Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File:                     bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier:          eGfRHpO4vumpNcpi5SuR4qUxBHWaDki6JJj4zv/xayM=
Subject key identifier:   FC:47:BA:D1:5A:FA:47:5C:0C:21:9B:8C:D9:A0:8C:03:39:2C:9B:B6
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer:       /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial:       019F92EDDCA4B814C176D3480096D69DFA8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number:          0D8C
Signing time:             Fri 24 Jul 2026 07:01:29 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:29 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:29 +0000
Files and hashes:         1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: 4qdFjq47ZgMTJfmlkyrD9TnyIhR+ePmzlo5UODEyaK0=)
                          2: gq6lk47TA17e6REZA-zN8if3ODs.roa (hash: j1zLYjz1yht8bRIjCyc5xCvjTG5lN3f/7Pg2PlyRjnA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:dc:a4:b8:14:c1:76:d3:48:00:96:d6:9d:fa:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
        Validity
            Not Before: Jul 24 07:01:29 2026 GMT
            Not After : Jul 25 07:01:29 2026 GMT
        Subject: CN=fc47bad15afa475c0c219b8cd9a08c03392c9bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:31:9e:52:9c:38:68:ea:bd:08:3a:c1:8b:
                    b7:68:2c:fe:bf:c0:c9:4e:e4:00:64:79:ab:b8:dc:
                    8a:16:14:f5:24:e4:af:46:11:ab:f1:30:ba:6b:89:
                    a9:91:57:89:aa:28:03:c5:b6:27:8d:1f:fe:21:06:
                    ef:c1:18:c0:a2:a9:da:5d:3f:75:95:f6:44:42:56:
                    a6:d8:df:67:b1:b3:b1:f8:fb:18:2c:2f:fe:85:1b:
                    a7:25:2d:11:d3:1c:8d:df:5c:42:0d:3e:7f:75:b0:
                    5d:a8:28:38:7f:5b:d4:0c:58:11:63:a4:15:3d:e4:
                    bb:90:60:93:b9:e6:40:65:59:56:c2:de:6e:0c:71:
                    38:4f:dd:38:eb:a5:d3:06:5b:99:b3:54:dc:2f:d8:
                    a4:d7:15:20:30:57:b4:e5:f9:71:8e:77:7e:7f:9a:
                    c8:88:63:bd:17:95:36:3c:81:1b:22:b6:52:46:9c:
                    53:bc:4a:62:0b:c9:8f:2d:54:8c:1c:dd:a9:66:69:
                    c9:a0:f5:db:f9:fc:f9:ec:4e:a2:5f:fb:31:93:6a:
                    41:08:ba:c8:ce:b4:f8:d3:5d:ba:1f:cf:44:25:65:
                    aa:64:6f:67:cc:e1:2e:8f:eb:ba:48:02:d3:32:ce:
                    31:7b:86:94:5d:40:7d:1f:8e:fa:80:d5:c6:b0:92:
                    b9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:47:BA:D1:5A:FA:47:5C:0C:21:9B:8C:D9:A0:8C:03:39:2C:9B:B6
            X509v3 Authority Key Identifier:
                keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:b3:07:4c:32:95:40:cc:e9:3f:28:37:b5:44:1d:82:92:e7:
         b1:d0:4a:0f:53:02:be:91:a2:39:03:37:04:40:dc:40:f8:d4:
         9f:4a:1e:2d:00:cf:01:fc:da:d6:51:39:78:32:37:87:19:5d:
         f5:c0:b0:ca:87:78:ee:84:9f:0b:0b:56:87:14:ac:2b:0e:eb:
         50:5a:e4:8a:44:6b:85:28:b0:10:3e:e4:2b:1d:83:a3:51:2d:
         d6:67:68:45:4d:34:8e:1f:f5:e8:4e:00:ea:86:ca:c8:5c:18:
         b3:30:97:7a:28:c4:d7:a7:fd:71:00:c6:0e:38:b0:bd:86:33:
         12:a6:72:d7:be:8e:3b:e4:b3:95:7a:8d:20:d8:5e:6f:23:81:
         88:f0:b2:f2:90:20:3b:c1:62:0c:e8:3d:4b:b2:8a:cd:d7:93:
         ea:45:06:cf:9e:de:e4:4d:4c:fd:54:a2:99:16:12:cd:e1:6b:
         62:11:54:fc:8d:61:fe:b5:f2:a7:95:42:cb:b4:fa:9f:30:5d:
         9d:03:07:6d:00:f8:c9:d5:95:eb:d5:f5:61:a5:ca:ad:7c:f1:
         c6:e8:08:59:1a:54:94:61:3a:30:25:b4:b1:1c:90:9d:19:43:
         d5:5a:26:91:0d:ad:54:9d:ce:13:78:27:64:fe:d7:17:3c:40:
         1b:02:ce:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7dykuBTBdtNIAJbWnfqOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlYWYxNmRjYzU1MGNmODFlY2YwZjgxOTUyMTc5YTA0ODEz
MDg3N2EwHhcNMjYwNzI0MDcwMTI5WhcNMjYwNzI1MDcwMTI5WjAzMTEwLwYDVQQD
EyhmYzQ3YmFkMTVhZmE0NzVjMGMyMTliOGNkOWEwOGMwMzM5MmM5YmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6AxnlKcOGjqvQg6wYu3aCz+v8DJ
TuQAZHmruNyKFhT1JOSvRhGr8TC6a4mpkVeJqigDxbYnjR/+IQbvwRjAoqnaXT91
lfZEQlam2N9nsbOx+PsYLC/+hRunJS0R0xyN31xCDT5/dbBdqCg4f1vUDFgRY6QV
PeS7kGCTueZAZVlWwt5uDHE4T90466XTBluZs1TcL9ik1xUgMFe05flxjnd+f5rI
iGO9F5U2PIEbIrZSRpxTvEpiC8mPLVSMHN2pZmnJoPXb+fz57E6iX/sxk2pBCLrI
zrT40126H89EJWWqZG9nzOEuj+u6SALTMs4xe4aUXUB9H476gNXGsJK5rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPxHutFa+kdcDCGbjNmgjAM5LJu2MB8GA1UdIwQY
MBaAFG6vFtzFUM+B7PD4GVIXmgSBMId6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEt
NGZhMzQ4MWE0N2UxLzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS8wNjBlMWUtMzI4YS00ODE4LWJmZDEtNGZhMzQ4MWE0N2Ux
LzEvYnE4VzNNVlF6NEhzOFBnWlVoZWFCSUV3aDNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIbMHTDKV
QMzpPyg3tUQdgpLnsdBKD1MCvpGiOQM3BEDcQPjUn0oeLQDPAfza1lE5eDI3hxld
9cCwyod47oSfCwtWhxSsKw7rUFrkikRrhSiwED7kKx2Do1Et1mdoRU00jh/16E4A
6obKyFwYszCXeijE16f9cQDGDjiwvYYzEqZy176OO+SzlXqNINhebyOBiPCy8pAg
O8FiDOg9S7KKzdeT6kUGz57e5E1M/VSimRYSzeFrYhFU/I1h/rXyp5VCy7T6nzBd
nQMHbQD4ydWV69X1YaXKrXzxxugIWRpUlGE6MCW0sRyQnRlD1VomkQ2tVJ3OE3gn
ZP7XFzxAGwLOIA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:51 2026 by rpki-client