Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
File:                     K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft (raw, json)
Hash identifier:          mbzOdbENdr+kzHjI2xC/+8VCDYTQsTqmRZ9kjmXmvs0=
Subject key identifier:   82:CB:4B:E4:2C:E0:2D:96:60:30:8E:CB:F2:8A:AF:E4:04:ED:3B:1E
Authority key identifier: 2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3
Certificate issuer:       /CN=2bf7ef33dd19690d94941c92fb31479550a917b3
Certificate serial:       019F8ED93217532EF8CB514FBC569A15DBC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
Manifest number:          0773
Signing time:             Thu 23 Jul 2026 12:00:26 +0000
Manifest this update:     Thu 23 Jul 2026 12:00:26 +0000
Manifest next update:     Fri 24 Jul 2026 12:00:26 +0000
Files and hashes:         1: Fz37EzbKmOLuj47DZyVy-jxm8-Q.roa (hash: A6w0ljzejsJu2FbOvEwlydaqHScmNkC+q2dwLDsAXsw=)
                          2: K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl (hash: /WQgTjjnMW+EIYvVKz2+2vwGIynBT2Chz77AmY128tw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 12:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:d9:32:17:53:2e:f8:cb:51:4f:bc:56:9a:15:db:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bf7ef33dd19690d94941c92fb31479550a917b3
        Validity
            Not Before: Jul 23 12:00:26 2026 GMT
            Not After : Jul 24 12:00:26 2026 GMT
        Subject: CN=82cb4be42ce02d9660308ecbf28aafe404ed3b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7b:71:82:4c:8d:ff:c3:45:70:9a:bb:c3:c1:
                    e1:fd:68:46:17:23:94:a4:89:77:b5:99:ce:e5:78:
                    c9:ed:2d:6c:a4:8f:b0:fd:ac:48:5a:ff:55:28:ba:
                    c8:22:a0:2e:05:34:c1:f0:95:7e:22:ca:ce:a1:de:
                    8b:18:9c:36:38:7c:c5:c1:65:9b:39:ed:24:9f:59:
                    95:eb:a5:16:e6:ef:ed:18:05:f4:ff:e0:2b:1d:1b:
                    8e:9b:f6:c6:de:c8:40:61:4b:73:3e:5f:56:0c:04:
                    23:d8:71:72:3d:fa:29:c4:ea:ba:99:2c:62:e3:99:
                    d5:8c:ac:f5:68:4c:77:0e:bd:ec:fe:5f:1c:2f:f3:
                    11:c5:14:0e:fa:60:f5:25:04:94:c1:d3:1e:7d:32:
                    a6:38:32:f3:0f:54:59:2c:f9:90:cc:f8:af:70:3c:
                    02:03:f0:60:20:3d:6e:f3:c8:38:60:d0:9b:1d:58:
                    0b:ba:ca:f0:53:86:ca:3a:d9:74:60:37:03:9a:b1:
                    90:b8:98:89:85:a7:89:ff:e7:24:4d:bf:48:a4:24:
                    1c:c9:c9:20:6c:a6:49:91:cc:87:7a:a3:2b:62:2d:
                    68:c9:7c:1c:4f:f3:f7:97:7b:9d:4d:6d:b0:4e:7f:
                    7c:14:80:3a:03:d0:dc:d7:8a:89:c7:f8:88:d4:51:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:CB:4B:E4:2C:E0:2D:96:60:30:8E:CB:F2:8A:AF:E4:04:ED:3B:1E
            X509v3 Authority Key Identifier:
                keyid:2B:F7:EF:33:DD:19:69:0D:94:94:1C:92:FB:31:47:95:50:A9:17:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K_fvM90ZaQ2UlByS-zFHlVCpF7M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/7c86af-f2e4-40ce-a300-17b94ac58375/1/K_fvM90ZaQ2UlByS-zFHlVCpF7M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:98:c4:78:93:a0:65:b3:3d:2e:e5:89:0d:cd:dd:a8:ac:3b:
         d4:6a:6b:af:ea:e1:88:f6:fe:6b:07:ec:95:fc:1e:56:a5:b6:
         e4:ea:5f:a5:53:8f:42:7d:97:e1:1b:e4:f7:50:92:eb:b1:84:
         17:db:46:10:cf:20:b3:24:98:e2:2e:e2:f6:77:91:86:84:7a:
         fb:a4:02:ee:2a:9d:00:79:cf:be:9c:43:b1:df:86:b4:bc:aa:
         9f:e2:7d:ee:53:02:be:18:fe:23:58:dc:f6:19:46:d2:60:8a:
         31:5b:6b:b9:e4:51:c5:2f:59:e2:f7:da:c0:ce:ec:bd:42:1a:
         cd:6d:68:fe:93:09:db:91:cb:f0:c8:fc:37:4f:a8:c7:19:68:
         af:d7:21:e7:84:d3:49:cc:07:73:32:fe:8f:30:fb:e6:e5:fb:
         a3:76:b9:cc:af:ca:b2:cd:29:4b:0d:7a:da:eb:8e:25:1c:f0:
         7d:2b:3d:b5:c2:18:eb:8a:db:ba:15:88:10:9f:6b:73:fe:41:
         24:a6:aa:e5:0e:be:2e:6e:6e:97:93:49:e2:8c:8f:96:96:e8:
         45:11:fd:52:eb:28:1b:ba:4d:00:f6:63:95:e0:e2:5b:0a:d6:
         9d:de:96:b5:99:1f:b4:a6:39:87:29:ae:55:80:a3:37:3d:2f:
         77:aa:d4:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+O2TIXUy74y1FPvFaaFdvDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiZjdlZjMzZGQxOTY5MGQ5NDk0MWM5MmZiMzE0Nzk1NTBh
OTE3YjMwHhcNMjYwNzIzMTIwMDI2WhcNMjYwNzI0MTIwMDI2WjAzMTEwLwYDVQQD
Eyg4MmNiNGJlNDJjZTAyZDk2NjAzMDhlY2JmMjhhYWZlNDA0ZWQzYjFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3txgkyN/8NFcJq7w8Hh/WhGFyOU
pIl3tZnO5XjJ7S1spI+w/axIWv9VKLrIIqAuBTTB8JV+IsrOod6LGJw2OHzFwWWb
Oe0kn1mV66UW5u/tGAX0/+ArHRuOm/bG3shAYUtzPl9WDAQj2HFyPfopxOq6mSxi
45nVjKz1aEx3Dr3s/l8cL/MRxRQO+mD1JQSUwdMefTKmODLzD1RZLPmQzPivcDwC
A/BgID1u88g4YNCbHVgLusrwU4bKOtl0YDcDmrGQuJiJhaeJ/+ckTb9IpCQcyckg
bKZJkcyHeqMrYi1oyXwcT/P3l3udTW2wTn98FIA6A9Dc14qJx/iI1FGhiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFILLS+Qs4C2WYDCOy/KKr+QE7TseMB8GA1UdIwQY
MBaAFCv37zPdGWkNlJQckvsxR5VQqRezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAt
MTdiOTRhYzU4Mzc1LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83Yzg2YWYtZjJlNC00MGNlLWEzMDAtMTdiOTRhYzU4Mzc1
LzEvS19mdk05MFphUTJVbEJ5Uy16RkhsVkNwRjdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipjEeJOg
ZbM9LuWJDc3dqKw71Gprr+rhiPb+awfslfweVqW25OpfpVOPQn2X4Rvk91CS67GE
F9tGEM8gsySY4i7i9neRhoR6+6QC7iqdAHnPvpxDsd+GtLyqn+J97lMCvhj+I1jc
9hlG0mCKMVtrueRRxS9Z4vfawM7svUIazW1o/pMJ25HL8Mj8N0+oxxlor9ch54TT
ScwHczL+jzD75uX7o3a5zK/Kss0pSw162uuOJRzwfSs9tcIY64rbuhWIEJ9rc/5B
JKaq5Q6+Lm5ul5NJ4oyPlpboRRH9UusoG7pNAPZjleDiWwrWnd6WtZkftKY5hymu
VYCjNz0vd6rU+Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:26:32 2026 by rpki-client