Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
File:                     80HP7DgTH4OuPfaZj6AoN1hckd0.mft (raw, json)
Hash identifier:          4B/YQKRa7wsXj2KFwMaL4GJ7Jyp7e0GC9fnButHIREc=
Subject key identifier:   F2:B7:B1:73:37:CA:80:9C:5D:F4:53:D0:60:BA:2E:C7:FD:00:1F:18
Authority key identifier: F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD
Certificate issuer:       /CN=f341cfec38131f83ae3df6998fa02837585c91dd
Certificate serial:       019F9090B0643F2B5FFEC5B149CB7C5CEDE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
Manifest number:          195D
Signing time:             Thu 23 Jul 2026 20:00:29 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:29 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:29 +0000
Files and hashes:         1: 80HP7DgTH4OuPfaZj6AoN1hckd0.crl (hash: 7UF/HaAiqwjZy935XH0eppTjRtn07g0jBpyvdPzgJeQ=)
                          2: SUQY6UofiVh29UboveKG3iabRZA.roa (hash: 834PzvKRE6PhNfTtl5/jpZUTuO/AUBInt9sgqC8VSzk=)
                          3: wb43Z4LRKwKhz3shf_5mcq-Z2tk.roa (hash: J9HbR6z5Wstz4xYDk+cnL5LY3I2EndV03a589X/+Gws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:b0:64:3f:2b:5f:fe:c5:b1:49:cb:7c:5c:ed:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f341cfec38131f83ae3df6998fa02837585c91dd
        Validity
            Not Before: Jul 23 20:00:29 2026 GMT
            Not After : Jul 24 20:00:29 2026 GMT
        Subject: CN=f2b7b17337ca809c5df453d060ba2ec7fd001f18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a9:49:a4:0f:fb:25:ab:34:d2:65:e8:26:06:
                    57:93:8f:02:eb:2a:a1:b3:b2:12:c4:42:f8:9d:0b:
                    fe:fc:b4:24:6c:49:ec:79:18:70:61:9f:17:26:10:
                    6d:f7:f6:51:a3:72:8e:22:51:cb:0f:26:65:f0:a7:
                    af:4a:96:7e:75:f3:dc:46:65:f3:25:38:2e:17:7a:
                    20:20:0c:b2:51:d6:5a:2e:ad:1a:eb:f7:b4:76:ad:
                    5a:2d:82:9c:7b:3d:2a:62:1f:c6:ae:ad:40:44:a2:
                    ea:03:f4:e6:39:e7:2d:1d:94:d7:08:82:41:c5:12:
                    6b:7a:f2:a3:fc:56:3f:cb:7d:f8:3b:69:42:ce:a2:
                    5c:40:fc:40:ca:d8:18:2c:19:65:09:a8:ec:36:5b:
                    2b:9d:5e:86:5c:c7:1a:2e:5e:05:95:88:c0:e0:28:
                    50:57:6a:ff:cc:ad:90:60:a6:db:55:7e:8d:22:b8:
                    a4:dd:d5:22:e6:7b:7f:8b:f2:f7:74:9c:90:33:6e:
                    93:f0:03:9f:cc:8f:00:69:52:63:72:7f:2b:02:65:
                    5d:67:ad:0b:32:f3:df:8b:4f:6a:71:4f:19:48:e6:
                    36:19:4d:8c:de:bf:72:48:6b:c4:ac:3e:0c:4a:a9:
                    de:27:21:65:b3:34:f8:c2:4f:d3:07:36:18:3c:08:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:B7:B1:73:37:CA:80:9C:5D:F4:53:D0:60:BA:2E:C7:FD:00:1F:18
            X509v3 Authority Key Identifier:
                keyid:F3:41:CF:EC:38:13:1F:83:AE:3D:F6:99:8F:A0:28:37:58:5C:91:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/80HP7DgTH4OuPfaZj6AoN1hckd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/22f851-77ee-4d64-a95e-09afb7d6fb16/1/80HP7DgTH4OuPfaZj6AoN1hckd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:1f:87:1c:4a:e7:fa:e6:43:41:81:e1:99:c2:44:73:4f:1d:
         76:ba:c1:04:ef:b8:41:6b:d7:02:30:b4:91:a6:52:5a:12:32:
         be:2d:a4:59:6f:dc:38:eb:70:ac:6d:51:d5:5e:4c:bc:a2:a0:
         46:d3:c7:71:4b:20:4e:70:e4:2c:bd:1c:2c:4c:9c:bc:fe:6e:
         80:05:33:6c:ae:80:10:10:02:0c:04:06:29:ab:3d:86:f5:f8:
         2f:36:65:af:d1:ad:33:60:42:32:46:a5:3c:78:94:cb:47:5b:
         91:d3:04:71:89:6e:4d:46:3c:7e:b1:09:f3:6e:a7:dd:47:01:
         1b:31:cc:bb:8c:11:85:59:54:a5:9f:a4:eb:d0:eb:80:11:f9:
         72:db:ed:5f:44:2a:ac:e2:5e:d7:4e:78:75:9b:b7:62:db:97:
         50:45:50:37:ec:c1:8b:83:80:06:c5:b9:de:c1:f7:3d:da:3b:
         60:5a:c8:37:02:7a:41:4e:d2:b1:2a:55:62:c5:ce:f0:b9:36:
         22:39:b1:63:9e:42:75:2a:48:4f:95:65:62:e3:57:b5:e5:ab:
         69:47:9e:82:d0:73:83:81:10:19:f3:a3:81:6f:20:0b:b4:8d:
         13:82:2d:e4:0a:c2:7f:75:53:13:25:49:00:34:69:0b:0f:43:
         d5:80:c8:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkLBkPytf/sWxSct8XO3jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNDFjZmVjMzgxMzFmODNhZTNkZjY5OThmYTAyODM3NTg1
YzkxZGQwHhcNMjYwNzIzMjAwMDI5WhcNMjYwNzI0MjAwMDI5WjAzMTEwLwYDVQQD
EyhmMmI3YjE3MzM3Y2E4MDljNWRmNDUzZDA2MGJhMmVjN2ZkMDAxZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtalJpA/7Jas00mXoJgZXk48C6yqh
s7ISxEL4nQv+/LQkbEnseRhwYZ8XJhBt9/ZRo3KOIlHLDyZl8KevSpZ+dfPcRmXz
JTguF3ogIAyyUdZaLq0a6/e0dq1aLYKcez0qYh/Grq1ARKLqA/TmOectHZTXCIJB
xRJrevKj/FY/y334O2lCzqJcQPxAytgYLBllCajsNlsrnV6GXMcaLl4FlYjA4ChQ
V2r/zK2QYKbbVX6NIrik3dUi5nt/i/L3dJyQM26T8AOfzI8AaVJjcn8rAmVdZ60L
MvPfi09qcU8ZSOY2GU2M3r9ySGvErD4MSqneJyFlszT4wk/TBzYYPAglhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK3sXM3yoCcXfRT0GC6Lsf9AB8YMB8GA1UdIwQY
MBaAFPNBz+w4Ex+Drj32mY+gKDdYXJHdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUt
MDlhZmI3ZDZmYjE2LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi8yMmY4NTEtNzdlZS00ZDY0LWE5NWUtMDlhZmI3ZDZmYjE2
LzEvODBIUDdEZ1RINE91UGZhWmo2QW9OMWhja2QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPR+HHErn
+uZDQYHhmcJEc08ddrrBBO+4QWvXAjC0kaZSWhIyvi2kWW/cOOtwrG1R1V5MvKKg
RtPHcUsgTnDkLL0cLEycvP5ugAUzbK6AEBACDAQGKas9hvX4LzZlr9GtM2BCMkal
PHiUy0dbkdMEcYluTUY8frEJ826n3UcBGzHMu4wRhVlUpZ+k69DrgBH5ctvtX0Qq
rOJe1054dZu3YtuXUEVQN+zBi4OABsW53sH3Pdo7YFrINwJ6QU7SsSpVYsXO8Lk2
IjmxY55CdSpIT5VlYuNXteWraUeegtBzg4EQGfOjgW8gC7SNE4It5ArCf3VTEyVJ
ADRpCw9D1YDIHQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:41 2026 by rpki-client