Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
File:                     SvrK0nmIVvDwZaJloQlwaUGsqOo.mft (raw, json)
Hash identifier:          aLWGvb7oOjC7JJKnCIvqWl5l36h72iZT2rKbWgOy/UE=
Subject key identifier:   D1:52:92:12:3B:99:6E:E7:AA:2D:5B:A4:F8:48:98:20:8F:65:BB:17
Authority key identifier: 4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA
Certificate issuer:       /CN=4afacad2798856f0f065a265a109706941aca8ea
Certificate serial:       019F94A4B6CD3750258F089E26D69F3665F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
Manifest number:          1561
Signing time:             Fri 24 Jul 2026 15:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:50 +0000
Files and hashes:         1: D0z_b7e-rsQh7ZbCT6eQYmgthJ0.roa (hash: XLv+C72GwzVUJmQsJo6uNUU5zA5BClnc8om305/wq6I=)
                          2: SvrK0nmIVvDwZaJloQlwaUGsqOo.crl (hash: EYvZXwTOjo2PJUGFKdnTBYg109/bhgqXvGDx5Gx55Zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 15:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:b6:cd:37:50:25:8f:08:9e:26:d6:9f:36:65:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4afacad2798856f0f065a265a109706941aca8ea
        Validity
            Not Before: Jul 24 15:00:50 2026 GMT
            Not After : Jul 25 15:00:50 2026 GMT
        Subject: CN=d15292123b996ee7aa2d5ba4f84898208f65bb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:89:f5:06:5f:3c:02:72:f9:37:32:3b:b1:ed:
                    27:2f:1a:cc:55:74:70:68:72:01:5a:44:9c:5e:df:
                    37:8a:ae:72:49:ec:c4:39:91:ab:6d:aa:b4:67:7d:
                    8d:af:5f:c0:b1:aa:3e:d1:99:fa:97:3f:4e:82:26:
                    b3:61:32:30:7a:e0:19:ad:7c:50:51:86:95:b2:5c:
                    de:87:d4:27:75:42:03:dd:5f:3b:d4:ae:a9:cb:95:
                    fb:26:1c:ac:4d:5d:de:73:e6:cc:5e:87:0d:d5:cf:
                    8c:d7:03:80:a2:95:7b:9a:c4:b7:21:b9:17:a8:bc:
                    d6:09:5a:4a:64:aa:dc:0b:7a:58:c5:5a:86:9c:8e:
                    f5:6c:61:53:33:af:a0:a3:b0:f5:af:b0:ec:39:16:
                    41:09:57:c6:26:99:7e:5a:4a:0d:58:4f:50:54:f5:
                    2d:fd:eb:49:ce:28:0d:68:fc:93:38:b9:47:d9:25:
                    0f:63:61:42:31:0c:2f:5d:8e:79:79:69:b0:1a:33:
                    7b:d1:bd:59:25:31:ac:9b:cb:d6:29:8b:f6:89:f1:
                    34:81:fa:d7:0d:e7:5c:b0:09:8a:ed:2c:6c:82:4c:
                    6d:43:5b:ca:19:a7:de:45:13:8f:c9:b5:7b:74:b2:
                    6e:91:be:13:7c:18:04:4a:92:62:59:d7:5f:42:11:
                    3e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:52:92:12:3B:99:6E:E7:AA:2D:5B:A4:F8:48:98:20:8F:65:BB:17
            X509v3 Authority Key Identifier:
                keyid:4A:FA:CA:D2:79:88:56:F0:F0:65:A2:65:A1:09:70:69:41:AC:A8:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SvrK0nmIVvDwZaJloQlwaUGsqOo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/e82d2a-4041-4811-87a5-783469269b35/1/SvrK0nmIVvDwZaJloQlwaUGsqOo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:40:86:44:30:27:c9:d8:06:44:1a:b0:a4:db:33:30:11:95:
         d7:ab:ba:ca:08:ef:25:6b:8b:c0:9e:3a:4f:d0:6e:89:59:1a:
         9a:00:d5:db:d3:66:e2:31:8d:85:ce:02:2d:cd:21:45:69:ea:
         f5:f3:1a:bd:c3:1d:33:82:98:4f:21:5f:8a:e9:c8:4e:5b:5d:
         99:de:74:bc:ec:3d:3f:b0:82:e1:01:b7:00:c5:38:1e:f8:97:
         7e:fb:ac:1e:76:71:49:b0:b8:fb:eb:e4:41:40:fc:5f:38:83:
         33:95:53:5d:8b:fd:3e:a7:dc:ff:8d:db:12:bc:2f:4c:e4:43:
         1d:1b:62:c3:89:55:8c:a7:80:3f:48:5d:4a:0f:b7:31:f3:d5:
         84:3c:6e:e1:8e:e6:c2:4a:7f:40:46:6c:e0:2b:3d:5b:19:77:
         b0:7f:d9:28:2c:7b:75:61:1c:27:26:2d:58:de:a0:24:f0:3c:
         7d:0f:f6:64:c3:71:6d:0c:f5:09:c0:0a:55:15:21:0a:8f:31:
         9a:ee:70:82:4d:c7:1e:96:78:c7:3c:46:f7:5e:98:73:e7:ef:
         57:4a:8a:3e:78:bc:cc:d8:49:42:00:88:52:94:36:c6:99:ed:
         62:39:98:cb:62:ee:89:6e:51:0e:87:b0:53:e8:93:05:b9:14:
         1a:a8:b9:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UpLbNN1AljwieJtafNmXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmFjYWQyNzk4ODU2ZjBmMDY1YTI2NWExMDk3MDY5NDFh
Y2E4ZWEwHhcNMjYwNzI0MTUwMDUwWhcNMjYwNzI1MTUwMDUwWjAzMTEwLwYDVQQD
EyhkMTUyOTIxMjNiOTk2ZWU3YWEyZDViYTRmODQ4OTgyMDhmNjViYjE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA54n1Bl88AnL5NzI7se0nLxrMVXRw
aHIBWkScXt83iq5ySezEOZGrbaq0Z32Nr1/Asao+0Zn6lz9OgiazYTIweuAZrXxQ
UYaVslzeh9QndUID3V871K6py5X7JhysTV3ec+bMXocN1c+M1wOAopV7msS3IbkX
qLzWCVpKZKrcC3pYxVqGnI71bGFTM6+go7D1r7DsORZBCVfGJpl+WkoNWE9QVPUt
/etJzigNaPyTOLlH2SUPY2FCMQwvXY55eWmwGjN70b1ZJTGsm8vWKYv2ifE0gfrX
DedcsAmK7SxsgkxtQ1vKGafeRROPybV7dLJukb4TfBgESpJiWddfQhE+2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNFSkhI7mW7nqi1bpPhImCCPZbsXMB8GA1UdIwQY
MBaAFEr6ytJ5iFbw8GWiZaEJcGlBrKjqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUt
NzgzNDY5MjY5YjM1LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS9lODJkMmEtNDA0MS00ODExLTg3YTUtNzgzNDY5MjY5YjM1
LzEvU3ZySzBubUlWdkR3WmFKbG9RbHdhVUdzcU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0CGRDAn
ydgGRBqwpNszMBGV16u6ygjvJWuLwJ46T9BuiVkamgDV29Nm4jGNhc4CLc0hRWnq
9fMavcMdM4KYTyFfiunITltdmd50vOw9P7CC4QG3AMU4HviXfvusHnZxSbC4++vk
QUD8XziDM5VTXYv9Pqfc/43bErwvTORDHRtiw4lVjKeAP0hdSg+3MfPVhDxu4Y7m
wkp/QEZs4Cs9Wxl3sH/ZKCx7dWEcJyYtWN6gJPA8fQ/2ZMNxbQz1CcAKVRUhCo8x
mu5wgk3HHpZ4xzxG916Yc+fvV0qKPni8zNhJQgCIUpQ2xpntYjmYy2LuiW5RDoew
U+iTBbkUGqi5wA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:12:03 2026 by rpki-client