Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
File:                     Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft (raw, json)
Hash identifier:          Zahn4NCqGnzRBRlvKN9BjqDvyUxmfU9OezASbqBfl6Y=
Subject key identifier:   BE:41:AD:48:7C:C4:06:E1:47:C1:6D:FB:A3:4A:32:EE:48:9E:35:23
Authority key identifier: 62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28
Certificate issuer:       /CN=62beaa57c67aeb5bafd99793ab4846850a796c28
Certificate serial:       019F9211A669B091DC3042A28B52938A75CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
Manifest number:          0D91
Signing time:             Fri 24 Jul 2026 03:00:57 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:57 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:57 +0000
Files and hashes:         1: HJtkjvlBva8uqcL0XUNpqigQG9s.roa (hash: WkXmQkgs5y2TV+m/F6AQDR1j74heyCTTdW3y6tsfBHk=)
                          2: OUHZPu_PJYtOLDLbLVCMk8yoe-k.roa (hash: Ma69Row9f6EcaHWc23EqgBUIT2c3X7xAnz9i9hXJ3nQ=)
                          3: Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl (hash: oQnsZB7IctZwXgF+c59tqcWRMFMDqKrlugvisI8H+BE=)
                          4: kz2wF3XWQ2RN8sHvIuIFZYtVNIQ.roa (hash: mNiLwNy9yFADV0O6uoYz7QI7buc164Ngl+VExm6ZaD8=)
                          5: xprcFFAPJjG3UElyOhAJ6E9gXpA.roa (hash: o5pGWYnDSMF3mxP8sdDWWibluTFKuj51TiZS9rC+X/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:a6:69:b0:91:dc:30:42:a2:8b:52:93:8a:75:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62beaa57c67aeb5bafd99793ab4846850a796c28
        Validity
            Not Before: Jul 24 03:00:57 2026 GMT
            Not After : Jul 25 03:00:57 2026 GMT
        Subject: CN=be41ad487cc406e147c16dfba34a32ee489e3523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6f:a2:8a:56:c0:17:5e:c1:0a:8f:59:b1:6a:
                    ef:c3:db:d9:2d:a0:2f:a7:b5:c5:f2:76:0c:5d:55:
                    75:99:c0:99:0d:61:1c:05:86:db:45:cd:91:c3:cc:
                    8b:4b:0c:87:83:65:b8:94:d8:ab:d4:f3:eb:bd:bd:
                    6c:f5:68:de:2c:bc:60:78:8a:10:7c:05:2f:b4:c6:
                    eb:e4:49:9a:05:1d:df:db:c7:7b:8f:96:e1:8a:19:
                    84:98:fd:31:d8:24:7e:11:90:27:6b:6b:79:f1:0d:
                    7b:c3:13:19:07:73:4e:ab:93:bc:0c:0d:a7:e2:02:
                    18:16:66:a8:d6:ad:49:92:6f:18:70:6b:13:f1:b7:
                    a2:8d:f8:f1:9c:56:48:41:b5:7d:16:63:5e:8e:a7:
                    14:42:2b:5c:de:e2:0d:4c:56:1b:8e:ad:0e:a7:1e:
                    36:2e:d7:78:46:aa:ab:10:25:52:1d:e9:66:86:fd:
                    a9:3c:87:18:92:0f:7a:04:0f:c5:0e:01:d0:1e:47:
                    07:3a:05:b0:9f:7d:2a:aa:1f:b4:c8:96:a1:79:91:
                    2f:e8:5f:13:cc:16:63:6a:d8:22:9d:b9:0e:85:11:
                    1b:e0:17:f5:32:41:7e:e1:52:7a:d9:00:e0:49:ac:
                    aa:24:3e:a7:10:95:60:f4:25:37:84:6a:45:e4:47:
                    1b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:41:AD:48:7C:C4:06:E1:47:C1:6D:FB:A3:4A:32:EE:48:9E:35:23
            X509v3 Authority Key Identifier:
                keyid:62:BE:AA:57:C6:7A:EB:5B:AF:D9:97:93:AB:48:46:85:0A:79:6C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/22581e-fe8c-4fb8-9585-9880f04db94a/1/Yr6qV8Z661uv2ZeTq0hGhQp5bCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:66:60:10:17:9b:43:dd:0c:3c:1c:d9:72:5b:8e:bf:55:0d:
         9e:a6:d5:88:f6:81:0a:d0:31:9f:e6:60:3c:02:c2:31:ef:27:
         20:d5:df:97:d1:2b:3a:4f:0e:34:28:8a:7d:47:26:5f:25:7f:
         27:55:b3:5c:8d:43:74:c5:b3:65:2b:a6:91:a2:37:1d:32:fc:
         72:c6:20:c2:b5:b6:d8:7d:b0:96:62:60:8f:8c:75:c3:a9:25:
         c7:25:a2:1d:f4:2f:a3:f9:13:0a:01:f5:05:d5:1f:59:76:60:
         23:d5:c8:45:47:7e:78:e9:17:4d:d1:e3:0d:65:01:d9:d5:a5:
         6f:ea:ba:6c:20:af:3d:56:dc:78:eb:fd:62:fe:75:00:dc:d5:
         8e:cc:ca:ac:09:a6:68:c4:4a:4b:f6:c0:37:3c:cc:80:a5:83:
         3d:be:c2:80:26:03:b7:aa:10:30:e6:19:fd:c8:53:d9:7d:59:
         46:f6:61:1b:86:eb:a7:f0:be:47:d9:e1:64:66:d7:84:98:02:
         53:ed:c0:4a:1e:4d:55:c4:a1:85:46:b1:04:63:aa:ef:35:0b:
         01:fb:ee:2b:3d:29:40:94:1a:46:15:33:28:ec:b3:c0:3d:74:
         9c:ff:a5:7c:ae:2f:f4:c3:ca:5c:02:73:26:9b:17:41:36:c5:
         7b:5a:d0:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEaZpsJHcMEKii1KTinXNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyYmVhYTU3YzY3YWViNWJhZmQ5OTc5M2FiNDg0Njg1MGE3
OTZjMjgwHhcNMjYwNzI0MDMwMDU3WhcNMjYwNzI1MDMwMDU3WjAzMTEwLwYDVQQD
EyhiZTQxYWQ0ODdjYzQwNmUxNDdjMTZkZmJhMzRhMzJlZTQ4OWUzNTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm+iilbAF17BCo9ZsWrvw9vZLaAv
p7XF8nYMXVV1mcCZDWEcBYbbRc2Rw8yLSwyHg2W4lNir1PPrvb1s9WjeLLxgeIoQ
fAUvtMbr5EmaBR3f28d7j5bhihmEmP0x2CR+EZAna2t58Q17wxMZB3NOq5O8DA2n
4gIYFmao1q1Jkm8YcGsT8beijfjxnFZIQbV9FmNejqcUQitc3uINTFYbjq0Opx42
Ltd4RqqrECVSHelmhv2pPIcYkg96BA/FDgHQHkcHOgWwn30qqh+0yJaheZEv6F8T
zBZjatginbkOhREb4Bf1MkF+4VJ62QDgSayqJD6nEJVg9CU3hGpF5EcbvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL5BrUh8xAbhR8Ft+6NKMu5InjUjMB8GA1UdIwQY
MBaAFGK+qlfGeutbr9mXk6tIRoUKeWwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUt
OTg4MGYwNGRiOTRhLzEvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy8yMjU4MWUtZmU4Yy00ZmI4LTk1ODUtOTg4MGYwNGRiOTRh
LzEvWXI2cVY4WjY2MXV2MlplVHEwaEdoUXA1YkNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdGZgEBeb
Q90MPBzZcluOv1UNnqbViPaBCtAxn+ZgPALCMe8nINXfl9ErOk8ONCiKfUcmXyV/
J1WzXI1DdMWzZSumkaI3HTL8csYgwrW22H2wlmJgj4x1w6klxyWiHfQvo/kTCgH1
BdUfWXZgI9XIRUd+eOkXTdHjDWUB2dWlb+q6bCCvPVbceOv9Yv51ANzVjszKrAmm
aMRKS/bANzzMgKWDPb7CgCYDt6oQMOYZ/chT2X1ZRvZhG4brp/C+R9nhZGbXhJgC
U+3ASh5NVcShhUaxBGOq7zULAfvuKz0pQJQaRhUzKOyzwD10nP+lfK4v9MPKXAJz
JpsXQTbFe1rQfw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:47:35 2026 by rpki-client