Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File:                     rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier:          aTzpn7FHAokX8uZf9R7KCEg33fWjOaKcbvbvF+kmuBg=
Subject key identifier:   16:D4:29:15:4C:F7:E8:4F:9A:14:D0:7B:00:CB:19:67:21:B3:D7:92
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer:       /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial:       019F8FECB3ED7C8825D9D3822B150F5A3E77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number:          0B11
Signing time:             Thu 23 Jul 2026 17:01:22 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:22 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:22 +0000
Files and hashes:         1: 0r_UE69prseODZzygBvCxia-3X0.roa (hash: gkr4fLf/h/n+t25YUpdj0dN1J2aUCJ0sU9K4sKPOSZA=)
                          2: 1-0EnCQalliPsgsGf-YDpvuy83p8.roa (hash: vws009aZ/tbgou4EVRv/DzWL1VNSHfQsljchCi2mVcU=)
                          3: M7mbbyIR5xkz5lkLD1tR-mOMDZE.roa (hash: GSKHfVVOdL2e+McXNKGIgDnG7vQB68vSPuon+3b3vBw=)
                          4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: XP+pc1cHUEiTlohAi6pIf1+SKscHhf7o41M9xUYs87Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:b3:ed:7c:88:25:d9:d3:82:2b:15:0f:5a:3e:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
        Validity
            Not Before: Jul 23 17:01:22 2026 GMT
            Not After : Jul 24 17:01:22 2026 GMT
        Subject: CN=16d429154cf7e84f9a14d07b00cb196721b3d792
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bb:d2:c2:bb:8e:7a:05:d4:18:16:4b:f0:07:
                    76:5f:b9:75:2e:12:58:05:32:86:c4:e0:89:dc:ad:
                    6a:9b:f0:88:d3:ae:c5:26:8c:43:cf:43:ac:f8:36:
                    e6:4d:25:3c:16:87:73:ca:65:fb:c8:ef:c4:57:73:
                    b1:3b:a2:ea:6c:9b:6d:11:64:6d:17:40:3b:7b:d5:
                    35:a5:c6:52:d6:f2:f9:54:61:44:01:4f:1d:5a:71:
                    62:8b:bd:fd:ca:0d:b6:68:89:81:77:1a:22:3d:77:
                    32:43:3c:90:fc:a6:4b:d1:5f:76:63:bf:a3:6e:a2:
                    96:af:e1:3a:42:f0:ad:26:ff:ee:b2:d8:5c:c3:65:
                    66:fe:b4:d0:fd:a3:aa:3e:9f:ae:46:db:12:ef:ff:
                    7a:ef:a3:e4:00:eb:4a:33:24:89:de:68:8a:97:77:
                    c9:e2:f1:42:8d:99:28:68:da:c7:4b:c2:2a:c6:dd:
                    b9:ca:7f:d5:d1:c2:29:fa:62:9c:8b:15:fa:c0:c2:
                    2a:80:dd:89:21:93:28:16:99:72:d5:c9:a0:df:25:
                    58:53:20:1a:17:14:68:6e:5e:22:22:cd:3f:d2:d4:
                    46:b2:32:d3:25:45:09:e3:79:9e:2c:fc:f9:a7:27:
                    df:53:8f:79:8e:fd:21:a8:e9:dd:8c:2b:89:28:7a:
                    38:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D4:29:15:4C:F7:E8:4F:9A:14:D0:7B:00:CB:19:67:21:B3:D7:92
            X509v3 Authority Key Identifier:
                keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:4d:7c:fe:3e:85:dc:e1:14:cc:e3:5e:77:4f:eb:34:6a:33:
         60:d8:34:fc:8c:90:bd:4d:52:9d:bf:8c:81:12:08:3e:f7:c7:
         fd:b7:5f:34:19:76:51:c4:d8:cd:d0:76:ac:60:b6:f0:6a:cf:
         33:d2:e1:e2:f8:8b:a7:64:33:3e:a4:fa:59:09:bc:09:f5:49:
         82:81:e1:9c:7a:92:c6:83:ce:b7:54:fa:65:e5:1f:74:a7:e0:
         91:f9:57:4e:47:81:4b:cc:17:f1:2e:4e:c1:79:e6:01:52:dc:
         12:af:6d:2d:d4:a5:a2:d8:f0:7f:86:f7:2a:ef:4d:83:b3:1a:
         aa:ea:af:46:6f:f9:7b:6a:57:10:cc:62:fe:f0:28:97:bc:00:
         83:d0:44:2c:48:ef:bc:40:63:8c:62:93:d5:1f:2b:70:49:da:
         c5:68:37:ef:fb:4a:76:28:a5:a8:cd:91:93:e6:6b:a7:c2:3d:
         69:b1:b7:a7:60:72:5b:74:31:c4:f6:49:91:05:d7:a6:6e:16:
         8d:c1:74:b6:bf:61:8e:fb:87:4e:e8:47:89:d5:e0:34:de:82:
         29:bc:5d:c9:7d:5a:74:c3:4e:f5:49:c9:ea:13:e5:98:62:33:
         45:43:04:64:33:c4:0c:64:05:7a:d8:ce:2a:66:48:a4:1c:46:
         ae:f1:41:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7LPtfIgl2dOCKxUPWj53MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5
NDlhMGQwHhcNMjYwNzIzMTcwMTIyWhcNMjYwNzI0MTcwMTIyWjAzMTEwLwYDVQQD
EygxNmQ0MjkxNTRjZjdlODRmOWExNGQwN2IwMGNiMTk2NzIxYjNkNzkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbvSwruOegXUGBZL8Ad2X7l1LhJY
BTKGxOCJ3K1qm/CI067FJoxDz0Os+DbmTSU8FodzymX7yO/EV3OxO6LqbJttEWRt
F0A7e9U1pcZS1vL5VGFEAU8dWnFii739yg22aImBdxoiPXcyQzyQ/KZL0V92Y7+j
bqKWr+E6QvCtJv/usthcw2Vm/rTQ/aOqPp+uRtsS7/9676PkAOtKMySJ3miKl3fJ
4vFCjZkoaNrHS8Iqxt25yn/V0cIp+mKcixX6wMIqgN2JIZMoFply1cmg3yVYUyAa
FxRobl4iIs0/0tRGsjLTJUUJ43meLPz5pyffU495jv0hqOndjCuJKHo4YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbUKRVM9+hPmhTQewDLGWchs9eSMB8GA1UdIwQY
MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt
OWM4YmJhNjY0ZmYwLzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTItOWM4YmJhNjY0ZmYw
LzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf018/j6F
3OEUzONed0/rNGozYNg0/IyQvU1Snb+MgRIIPvfH/bdfNBl2UcTYzdB2rGC28GrP
M9Lh4viLp2QzPqT6WQm8CfVJgoHhnHqSxoPOt1T6ZeUfdKfgkflXTkeBS8wX8S5O
wXnmAVLcEq9tLdSlotjwf4b3Ku9Ng7MaquqvRm/5e2pXEMxi/vAol7wAg9BELEjv
vEBjjGKT1R8rcEnaxWg37/tKdiilqM2Rk+Zrp8I9abG3p2ByW3QxxPZJkQXXpm4W
jcF0tr9hjvuHTuhHidXgNN6CKbxdyX1adMNO9UnJ6hPlmGIzRUMEZDPEDGQFetjO
KmZIpBxGrvFBzw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:46:26 2026 by rpki-client