Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
File:                     y0ANSAMtEp2UvQjtJxepofTPL0s.mft (raw, json)
Hash identifier:          ME/ej29CSEZqzmb8AdimIB/UL09kqPfrtZee1A8KkVg=
Subject key identifier:   E1:7B:A2:00:7F:1A:21:CF:2A:2C:50:34:0B:12:CC:82:31:B9:04:D6
Authority key identifier: CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B
Certificate issuer:       /CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
Certificate serial:       019F927F1720049AA45BEBB60928C6D2CFF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
Manifest number:          0929
Signing time:             Fri 24 Jul 2026 05:00:30 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:30 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:30 +0000
Files and hashes:         1: 1-LKZq6XNPJkWbyIzGez7MxFQ8jE.roa (hash: Y5nTzS0daALZPNuteXZIXM9RcMdrGEprlXo2RcFxCsA=)
                          2: y0ANSAMtEp2UvQjtJxepofTPL0s.crl (hash: lFWfuGvGuKKryXKjR7hq7Vf8CuEutB77xr5zbURmd6s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 05:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:17:20:04:9a:a4:5b:eb:b6:09:28:c6:d2:cf:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb400d48032d129d94bd08ed2717a9a1f4cf2f4b
        Validity
            Not Before: Jul 24 05:00:30 2026 GMT
            Not After : Jul 25 05:00:30 2026 GMT
        Subject: CN=e17ba2007f1a21cf2a2c50340b12cc8231b904d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:79:d5:dc:8f:cb:3e:58:e6:9d:bc:fb:43:
                    aa:79:ea:77:f9:22:0d:ab:2b:58:a9:be:12:b9:ce:
                    34:b8:5b:2c:a7:0a:bd:06:75:c3:14:f6:dd:4b:9a:
                    c7:67:05:92:55:f5:77:b2:c2:bf:de:89:bb:ad:90:
                    6c:fa:de:8f:e3:fc:4c:5e:3d:3c:53:ca:fe:0e:94:
                    f9:46:a2:33:7a:cd:20:ce:33:ec:d5:28:6d:ed:4b:
                    13:ff:be:ca:2e:4b:e6:13:8a:9b:e7:8d:8f:63:fc:
                    4c:81:8d:9a:a6:a0:ae:eb:a0:59:06:7a:62:cb:28:
                    c9:ba:57:fd:7d:5e:ad:ef:04:ae:3e:6d:b2:6f:c4:
                    45:ab:3a:36:a4:25:cc:73:e4:e8:bf:d1:0e:f4:98:
                    be:c9:87:42:9f:04:b1:27:17:14:ba:f5:35:fa:95:
                    fd:4f:55:7f:ee:c8:fc:aa:66:e0:57:63:07:d5:4b:
                    ea:0a:06:6d:de:21:68:77:65:a9:91:ae:7b:c7:51:
                    2d:59:81:6f:48:53:2a:66:1c:b5:33:8b:36:f9:5e:
                    1e:56:f7:32:be:e9:59:c2:fc:58:4c:24:80:45:79:
                    e8:ec:26:7b:53:d6:3e:01:e9:03:93:f8:0b:3d:41:
                    dd:89:ef:64:f9:d7:32:18:9c:9b:57:ba:fa:0a:85:
                    e3:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7B:A2:00:7F:1A:21:CF:2A:2C:50:34:0B:12:CC:82:31:B9:04:D6
            X509v3 Authority Key Identifier:
                keyid:CB:40:0D:48:03:2D:12:9D:94:BD:08:ED:27:17:A9:A1:F4:CF:2F:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0ANSAMtEp2UvQjtJxepofTPL0s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/3ed361-1310-490d-9335-72cb6bae4a3d/1/y0ANSAMtEp2UvQjtJxepofTPL0s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:c1:c6:f3:f7:31:aa:09:ee:3c:2e:65:40:64:4a:cb:30:47:
         82:7b:9a:68:e0:33:3a:23:5c:63:31:99:0f:6d:39:bb:f0:ab:
         43:39:a1:1c:2b:e4:a8:9f:bd:52:ce:93:a0:fd:78:9d:07:73:
         7f:da:04:0a:41:6b:10:ff:d3:7f:e6:1c:45:32:84:84:46:fd:
         8b:db:47:ff:e5:eb:80:12:ad:9c:81:fa:e4:d9:23:f7:3a:ac:
         c7:88:0b:8a:5c:6a:23:53:f6:6a:05:c2:ba:d0:2f:e3:15:4f:
         a2:1b:be:f2:d3:75:86:b2:a4:b5:8e:04:41:82:fa:31:76:bc:
         24:54:e4:2f:9f:5c:74:f1:63:07:d6:ca:d9:bb:52:e9:da:36:
         6c:fe:ea:95:99:f5:14:06:51:1a:b6:20:62:bf:41:66:0c:a3:
         be:d6:ea:93:ed:e7:c8:1e:d3:d1:ce:e6:f3:81:c6:4e:01:d1:
         34:4c:7c:db:ec:98:f4:87:96:ba:33:5c:76:9a:9c:48:56:07:
         de:3a:5f:d7:bb:da:3c:21:de:3d:d7:f6:b0:fa:21:c6:8f:d1:
         cc:5f:a8:df:53:88:f6:c5:fa:41:b3:c2:bf:64:18:0b:f4:c6:
         60:6c:41:7e:53:b7:ca:8d:cd:5a:7c:d3:26:42:a1:6a:14:fc:
         50:ca:05:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfxcgBJqkW+u2CSjG0s/5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiNDAwZDQ4MDMyZDEyOWQ5NGJkMDhlZDI3MTdhOWExZjRj
ZjJmNGIwHhcNMjYwNzI0MDUwMDMwWhcNMjYwNzI1MDUwMDMwWjAzMTEwLwYDVQQD
EyhlMTdiYTIwMDdmMWEyMWNmMmEyYzUwMzQwYjEyY2M4MjMxYjkwNGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8951dyPyz5Y5p28+0Oqeep3+SIN
qytYqb4Suc40uFsspwq9BnXDFPbdS5rHZwWSVfV3ssK/3om7rZBs+t6P4/xMXj08
U8r+DpT5RqIzes0gzjPs1Sht7UsT/77KLkvmE4qb542PY/xMgY2apqCu66BZBnpi
yyjJulf9fV6t7wSuPm2yb8RFqzo2pCXMc+Tov9EO9Ji+yYdCnwSxJxcUuvU1+pX9
T1V/7sj8qmbgV2MH1UvqCgZt3iFod2Wpka57x1EtWYFvSFMqZhy1M4s2+V4eVvcy
vulZwvxYTCSARXno7CZ7U9Y+AekDk/gLPUHdie9k+dcyGJybV7r6CoXjHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF7ogB/GiHPKixQNAsSzIIxuQTWMB8GA1UdIwQY
MBaAFMtADUgDLRKdlL0I7ScXqaH0zy9LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUt
NzJjYjZiYWU0YTNkLzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS8zZWQzNjEtMTMxMC00OTBkLTkzMzUtNzJjYjZiYWU0YTNk
LzEveTBBTlNBTXRFcDJVdlFqdEp4ZXBvZlRQTDBzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcHG8/cx
qgnuPC5lQGRKyzBHgnuaaOAzOiNcYzGZD205u/CrQzmhHCvkqJ+9Us6ToP14nQdz
f9oECkFrEP/Tf+YcRTKEhEb9i9tH/+XrgBKtnIH65Nkj9zqsx4gLilxqI1P2agXC
utAv4xVPohu+8tN1hrKktY4EQYL6MXa8JFTkL59cdPFjB9bK2btS6do2bP7qlZn1
FAZRGrYgYr9BZgyjvtbqk+3nyB7T0c7m84HGTgHRNEx82+yY9IeWujNcdpqcSFYH
3jpf17vaPCHePdf2sPohxo/RzF+o31OI9sX6QbPCv2QYC/TGYGxBflO3yo3NWnzT
JkKhahT8UMoFUA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:04 2026 by rpki-client