Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
File:                     dy9wNcKJOyjNBP0amzys0kKMjf0.mft (raw, json)
Hash identifier:          YENT+N9u82hTIDE/+fDW7cF6SADGOGjewhk8OWLmSwc=
Subject key identifier:   E8:15:55:28:3A:8F:39:2C:07:3A:6E:9D:E4:07:3D:7E:DC:07:82:54
Authority key identifier: 77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD
Certificate issuer:       /CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
Certificate serial:       019F935B99DD64CA369733869BAFB93A992B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
Manifest number:          06E4
Signing time:             Fri 24 Jul 2026 09:01:21 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:21 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:21 +0000
Files and hashes:         1: 8Qo74UQPSqvugCWFfb9DBf7wKqE.roa (hash: M/pOvg/hdX2EdZ83UmfDv3mPILFnj+u5MLVly1CyGXs=)
                          2: NZYrDqHNM7w06ZqIbetRmQuvkI8.roa (hash: aqDX81Tnke9g7oa5zcmS5K2aP4v9bwtCbdPJWZIvsEE=)
                          3: dy9wNcKJOyjNBP0amzys0kKMjf0.crl (hash: CAi8k2HyJjszg1ndF9i+Gt9mfM2WPrYjmVef0tAJLEI=)
                          4: j7E0VOUyJDRGY1mXB_LTgfCHtec.roa (hash: DmIJX6VYUzzGV5IX9wpqM+xTHY2Teuv8gdmzrljcdLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:99:dd:64:ca:36:97:33:86:9b:af:b9:3a:99:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=772f7035c2893b28cd04fd1a9b3cacd2428c8dfd
        Validity
            Not Before: Jul 24 09:01:21 2026 GMT
            Not After : Jul 25 09:01:21 2026 GMT
        Subject: CN=e81555283a8f392c073a6e9de4073d7edc078254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:67:7c:b5:d1:4c:b2:bc:c1:4c:c9:e2:86:9b:
                    df:1a:08:b0:0e:cf:20:0f:55:c0:2e:b8:1b:24:b1:
                    2f:2a:39:ae:63:c5:19:00:cf:de:83:07:89:50:02:
                    1e:3d:ac:f3:00:87:05:7c:f4:5b:1b:6c:2a:d9:e3:
                    87:bb:d6:f7:9c:aa:c0:b5:95:d8:16:c8:cd:cd:2c:
                    ad:b6:68:3f:5c:cc:6a:a6:94:d6:f0:89:24:ac:8e:
                    e1:94:8d:bd:4e:df:5d:9a:53:0f:67:fc:d2:43:9e:
                    37:ab:6b:61:18:2b:4d:1d:47:d6:a6:52:fa:9d:76:
                    e3:43:ba:69:2a:92:8a:45:10:76:e7:cf:98:23:b8:
                    5f:59:c2:69:85:03:b5:fd:b9:9f:54:7f:60:77:3e:
                    81:5e:90:48:5e:7c:40:33:47:e7:4d:97:e3:36:3c:
                    0c:25:b5:66:8d:6d:7f:e9:af:fc:08:ab:54:b4:29:
                    38:4f:d2:9b:b7:ba:64:a4:4d:07:a8:76:93:9d:65:
                    fe:2b:26:14:4f:9b:29:94:d0:6e:8e:16:54:91:66:
                    ba:26:97:ba:dc:75:4c:5c:b1:78:bb:8e:36:40:77:
                    a0:12:62:02:c1:48:75:86:60:05:18:39:94:25:e8:
                    1b:c8:83:cb:da:7b:0a:2a:2d:1a:60:bf:a8:fd:85:
                    8d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:15:55:28:3A:8F:39:2C:07:3A:6E:9D:E4:07:3D:7E:DC:07:82:54
            X509v3 Authority Key Identifier:
                keyid:77:2F:70:35:C2:89:3B:28:CD:04:FD:1A:9B:3C:AC:D2:42:8C:8D:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9wNcKJOyjNBP0amzys0kKMjf0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/41eae0-6b72-4624-9c24-83035afe4a37/1/dy9wNcKJOyjNBP0amzys0kKMjf0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:c9:57:1a:65:84:8c:ba:b5:12:f6:d1:93:73:83:42:70:8d:
         09:68:ab:39:61:3c:80:8d:78:c7:b5:81:05:33:95:60:04:aa:
         8a:f6:05:1a:d9:39:3c:46:b5:79:1d:89:5f:75:17:81:dc:9f:
         ed:8a:46:d9:8f:67:70:57:00:60:0e:5c:05:7b:78:8b:de:36:
         79:2b:92:fd:96:1d:05:c5:fb:a1:2d:b4:79:e2:59:7c:9a:ca:
         93:04:a8:4a:60:eb:d7:65:3f:dd:7f:2f:da:84:34:0d:39:7a:
         80:ea:4f:3c:93:36:b3:6d:97:0d:e9:76:69:f5:9d:e1:70:8e:
         14:00:c3:b5:0a:f4:69:62:c8:7f:33:42:06:e6:eb:38:56:3c:
         d1:b4:86:81:19:c5:6b:2c:79:5e:0e:1c:dc:42:a0:07:15:e6:
         ae:ec:b6:7b:f5:b5:ee:25:fa:42:94:27:56:7b:ec:48:59:7c:
         2e:39:e2:eb:53:46:f6:88:70:ff:c1:86:4a:9a:f6:fe:1f:17:
         70:10:f8:07:ba:f6:e5:80:70:12:92:a6:03:f7:bb:2f:ba:0e:
         6a:49:b3:a8:19:27:4d:6c:42:53:62:ae:71:2c:54:ce:b7:66:
         c8:69:5f:6e:50:67:20:2a:c3:00:a7:01:77:73:d6:dd:14:1a:
         5d:8f:b1:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW5ndZMo2lzOGm6+5OpkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY3MDM1YzI4OTNiMjhjZDA0ZmQxYTliM2NhY2QyNDI4
YzhkZmQwHhcNMjYwNzI0MDkwMTIxWhcNMjYwNzI1MDkwMTIxWjAzMTEwLwYDVQQD
EyhlODE1NTUyODNhOGYzOTJjMDczYTZlOWRlNDA3M2Q3ZWRjMDc4MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyWd8tdFMsrzBTMnihpvfGgiwDs8g
D1XALrgbJLEvKjmuY8UZAM/egweJUAIePazzAIcFfPRbG2wq2eOHu9b3nKrAtZXY
FsjNzSyttmg/XMxqppTW8IkkrI7hlI29Tt9dmlMPZ/zSQ543q2thGCtNHUfWplL6
nXbjQ7ppKpKKRRB258+YI7hfWcJphQO1/bmfVH9gdz6BXpBIXnxAM0fnTZfjNjwM
JbVmjW1/6a/8CKtUtCk4T9Kbt7pkpE0HqHaTnWX+KyYUT5splNBujhZUkWa6Jpe6
3HVMXLF4u442QHegEmICwUh1hmAFGDmUJegbyIPL2nsKKi0aYL+o/YWN2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOgVVSg6jzksBzpuneQHPX7cB4JUMB8GA1UdIwQY
MBaAFHcvcDXCiTsozQT9Gps8rNJCjI39MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQt
ODMwMzVhZmU0YTM3LzEvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi80MWVhZTAtNmI3Mi00NjI0LTljMjQtODMwMzVhZmU0YTM3
LzEvZHk5d05jS0pPeWpOQlAwYW16eXMwa0tNamYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsslXGmWE
jLq1EvbRk3ODQnCNCWirOWE8gI14x7WBBTOVYASqivYFGtk5PEa1eR2JX3UXgdyf
7YpG2Y9ncFcAYA5cBXt4i942eSuS/ZYdBcX7oS20eeJZfJrKkwSoSmDr12U/3X8v
2oQ0DTl6gOpPPJM2s22XDel2afWd4XCOFADDtQr0aWLIfzNCBubrOFY80bSGgRnF
ayx5Xg4c3EKgBxXmruy2e/W17iX6QpQnVnvsSFl8Ljni61NG9ohw/8GGSpr2/h8X
cBD4B7r25YBwEpKmA/e7L7oOakmzqBknTWxCU2KucSxUzrdmyGlfblBnICrDAKcB
d3PW3RQaXY+x6A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 17:36:37 2026 by rpki-client