Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
File:                     sx0cKJHYgEaaINi38Y5M2GVDAEY.mft (raw, json)
Hash identifier:          efeTn4quyspVCf27cJiohMKkOd/LoQSJmO/9XHGVluI=
Subject key identifier:   E7:58:08:D6:F4:7A:77:03:89:A8:70:5C:2B:BD:3B:0B:E2:F8:93:B0
Authority key identifier: B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46
Certificate issuer:       /CN=b31d1c2891d880469a20d8b7f18e4cd865430046
Certificate serial:       019F93C98FAAB33088DB4EB056632EEEED05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
Manifest number:          06AA
Signing time:             Fri 24 Jul 2026 11:01:27 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:27 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:27 +0000
Files and hashes:         1: nZ-MC578XDNoxF9WT_GxSRoreCI.roa (hash: P9N+z+cz6t9cJMJHuc2G7Ay4P8kV4Zg2jsXlf/jTUFo=)
                          2: sx0cKJHYgEaaINi38Y5M2GVDAEY.crl (hash: pKbl1939LpMItan29g689Qyzuminys0hsUHpXtwa9+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:8f:aa:b3:30:88:db:4e:b0:56:63:2e:ee:ed:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b31d1c2891d880469a20d8b7f18e4cd865430046
        Validity
            Not Before: Jul 24 11:01:27 2026 GMT
            Not After : Jul 25 11:01:27 2026 GMT
        Subject: CN=e75808d6f47a770389a8705c2bbd3b0be2f893b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f1:23:2f:aa:b3:9f:64:fe:73:12:bd:61:a8:
                    9b:5f:8c:1d:fb:1d:82:72:ab:c4:37:30:26:b3:d3:
                    85:4c:43:6f:e5:a1:48:4e:71:74:63:f3:6e:b5:b2:
                    fb:95:ef:1d:18:fe:10:42:35:bf:3d:6d:84:b7:fb:
                    24:bf:62:99:f8:36:4f:96:b0:88:bc:af:97:7d:7d:
                    c8:74:09:c2:fa:7e:c3:c7:27:50:90:95:96:2c:81:
                    fc:67:d3:cd:be:11:1f:41:d9:50:50:1c:87:1b:49:
                    0d:e5:a0:43:9c:e8:df:49:5a:7d:f3:6f:ff:6e:88:
                    43:3c:db:59:f1:2d:a3:0a:68:31:18:29:6e:3a:bc:
                    c2:0c:f9:26:3e:c9:b1:e6:62:d0:20:bc:96:44:b1:
                    61:a2:f7:75:08:2e:e4:d1:78:d3:6b:89:24:11:d0:
                    79:e3:d0:cc:03:5b:9b:bb:45:4d:44:a8:21:c4:51:
                    76:6e:46:e7:9d:a9:22:2e:7f:1a:c4:e2:28:18:a7:
                    82:7a:f0:49:6b:55:05:eb:38:b3:e9:2f:5c:ff:41:
                    70:12:e4:2b:dc:4d:d8:33:53:5d:5b:83:50:75:03:
                    f1:0d:13:ae:b6:f7:d4:3c:d0:2d:7e:1d:9e:99:96:
                    8e:f4:a6:99:a4:39:a2:dd:a2:b4:9b:6d:2d:16:ce:
                    b1:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:58:08:D6:F4:7A:77:03:89:A8:70:5C:2B:BD:3B:0B:E2:F8:93:B0
            X509v3 Authority Key Identifier:
                keyid:B3:1D:1C:28:91:D8:80:46:9A:20:D8:B7:F1:8E:4C:D8:65:43:00:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sx0cKJHYgEaaINi38Y5M2GVDAEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/775017-a45b-4637-a3a0-af1a0e00f823/1/sx0cKJHYgEaaINi38Y5M2GVDAEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:d3:90:02:f8:b4:22:1a:0e:ab:be:32:50:6b:8d:1c:2d:44:
         32:bb:f4:c0:23:8a:a4:f6:99:23:12:4d:84:73:b7:be:1d:19:
         e6:38:a0:88:62:d0:73:5d:b7:0a:c5:0e:81:42:85:5d:34:ba:
         58:81:f9:4e:83:71:1c:b9:fa:b8:ee:ce:83:1a:86:40:54:d9:
         0a:7a:03:9e:a9:8c:e7:a4:ec:0b:84:2b:0a:fa:8a:5d:ec:3f:
         ea:bd:76:56:98:bf:fc:ae:d7:bf:36:a2:2f:1b:2b:95:1f:d5:
         35:0f:7e:dc:82:4c:f2:75:ef:da:68:ab:d6:4c:bb:ff:2e:a6:
         ad:f5:12:ef:1a:58:c8:80:32:c8:89:46:4b:eb:b0:b1:87:5a:
         d1:48:11:5d:89:3d:13:27:e1:49:2c:22:98:bf:ca:45:95:14:
         5f:63:72:06:ad:d4:2f:8c:cf:1a:38:e2:d5:cd:83:6e:e1:62:
         c7:ec:97:b7:63:99:1a:75:6e:97:e5:5c:6f:80:cf:39:3c:fc:
         da:43:ff:06:bf:20:2a:82:9b:95:e7:7e:3e:98:16:6a:ce:fa:
         30:3e:e4:9f:41:cf:61:de:ec:87:f0:5f:99:93:69:b2:73:ca:
         ea:f4:a6:7b:96:21:4e:fe:48:52:f4:31:f8:b3:47:2c:80:9e:
         df:78:dd:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyY+qszCI206wVmMu7u0FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMWQxYzI4OTFkODgwNDY5YTIwZDhiN2YxOGU0Y2Q4NjU0
MzAwNDYwHhcNMjYwNzI0MTEwMTI3WhcNMjYwNzI1MTEwMTI3WjAzMTEwLwYDVQQD
EyhlNzU4MDhkNmY0N2E3NzAzODlhODcwNWMyYmJkM2IwYmUyZjg5M2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7/EjL6qzn2T+cxK9YaibX4wd+x2C
cqvENzAms9OFTENv5aFITnF0Y/NutbL7le8dGP4QQjW/PW2Et/skv2KZ+DZPlrCI
vK+XfX3IdAnC+n7DxydQkJWWLIH8Z9PNvhEfQdlQUByHG0kN5aBDnOjfSVp982//
bohDPNtZ8S2jCmgxGCluOrzCDPkmPsmx5mLQILyWRLFhovd1CC7k0XjTa4kkEdB5
49DMA1ubu0VNRKghxFF2bkbnnakiLn8axOIoGKeCevBJa1UF6ziz6S9c/0FwEuQr
3E3YM1NdW4NQdQPxDROutvfUPNAtfh2emZaO9KaZpDmi3aK0m20tFs6xoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdYCNb0encDiahwXCu9Owvi+JOwMB8GA1UdIwQY
MBaAFLMdHCiR2IBGmiDYt/GOTNhlQwBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAt
YWYxYTBlMDBmODIzLzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83NzUwMTctYTQ1Yi00NjM3LWEzYTAtYWYxYTBlMDBmODIz
LzEvc3gwY0tKSFlnRWFhSU5pMzhZNU0yR1ZEQUVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9OQAvi0
IhoOq74yUGuNHC1EMrv0wCOKpPaZIxJNhHO3vh0Z5jigiGLQc123CsUOgUKFXTS6
WIH5ToNxHLn6uO7OgxqGQFTZCnoDnqmM56TsC4QrCvqKXew/6r12Vpi//K7Xvzai
LxsrlR/VNQ9+3IJM8nXv2mir1ky7/y6mrfUS7xpYyIAyyIlGS+uwsYda0UgRXYk9
EyfhSSwimL/KRZUUX2NyBq3UL4zPGjji1c2DbuFix+yXt2OZGnVul+Vcb4DPOTz8
2kP/Br8gKoKbled+PpgWas76MD7kn0HPYd7sh/BfmZNpsnPK6vSme5YhTv5IUvQx
+LNHLICe33jdxQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:19:48 2026 by rpki-client