Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
File:                     r22p1WtCwrgWsa5rGFElq_IVk-8.mft (raw, json)
Hash identifier:          ZIfz1CS9CSFJA9n/rJCwj8PpKan61q5ZArAPDSxP5bA=
Subject key identifier:   F0:6C:12:65:32:8D:41:6B:2A:DB:9C:FF:4F:A2:51:F4:E6:43:95:51
Authority key identifier: AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF
Certificate issuer:       /CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
Certificate serial:       019F91356BF5B8FB5425BE24FE4B92055944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
Manifest number:          047D
Signing time:             Thu 23 Jul 2026 23:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:25 +0000
Files and hashes:         1: 3vsJC6fNuGN4-OcDnwBO6CepBDE.roa (hash: wGJI9xj8xX1LfIyL9p4tn79/tsV9eiEKpUNCD9TJPfk=)
                          2: F2aeFjJsEe0Ev-pYnuxbm8GUj-s.roa (hash: //RGqq5vbdwe1kcXBXm0ImZrQGGNEM4aNxYmS22uVKk=)
                          3: Ml1bL44N6RRHfCMhiwaHxYoFYqE.roa (hash: mv51AxdRu44rhiit2eu9uxAPSqaXVemKhG4H6GIdqJU=)
                          4: QZX4N0nFVU70Vj9ggeWrbayajWQ.roa (hash: fTLW/j3hk4V2QwQlXrG/uL9IIw5WAjCaWcGJ+gp3yXU=)
                          5: VoMhQ5y_uxLsu5nfRtG8bOviLlw.roa (hash: fnlgaHZDH37hg0Ckb563HOlkmEqGNqOIf1PdxlJVeTo=)
                          6: r22p1WtCwrgWsa5rGFElq_IVk-8.crl (hash: SWLHNjotTO69O0ujcPUYhHHX9NrduEKdZP/wx4/3fhA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:6b:f5:b8:fb:54:25:be:24:fe:4b:92:05:59:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af6da9d56b42c2b816b1ae6b185125abf21593ef
        Validity
            Not Before: Jul 23 23:00:25 2026 GMT
            Not After : Jul 24 23:00:25 2026 GMT
        Subject: CN=f06c1265328d416b2adb9cff4fa251f4e6439551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:17:c1:94:24:49:e2:5c:f5:26:30:ff:c6:9f:
                    b9:38:85:a1:d0:24:12:c9:af:ef:b0:9f:4c:fe:86:
                    d0:82:93:70:52:78:5f:f0:ca:e2:28:88:7c:a4:0d:
                    2b:14:a9:15:a3:e6:6a:8e:a4:3c:c4:76:37:1a:8e:
                    f3:e8:c1:f9:7d:3a:a1:2e:c5:95:e9:40:44:73:6e:
                    62:82:7b:5f:df:22:be:17:89:b9:c9:a9:aa:46:08:
                    d6:e2:a9:32:c7:c6:a3:5a:c1:15:79:bc:8e:a6:f4:
                    1b:e9:f1:52:5a:96:c0:33:f5:92:9a:eb:57:e2:ae:
                    95:48:a2:de:00:1a:74:ea:80:dc:cf:95:b0:52:0e:
                    45:d6:71:87:7d:c5:12:7f:cb:4d:25:98:4a:47:92:
                    10:9d:b5:64:1e:f8:52:59:9e:fd:d6:cf:8d:91:2d:
                    ff:fe:f5:4b:0e:75:a4:0b:26:9c:b6:ef:57:35:05:
                    23:1f:c4:28:ec:ff:96:73:79:3e:3d:d2:87:bd:c3:
                    50:3c:8c:c7:45:9a:03:c2:6d:b5:30:85:e0:df:dd:
                    65:f8:23:50:f6:f7:0f:4e:a9:74:32:b0:01:54:39:
                    85:fc:20:b8:be:72:0f:6a:e2:9c:a9:23:0d:3b:bc:
                    4c:59:e9:29:a2:86:dc:ea:e0:38:e4:0c:2a:04:f3:
                    6c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:6C:12:65:32:8D:41:6B:2A:DB:9C:FF:4F:A2:51:F4:E6:43:95:51
            X509v3 Authority Key Identifier:
                keyid:AF:6D:A9:D5:6B:42:C2:B8:16:B1:AE:6B:18:51:25:AB:F2:15:93:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r22p1WtCwrgWsa5rGFElq_IVk-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/897378-c556-4352-9a04-b10a832bca43/1/r22p1WtCwrgWsa5rGFElq_IVk-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7c:ab:ed:08:93:06:54:8b:d4:c8:38:6f:6b:b5:3a:49:a9:
         96:cf:65:8b:9f:c0:8e:43:ba:09:b4:03:13:96:2d:96:a5:a9:
         59:01:3d:35:92:bc:ed:ee:01:1f:1d:a9:50:65:8d:97:b8:00:
         9d:15:0b:8c:bd:3b:db:a5:0c:87:e7:d9:c3:da:06:41:a9:0e:
         75:4b:d7:59:10:6f:bf:6c:f6:11:90:87:e2:a7:2a:00:21:ae:
         99:23:65:db:3d:47:6d:8b:4f:5e:9d:f9:d3:43:9e:b9:45:54:
         10:8d:96:b3:1f:cd:3d:d8:19:ee:2d:6d:0d:92:aa:a5:f8:26:
         23:0f:0a:66:79:d5:24:12:99:7b:82:88:0a:a5:c3:29:66:f0:
         24:c8:70:98:14:1e:9c:9f:49:7a:ba:71:69:f5:fd:1c:0f:58:
         c3:44:71:c8:07:c3:f1:93:aa:fb:21:68:96:7d:7d:5e:86:f2:
         d0:46:05:ea:cb:ed:5e:79:cc:5f:cb:6e:05:22:18:e1:27:5e:
         c8:43:a7:53:c0:0a:c8:79:3f:fa:f0:64:80:4c:9b:5d:7a:62:
         77:47:9b:f5:ee:b7:63:83:80:ee:aa:37:bf:92:12:a1:d4:18:
         48:5e:02:94:75:2f:35:18:09:8a:61:ee:9b:3c:44:78:63:95:
         60:29:18:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNWv1uPtUJb4k/kuSBVlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNmRhOWQ1NmI0MmMyYjgxNmIxYWU2YjE4NTEyNWFiZjIx
NTkzZWYwHhcNMjYwNzIzMjMwMDI1WhcNMjYwNzI0MjMwMDI1WjAzMTEwLwYDVQQD
EyhmMDZjMTI2NTMyOGQ0MTZiMmFkYjljZmY0ZmEyNTFmNGU2NDM5NTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxfBlCRJ4lz1JjD/xp+5OIWh0CQS
ya/vsJ9M/obQgpNwUnhf8MriKIh8pA0rFKkVo+ZqjqQ8xHY3Go7z6MH5fTqhLsWV
6UBEc25igntf3yK+F4m5yamqRgjW4qkyx8ajWsEVebyOpvQb6fFSWpbAM/WSmutX
4q6VSKLeABp06oDcz5WwUg5F1nGHfcUSf8tNJZhKR5IQnbVkHvhSWZ791s+NkS3/
/vVLDnWkCyactu9XNQUjH8Qo7P+Wc3k+PdKHvcNQPIzHRZoDwm21MIXg391l+CNQ
9vcPTql0MrABVDmF/CC4vnIPauKcqSMNO7xMWekpoobc6uA45AwqBPNsOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPBsEmUyjUFrKtuc/0+iUfTmQ5VRMB8GA1UdIwQY
MBaAFK9tqdVrQsK4FrGuaxhRJavyFZPvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQt
YjEwYTgzMmJjYTQzLzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84OTczNzgtYzU1Ni00MzUyLTlhMDQtYjEwYTgzMmJjYTQz
LzEvcjIycDFXdEN3cmdXc2E1ckdGRWxxX0lWay04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXyr7QiT
BlSL1Mg4b2u1Okmpls9li5/AjkO6CbQDE5YtlqWpWQE9NZK87e4BHx2pUGWNl7gA
nRULjL0726UMh+fZw9oGQakOdUvXWRBvv2z2EZCH4qcqACGumSNl2z1HbYtPXp35
00OeuUVUEI2Wsx/NPdgZ7i1tDZKqpfgmIw8KZnnVJBKZe4KICqXDKWbwJMhwmBQe
nJ9JerpxafX9HA9Yw0RxyAfD8ZOq+yFoln19Xoby0EYF6svtXnnMX8tuBSIY4Sde
yEOnU8AKyHk/+vBkgEybXXpid0eb9e63Y4OA7qo3v5ISodQYSF4ClHUvNRgJimHu
mzxEeGOVYCkYWQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:53:20 2026 by rpki-client