:12:54:
                    b4:14:07:c2:30:31:0c:1e:09:e4:54:22:74:03:81:
                    91:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:AB:8B:66:8B:F8:4C:5E:E7:FA:92:FA:20:AE:A3:6A:09:81:2E:2D
            X509v3 Authority Key Identifier:
                keyid:9A:23:3B:BD:DF:E4:38:64:6F:58:6F:08:5E:5D:F0:D7:9B:DF:B9:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miM7vd_kOGRvWG8IXl3w15vfufw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/a5188d-a0ad-453c-ba82-3879bd703946/1/miM7vd_kOGRvWG8IXl3w15vfufw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:c1:8b:8c:12:30:37:60:a8:b2:88:22:82:fe:71:ba:86:0a:
         7e:87:a6:2a:5f:b0:40:30:71:b3:6f:64:b2:55:ba:8d:33:c3:
         88:34:94:5b:a8:c5:10:e3:59:df:66:5f:d3:3f:10:21:35:d6:
         a8:1a:fb:65:eb:1e:bd:ec:3b:f6:96:a7:d2:2b:c1:10:26:79:
         3c:cc:de:a8:27:78:fe:dd:f2:c6:9f:0e:f1:02:2f:2b:5c:24:
         b7:68:99:1b:c5:59:59:68:50:f3:a4:b5:f0:7f:5d:e2:8e:a6:
         60:88:89:f9:e2:ca:63:0d:2e:32:f1:19:e6:bd:7c:92:33:4b:
         c6:4d:e1:d5:76:9d:35:96:ca:7d:cd:a4:79:bd:02:cc:4d:1f:
         45:ed:c4:2f:95:76:53:96:9d:41:3e:69:d9:e9:2f:7e:ed:32:
         5d:7b:92:a8:9e:62:e9:43:b0:d8:4b:fd:4f:91:ce:b7:4d:37:
         b0:f0:ec:7d:44:f3:0f:d4:c1:90:66:21:83:3d:ab:ee:51:08:
         55:e0:89:fd:a7:50:17:33:34:b6:b7:b5:61:17:e0:00:11:7f:
         ad:d9:0c:3a:71:85:27:4e:04:8e:bf:53:3b:77:7d:e4:07:24:
         af:b7:d8:8e:02:3d:f8:3d:00:0a:5c:9c:43:f5:e2:58:17:0f:
         2c:33:ad:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2ug3qtZECHL7FLFJagu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhMjMzYmJkZGZlNDM4NjQ2ZjU4NmYwODVlNWRmMGQ3OWJk
ZmI5ZmMwHhcNMjYwNzI0MDIwMTEwWhcNMjYwNzI1MDIwMTEwWjAzMTEwLwYDVQQD
Eyg2NWFiOGI2NjhiZjg0YzVlZTdmYTkyZmEyMGFlYTM2YTA5ODEyZTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwH4bxa6ZgbeT1p4tth8ggK5tx5mJ
ncSXBPojGBOQv2TVUgSfflLCrYWph9La+ej9Hg/DbER9QiD+b25cDnNYyMzwrYoY
0szA+uI3Y98nsyCfwt8Ng7fuYqOccE3EyHEKRFuzxoz1AP8PzgmvSWJ9hAF8XsiF
LfgCcSoSYZ8afPpi69x468rswNFkr+20CIR6eEWGSwFQ15uKSMeLiWtPq3crtFGG
TQEarveTDykCH6vVWr8CaxZCUDrKssCbRUvbIueqaFpe+3z/cZBQBc4/dALGY3Jb
2AXTNaUEFdqMECteP/0DyZItT2VvZHmuElS0FAfCMDEMHgnkVCJ0A4GR4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGWri2aL+Exe5/qS+iCuo2oJgS4tMB8GA1UdIwQY
MBaAFJojO73f5Dhkb1hvCF5d8Neb37n8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODIt
Mzg3OWJkNzAzOTQ2LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi9hNTE4OGQtYTBhZC00NTNjLWJhODItMzg3OWJkNzAzOTQ2
LzEvbWlNN3ZkX2tPR1J2V0c4SVhsM3cxNXZmdWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgcGLjBIw
N2Cosogigv5xuoYKfoemKl+wQDBxs29kslW6jTPDiDSUW6jFEONZ32Zf0z8QITXW
qBr7Zesevew79pan0ivBECZ5PMzeqCd4/t3yxp8O8QIvK1wkt2iZG8VZWWhQ86S1
8H9d4o6mYIiJ+eLKYw0uMvEZ5r18kjNLxk3h1XadNZbKfc2keb0CzE0fRe3EL5V2
U5adQT5p2ekvfu0yXXuSqJ5i6UOw2Ev9T5HOt003sPDsfUTzD9TBkGYhgz2r7lEI
VeCJ/adQFzM0tre1YRfgABF/rdkMOnGFJ04Ejr9TO3d95Ackr7fYjgI9+D0AClyc
Q/XiWBcPLDOtmA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:40:39 2026 by rpki-client