Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
File:                     1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft (raw, json)
Hash identifier:          9f1uICiJlgrfrOuDaKtTOKV2R45wIJ6dlIRWwTDtM6g=
Subject key identifier:   77:F7:A2:8F:4D:99:2A:83:C6:82:B3:C5:F9:FB:B8:C4:B5:06:C3:85
Authority key identifier: D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19
Certificate issuer:       /CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
Certificate serial:       019F8F7F156909015E5C66B0358D357A4B3B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
Manifest number:          0450
Signing time:             Thu 23 Jul 2026 15:01:38 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:38 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:38 +0000
Files and hashes:         1: 1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl (hash: A4yExRZO/iCTf3p2sW7/jm5qlD4hF/pBvV+1t3EH8jk=)
                          2: Na4Gy6UIsHxIjVJ4JZkHTGt_YMI.roa (hash: 7cEPbpdCkfIXgLMOzwquxVKbvV/70yCisgijxQttsKA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7f:15:69:09:01:5e:5c:66:b0:35:8d:35:7a:4b:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66bf5004840c33b6b1f2109dc249bf5b390f319
        Validity
            Not Before: Jul 23 15:01:38 2026 GMT
            Not After : Jul 24 15:01:38 2026 GMT
        Subject: CN=77f7a28f4d992a83c682b3c5f9fbb8c4b506c385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:6e:b3:37:4c:e1:a1:ea:7f:13:a6:c4:69:70:
                    21:21:16:4c:5f:6d:18:b5:13:88:d2:a4:a2:fa:ec:
                    6d:18:e2:9c:aa:c4:ea:50:4d:0d:35:be:4b:16:6b:
                    d1:65:f2:8e:d9:17:d2:d7:e1:35:30:59:23:e5:8e:
                    ba:18:65:89:d0:3b:67:ed:36:53:8d:6d:57:e4:36:
                    9e:c5:6b:78:aa:de:0f:a7:43:61:b2:38:42:11:57:
                    61:20:ff:83:8b:ae:97:6f:93:69:b3:68:65:7c:fa:
                    cc:f2:a5:ab:b2:e4:96:cc:4f:cd:e0:9b:0b:06:5f:
                    8a:98:f5:96:fb:d0:6c:17:d4:9d:43:4c:7b:67:6f:
                    8c:6e:28:25:0d:5c:22:ae:b5:ea:40:d4:4d:94:a2:
                    1a:61:e8:ac:7a:66:1a:01:2f:49:4e:b7:02:1e:ed:
                    13:1d:f7:d4:cb:5b:e2:a2:f8:18:d3:f9:c6:ba:59:
                    a6:a0:9f:7a:1e:1a:b1:b9:86:f7:a8:21:d5:f7:f5:
                    9a:14:71:c7:cd:e3:63:94:7b:0f:75:0b:d2:df:61:
                    83:ab:fc:5d:6c:17:69:a7:8f:1b:0b:90:07:3b:75:
                    a2:cd:35:5f:8c:e4:3f:88:2d:04:e3:0b:64:87:bb:
                    5f:4c:e5:bf:01:88:c3:ba:ed:14:76:da:7f:54:34:
                    56:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F7:A2:8F:4D:99:2A:83:C6:82:B3:C5:F9:FB:B8:C4:B5:06:C3:85
            X509v3 Authority Key Identifier:
                keyid:D6:6B:F5:00:48:40:C3:3B:6B:1F:21:09:DC:24:9B:F5:B3:90:F3:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/85d540-7b0c-4c16-8cb7-f5b9924d6cf1/1/1mv1AEhAwztrHyEJ3CSb9bOQ8xk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f0:32:b6:16:5b:6f:d5:5c:1a:a8:a1:e4:e5:0b:7b:ba:f8:
         c9:44:35:1f:46:d5:36:d0:cb:86:01:29:05:dc:90:9e:66:51:
         59:44:35:22:70:f1:c0:95:7a:47:d6:55:a5:ea:09:0f:83:b5:
         09:07:2d:12:6c:64:70:5b:e0:f7:47:41:f0:f6:17:c8:40:b3:
         76:22:27:8f:5d:78:7e:3b:0b:dd:ae:a3:d5:28:5e:af:0d:16:
         46:29:8e:0c:38:a9:02:16:c9:81:17:7f:89:8a:ca:d5:a2:75:
         9c:56:ff:37:ec:c6:07:7b:bf:ed:b7:ad:b7:c3:3e:75:da:eb:
         c0:d5:f5:81:13:3d:9c:1c:43:2c:ad:a9:f9:25:ff:4c:69:b5:
         42:26:62:11:a1:e8:2e:29:d9:29:07:ab:4e:12:3e:1a:e1:4d:
         81:17:31:8b:bc:4b:b9:f1:18:67:97:05:0e:f9:fa:89:1c:a9:
         b9:82:07:be:db:c4:4e:de:96:f8:2e:8a:da:76:24:5c:5b:fe:
         63:45:2b:0d:51:76:b1:0c:4d:f6:9b:fc:bc:1d:eb:0f:6d:fc:
         75:50:9f:29:b1:f5:7b:40:47:6e:bc:79:ad:3b:72:21:46:8d:
         2d:a2:e0:5a:17:da:d2:4b:56:62:95:bc:ea:7f:e7:9c:b4:3f:
         b2:b5:22:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfxVpCQFeXGawNY01eks7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmJmNTAwNDg0MGMzM2I2YjFmMjEwOWRjMjQ5YmY1YjM5
MGYzMTkwHhcNMjYwNzIzMTUwMTM4WhcNMjYwNzI0MTUwMTM4WjAzMTEwLwYDVQQD
Eyg3N2Y3YTI4ZjRkOTkyYTgzYzY4MmIzYzVmOWZiYjhjNGI1MDZjMzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9W6zN0zhoep/E6bEaXAhIRZMX20Y
tROI0qSi+uxtGOKcqsTqUE0NNb5LFmvRZfKO2RfS1+E1MFkj5Y66GGWJ0Dtn7TZT
jW1X5DaexWt4qt4Pp0NhsjhCEVdhIP+Di66Xb5Nps2hlfPrM8qWrsuSWzE/N4JsL
Bl+KmPWW+9BsF9SdQ0x7Z2+MbiglDVwirrXqQNRNlKIaYeisemYaAS9JTrcCHu0T
HffUy1viovgY0/nGulmmoJ96HhqxuYb3qCHV9/WaFHHHzeNjlHsPdQvS32GDq/xd
bBdpp48bC5AHO3WizTVfjOQ/iC0E4wtkh7tfTOW/AYjDuu0Udtp/VDRWHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHf3oo9NmSqDxoKzxfn7uMS1BsOFMB8GA1UdIwQY
MBaAFNZr9QBIQMM7ax8hCdwkm/WzkPMZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny84NWQ1NDAtN2IwYy00YzE2LThjYjct
ZjViOTkyNGQ2Y2YxLzEvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny84NWQ1NDAtN2IwYy00YzE2LThjYjctZjViOTkyNGQ2Y2Yx
LzEvMW12MUFFaEF3enRySHlFSjNDU2I5Yk9ROHhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXPAythZb
b9VcGqih5OULe7r4yUQ1H0bVNtDLhgEpBdyQnmZRWUQ1InDxwJV6R9ZVpeoJD4O1
CQctEmxkcFvg90dB8PYXyECzdiInj114fjsL3a6j1Sherw0WRimODDipAhbJgRd/
iYrK1aJ1nFb/N+zGB3u/7bett8M+ddrrwNX1gRM9nBxDLK2p+SX/TGm1QiZiEaHo
LinZKQerThI+GuFNgRcxi7xLufEYZ5cFDvn6iRypuYIHvtvETt6W+C6K2nYkXFv+
Y0UrDVF2sQxN9pv8vB3rD238dVCfKbH1e0BHbrx5rTtyIUaNLaLgWhfa0ktWYpW8
6n/nnLQ/srUiUA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:16:30 2026 by rpki-client