Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
File:                     csrpZXwthNEBrYUA1dI26o64VIE.mft (raw, json)
Hash identifier:          GECL5wVvh0gm4/Z+KFcIwHS6Y/DZ95EPLyMXclY37eM=
Subject key identifier:   0A:A1:1A:73:89:7E:7B:F6:B9:EE:26:FA:25:82:A8:DE:58:E3:8A:07
Authority key identifier: 72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81
Certificate issuer:       /CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
Certificate serial:       019F927FCB306A32A64233EA2A57B6052E69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
Manifest number:          0848
Signing time:             Fri 24 Jul 2026 05:01:16 +0000
Manifest this update:     Fri 24 Jul 2026 05:01:16 +0000
Manifest next update:     Sat 25 Jul 2026 05:01:16 +0000
Files and hashes:         1: 1-WO0GACqy-eA17PZxSHorJ0nbCw.roa (hash: APG9pmhKy9iTCKXEjwonpREIrLwqDEbWbVud/9m5R4k=)
                          2: csrpZXwthNEBrYUA1dI26o64VIE.crl (hash: rtWn7F9xeCYxENkuDyqp/TiItKuI3VRZbr2KwPiOpvA=)
                          3: jrdUT9ZxJxzqlMRnHVJnnefEJPE.roa (hash: FxYjIY5awSFaZzGjU6N3ODWHu4ZSbBlhd+wx8DBxv6E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:cb:30:6a:32:a6:42:33:ea:2a:57:b6:05:2e:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72cae9657c2d84d101ad8500d5d236ea8eb85481
        Validity
            Not Before: Jul 24 05:01:16 2026 GMT
            Not After : Jul 25 05:01:16 2026 GMT
        Subject: CN=0aa11a73897e7bf6b9ee26fa2582a8de58e38a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:f2:d8:6a:84:87:7f:c5:32:9a:46:bb:78:fa:
                    0a:d1:b1:5a:dc:46:5c:3c:ed:85:70:ce:3a:70:97:
                    53:b0:c7:d1:9c:35:b4:4f:b4:8b:ec:78:f9:7d:ce:
                    71:28:b7:d6:ad:4e:4a:47:2a:76:af:2e:93:a3:c6:
                    b0:63:88:9b:53:af:7f:f2:dd:1c:bb:e5:2c:44:de:
                    22:00:21:39:09:f3:41:6e:f2:76:e0:2c:c1:b9:ea:
                    b1:80:20:ac:73:ff:3d:31:bf:83:5d:f9:e1:c4:b7:
                    74:6d:8b:83:80:c1:a1:56:44:f5:6b:f6:ee:70:3d:
                    aa:1a:05:85:fd:58:cd:a7:55:25:28:72:8b:13:b0:
                    d8:23:37:92:ad:10:54:7e:85:73:25:28:fe:cc:f1:
                    b8:98:74:7c:5c:29:90:fb:38:86:e9:da:2f:0f:b1:
                    4c:11:3d:9d:17:33:7b:cb:c5:0a:be:9b:48:c7:4c:
                    e6:0b:92:c2:a5:ee:fa:1b:5c:a1:10:8d:09:0c:28:
                    d4:f1:46:72:0a:84:fc:c5:f2:a4:2a:49:de:37:3b:
                    e4:68:d6:d9:97:2f:4e:e6:97:d0:df:40:36:14:ff:
                    2a:4a:9b:38:81:c7:f1:4f:6f:ff:1b:32:e5:26:d4:
                    3c:e0:5b:61:09:cb:7f:67:4a:b8:94:c5:41:86:3c:
                    61:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:A1:1A:73:89:7E:7B:F6:B9:EE:26:FA:25:82:A8:DE:58:E3:8A:07
            X509v3 Authority Key Identifier:
                keyid:72:CA:E9:65:7C:2D:84:D1:01:AD:85:00:D5:D2:36:EA:8E:B8:54:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csrpZXwthNEBrYUA1dI26o64VIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ded70c-1059-4345-b459-4ae5ff9f4fc6/1/csrpZXwthNEBrYUA1dI26o64VIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:9d:d8:2d:93:7c:c6:96:c4:11:3b:89:b9:8a:a1:b2:b7:d8:
         0c:51:9f:de:2d:e4:a5:0e:fc:69:b3:f6:36:ce:ba:1a:3f:07:
         db:d4:f0:d6:ea:70:7a:69:f5:03:45:98:64:de:45:41:14:0a:
         81:ac:f0:6c:8c:de:6a:3f:9c:4a:65:e7:d8:e2:d6:c6:6b:93:
         fe:4b:7a:ab:d1:62:2a:cb:07:8b:cb:c9:1d:a1:8b:21:da:3e:
         d4:a4:12:86:2b:88:74:b1:91:d3:66:51:56:81:49:94:70:7c:
         6b:1e:5a:f0:91:03:64:fd:f9:10:56:29:8c:e4:20:52:30:2f:
         4e:5b:bc:fc:d8:4b:17:13:16:17:3e:89:22:49:9f:02:6a:c5:
         39:38:8f:f8:d7:dc:48:2f:22:2b:00:3f:2d:5c:c4:53:2f:07:
         f5:7f:9b:9d:88:cb:f5:f3:f5:ef:b2:b1:3f:4e:5b:f0:3a:9f:
         fe:fa:74:ae:36:aa:6f:8e:da:8a:8f:93:58:dd:47:b0:04:e1:
         96:f1:43:96:c4:31:36:6b:9f:09:77:cd:4f:79:6b:ce:25:e8:
         68:78:38:04:4b:ef:e7:da:61:13:d7:42:85:d1:61:b3:9d:3e:
         11:67:c2:0a:a0:ad:5e:6d:4c:b1:3a:f4:10:2e:35:ba:dc:3a:
         fa:63:40:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf8swajKmQjPqKle2BS5pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyY2FlOTY1N2MyZDg0ZDEwMWFkODUwMGQ1ZDIzNmVhOGVi
ODU0ODEwHhcNMjYwNzI0MDUwMTE2WhcNMjYwNzI1MDUwMTE2WjAzMTEwLwYDVQQD
EygwYWExMWE3Mzg5N2U3YmY2YjllZTI2ZmEyNTgyYThkZTU4ZTM4YTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9vLYaoSHf8Uymka7ePoK0bFa3EZc
PO2FcM46cJdTsMfRnDW0T7SL7Hj5fc5xKLfWrU5KRyp2ry6To8awY4ibU69/8t0c
u+UsRN4iACE5CfNBbvJ24CzBueqxgCCsc/89Mb+DXfnhxLd0bYuDgMGhVkT1a/bu
cD2qGgWF/VjNp1UlKHKLE7DYIzeSrRBUfoVzJSj+zPG4mHR8XCmQ+ziG6dovD7FM
ET2dFzN7y8UKvptIx0zmC5LCpe76G1yhEI0JDCjU8UZyCoT8xfKkKkneNzvkaNbZ
ly9O5pfQ30A2FP8qSps4gcfxT2//GzLlJtQ84FthCct/Z0q4lMVBhjxhoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAqhGnOJfnv2ue4m+iWCqN5Y44oHMB8GA1UdIwQY
MBaAFHLK6WV8LYTRAa2FANXSNuqOuFSBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTkt
NGFlNWZmOWY0ZmM2LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kZWQ3MGMtMTA1OS00MzQ1LWI0NTktNGFlNWZmOWY0ZmM2
LzEvY3NycFpYd3RoTkVCcllVQTFkSTI2bzY0VklFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADp3YLZN8
xpbEETuJuYqhsrfYDFGf3i3kpQ78abP2Ns66Gj8H29Tw1upwemn1A0WYZN5FQRQK
gazwbIzeaj+cSmXn2OLWxmuT/kt6q9FiKssHi8vJHaGLIdo+1KQShiuIdLGR02ZR
VoFJlHB8ax5a8JEDZP35EFYpjOQgUjAvTlu8/NhLFxMWFz6JIkmfAmrFOTiP+Nfc
SC8iKwA/LVzEUy8H9X+bnYjL9fP177KxP05b8Dqf/vp0rjaqb47aio+TWN1HsATh
lvFDlsQxNmufCXfNT3lrziXoaHg4BEvv59phE9dChdFhs50+EWfCCqCtXm1MsTr0
EC41utw6+mNA8A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:08:58 2026 by rpki-client