Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
File:                     7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft (raw, json)
Hash identifier:          nhJjxhhbSucb1HsUJEA/Wi9728pES294Fii/oX1W2Ik=
Subject key identifier:   21:EC:C7:D0:56:1A:F2:A3:60:8B:E2:DA:06:50:0E:4D:8C:6E:D3:42
Authority key identifier: EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C
Certificate issuer:       /CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
Certificate serial:       019F916CDDCB0C72078D09DDC9423EE66288
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
Manifest number:          0158
Signing time:             Fri 24 Jul 2026 00:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:58 +0000
Files and hashes:         1: 7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl (hash: NM5aLU9gQs7gkBwEmtJp6mAXHbKoYIjZKepvcEz0tEM=)
                          2: rBifEteMiJ25R5DQDU12NebJRS4.roa (hash: zud/trrJppI6pE83KUPt6r47Ql1iRfoDUPjneuGZTLY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:dd:cb:0c:72:07:8d:09:dd:c9:42:3e:e6:62:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec06b56061457ff5c0838af1d2535ee0d1f2b43c
        Validity
            Not Before: Jul 24 00:00:58 2026 GMT
            Not After : Jul 25 00:00:58 2026 GMT
        Subject: CN=21ecc7d0561af2a3608be2da06500e4d8c6ed342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:d8:d4:0c:ac:33:fb:db:44:eb:f5:aa:c5:be:
                    d6:44:f4:dd:69:62:54:8e:7a:fe:8b:7f:01:c1:c3:
                    16:3c:ab:38:70:fd:97:9d:72:be:e9:7e:f3:ec:27:
                    0a:31:24:93:cb:74:11:5f:e3:03:e9:7a:f7:21:43:
                    61:1a:f0:91:22:57:e0:96:16:4e:34:cb:18:9e:17:
                    37:47:b1:e6:9e:2c:a7:43:83:7d:08:97:41:96:b7:
                    2e:ce:6d:1f:89:8f:4c:b5:35:23:ee:eb:a0:57:71:
                    f4:3b:40:fa:fa:22:3e:4d:c4:6e:e7:97:66:b4:34:
                    96:99:99:dd:a5:e5:f6:f8:f1:8d:2a:ff:fa:77:71:
                    54:bf:6f:29:36:57:af:42:fd:9b:1e:8f:a1:15:4b:
                    d8:2a:ca:1b:56:13:49:ee:2b:36:18:4b:4f:66:24:
                    7b:d7:b2:67:05:3c:03:c8:eb:d6:82:1f:ad:06:03:
                    ac:d7:04:a1:c7:6a:29:40:25:bf:a9:8f:07:b3:02:
                    14:35:6a:f4:c4:96:c1:e4:41:11:63:dd:3f:59:c3:
                    cf:77:19:42:db:cb:97:d7:56:87:7c:23:c7:a9:35:
                    f6:06:84:db:e4:de:81:d1:34:e2:25:05:a6:25:ff:
                    c7:2e:0c:34:21:72:b7:02:c0:72:94:33:3f:e4:ca:
                    af:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:EC:C7:D0:56:1A:F2:A3:60:8B:E2:DA:06:50:0E:4D:8C:6E:D3:42
            X509v3 Authority Key Identifier:
                keyid:EC:06:B5:60:61:45:7F:F5:C0:83:8A:F1:D2:53:5E:E0:D1:F2:B4:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Aa1YGFFf_XAg4rx0lNe4NHytDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/bad715-88b4-4dff-ad1a-2f5e233d7fca/1/7Aa1YGFFf_XAg4rx0lNe4NHytDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:30:6c:8e:5f:4b:61:39:b4:b4:87:cd:d0:e0:ca:64:ef:17:
         80:49:a2:68:60:54:e8:63:05:e4:b4:ea:47:b7:7a:79:c1:38:
         fd:98:b0:bb:82:45:7c:a4:d8:5d:ad:c9:0c:32:87:90:58:00:
         bc:1f:70:ee:20:57:5a:b5:53:95:d6:3d:7b:05:2d:ba:4a:fd:
         28:38:8e:05:da:f9:f2:bc:4f:0f:04:b6:22:62:11:87:14:8c:
         36:7c:5f:78:99:be:6d:12:d0:b0:5e:1e:36:e1:4f:c6:13:25:
         7e:02:8c:1c:40:31:a7:23:de:7e:91:7c:20:49:97:11:ac:06:
         77:d3:1f:72:4a:7e:51:6a:cb:7b:9c:25:cb:10:71:7b:7e:6d:
         11:86:0d:d9:48:9a:26:ec:5c:19:9f:66:fd:0c:e9:55:11:40:
         09:9f:72:8d:9a:46:ae:d3:24:9b:d5:1d:82:bf:91:e7:10:47:
         6a:4a:41:63:c0:e9:b8:a5:4b:2b:a5:ce:54:f5:11:cf:04:40:
         7c:31:40:e4:e8:df:87:02:d6:d4:0e:fb:4c:a9:be:de:58:fc:
         72:c0:fb:65:d0:88:dc:b7:bd:55:73:7a:ed:ba:2d:92:eb:ee:
         1c:c4:36:4b:b4:55:b1:52:4c:a5:46:9b:58:8f:93:91:c5:f8:
         b3:e6:fc:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbN3LDHIHjQndyUI+5mKIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjMDZiNTYwNjE0NTdmZjVjMDgzOGFmMWQyNTM1ZWUwZDFm
MmI0M2MwHhcNMjYwNzI0MDAwMDU4WhcNMjYwNzI1MDAwMDU4WjAzMTEwLwYDVQQD
EygyMWVjYzdkMDU2MWFmMmEzNjA4YmUyZGEwNjUwMGU0ZDhjNmVkMzQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1NjUDKwz+9tE6/Wqxb7WRPTdaWJU
jnr+i38BwcMWPKs4cP2XnXK+6X7z7CcKMSSTy3QRX+MD6Xr3IUNhGvCRIlfglhZO
NMsYnhc3R7HmniynQ4N9CJdBlrcuzm0fiY9MtTUj7uugV3H0O0D6+iI+TcRu55dm
tDSWmZndpeX2+PGNKv/6d3FUv28pNlevQv2bHo+hFUvYKsobVhNJ7is2GEtPZiR7
17JnBTwDyOvWgh+tBgOs1wShx2opQCW/qY8HswIUNWr0xJbB5EERY90/WcPPdxlC
28uX11aHfCPHqTX2BoTb5N6B0TTiJQWmJf/HLgw0IXK3AsBylDM/5Mqv6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCHsx9BWGvKjYIvi2gZQDk2MbtNCMB8GA1UdIwQY
MBaAFOwGtWBhRX/1wIOK8dJTXuDR8rQ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0FhMVlHRkZmX1hBZzRyeDBsTmU0Tkh5dER3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9iYWQ3MTUtODhiNC00ZGZmLWFkMWEt
MmY1ZTIzM2Q3ZmNhLzEvN0FhMVlHRkZmX1hBZzRyeDBsTmU0Tkh5dER3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9iYWQ3MTUtODhiNC00ZGZmLWFkMWEtMmY1ZTIzM2Q3ZmNh
LzEvN0FhMVlHRkZmX1hBZzRyeDBsTmU0Tkh5dER3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDBsjl9L
YTm0tIfN0ODKZO8XgEmiaGBU6GMF5LTqR7d6ecE4/Ziwu4JFfKTYXa3JDDKHkFgA
vB9w7iBXWrVTldY9ewUtukr9KDiOBdr58rxPDwS2ImIRhxSMNnxfeJm+bRLQsF4e
NuFPxhMlfgKMHEAxpyPefpF8IEmXEawGd9Mfckp+UWrLe5wlyxBxe35tEYYN2Uia
JuxcGZ9m/QzpVRFACZ9yjZpGrtMkm9Udgr+R5xBHakpBY8DpuKVLK6XOVPURzwRA
fDFA5OjfhwLW1A77TKm+3lj8csD7ZdCI3Le9VXN67botkuvuHMQ2S7RVsVJMpUab
WI+TkcX4s+b8MQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:21:23 2026 by rpki-client