Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File:                     bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier:          N2m+ubkc7FPPkmjMmhJMwxUb7EZdPZMp5bVt2kLXIAc=
Subject key identifier:   37:9F:3C:F8:9B:C8:3D:E4:3E:F3:06:A5:3A:1A:9F:50:56:AB:8E:D7
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer:       /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial:       019F935BE79D8A91833A4EB9353080D365D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number:          0E48
Signing time:             Fri 24 Jul 2026 09:01:41 +0000
Manifest this update:     Fri 24 Jul 2026 09:01:41 +0000
Manifest next update:     Sat 25 Jul 2026 09:01:41 +0000
Files and hashes:         1: XUohtGZb3yVqVDccn7q7JYHvZfA.roa (hash: S4jZTcNJ/zA2EHs+0ZhX1cbm9+U3Kq3hAPlU7YdHNF0=)
                          2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: +G6mlkmeUeWazUtLRS0+h3PiDZoj7azZvr34nkJpsPU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:e7:9d:8a:91:83:3a:4e:b9:35:30:80:d3:65:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
        Validity
            Not Before: Jul 24 09:01:41 2026 GMT
            Not After : Jul 25 09:01:41 2026 GMT
        Subject: CN=379f3cf89bc83de43ef306a53a1a9f5056ab8ed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:14:f0:cb:c2:6f:59:00:c0:26:95:3c:a9:00:
                    a2:f7:ec:22:81:3a:77:1d:df:93:99:f4:1b:0d:d5:
                    4e:45:b4:00:60:db:f2:96:51:db:8c:cd:7d:d0:1f:
                    8c:a9:73:51:a1:ab:2e:a6:42:fc:2e:ee:6d:a4:a3:
                    b6:c7:b5:9c:4a:0a:8b:7e:16:b7:af:36:3a:05:b0:
                    15:72:e5:ab:65:02:44:4b:01:90:c6:8c:d9:37:12:
                    f5:55:70:fd:e0:0a:0d:03:a3:55:cd:11:54:4f:3f:
                    32:45:eb:93:56:35:8c:c5:77:76:9c:24:d8:00:42:
                    6e:e0:53:9e:9b:4b:3e:2b:72:a6:68:eb:5d:79:a5:
                    78:6a:d4:98:b0:d2:8b:4a:68:b5:3a:9e:ed:24:93:
                    7e:9f:30:81:c1:92:9a:28:a3:6c:98:ab:08:39:ea:
                    41:91:d2:ca:ef:14:e8:a2:6a:bc:2e:fe:d1:bb:51:
                    99:68:17:a7:b9:5d:4e:e4:73:af:25:73:9b:f9:80:
                    02:ec:f4:e8:c1:49:0e:5d:d6:60:8e:18:aa:46:fc:
                    c1:b6:ae:b2:c6:7b:8b:33:05:e7:bb:df:7d:f2:63:
                    64:c7:45:70:77:d2:95:48:24:2c:40:fb:0f:9a:4f:
                    fb:1b:20:82:4d:07:b9:cf:a4:93:0f:a5:62:af:b2:
                    0c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:9F:3C:F8:9B:C8:3D:E4:3E:F3:06:A5:3A:1A:9F:50:56:AB:8E:D7
            X509v3 Authority Key Identifier:
                keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:28:20:6f:1c:7f:36:06:a9:f0:88:53:35:b5:1a:c9:63:98:
         e6:43:0b:61:1e:e8:aa:4e:a9:39:c0:cc:40:24:42:83:b6:d9:
         60:e3:5e:61:9d:1e:92:97:a1:43:6a:d4:ff:6a:a0:12:32:95:
         4d:01:46:ab:06:58:17:12:18:34:7f:11:76:59:d8:dc:26:40:
         61:5c:82:34:f2:83:cc:91:ab:00:b0:11:cd:37:c8:ca:92:60:
         dc:58:c5:f5:63:74:76:77:ba:c3:5e:2d:38:19:70:06:59:2e:
         f8:7e:43:87:c5:60:a0:bc:c5:4b:a6:a4:90:0d:4b:16:3c:ed:
         20:32:d7:82:e4:8c:ef:62:fc:58:ba:89:f4:fe:0b:f1:1c:ef:
         6e:fe:32:5f:f5:b5:bb:18:89:2b:93:40:94:c0:e3:6e:0a:34:
         19:e6:1e:ca:06:d1:17:98:5f:c0:46:36:93:c0:49:2a:9f:72:
         2a:83:af:e0:b3:eb:df:80:75:93:ef:16:b2:b1:7c:d6:03:47:
         31:c7:6d:60:f5:7a:1e:4c:ae:46:a7:b5:fe:6d:26:78:42:44:
         14:bb:cb:cf:9e:cc:2e:41:12:ac:f3:ec:c7:e2:ce:5a:4a:03:
         5e:1a:69:25:99:77:5d:a2:2c:e2:ce:ef:da:92:80:83:e3:50:
         dc:64:2b:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TW+edipGDOk65NTCA02XWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMmQ1NzQwOTJiYTkzOWEyZmZmNzFhYTFmOGU4ZWQ5NjE1
MzBiMzAwHhcNMjYwNzI0MDkwMTQxWhcNMjYwNzI1MDkwMTQxWjAzMTEwLwYDVQQD
EygzNzlmM2NmODliYzgzZGU0M2VmMzA2YTUzYTFhOWY1MDU2YWI4ZWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+RTwy8JvWQDAJpU8qQCi9+wigTp3
Hd+TmfQbDdVORbQAYNvyllHbjM190B+MqXNRoasupkL8Lu5tpKO2x7WcSgqLfha3
rzY6BbAVcuWrZQJESwGQxozZNxL1VXD94AoNA6NVzRFUTz8yReuTVjWMxXd2nCTY
AEJu4FOem0s+K3KmaOtdeaV4atSYsNKLSmi1Op7tJJN+nzCBwZKaKKNsmKsIOepB
kdLK7xToomq8Lv7Ru1GZaBenuV1O5HOvJXOb+YAC7PTowUkOXdZgjhiqRvzBtq6y
xnuLMwXnu9998mNkx0Vwd9KVSCQsQPsPmk/7GyCCTQe5z6STD6Vir7IMfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDefPPibyD3kPvMGpToan1BWq47XMB8GA1UdIwQY
MBaAFG0tV0CSupOaL/9xqh+OjtlhUwswMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2Mt
ZGJhZDFmNGE0MTIzLzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS81OTdjYzMtMzYxMS00NjI4LWJkN2MtZGJhZDFmNGE0MTIz
LzEvYlMxWFFKSzZrNW92XzNHcUg0Nk8yV0ZUQ3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSggbxx/
Ngap8IhTNbUayWOY5kMLYR7oqk6pOcDMQCRCg7bZYONeYZ0ekpehQ2rU/2qgEjKV
TQFGqwZYFxIYNH8RdlnY3CZAYVyCNPKDzJGrALARzTfIypJg3FjF9WN0dne6w14t
OBlwBlku+H5Dh8VgoLzFS6akkA1LFjztIDLXguSM72L8WLqJ9P4L8Rzvbv4yX/W1
uxiJK5NAlMDjbgo0GeYeygbRF5hfwEY2k8BJKp9yKoOv4LPr34B1k+8WsrF81gNH
McdtYPV6HkyuRqe1/m0meEJEFLvLz57MLkESrPPsx+LOWkoDXhppJZl3XaIs4s7v
2pKAg+NQ3GQrVw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:37 2026 by rpki-client