Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
File:                     1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft (raw, json)
Hash identifier:          zOPiXblMoqDuH1eWNJLYQyu2+9eaIkgdsPGaSh8uWbM=
Subject key identifier:   82:AD:DD:31:4F:52:84:7B:90:99:4A:16:26:79:54:3A:C0:53:5E:87
Authority key identifier: F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F
Certificate issuer:       /CN=f9b16868f322ab679aec733702bf068e9637fc4f
Certificate serial:       019F9059D6E9FEB2D9D3DBCE58859E5486E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
Manifest number:          09DB
Signing time:             Thu 23 Jul 2026 19:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:34 +0000
Files and hashes:         1: 1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl (hash: HOmncqtBiwJpwcqUu0x/YfqQIbPISQRQHu3Demeldk4=)
                          2: il7H5XRLlPOMcGmUaTO99BZFn2I.roa (hash: Df3NCzCkDFx+xfWB8WmONNlOHJhDormcIJSvLVXSXWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:d6:e9:fe:b2:d9:d3:db:ce:58:85:9e:54:86:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9b16868f322ab679aec733702bf068e9637fc4f
        Validity
            Not Before: Jul 23 19:00:34 2026 GMT
            Not After : Jul 24 19:00:34 2026 GMT
        Subject: CN=82addd314f52847b90994a162679543ac0535e87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ee:c1:cf:9f:ed:08:b7:64:f0:6f:1c:b6:8b:
                    72:a5:8b:60:17:5f:31:d1:3c:5a:5c:ad:55:65:d5:
                    af:1b:ab:a2:ac:f6:ff:08:75:30:e6:71:d0:cb:4e:
                    97:0c:dd:fd:c3:90:2a:b3:5a:9a:79:92:38:4a:ef:
                    86:16:eb:fc:fb:6d:e5:f0:25:36:9d:ff:f8:41:d6:
                    b1:5e:a9:fa:df:c3:ab:fb:26:29:79:ef:ba:19:74:
                    a6:92:68:ce:bf:2a:c6:2b:42:60:ba:3d:8f:32:c8:
                    84:df:bd:29:73:22:7a:45:45:c0:03:4e:e0:96:b1:
                    1f:10:d2:f7:40:f6:63:18:68:54:0c:44:0c:c5:d6:
                    64:5d:dc:8d:49:21:8b:4b:81:93:9c:0c:59:ff:a2:
                    60:15:ec:d1:20:c9:75:17:4f:b5:8a:9e:39:9e:68:
                    e8:ce:bf:8f:72:32:ce:33:3f:3b:95:1d:54:61:51:
                    cd:08:64:c8:0b:94:80:6b:f7:5c:ce:36:16:20:ee:
                    d9:ce:9b:5c:c8:d1:f8:85:47:74:7f:2a:32:80:cc:
                    e7:95:35:26:00:cf:8b:a1:41:ea:38:7b:c1:0c:4a:
                    8a:aa:b5:a9:8c:aa:29:e8:6e:1c:69:09:0f:8b:45:
                    b6:57:fd:12:1a:2e:c6:39:f9:46:49:18:6f:8b:da:
                    de:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:AD:DD:31:4F:52:84:7B:90:99:4A:16:26:79:54:3A:C0:53:5E:87
            X509v3 Authority Key Identifier:
                keyid:F9:B1:68:68:F3:22:AB:67:9A:EC:73:37:02:BF:06:8E:96:37:FC:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8b5f88-3071-4a44-9f0c-242a294594e0/1/1-bFoaPMiq2ea7HM3Ar8GjpY3_E8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:a8:e4:98:1f:bc:c3:e9:02:17:d8:2d:68:39:02:af:01:e5:
         80:d7:02:5a:79:19:f6:cb:a2:ea:41:b1:91:c3:80:77:ed:e0:
         a6:e3:d2:c8:1b:79:af:0c:f0:22:46:0a:be:55:b4:02:73:6c:
         cb:0f:42:30:67:f9:5f:ff:65:66:81:c7:fd:61:49:53:0c:f0:
         3a:87:4d:9d:87:83:c0:23:0a:ea:a4:04:0c:81:3c:6b:c7:d3:
         98:d9:d6:94:73:70:74:b5:9c:52:22:70:b6:3b:da:bc:cf:90:
         7f:d9:49:91:db:c5:96:00:0a:ad:08:ad:97:81:ff:61:f3:51:
         50:33:10:05:ef:e3:9c:0b:63:c3:d6:48:73:a1:45:c3:c8:40:
         51:78:aa:f4:f3:d1:6c:0f:bb:47:81:42:6f:01:4d:6b:51:f2:
         37:d2:11:65:84:37:19:32:7f:95:99:7b:be:bc:e2:48:59:4c:
         5c:07:cf:be:06:8c:52:ea:41:3b:5d:1c:38:6a:b3:df:b2:92:
         de:14:27:a5:fd:59:cf:0c:b1:40:81:d0:58:10:46:58:02:4b:
         f3:67:52:43:f8:aa:88:18:62:93:be:ce:7b:88:b8:61:a7:9f:
         a0:07:cc:c3:fd:77:06:d2:fb:34:f1:44:42:54:82:40:ca:4f:
         6e:24:36:38
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+QWdbp/rLZ09vOWIWeVIbkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5YjE2ODY4ZjMyMmFiNjc5YWVjNzMzNzAyYmYwNjhlOTYz
N2ZjNGYwHhcNMjYwNzIzMTkwMDM0WhcNMjYwNzI0MTkwMDM0WjAzMTEwLwYDVQQD
Eyg4MmFkZGQzMTRmNTI4NDdiOTA5OTRhMTYyNjc5NTQzYWMwNTM1ZTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+7Bz5/tCLdk8G8ctotypYtgF18x
0TxaXK1VZdWvG6uirPb/CHUw5nHQy06XDN39w5Aqs1qaeZI4Su+GFuv8+23l8CU2
nf/4QdaxXqn638Or+yYpee+6GXSmkmjOvyrGK0Jguj2PMsiE370pcyJ6RUXAA07g
lrEfENL3QPZjGGhUDEQMxdZkXdyNSSGLS4GTnAxZ/6JgFezRIMl1F0+1ip45nmjo
zr+PcjLOMz87lR1UYVHNCGTIC5SAa/dczjYWIO7ZzptcyNH4hUd0fyoygMznlTUm
AM+LoUHqOHvBDEqKqrWpjKop6G4caQkPi0W2V/0SGi7GOflGSRhvi9regwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIKt3TFPUoR7kJlKFiZ5VDrAU16HMB8GA1UdIwQY
MBaAFPmxaGjzIqtnmuxzNwK/Bo6WN/xPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1iRm9hUE1pcTJlYTdITTNBcjhHanBZM19FOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjQvOGI1Zjg4LTMwNzEtNGE0NC05ZjBj
LTI0MmEyOTQ1OTRlMC8xLzEtYkZvYVBNaXEyZWE3SE0zQXI4R2pwWTNfRTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI0LzhiNWY4OC0zMDcxLTRhNDQtOWYwYy0yNDJhMjk0NTk0
ZTAvMS8xLWJGb2FQTWlxMmVhN0hNM0FyOEdqcFkzX0U4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6jk
mB+8w+kCF9gtaDkCrwHlgNcCWnkZ9sui6kGxkcOAd+3gpuPSyBt5rwzwIkYKvlW0
AnNsyw9CMGf5X/9lZoHH/WFJUwzwOodNnYeDwCMK6qQEDIE8a8fTmNnWlHNwdLWc
UiJwtjvavM+Qf9lJkdvFlgAKrQitl4H/YfNRUDMQBe/jnAtjw9ZIc6FFw8hAUXiq
9PPRbA+7R4FCbwFNa1HyN9IRZYQ3GTJ/lZl7vrziSFlMXAfPvgaMUupBO10cOGqz
37KS3hQnpf1ZzwyxQIHQWBBGWAJL82dSQ/iqiBhik77Oe4i4YaefoAfMw/13BtL7
NPFEQlSCQMpPbiQ2OA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:40 2026 by rpki-client