Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
File:                     oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft (raw, json)
Hash identifier:          EDKVCnsuCNoByWLXrrRryJYWWpY0Vfx57wFFX3hlNPQ=
Subject key identifier:   88:FB:12:1F:8E:C8:A4:61:03:BE:40:CF:9A:48:01:B7:83:0E:F8:29
Authority key identifier: A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3
Certificate issuer:       /CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
Certificate serial:       019F8FB5892A3923941C22D32D97363FF14B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
Manifest number:          E3
Signing time:             Thu 23 Jul 2026 16:01:06 +0000
Manifest this update:     Thu 23 Jul 2026 16:01:06 +0000
Manifest next update:     Fri 24 Jul 2026 16:01:06 +0000
Files and hashes:         1: aPHgHDs8wZHtsWjj-BGNDzZUqVw.asa (hash: xCblPYPS0g+4wFl3k4nN7Rdc1pcGx5xLzvzdxGTb7kU=)
                          2: oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl (hash: T4UoWTxw5rwnSus4gtU7IVCe4Tl0ex1dFyUthRxDyWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:89:2a:39:23:94:1c:22:d3:2d:97:36:3f:f1:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a01f057eb2e6481c55f3e88f457ed8cda1c8adc3
        Validity
            Not Before: Jul 23 16:01:06 2026 GMT
            Not After : Jul 24 16:01:06 2026 GMT
        Subject: CN=88fb121f8ec8a46103be40cf9a4801b7830ef829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:42:04:32:21:b5:3c:b6:66:69:50:85:85:
                    e8:c0:95:d7:72:20:9d:15:fe:cd:c7:9b:82:9b:c0:
                    0e:de:d8:93:b6:ac:73:e7:7c:0d:27:b6:b7:3f:be:
                    b7:e8:6d:ee:4a:39:a6:34:96:84:0c:e6:16:bd:aa:
                    3f:24:75:4c:3f:9a:02:d8:05:ab:14:5b:f1:c6:e4:
                    d1:db:2a:a9:42:06:6d:2e:c6:1e:0e:4e:f7:dc:68:
                    40:5e:4b:fb:9f:e7:8b:b2:ae:85:c3:81:c9:2c:a4:
                    ce:49:e6:52:82:34:2c:f0:4c:ed:a7:38:22:ad:2a:
                    1a:8a:32:70:a9:06:b9:c9:1e:6f:82:f7:4a:4e:e7:
                    a9:03:37:1d:23:cd:8f:22:f9:3f:2d:11:7e:69:05:
                    f8:32:00:35:e6:f3:0d:00:5d:4b:9c:9e:59:32:db:
                    7d:05:34:d9:41:dc:45:87:f1:61:2a:98:c2:5f:74:
                    fe:56:a4:d5:6a:4b:b6:08:89:6d:35:b0:af:09:89:
                    ed:b2:d9:81:35:b0:07:46:86:97:c0:26:1a:ef:a0:
                    6d:27:60:c1:47:81:43:f1:1d:ca:20:ec:73:ed:dd:
                    42:de:c2:17:b8:fa:e6:7c:9a:b6:67:86:2f:6e:e2:
                    7f:89:71:96:7d:e2:df:38:33:43:6b:58:1f:54:4a:
                    7f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FB:12:1F:8E:C8:A4:61:03:BE:40:CF:9A:48:01:B7:83:0E:F8:29
            X509v3 Authority Key Identifier:
                keyid:A0:1F:05:7E:B2:E6:48:1C:55:F3:E8:8F:45:7E:D8:CD:A1:C8:AD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oB8FfrLmSBxV8-iPRX7YzaHIrcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/d7547d-a423-4f90-b8d9-ddebb055925a/1/oB8FfrLmSBxV8-iPRX7YzaHIrcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:a6:17:3f:6e:91:a0:ea:bf:4a:08:3e:c2:ba:f9:94:5b:76:
         09:3b:59:cf:4b:a8:fc:ec:3b:57:2e:92:60:d1:e1:dc:54:ea:
         89:e9:c9:68:a8:c3:68:d5:71:f4:9f:08:3a:02:b3:35:79:30:
         67:eb:2d:bf:6c:fe:b1:26:d9:1a:a9:40:c8:a3:17:66:0a:ba:
         62:15:14:91:2a:80:af:60:fc:78:a5:01:95:1c:2c:2e:70:01:
         c8:68:44:b8:ef:d4:b9:a7:f9:87:48:18:08:0d:82:3f:70:15:
         ba:c0:40:39:46:4f:43:f3:ba:9f:6c:40:73:7c:4b:3c:49:f7:
         d1:d3:c4:be:a3:b9:92:f9:4b:a0:e4:03:c9:05:41:e7:6d:d7:
         28:11:6e:72:19:76:07:9b:75:14:d4:50:d5:d6:44:e9:17:7c:
         14:b4:f5:2f:95:bf:1a:98:e8:2b:f0:0d:21:80:39:79:39:eb:
         e1:b5:d9:ab:b7:45:b9:03:a4:b6:5d:e3:f1:fc:50:19:2c:31:
         12:81:ca:d4:70:2d:d4:a1:76:f3:da:1f:53:43:c1:8c:07:bf:
         0f:19:5e:b7:e9:a6:5a:41:92:7b:4c:86:2d:eb:ad:c1:69:97:
         78:5b:ab:86:ac:c1:0d:1d:2d:8c:d4:0a:fc:10:e1:e1:5a:31:
         0d:cd:8f:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtYkqOSOUHCLTLZc2P/FLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwMWYwNTdlYjJlNjQ4MWM1NWYzZTg4ZjQ1N2VkOGNkYTFj
OGFkYzMwHhcNMjYwNzIzMTYwMTA2WhcNMjYwNzI0MTYwMTA2WjAzMTEwLwYDVQQD
Eyg4OGZiMTIxZjhlYzhhNDYxMDNiZTQwY2Y5YTQ4MDFiNzgzMGVmODI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibhCBDIhtTy2ZmlQhYXowJXXciCd
Ff7Nx5uCm8AO3tiTtqxz53wNJ7a3P7636G3uSjmmNJaEDOYWvao/JHVMP5oC2AWr
FFvxxuTR2yqpQgZtLsYeDk733GhAXkv7n+eLsq6Fw4HJLKTOSeZSgjQs8Eztpzgi
rSoaijJwqQa5yR5vgvdKTuepAzcdI82PIvk/LRF+aQX4MgA15vMNAF1LnJ5ZMtt9
BTTZQdxFh/FhKpjCX3T+VqTVaku2CIltNbCvCYntstmBNbAHRoaXwCYa76BtJ2DB
R4FD8R3KIOxz7d1C3sIXuPrmfJq2Z4YvbuJ/iXGWfeLfODNDa1gfVEp/lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIj7Eh+OyKRhA75Az5pIAbeDDvgpMB8GA1UdIwQY
MBaAFKAfBX6y5kgcVfPoj0V+2M2hyK3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0I4RmZyTG1TQnhWOC1pUFJYN1l6YUhJcmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9kNzU0N2QtYTQyMy00ZjkwLWI4ZDkt
ZGRlYmIwNTU5MjVhLzEvb0I4RmZyTG1TQnhWOC1pUFJYN1l6YUhJcmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9kNzU0N2QtYTQyMy00ZjkwLWI4ZDktZGRlYmIwNTU5MjVh
LzEvb0I4RmZyTG1TQnhWOC1pUFJYN1l6YUhJcmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaYXP26R
oOq/Sgg+wrr5lFt2CTtZz0uo/Ow7Vy6SYNHh3FTqienJaKjDaNVx9J8IOgKzNXkw
Z+stv2z+sSbZGqlAyKMXZgq6YhUUkSqAr2D8eKUBlRwsLnAByGhEuO/Uuaf5h0gY
CA2CP3AVusBAOUZPQ/O6n2xAc3xLPEn30dPEvqO5kvlLoOQDyQVB523XKBFuchl2
B5t1FNRQ1dZE6Rd8FLT1L5W/GpjoK/ANIYA5eTnr4bXZq7dFuQOktl3j8fxQGSwx
EoHK1HAt1KF289ofU0PBjAe/Dxlet+mmWkGSe0yGLeutwWmXeFurhqzBDR0tjNQK
/BDh4VoxDc2PAg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:09:37 2026 by rpki-client