Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
File:                     0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft (raw, json)
Hash identifier:          fM2mj5bKiAjzyKs2M8ao0bzZw8LAXOGezYOcYCHB30g=
Subject key identifier:   F4:9A:6C:3E:0B:71:29:30:F5:1F:C0:53:E3:91:C6:6C:D4:5B:E1:9C
Authority key identifier: D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C
Certificate issuer:       /CN=d26e4538f1ddea77f57396bb93b907f152df697c
Certificate serial:       019F8F7E774EE804D3FB14FB82AD02857343
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
Manifest number:          07AE
Signing time:             Thu 23 Jul 2026 15:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 15:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 15:00:57 +0000
Files and hashes:         1: 0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl (hash: n9AIELng3jc5zVC1gqEFgC7tqBytRc04+FrjbhfaCxo=)
                          2: ChSIg1aH6Sa_zZYL915QNKTUErU.roa (hash: qJ341GmlhFr65YVSbjKJGdZNne3uNTbQkMWmODy8law=)
                          3: _NLIFql8UUtF6G08tYKMp6D5ryE.roa (hash: 2eEokZKG4mibWExmbuDz6Q/LrDTuFm+PXBKGxQPaBHE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:77:4e:e8:04:d3:fb:14:fb:82:ad:02:85:73:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d26e4538f1ddea77f57396bb93b907f152df697c
        Validity
            Not Before: Jul 23 15:00:57 2026 GMT
            Not After : Jul 24 15:00:57 2026 GMT
        Subject: CN=f49a6c3e0b712930f51fc053e391c66cd45be19c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:68:2f:c6:72:ab:8d:53:24:49:3c:ac:63:a0:
                    78:2d:f3:76:34:28:29:92:4b:28:eb:5d:b9:a4:f1:
                    6e:74:f9:c4:3d:34:0f:45:85:7e:89:3f:2c:b0:f3:
                    f5:65:30:85:46:70:60:da:ff:9d:e0:4c:54:b7:60:
                    c2:e5:6f:bf:e1:21:0d:b6:b5:7e:53:a4:f1:e0:a4:
                    46:6d:1f:bd:e0:53:fc:fe:85:54:87:dd:33:cb:0c:
                    61:d6:77:11:11:ba:98:bd:83:f0:21:dd:f7:a0:22:
                    6b:e8:d4:5a:13:47:78:85:ed:e7:59:c5:14:f6:1a:
                    a7:64:09:4c:73:20:5e:81:21:d5:01:4f:d1:af:34:
                    5f:de:3b:5f:35:90:c2:9e:16:58:f9:32:41:07:25:
                    75:5c:c5:4f:f1:da:30:d0:0c:e4:f7:af:1d:81:78:
                    e1:b7:99:d6:65:f0:d0:60:84:f8:eb:ea:05:d6:75:
                    ea:c3:08:e5:c9:f9:0d:2c:84:cc:9e:34:d2:ad:13:
                    2e:ac:76:e6:4a:ea:0e:a8:cc:c1:fa:eb:ca:d3:13:
                    ee:e9:d2:66:e1:cc:ea:d9:1a:17:ad:a4:7c:e4:24:
                    c5:62:d3:75:72:46:51:5f:50:9b:71:03:93:22:ca:
                    69:e0:81:be:6c:f4:ed:5e:9d:13:09:83:f0:b2:5d:
                    21:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:9A:6C:3E:0B:71:29:30:F5:1F:C0:53:E3:91:C6:6C:D4:5B:E1:9C
            X509v3 Authority Key Identifier:
                keyid:D2:6E:45:38:F1:DD:EA:77:F5:73:96:BB:93:B9:07:F1:52:DF:69:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m5FOPHd6nf1c5a7k7kH8VLfaXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/64666e-af1b-4118-823d-5de99a52aa39/1/0m5FOPHd6nf1c5a7k7kH8VLfaXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:33:b5:7a:42:4e:ec:a8:46:de:b6:31:74:e3:18:f0:a5:f3:
         69:87:91:b4:6d:18:90:63:4d:9b:65:96:83:ce:1e:0c:99:92:
         85:75:85:69:9c:ec:69:6f:e7:5e:6f:28:f5:ef:07:fc:3a:d9:
         6a:29:97:9c:03:30:9e:f1:cc:11:b7:dd:d4:3b:4a:c3:18:c5:
         d3:4e:7b:55:0d:09:27:16:0b:b2:f4:0c:07:0b:12:9f:b2:51:
         18:eb:8a:d4:f1:79:30:86:a6:81:b3:a9:df:84:25:0b:4f:26:
         39:c0:51:cd:bd:58:da:0d:ce:0b:6e:be:0c:a8:9e:bd:02:50:
         84:43:4f:44:92:dc:e9:d6:2d:c2:57:21:a1:b9:0c:fa:f6:4b:
         bd:3a:6f:62:c1:6a:1f:8c:cb:00:c7:6e:81:0f:ef:e4:98:db:
         29:02:3e:e4:e0:95:cd:98:1c:5b:f7:aa:4a:65:2d:fa:cd:fd:
         5d:24:a9:74:98:f9:6d:13:a9:dd:41:3e:69:20:42:fb:35:59:
         1e:c9:9a:3b:4e:64:92:b2:50:66:3e:91:55:16:f0:2a:cc:33:
         50:39:8e:e8:29:4b:2e:10:cc:00:ba:1c:e7:0e:6f:bd:c7:75:
         9f:b2:45:3c:d8:a2:95:72:02:86:4d:2e:eb:b5:a8:7c:07:e1:
         51:5d:dc:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfndO6ATT+xT7gq0ChXNDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNmU0NTM4ZjFkZGVhNzdmNTczOTZiYjkzYjkwN2YxNTJk
ZjY5N2MwHhcNMjYwNzIzMTUwMDU3WhcNMjYwNzI0MTUwMDU3WjAzMTEwLwYDVQQD
EyhmNDlhNmMzZTBiNzEyOTMwZjUxZmMwNTNlMzkxYzY2Y2Q0NWJlMTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mgvxnKrjVMkSTysY6B4LfN2NCgp
kkso6125pPFudPnEPTQPRYV+iT8ssPP1ZTCFRnBg2v+d4ExUt2DC5W+/4SENtrV+
U6Tx4KRGbR+94FP8/oVUh90zywxh1ncREbqYvYPwId33oCJr6NRaE0d4he3nWcUU
9hqnZAlMcyBegSHVAU/RrzRf3jtfNZDCnhZY+TJBByV1XMVP8dow0Azk968dgXjh
t5nWZfDQYIT46+oF1nXqwwjlyfkNLITMnjTSrRMurHbmSuoOqMzB+uvK0xPu6dJm
4czq2RoXraR85CTFYtN1ckZRX1CbcQOTIspp4IG+bPTtXp0TCYPwsl0hqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSabD4LcSkw9R/AU+ORxmzUW+GcMB8GA1UdIwQY
MBaAFNJuRTjx3ep39XOWu5O5B/FS32l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2Qt
NWRlOTlhNTJhYTM5LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS82NDY2NmUtYWYxYi00MTE4LTgyM2QtNWRlOTlhNTJhYTM5
LzEvMG01Rk9QSGQ2bmYxYzVhN2s3a0g4VkxmYVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTO1ekJO
7KhG3rYxdOMY8KXzaYeRtG0YkGNNm2WWg84eDJmShXWFaZzsaW/nXm8o9e8H/DrZ
aimXnAMwnvHMEbfd1DtKwxjF0057VQ0JJxYLsvQMBwsSn7JRGOuK1PF5MIamgbOp
34QlC08mOcBRzb1Y2g3OC26+DKievQJQhENPRJLc6dYtwlchobkM+vZLvTpvYsFq
H4zLAMdugQ/v5JjbKQI+5OCVzZgcW/eqSmUt+s39XSSpdJj5bROp3UE+aSBC+zVZ
HsmaO05kkrJQZj6RVRbwKswzUDmO6ClLLhDMALoc5w5vvcd1n7JFPNiilXIChk0u
67WofAfhUV3cLQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:03:38 2026 by rpki-client