Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
File:                     f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft (raw, json)
Hash identifier:          1+nwup4bHKa3OO0RkXM+gIvsiiAfzGb0yuARLEXAYNo=
Subject key identifier:   9B:62:30:76:47:2B:B0:9B:1A:7A:21:BD:77:39:F5:27:FD:A3:E3:B5
Authority key identifier: 7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF
Certificate issuer:       /CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
Certificate serial:       019F935BAF28574BB7E1A3A6329FD8DAE870
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
Manifest number:          0167
Signing time:             Fri 24 Jul 2026 09:01:26 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:26 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:26 +0000
Files and hashes:         1: NwGyrarXznEP79mpSfk4-aoAcss.roa (hash: kWL+oTlCQ4M6RuD7dSjXf+gw9XkHswGxJGJoJ/U5AMw=)
                          2: f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl (hash: BdqoxgJ8HNt/ZbKWSO73nPYHccdIJov7WYSSEXr5/UA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:af:28:57:4b:b7:e1:a3:a6:32:9f:d8:da:e8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
        Validity
            Not Before: Jul 24 09:01:26 2026 GMT
            Not After : Jul 25 09:01:26 2026 GMT
        Subject: CN=9b623076472bb09b1a7a21bd7739f527fda3e3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1e:de:39:19:c1:9e:b2:ef:ec:29:38:35:d2:
                    d5:34:08:d9:43:c1:84:ea:5f:d7:4f:43:b8:84:9c:
                    bf:d0:be:ba:96:d4:30:33:dc:a5:20:17:6f:f8:6d:
                    ae:7b:9d:fe:d1:c7:87:fc:d1:0e:9c:05:a0:29:a7:
                    31:84:96:5f:00:74:97:80:82:f4:7b:4b:97:81:aa:
                    0c:74:fd:e5:9a:45:01:fb:fd:a2:25:06:8e:15:66:
                    39:1e:6a:48:33:0d:b6:17:a2:82:3e:7b:cc:80:05:
                    0a:41:22:e5:62:9c:bd:a6:2e:32:b2:8d:7d:93:7c:
                    13:f6:4d:40:5d:10:5d:6c:eb:51:9f:c8:9f:f0:f3:
                    2c:93:56:66:b8:f7:51:7e:e8:92:9f:d8:91:51:48:
                    ad:03:b2:c8:17:05:6a:89:0e:ed:c3:27:a9:21:4b:
                    16:28:ed:1f:c4:51:82:20:e9:54:dc:fe:61:19:e2:
                    2c:34:bf:c0:a5:24:9f:d8:2e:9d:51:48:60:c7:c7:
                    ba:af:0c:5f:97:1d:f9:ed:cb:c1:5c:a0:ed:ed:2f:
                    c9:e8:cd:54:28:45:0f:32:d0:a5:0d:9e:df:a1:fa:
                    81:1c:92:ff:5f:b1:67:69:6e:7d:d3:1e:7d:9d:83:
                    e6:55:de:a5:8d:8c:ae:41:10:94:6d:15:5a:c6:bc:
                    07:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:62:30:76:47:2B:B0:9B:1A:7A:21:BD:77:39:F5:27:FD:A3:E3:B5
            X509v3 Authority Key Identifier:
                keyid:7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:6a:76:fc:be:03:d1:74:a4:d4:af:14:39:ae:be:6a:6c:53:
         47:b9:d4:4c:31:60:c8:f7:ac:c9:04:42:57:47:58:ac:0a:cd:
         93:5e:90:04:00:f3:da:96:e2:1d:7f:ad:11:a8:d4:db:00:fc:
         2b:bb:98:e3:96:29:0d:f8:7e:c7:1e:1f:6b:d9:22:b3:31:0b:
         71:a2:09:40:76:59:cc:59:3d:04:c4:5a:b0:7b:73:b4:eb:55:
         84:6e:54:ea:a8:64:30:d6:f9:ba:44:ea:fb:52:25:a9:87:e8:
         b9:37:19:f6:1a:08:de:2c:d1:d1:77:97:3d:6c:6d:1e:fe:b8:
         97:32:79:cf:aa:05:9c:d0:41:8d:ba:cd:12:f5:c8:f1:8d:fd:
         6d:fa:4e:d9:90:ec:95:e3:8d:75:ed:4e:6e:c8:67:22:cf:a1:
         c3:99:3e:ca:cf:66:c6:43:e1:d0:ed:18:1c:02:ec:a1:56:ea:
         bc:ab:ff:01:09:b3:0d:b4:14:d4:d8:7f:01:46:fa:b0:dc:94:
         72:2b:a1:6c:ce:51:d7:ce:1e:25:5d:9d:c3:e9:ca:3b:cc:69:
         45:46:41:a7:8b:64:1d:63:e5:ea:1f:89:2f:95:7f:7e:86:3c:
         2b:7a:fa:b6:25:2a:5b:44:fb:0d:3f:25:2e:19:bd:60:fb:c8:
         f4:05:a9:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW68oV0u34aOmMp/Y2uhwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZmIxYzgxOWY1YzZlYjczOWQ2OTQ1NTliMzMxZTZmNGIz
ZjJhY2YwHhcNMjYwNzI0MDkwMTI2WhcNMjYwNzI1MDkwMTI2WjAzMTEwLwYDVQQD
Eyg5YjYyMzA3NjQ3MmJiMDliMWE3YTIxYmQ3NzM5ZjUyN2ZkYTNlM2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoR7eORnBnrLv7Ck4NdLVNAjZQ8GE
6l/XT0O4hJy/0L66ltQwM9ylIBdv+G2ue53+0ceH/NEOnAWgKacxhJZfAHSXgIL0
e0uXgaoMdP3lmkUB+/2iJQaOFWY5HmpIMw22F6KCPnvMgAUKQSLlYpy9pi4yso19
k3wT9k1AXRBdbOtRn8if8PMsk1ZmuPdRfuiSn9iRUUitA7LIFwVqiQ7twyepIUsW
KO0fxFGCIOlU3P5hGeIsNL/ApSSf2C6dUUhgx8e6rwxflx357cvBXKDt7S/J6M1U
KEUPMtClDZ7fofqBHJL/X7FnaW590x59nYPmVd6ljYyuQRCUbRVaxrwH1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtiMHZHK7CbGnohvXc59Sf9o+O1MB8GA1UdIwQY
MBaAFH/7HIGfXG63OdaUVZszHm9LPyrPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9zY2daOWNicmM1MXBSVm16TWViMHNfS3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yY2I4NDAtZTUwZC00YWFmLTg3ZDUt
ZjgyNTdkNjczZjk3LzEvZl9zY2daOWNicmM1MXBSVm16TWViMHNfS3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yY2I4NDAtZTUwZC00YWFmLTg3ZDUtZjgyNTdkNjczZjk3
LzEvZl9zY2daOWNicmM1MXBSVm16TWViMHNfS3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2p2/L4D
0XSk1K8UOa6+amxTR7nUTDFgyPesyQRCV0dYrArNk16QBADz2pbiHX+tEajU2wD8
K7uY45YpDfh+xx4fa9kiszELcaIJQHZZzFk9BMRasHtztOtVhG5U6qhkMNb5ukTq
+1IlqYfouTcZ9hoI3izR0XeXPWxtHv64lzJ5z6oFnNBBjbrNEvXI8Y39bfpO2ZDs
leONde1ObshnIs+hw5k+ys9mxkPh0O0YHALsoVbqvKv/AQmzDbQU1Nh/AUb6sNyU
ciuhbM5R184eJV2dw+nKO8xpRUZBp4tkHWPl6h+JL5V/foY8K3r6tiUqW0T7DT8l
Lhm9YPvI9AWp3w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:21 2026 by rpki-client