Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
File:                     7wKUR5RZGCRZwV2MoBCop_R_gMg.mft (raw, json)
Hash identifier:          l3P4UZ2VAjgNoAlFRmKdWgsK1EurucXiNFvSX3Ij0jk=
Subject key identifier:   14:5C:FD:A6:F2:63:EB:47:F2:FA:2F:90:DF:23:9F:EE:ED:5E:9E:78
Authority key identifier: EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8
Certificate issuer:       /CN=ef0294479459182459c15d8ca010a8a7f47f80c8
Certificate serial:       019F905A1B2A0D0C1CEBCDC5A7B6E7DF5356
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
Manifest number:          0924
Signing time:             Thu 23 Jul 2026 19:00:51 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:51 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:51 +0000
Files and hashes:         1: 7wKUR5RZGCRZwV2MoBCop_R_gMg.crl (hash: 0l94FbNHrwYsHuamwEDB+j3gPGCS+U0+2rdAA1XMWMI=)
                          2: ZKITQWeRmOOpWe3j9phAgbWo098.roa (hash: uQME1knZ+/RpjbN1SdA7vXHO6Nrx1GYvYRwaBz+mqFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:1b:2a:0d:0c:1c:eb:cd:c5:a7:b6:e7:df:53:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef0294479459182459c15d8ca010a8a7f47f80c8
        Validity
            Not Before: Jul 23 19:00:51 2026 GMT
            Not After : Jul 24 19:00:51 2026 GMT
        Subject: CN=145cfda6f263eb47f2fa2f90df239feeed5e9e78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b1:82:a6:b2:45:87:94:d1:8d:59:ab:9e:fa:
                    ae:3e:29:aa:4b:67:4f:10:2c:97:ed:4a:29:57:67:
                    ed:06:9b:b6:0c:75:3e:16:e3:1a:99:d6:b7:30:2a:
                    92:1b:26:8d:d2:01:bc:b1:77:a2:3f:1b:e4:16:88:
                    71:f9:b4:33:58:8c:72:82:b3:46:55:dd:2a:e5:e1:
                    6d:a7:8d:d6:d0:c6:f9:ec:80:4b:6e:90:d2:0b:47:
                    36:91:32:46:82:0d:61:28:87:19:5a:8b:76:1d:6f:
                    80:88:ed:2c:47:35:db:84:f7:62:ff:eb:ad:e6:23:
                    bf:7f:86:f5:b1:03:ad:0c:d1:16:1c:44:89:c4:aa:
                    6c:b3:46:2d:a3:bb:d8:d7:21:c8:27:c3:7c:73:98:
                    25:4e:a4:f2:5e:8e:bc:ed:60:b5:be:db:a9:31:5e:
                    e8:30:fa:ce:b0:2b:6c:15:92:c9:24:8d:3e:ba:d9:
                    a7:58:af:50:4c:88:f7:0f:60:a7:62:e8:aa:82:9f:
                    2e:f7:e4:c5:6f:99:15:12:ed:53:78:d1:9c:fb:68:
                    e3:1a:b1:32:47:20:3d:ac:3b:39:b7:cc:fc:2d:7d:
                    ab:34:4e:88:66:56:f7:2d:cc:31:c3:d4:4b:c6:e6:
                    aa:89:68:b4:d5:da:3c:52:44:08:e1:b7:9c:30:a0:
                    4b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:5C:FD:A6:F2:63:EB:47:F2:FA:2F:90:DF:23:9F:EE:ED:5E:9E:78
            X509v3 Authority Key Identifier:
                keyid:EF:02:94:47:94:59:18:24:59:C1:5D:8C:A0:10:A8:A7:F4:7F:80:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7wKUR5RZGCRZwV2MoBCop_R_gMg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/5bce46-cc9b-483f-b940-047ba0e62de4/1/7wKUR5RZGCRZwV2MoBCop_R_gMg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:7f:f7:02:28:e7:93:bb:1c:6b:e2:d2:5a:a5:d7:61:ed:f0:
         66:0e:e3:be:bc:b5:36:af:d3:72:09:f7:4e:05:7d:21:4f:7d:
         b6:43:c5:78:e1:c3:66:6f:77:d3:bb:dc:c3:61:65:e8:01:64:
         15:9b:85:88:cd:29:42:28:37:46:c0:97:fe:19:84:e4:7d:bd:
         ce:50:70:58:05:48:aa:59:a3:92:0a:e9:c7:be:a7:05:a6:63:
         94:67:29:c2:ac:7f:c9:3d:00:65:a1:f6:1b:ec:53:05:fe:5f:
         ab:77:9c:f6:87:9f:6d:fa:70:dc:77:b8:5c:c2:80:e8:f4:ee:
         ae:a2:cb:39:1f:e5:a0:bf:b9:1e:ab:78:61:52:1b:49:a2:76:
         bb:c9:c6:ec:7a:00:07:09:03:5d:59:83:84:64:60:bc:3a:ae:
         8a:fd:5b:4d:13:e4:b2:b4:a8:0e:a2:13:cc:84:18:01:e0:f0:
         f1:a4:44:41:00:e3:90:d0:37:5b:03:7d:dc:35:33:09:c9:13:
         95:76:c9:ad:f3:78:93:00:ab:01:68:be:d0:05:55:0b:4b:fc:
         55:f9:3a:49:91:21:4b:91:17:83:3d:d7:dd:6a:96:36:d8:73:
         09:59:dd:48:af:25:27:ae:c9:5a:3b:b1:a2:bf:c3:de:2e:da:
         56:25:04:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWhsqDQwc683Fp7bn31NWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMDI5NDQ3OTQ1OTE4MjQ1OWMxNWQ4Y2EwMTBhOGE3ZjQ3
ZjgwYzgwHhcNMjYwNzIzMTkwMDUxWhcNMjYwNzI0MTkwMDUxWjAzMTEwLwYDVQQD
EygxNDVjZmRhNmYyNjNlYjQ3ZjJmYTJmOTBkZjIzOWZlZWVkNWU5ZTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLGCprJFh5TRjVmrnvquPimqS2dP
ECyX7UopV2ftBpu2DHU+FuMamda3MCqSGyaN0gG8sXeiPxvkFohx+bQzWIxygrNG
Vd0q5eFtp43W0Mb57IBLbpDSC0c2kTJGgg1hKIcZWot2HW+AiO0sRzXbhPdi/+ut
5iO/f4b1sQOtDNEWHESJxKpss0Yto7vY1yHIJ8N8c5glTqTyXo687WC1vtupMV7o
MPrOsCtsFZLJJI0+utmnWK9QTIj3D2CnYuiqgp8u9+TFb5kVEu1TeNGc+2jjGrEy
RyA9rDs5t8z8LX2rNE6IZlb3Lcwxw9RLxuaqiWi01do8UkQI4becMKBLdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBRc/abyY+tH8vovkN8jn+7tXp54MB8GA1UdIwQY
MBaAFO8ClEeUWRgkWcFdjKAQqKf0f4DIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAt
MDQ3YmEwZTYyZGU0LzEvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS81YmNlNDYtY2M5Yi00ODNmLWI5NDAtMDQ3YmEwZTYyZGU0
LzEvN3dLVVI1UlpHQ1Jad1YyTW9CQ29wX1JfZ01nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIn/3Aijn
k7sca+LSWqXXYe3wZg7jvry1Nq/Tcgn3TgV9IU99tkPFeOHDZm9307vcw2Fl6AFk
FZuFiM0pQig3RsCX/hmE5H29zlBwWAVIqlmjkgrpx76nBaZjlGcpwqx/yT0AZaH2
G+xTBf5fq3ec9oefbfpw3He4XMKA6PTurqLLOR/loL+5Hqt4YVIbSaJ2u8nG7HoA
BwkDXVmDhGRgvDquiv1bTRPksrSoDqITzIQYAeDw8aREQQDjkNA3WwN93DUzCckT
lXbJrfN4kwCrAWi+0AVVC0v8Vfk6SZEhS5EXgz3X3WqWNthzCVndSK8lJ67JWjux
or/D3i7aViUEVw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:14:38 2026 by rpki-client