Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
File:                     O3vGRy6lJXXOlb3KeCbppR-qzkk.mft (raw, json)
Hash identifier:          TFrOlbbKEpOhOilVwZHnvP86zgYHZIQYRs3/awUjrak=
Subject key identifier:   19:81:52:22:FF:D0:EB:D0:C0:84:1F:2B:5A:19:C3:56:5E:35:F9:C2
Authority key identifier: 3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49
Certificate issuer:       /CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
Certificate serial:       019F92B67E9FE2980D08A39BB80DC773C721
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
Manifest number:          04B8
Signing time:             Fri 24 Jul 2026 06:01:00 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:00 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:00 +0000
Files and hashes:         1: O3vGRy6lJXXOlb3KeCbppR-qzkk.crl (hash: I50tTQhNV7psKuZ6rECAEsXCLMAefRCxxDmfCXDPEgU=)
                          2: xZvTVsgAgTHbHn_16cZuYXn4mck.roa (hash: +oE3yDmB7hi9Ypi3E2o3IvseUAbSMG6NeT9277jObu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 06:01:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:7e:9f:e2:98:0d:08:a3:9b:b8:0d:c7:73:c7:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b7bc6472ea52575ce95bdca7826e9a51faace49
        Validity
            Not Before: Jul 24 06:01:00 2026 GMT
            Not After : Jul 25 06:01:00 2026 GMT
        Subject: CN=19815222ffd0ebd0c0841f2b5a19c3565e35f9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:17:66:e4:08:52:83:b7:8d:10:5f:d9:14:20:
                    5a:e0:8d:80:55:49:b3:06:33:9c:35:39:46:18:3f:
                    ba:81:9a:97:fc:ff:e7:5d:75:3a:f1:6d:51:b4:48:
                    4f:0b:f1:fe:37:41:a3:68:f9:b8:1e:ed:9a:59:de:
                    b3:00:39:b8:cd:a3:b6:70:9a:3c:2e:a3:fa:2f:e8:
                    41:9c:7d:0f:64:ab:e2:a4:dc:5e:5a:d7:e1:8c:29:
                    c1:c0:2a:12:eb:52:79:48:c2:fe:49:7c:c7:49:d8:
                    a6:c3:ac:04:75:1a:d7:26:38:e8:ac:a8:f9:ea:39:
                    25:13:1c:5f:d8:61:cc:67:02:e7:55:cc:e2:56:b7:
                    90:71:ad:fa:07:ae:33:c2:c4:ea:bd:4e:12:33:96:
                    3b:7c:c5:24:ac:29:9f:da:1c:91:9b:9a:e2:5e:ce:
                    9b:d6:4c:51:5c:53:8f:56:f3:6e:ee:46:82:78:c2:
                    2b:c1:79:3c:39:e6:a5:8d:4b:a7:b5:44:b0:86:fe:
                    5f:17:78:ea:ed:d4:9c:80:9e:d4:e2:05:7f:ec:69:
                    6f:65:38:e0:d6:e6:11:42:cf:bc:3c:ff:3e:57:37:
                    6e:c7:b4:76:78:ee:29:cc:78:ef:e3:36:c5:04:ee:
                    67:39:ce:32:d2:86:54:f4:0b:d5:90:55:a0:e9:e6:
                    ba:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:52:22:FF:D0:EB:D0:C0:84:1F:2B:5A:19:C3:56:5E:35:F9:C2
            X509v3 Authority Key Identifier:
                keyid:3B:7B:C6:47:2E:A5:25:75:CE:95:BD:CA:78:26:E9:A5:1F:AA:CE:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O3vGRy6lJXXOlb3KeCbppR-qzkk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/493d29-47a9-49eb-8080-9226b3ac4e9d/1/O3vGRy6lJXXOlb3KeCbppR-qzkk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:0b:7a:da:9b:bc:bb:b5:d1:10:14:79:da:5f:ae:ad:03:a7:
         78:df:e7:32:97:34:cb:56:85:08:09:fb:2f:09:e0:b8:38:ae:
         26:b7:db:db:2c:ef:10:00:66:5a:f7:68:7b:13:aa:62:89:8e:
         2c:5a:70:e3:97:45:d2:59:ba:aa:79:23:51:b7:7b:cd:55:6f:
         71:04:32:a7:19:44:39:fa:59:aa:ba:a3:38:e2:6e:8c:3b:fe:
         07:fa:7d:80:39:fd:99:42:81:cb:05:1b:0f:d0:ee:a7:a5:a8:
         4f:78:e7:8a:3c:24:a5:8d:5b:57:ca:3f:6f:31:e1:6e:1f:75:
         06:fb:6f:f0:73:49:c8:ae:4e:8a:b8:7a:d9:e3:3d:36:cb:52:
         fb:e5:32:70:39:fb:a5:fb:4a:e1:27:dc:11:24:2a:45:f4:86:
         b7:a7:85:6d:71:d1:92:98:ee:48:d2:be:ac:90:61:dd:9b:d2:
         ce:95:c2:d1:81:5a:8a:bd:77:3d:31:69:0a:a6:d4:4b:c1:c3:
         7d:eb:fb:5a:7d:c8:6f:ad:8a:8f:c0:51:d5:f1:7f:fb:d3:c2:
         23:b1:75:0c:e5:3c:d7:4a:e7:fe:cd:6c:d4:de:ae:b8:c4:8e:
         a2:5b:14:78:65:82:3c:85:b1:9d:86:d3:68:26:ee:46:d3:0c:
         7c:2e:7f:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Stn6f4pgNCKObuA3Hc8chMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiN2JjNjQ3MmVhNTI1NzVjZTk1YmRjYTc4MjZlOWE1MWZh
YWNlNDkwHhcNMjYwNzI0MDYwMTAwWhcNMjYwNzI1MDYwMTAwWjAzMTEwLwYDVQQD
EygxOTgxNTIyMmZmZDBlYmQwYzA4NDFmMmI1YTE5YzM1NjVlMzVmOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhdm5AhSg7eNEF/ZFCBa4I2AVUmz
BjOcNTlGGD+6gZqX/P/nXXU68W1RtEhPC/H+N0GjaPm4Hu2aWd6zADm4zaO2cJo8
LqP6L+hBnH0PZKvipNxeWtfhjCnBwCoS61J5SML+SXzHSdimw6wEdRrXJjjorKj5
6jklExxf2GHMZwLnVcziVreQca36B64zwsTqvU4SM5Y7fMUkrCmf2hyRm5riXs6b
1kxRXFOPVvNu7kaCeMIrwXk8OealjUuntUSwhv5fF3jq7dScgJ7U4gV/7GlvZTjg
1uYRQs+8PP8+Vzdux7R2eO4pzHjv4zbFBO5nOc4y0oZU9AvVkFWg6ea6OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmBUiL/0OvQwIQfK1oZw1ZeNfnCMB8GA1UdIwQY
MBaAFDt7xkcupSV1zpW9yngm6aUfqs5JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAt
OTIyNmIzYWM0ZTlkLzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS80OTNkMjktNDdhOS00OWViLTgwODAtOTIyNmIzYWM0ZTlk
LzEvTzN2R1J5NmxKWFhPbGIzS2VDYnBwUi1xemtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAngt62pu8
u7XREBR52l+urQOneN/nMpc0y1aFCAn7LwnguDiuJrfb2yzvEABmWvdoexOqYomO
LFpw45dF0lm6qnkjUbd7zVVvcQQypxlEOfpZqrqjOOJujDv+B/p9gDn9mUKBywUb
D9Dup6WoT3jnijwkpY1bV8o/bzHhbh91Bvtv8HNJyK5Oirh62eM9NstS++UycDn7
pftK4SfcESQqRfSGt6eFbXHRkpjuSNK+rJBh3ZvSzpXC0YFair13PTFpCqbUS8HD
fev7Wn3Ib62Kj8BR1fF/+9PCI7F1DOU810rn/s1s1N6uuMSOolsUeGWCPIWxnYbT
aCbuRtMMfC5/MQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:11:55 2026 by rpki-client