Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
File:                     0mKOBpte2LRVk0O1tn9atPkiUf4.mft (raw, json)
Hash identifier:          +xe+9zcUPqYR+8mv4RhJGHxp/N7JzBgDFhK4Rws4yCs=
Subject key identifier:   3C:8B:B1:43:4F:77:3B:88:6A:79:81:46:3D:D6:5C:42:1B:61:EC:06
Authority key identifier: D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE
Certificate issuer:       /CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
Certificate serial:       019F9135DE407934486AE1AB7C9E81ABD0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
Manifest number:          0512
Signing time:             Thu 23 Jul 2026 23:00:54 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:54 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:54 +0000
Files and hashes:         1: 0mKOBpte2LRVk0O1tn9atPkiUf4.crl (hash: RtKS7jBCRuS8FskWPYbvYX9TD2TjTerMleSGZPf/D3I=)
                          2: eypU5gakI37ZRxsTjD1X4DoOVfo.roa (hash: hM1K52QM5/jrbLf53wcNduMHGRDz/fwXSTlOlM9cG8U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:de:40:79:34:48:6a:e1:ab:7c:9e:81:ab:d0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2628e069b5ed8b4559343b5b67f5ab4f92251fe
        Validity
            Not Before: Jul 23 23:00:54 2026 GMT
            Not After : Jul 24 23:00:54 2026 GMT
        Subject: CN=3c8bb1434f773b886a7981463dd65c421b61ec06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:d7:3e:39:21:21:e4:cc:3b:fc:23:d2:d3:
                    88:92:7e:1f:5f:1e:19:1d:16:12:0a:a2:45:8b:db:
                    62:17:16:e4:a5:fc:ed:bc:8b:00:4d:53:4e:be:b9:
                    b5:3a:31:1d:6a:71:55:bc:d5:9e:e0:c5:60:68:99:
                    1f:a2:33:a6:bd:2f:7a:d7:7e:03:1b:a0:6d:d1:c0:
                    23:00:3c:67:ed:fd:f9:bc:0f:d7:63:69:a1:7a:ac:
                    cb:33:f2:f9:a8:68:b9:9c:c7:05:72:03:73:98:db:
                    0e:17:fa:41:49:01:cf:ff:5a:e9:cf:aa:ab:cb:9b:
                    8e:2d:68:31:4f:ef:c9:b7:e8:9a:d8:c6:27:a5:62:
                    7d:ed:eb:59:f9:2d:7c:e7:77:c5:9c:86:0f:4d:45:
                    a3:cd:d1:68:ba:15:a8:01:d5:35:e9:ee:39:ca:86:
                    88:7b:dd:da:73:f9:23:50:77:30:e5:59:4c:fd:36:
                    a1:57:29:b9:84:5e:d2:fd:ca:e8:24:a7:b1:e7:f8:
                    a7:8b:8c:3d:82:48:81:e8:2d:4c:b2:49:00:ef:15:
                    f4:ca:5c:1f:67:dd:2f:c8:e3:11:55:20:a4:07:e3:
                    34:97:ef:d3:51:09:67:f6:d0:7a:57:ce:da:5c:f9:
                    02:a4:98:ca:68:37:3a:9e:48:80:54:e4:41:95:c4:
                    02:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:8B:B1:43:4F:77:3B:88:6A:79:81:46:3D:D6:5C:42:1B:61:EC:06
            X509v3 Authority Key Identifier:
                keyid:D2:62:8E:06:9B:5E:D8:B4:55:93:43:B5:B6:7F:5A:B4:F9:22:51:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mKOBpte2LRVk0O1tn9atPkiUf4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/1eb97a-83bd-4448-b09e-af64a57ac8d2/1/0mKOBpte2LRVk0O1tn9atPkiUf4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:24:3f:d2:30:a0:95:c6:5c:20:1e:c2:47:fc:db:43:1f:94:
         ba:84:a2:0d:73:1f:8f:80:ce:56:1e:01:cb:4d:3b:08:a6:3e:
         00:f7:88:9c:cd:88:b8:75:32:0c:0f:66:d1:2b:09:b3:7f:43:
         7a:6c:b1:5b:b3:0f:75:48:a8:d3:26:31:51:44:1d:0c:2e:4b:
         85:66:84:83:d6:46:11:de:88:25:a9:ef:3d:7e:f1:27:3a:1a:
         cd:16:c5:19:bc:f1:8b:8a:2d:7e:07:d0:69:c2:48:d1:01:76:
         d4:a8:2c:a7:26:74:12:13:53:1d:0c:3c:a0:d8:3a:18:91:3b:
         69:19:cf:07:4a:ef:12:32:ea:d3:98:a8:ab:20:4c:b4:d6:5e:
         3e:10:3b:63:59:f7:66:98:84:84:12:0b:8e:eb:58:fb:2c:b5:
         59:7d:2f:e4:9e:0f:5c:90:27:72:42:fb:81:0a:58:12:b0:61:
         82:6a:9f:a5:a5:75:9c:e5:2a:30:32:77:d5:fb:cc:6e:36:99:
         04:38:71:e9:ce:91:b6:b3:a1:69:0e:ec:77:2c:f2:0d:5a:c5:
         ef:ac:4a:c5:b6:19:c0:da:61:5b:f2:1e:6f:e8:1a:6a:38:de:
         c7:da:3e:84:bf:47:52:f0:dc:9c:20:95:94:ba:67:26:a6:11:
         6d:53:bb:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNd5AeTRIauGrfJ6Bq9DSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjI4ZTA2OWI1ZWQ4YjQ1NTkzNDNiNWI2N2Y1YWI0Zjky
MjUxZmUwHhcNMjYwNzIzMjMwMDU0WhcNMjYwNzI0MjMwMDU0WjAzMTEwLwYDVQQD
EygzYzhiYjE0MzRmNzczYjg4NmE3OTgxNDYzZGQ2NWM0MjFiNjFlYzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC7XPjkhIeTMO/wj0tOIkn4fXx4Z
HRYSCqJFi9tiFxbkpfztvIsATVNOvrm1OjEdanFVvNWe4MVgaJkfojOmvS96134D
G6Bt0cAjADxn7f35vA/XY2mheqzLM/L5qGi5nMcFcgNzmNsOF/pBSQHP/1rpz6qr
y5uOLWgxT+/Jt+ia2MYnpWJ97etZ+S1853fFnIYPTUWjzdFouhWoAdU16e45yoaI
e93ac/kjUHcw5VlM/TahVym5hF7S/croJKex5/ini4w9gkiB6C1MskkA7xX0ylwf
Z90vyOMRVSCkB+M0l+/TUQln9tB6V87aXPkCpJjKaDc6nkiAVORBlcQCgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDyLsUNPdzuIanmBRj3WXEIbYewGMB8GA1UdIwQY
MBaAFNJijgabXti0VZNDtbZ/WrT5IlH+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUt
YWY2NGE1N2FjOGQyLzEvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8xZWI5N2EtODNiZC00NDQ4LWIwOWUtYWY2NGE1N2FjOGQy
LzEvMG1LT0JwdGUyTFJWazBPMXRuOWF0UGtpVWY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSQ/0jCg
lcZcIB7CR/zbQx+UuoSiDXMfj4DOVh4By007CKY+APeInM2IuHUyDA9m0SsJs39D
emyxW7MPdUio0yYxUUQdDC5LhWaEg9ZGEd6IJanvPX7xJzoazRbFGbzxi4otfgfQ
acJI0QF21KgspyZ0EhNTHQw8oNg6GJE7aRnPB0rvEjLq05ioqyBMtNZePhA7Y1n3
ZpiEhBILjutY+yy1WX0v5J4PXJAnckL7gQpYErBhgmqfpaV1nOUqMDJ31fvMbjaZ
BDhx6c6RtrOhaQ7sdyzyDVrF76xKxbYZwNphW/Ieb+gaajjex9o+hL9HUvDcnCCV
lLpnJqYRbVO73Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:51 2026 by rpki-client