Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
File:                     rrC3d_U3e7HFBlOISwPifc3ugo4.mft (raw, json)
Hash identifier:          SY0g9pGFUneY5uMOLjIBvh+rv3/5I7Ertfoe10sqDwY=
Subject key identifier:   D7:B7:31:B8:E9:BE:37:E1:FA:A0:98:80:7A:94:1B:FC:AA:8E:95:72
Authority key identifier: AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E
Certificate issuer:       /CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
Certificate serial:       019F90FEEFC2C2A711EF62F761E2D4A22CC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
Manifest number:          092A
Signing time:             Thu 23 Jul 2026 22:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:54 +0000
Files and hashes:         1: Nytw89CcyDRmKPPk4sKcPeBej7k.roa (hash: /jX42tEK2pmI+UdQCYDIPEu34ud01Vw41VxxvhWNQ5Q=)
                          2: TEcoleUmbWQj5i2gknCSKR9Cd0E.roa (hash: 3NdzNvymYr9jRWoDUYOh9npss+lpEBY+eYb2MluLWK0=)
                          3: rrC3d_U3e7HFBlOISwPifc3ugo4.crl (hash: 7YmM875OqW76wWThkIRu4/qOWKlP6ACmGKjQbPJ92Aw=)
                          4: tRjIbRYyE4lE3XylGc6ElRdu_bI.roa (hash: +1aCVbuS6QCs5ldp4V3vvlDvjiEglf2CJrOgFXepcvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:ef:c2:c2:a7:11:ef:62:f7:61:e2:d4:a2:2c:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aeb0b777f5377bb1c50653884b03e27dcdee828e
        Validity
            Not Before: Jul 23 22:00:54 2026 GMT
            Not After : Jul 24 22:00:54 2026 GMT
        Subject: CN=d7b731b8e9be37e1faa098807a941bfcaa8e9572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ae:ba:ac:f1:e8:ad:4c:03:5c:46:aa:69:b0:
                    7a:cf:d7:32:ab:e0:48:7a:84:93:ea:be:0b:d9:04:
                    96:af:00:fc:bb:09:ca:f2:b1:aa:2e:f4:7c:5f:73:
                    ae:5f:b8:fe:93:ba:06:2e:ad:04:14:7e:4f:ae:1c:
                    2e:b0:80:70:6c:e1:10:b8:66:ad:96:0b:24:f2:e6:
                    8d:d6:76:06:c6:cf:3f:a2:b4:30:49:63:b7:7c:85:
                    11:60:e8:67:72:77:bd:7e:3c:cd:48:de:6f:95:c2:
                    74:d1:8d:64:08:a6:e8:55:e9:d6:57:bd:ba:30:f8:
                    04:33:f9:40:ca:c7:77:05:94:5f:a9:21:0b:b4:2f:
                    31:c6:b2:e3:03:39:c2:59:e1:8b:e9:1b:d2:f3:6e:
                    5d:77:79:5d:de:2b:02:9a:a9:a0:71:a9:d0:17:80:
                    3d:9e:ce:c8:ef:24:b6:a8:da:c8:f3:93:2b:bd:a1:
                    92:ab:5a:c9:6b:01:99:53:e6:10:44:49:53:8d:f6:
                    f2:30:9f:db:d4:d8:04:98:08:ef:38:b8:10:08:3f:
                    e1:15:d3:26:4b:8b:c0:69:d2:ca:62:14:b1:93:9e:
                    6b:80:67:03:78:62:d5:12:e9:9e:71:45:11:ce:dd:
                    c6:21:92:19:c2:38:09:f6:44:a6:7a:f1:65:f5:49:
                    4c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B7:31:B8:E9:BE:37:E1:FA:A0:98:80:7A:94:1B:FC:AA:8E:95:72
            X509v3 Authority Key Identifier:
                keyid:AE:B0:B7:77:F5:37:7B:B1:C5:06:53:88:4B:03:E2:7D:CD:EE:82:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrC3d_U3e7HFBlOISwPifc3ugo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/22df61-b609-4986-99e3-926c4a326e08/1/rrC3d_U3e7HFBlOISwPifc3ugo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:32:46:e9:80:ef:38:15:2b:bd:63:d7:14:7d:eb:c0:b5:da:
         44:9e:30:b5:97:5d:c0:f8:6e:41:0f:a0:b3:33:f1:03:e4:26:
         04:1f:7c:56:c4:cc:b7:91:49:e6:39:8f:54:3f:af:7d:c4:be:
         00:cb:a3:ee:9e:54:c1:7a:80:08:6d:2a:5b:45:bf:00:f0:49:
         76:45:03:ae:9f:55:db:f4:fb:fa:79:68:04:8d:ae:ee:98:37:
         fe:12:9d:a4:1b:24:ad:13:e6:9c:7f:ef:73:38:94:11:fc:c4:
         e8:93:6c:66:c8:d2:62:a8:7d:bc:cc:23:07:58:44:79:f4:b7:
         00:25:30:09:ff:53:5c:55:44:16:83:d8:b2:46:be:b2:3d:7b:
         9c:34:ae:f9:80:16:8c:6a:77:ca:85:91:af:90:14:d6:bc:14:
         aa:c5:8e:ba:f3:8e:1d:1d:49:92:55:d3:00:5b:7b:bd:b2:7d:
         ea:5a:5b:37:86:5a:6c:63:ee:26:59:b3:90:f2:7e:fd:a2:17:
         4b:e9:57:1d:f1:87:5c:95:e3:b0:9b:4e:c9:51:87:1c:26:38:
         40:98:88:f9:a0:23:88:2e:95:a4:54:72:19:ce:8f:35:8f:86:
         1a:d6:a7:e8:7e:54:c1:e6:38:f6:a2:8c:89:bb:66:f2:63:5b:
         5f:04:b5:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/u/CwqcR72L3YeLUoizBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlYjBiNzc3ZjUzNzdiYjFjNTA2NTM4ODRiMDNlMjdkY2Rl
ZTgyOGUwHhcNMjYwNzIzMjIwMDU0WhcNMjYwNzI0MjIwMDU0WjAzMTEwLwYDVQQD
EyhkN2I3MzFiOGU5YmUzN2UxZmFhMDk4ODA3YTk0MWJmY2FhOGU5NTcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna66rPHorUwDXEaqabB6z9cyq+BI
eoST6r4L2QSWrwD8uwnK8rGqLvR8X3OuX7j+k7oGLq0EFH5PrhwusIBwbOEQuGat
lgsk8uaN1nYGxs8/orQwSWO3fIURYOhncne9fjzNSN5vlcJ00Y1kCKboVenWV726
MPgEM/lAysd3BZRfqSELtC8xxrLjAznCWeGL6RvS825dd3ld3isCmqmgcanQF4A9
ns7I7yS2qNrI85MrvaGSq1rJawGZU+YQRElTjfbyMJ/b1NgEmAjvOLgQCD/hFdMm
S4vAadLKYhSxk55rgGcDeGLVEumecUURzt3GIZIZwjgJ9kSmevFl9UlMkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNe3Mbjpvjfh+qCYgHqUG/yqjpVyMB8GA1UdIwQY
MBaAFK6wt3f1N3uxxQZTiEsD4n3N7oKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMt
OTI2YzRhMzI2ZTA4LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi8yMmRmNjEtYjYwOS00OTg2LTk5ZTMtOTI2YzRhMzI2ZTA4
LzEvcnJDM2RfVTNlN0hGQmxPSVN3UGlmYzN1Z280LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgjJG6YDv
OBUrvWPXFH3rwLXaRJ4wtZddwPhuQQ+gszPxA+QmBB98VsTMt5FJ5jmPVD+vfcS+
AMuj7p5UwXqACG0qW0W/APBJdkUDrp9V2/T7+nloBI2u7pg3/hKdpBskrRPmnH/v
cziUEfzE6JNsZsjSYqh9vMwjB1hEefS3ACUwCf9TXFVEFoPYska+sj17nDSu+YAW
jGp3yoWRr5AU1rwUqsWOuvOOHR1JklXTAFt7vbJ96lpbN4ZabGPuJlmzkPJ+/aIX
S+lXHfGHXJXjsJtOyVGHHCY4QJiI+aAjiC6VpFRyGc6PNY+GGtan6H5UweY49qKM
ibtm8mNbXwS1EA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:38 2026 by rpki-client