Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
File:                     0ccPHzPFgdt4oUm8htc5zcfOJqc.mft (raw, json)
Hash identifier:          Xy8lzXa1tfUhNzUfXivYCE4k98zkP+n0c2oWxVpLL0w=
Subject key identifier:   4C:C6:6C:72:4D:48:FD:82:D4:BB:26:02:3D:87:CF:7A:FB:D9:26:E2
Authority key identifier: D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7
Certificate issuer:       /CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
Certificate serial:       019F916CF0A64926BC4BD862D489C4911D1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
Manifest number:          085D
Signing time:             Fri 24 Jul 2026 00:01:03 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:03 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:03 +0000
Files and hashes:         1: 0ccPHzPFgdt4oUm8htc5zcfOJqc.crl (hash: oO8OsnQGFwjntQwByEXqabNcvLhpCV5mhw4DJy+Hgq4=)
                          2: 6-x6MjhIWmKkKN8PSvag3_NMayM.roa (hash: DJxqLKJWXBtl7f6AjOofGTskuyYrFGFq1UI9pHAp0p0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:f0:a6:49:26:bc:4b:d8:62:d4:89:c4:91:1d:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1c70f1f33c581db78a149bc86d739cdc7ce26a7
        Validity
            Not Before: Jul 24 00:01:03 2026 GMT
            Not After : Jul 25 00:01:03 2026 GMT
        Subject: CN=4cc66c724d48fd82d4bb26023d87cf7afbd926e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:67:78:1c:83:e5:9c:21:da:0e:98:bc:b5:36:
                    b5:5f:64:6a:d1:bf:a3:90:b0:be:e9:e6:33:82:88:
                    39:01:a5:ea:c4:8b:93:31:b0:d2:9b:d1:ac:97:43:
                    e5:dc:e1:9e:5e:77:f8:cc:b8:fc:ac:80:27:0b:09:
                    1f:04:ae:bd:87:ee:ff:c5:ca:b5:b5:cc:26:b3:bb:
                    0f:7f:02:69:32:7d:8c:80:0e:e0:6e:74:d5:e0:71:
                    72:62:0f:b4:6f:c4:c2:39:48:d5:c0:6d:e5:23:b2:
                    28:a5:9c:f2:f9:01:f1:c2:08:44:8a:45:6d:3b:65:
                    b8:1c:03:3a:23:c7:71:99:3b:48:81:b4:76:08:d0:
                    b2:7f:9a:93:99:ee:39:1d:f4:b8:5d:63:05:6f:04:
                    91:31:56:28:13:40:bb:98:d2:fb:e9:b6:a0:a6:44:
                    60:9e:01:7b:1e:d5:53:9c:95:17:f3:f2:84:39:05:
                    70:8a:62:61:45:10:06:61:2c:2f:55:e1:35:76:89:
                    29:52:17:ea:d5:a9:65:80:cb:52:53:3f:5f:29:07:
                    37:b7:8b:3e:5a:ac:f5:c9:e3:94:37:48:51:ff:8a:
                    e2:3b:41:d5:11:98:d4:d0:b0:a6:72:71:eb:ae:8f:
                    96:de:eb:59:c3:a4:7b:a3:07:8b:fc:0b:38:29:76:
                    25:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:C6:6C:72:4D:48:FD:82:D4:BB:26:02:3D:87:CF:7A:FB:D9:26:E2
            X509v3 Authority Key Identifier:
                keyid:D1:C7:0F:1F:33:C5:81:DB:78:A1:49:BC:86:D7:39:CD:C7:CE:26:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ccPHzPFgdt4oUm8htc5zcfOJqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/d3d257-6e4c-4d60-9c93-dfcae36a3ef8/1/0ccPHzPFgdt4oUm8htc5zcfOJqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:09:71:10:52:85:4d:08:3b:4a:af:e2:44:1f:a4:d8:b9:dc:
         78:17:a0:08:f4:e1:b5:72:94:f3:5e:99:05:6d:c7:01:f0:1f:
         32:78:9e:25:a4:d2:55:0b:b8:f0:23:77:90:2e:ab:70:81:91:
         c4:1d:7e:98:b5:1c:cc:10:b6:7e:bd:45:37:4d:da:65:1c:b3:
         a9:55:a5:e3:e5:ee:ea:0d:3a:13:48:fb:be:d5:86:7c:94:e6:
         dd:80:76:59:ed:6d:b2:fd:14:57:88:2a:56:72:fa:b5:51:ae:
         1e:93:69:3c:ee:85:eb:2a:88:b5:c9:bc:5f:09:ae:f9:70:9b:
         42:3f:50:52:87:44:44:81:39:2a:f2:5d:c4:73:32:09:a5:d8:
         a4:88:5e:47:f1:d1:f0:7c:cd:85:5e:5e:0c:f0:6c:1e:78:89:
         0b:d5:c3:3d:e4:9f:b7:84:0d:8c:95:d8:63:d5:6c:39:ec:27:
         2f:a6:74:17:2c:79:89:08:2a:19:b1:73:ab:ea:fe:b8:03:3b:
         8c:c2:e0:4f:c3:86:64:77:6a:b3:d6:5a:51:ff:3b:63:66:59:
         50:27:00:d1:0a:73:10:7c:da:cc:df:55:35:d7:33:eb:6e:35:
         e1:67:18:52:0e:24:68:af:ce:5e:5a:c4:1b:e2:2a:b4:71:17:
         e6:ca:46:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbPCmSSa8S9hi1InEkR0cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYzcwZjFmMzNjNTgxZGI3OGExNDliYzg2ZDczOWNkYzdj
ZTI2YTcwHhcNMjYwNzI0MDAwMTAzWhcNMjYwNzI1MDAwMTAzWjAzMTEwLwYDVQQD
Eyg0Y2M2NmM3MjRkNDhmZDgyZDRiYjI2MDIzZDg3Y2Y3YWZiZDkyNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGd4HIPlnCHaDpi8tTa1X2Rq0b+j
kLC+6eYzgog5AaXqxIuTMbDSm9Gsl0Pl3OGeXnf4zLj8rIAnCwkfBK69h+7/xcq1
tcwms7sPfwJpMn2MgA7gbnTV4HFyYg+0b8TCOUjVwG3lI7IopZzy+QHxwghEikVt
O2W4HAM6I8dxmTtIgbR2CNCyf5qTme45HfS4XWMFbwSRMVYoE0C7mNL76bagpkRg
ngF7HtVTnJUX8/KEOQVwimJhRRAGYSwvVeE1dokpUhfq1allgMtSUz9fKQc3t4s+
Wqz1yeOUN0hR/4riO0HVEZjU0LCmcnHrro+W3utZw6R7oweL/As4KXYlvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzGbHJNSP2C1LsmAj2Hz3r72SbiMB8GA1UdIwQY
MBaAFNHHDx8zxYHbeKFJvIbXOc3HzianMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMt
ZGZjYWUzNmEzZWY4LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9kM2QyNTctNmU0Yy00ZDYwLTljOTMtZGZjYWUzNmEzZWY4
LzEvMGNjUEh6UEZnZHQ0b1VtOGh0YzV6Y2ZPSnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApAlxEFKF
TQg7Sq/iRB+k2LnceBegCPThtXKU816ZBW3HAfAfMnieJaTSVQu48CN3kC6rcIGR
xB1+mLUczBC2fr1FN03aZRyzqVWl4+Xu6g06E0j7vtWGfJTm3YB2We1tsv0UV4gq
VnL6tVGuHpNpPO6F6yqItcm8Xwmu+XCbQj9QUodERIE5KvJdxHMyCaXYpIheR/HR
8HzNhV5eDPBsHniJC9XDPeSft4QNjJXYY9VsOewnL6Z0Fyx5iQgqGbFzq+r+uAM7
jMLgT8OGZHdqs9ZaUf87Y2ZZUCcA0QpzEHzazN9VNdcz62414WcYUg4kaK/OXlrE
G+IqtHEX5spGPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:39:14 2026 by rpki-client