Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
File:                     1m33WZ4kO0YoZBJqjCQQeKLisEU.mft (raw, json)
Hash identifier:          i+vSb0f9/IGeh3gE7VqX57siLohe0pNtAZQfFrlcJag=
Subject key identifier:   11:FF:B8:93:AB:44:DE:EA:FD:F1:7D:44:19:C9:3B:20:B2:1E:22:D7
Authority key identifier: D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45
Certificate issuer:       /CN=d66df7599e243b462864126a8c241078a2e2b045
Certificate serial:       019F916D4F5DFDDD1A39A6E5A2917893FF07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
Manifest number:          026B
Signing time:             Fri 24 Jul 2026 00:01:27 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:27 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:27 +0000
Files and hashes:         1: 1m33WZ4kO0YoZBJqjCQQeKLisEU.crl (hash: 2MyxHMcUmJ243H2LewunPHU3U5FMjhBEF7v2pKnXh20=)
                          2: DRNZ2Noj1jQqoeJCWv4JOU1HsDw.roa (hash: yIgbar3MOMeY3sZNtgZrdUU7Wm2ezjgMSXqvJFogWMk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:4f:5d:fd:dd:1a:39:a6:e5:a2:91:78:93:ff:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d66df7599e243b462864126a8c241078a2e2b045
        Validity
            Not Before: Jul 24 00:01:27 2026 GMT
            Not After : Jul 25 00:01:27 2026 GMT
        Subject: CN=11ffb893ab44deeafdf17d4419c93b20b21e22d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:b2:ce:ff:4f:22:a8:e8:69:86:62:2b:f7:
                    6b:a7:a0:c7:af:28:73:98:5c:a9:d2:bc:35:a4:7c:
                    3e:24:8f:7a:49:18:11:de:51:ff:da:7f:50:e4:09:
                    69:00:2d:de:35:a4:01:01:cd:f2:db:a2:f8:57:3e:
                    a0:63:14:a5:5b:e1:64:20:d9:78:01:8d:10:25:e8:
                    24:be:82:0b:b6:ba:c7:89:2b:e9:4b:81:b0:c4:5b:
                    e0:cb:c6:ea:0a:85:dd:87:eb:ff:05:29:f5:a4:fc:
                    57:c5:4f:43:46:a2:2a:55:13:ef:a8:13:30:e7:6c:
                    ab:9b:07:ee:1b:87:a1:8a:e8:59:cb:50:dd:18:b3:
                    e8:23:72:e5:ca:ca:89:24:fb:03:6e:7c:94:9c:fd:
                    5b:d8:3b:0e:5a:34:38:68:87:9d:0c:37:26:f6:0c:
                    23:39:3e:d0:2b:c9:56:2b:f2:46:35:9b:2d:08:0c:
                    20:a7:09:70:59:57:77:c5:4f:5b:7e:51:6f:85:e8:
                    a0:4c:0a:81:e9:e5:22:0e:e6:08:0c:5f:4f:14:d3:
                    78:42:60:ec:df:f7:ec:2c:60:03:0a:1b:3e:70:c1:
                    af:64:8d:b3:fa:83:6e:77:fc:6d:ab:e8:95:9e:ba:
                    19:8c:c3:52:7d:80:c3:d7:c1:dd:53:e8:97:ac:28:
                    95:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FF:B8:93:AB:44:DE:EA:FD:F1:7D:44:19:C9:3B:20:B2:1E:22:D7
            X509v3 Authority Key Identifier:
                keyid:D6:6D:F7:59:9E:24:3B:46:28:64:12:6A:8C:24:10:78:A2:E2:B0:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1m33WZ4kO0YoZBJqjCQQeKLisEU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8035e2-1f20-47e7-ad64-07143765fffe/1/1m33WZ4kO0YoZBJqjCQQeKLisEU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:08:9c:e6:1c:8c:16:5f:07:58:e5:f6:f3:1d:8b:0b:af:ab:
         1b:32:85:8d:c7:03:bf:4f:d5:87:a7:c2:ea:95:c1:9f:88:08:
         64:6c:32:d2:04:f6:48:eb:e7:e2:70:f7:a4:9a:0d:3f:63:8b:
         7b:08:9c:93:a6:23:8b:8b:fa:86:97:a7:82:54:87:8f:bc:7b:
         42:79:70:a4:1a:7e:20:33:b2:f1:f9:62:6e:cf:37:0f:e1:8d:
         c8:c8:3b:1f:fc:e2:c4:6e:dd:91:06:23:15:f7:d7:e1:9a:0e:
         a9:3f:88:04:13:b9:9f:72:b4:96:12:3b:98:a6:74:3b:3e:98:
         30:a9:de:ad:f9:1b:22:21:a9:f5:27:53:22:97:70:ef:88:47:
         2c:d1:1c:45:59:0f:59:cb:0f:74:54:87:bb:fc:3a:5c:0e:12:
         3d:fa:a9:23:24:a6:dc:63:0b:6f:ae:38:b4:4a:b9:00:f1:0b:
         9b:69:6f:6e:34:fe:51:c8:fd:37:9a:fe:64:5d:96:45:82:83:
         93:21:d1:27:13:5b:0f:96:70:45:26:c0:41:2e:73:0d:1d:83:
         46:a0:2a:1c:f3:e1:50:e6:fa:43:77:cf:63:7f:0d:9b:b9:31:
         86:1f:90:ad:a1:8d:5d:eb:20:59:39:32:70:8b:e1:58:7c:87:
         a8:0a:f2:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbU9d/d0aOablopF4k/8HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2NmRmNzU5OWUyNDNiNDYyODY0MTI2YThjMjQxMDc4YTJl
MmIwNDUwHhcNMjYwNzI0MDAwMTI3WhcNMjYwNzI1MDAwMTI3WjAzMTEwLwYDVQQD
EygxMWZmYjg5M2FiNDRkZWVhZmRmMTdkNDQxOWM5M2IyMGIyMWUyMmQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDKyzv9PIqjoaYZiK/drp6DHryhz
mFyp0rw1pHw+JI96SRgR3lH/2n9Q5AlpAC3eNaQBAc3y26L4Vz6gYxSlW+FkINl4
AY0QJegkvoILtrrHiSvpS4GwxFvgy8bqCoXdh+v/BSn1pPxXxU9DRqIqVRPvqBMw
52yrmwfuG4ehiuhZy1DdGLPoI3LlysqJJPsDbnyUnP1b2DsOWjQ4aIedDDcm9gwj
OT7QK8lWK/JGNZstCAwgpwlwWVd3xU9bflFvheigTAqB6eUiDuYIDF9PFNN4QmDs
3/fsLGADChs+cMGvZI2z+oNud/xtq+iVnroZjMNSfYDD18HdU+iXrCiVzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBH/uJOrRN7q/fF9RBnJOyCyHiLXMB8GA1UdIwQY
MBaAFNZt91meJDtGKGQSaowkEHii4rBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQt
MDcxNDM3NjVmZmZlLzEvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS84MDM1ZTItMWYyMC00N2U3LWFkNjQtMDcxNDM3NjVmZmZl
LzEvMW0zM1daNGtPMFlvWkJKcWpDUVFlS0xpc0VVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOwic5hyM
Fl8HWOX28x2LC6+rGzKFjccDv0/Vh6fC6pXBn4gIZGwy0gT2SOvn4nD3pJoNP2OL
ewick6Yji4v6hpenglSHj7x7QnlwpBp+IDOy8flibs83D+GNyMg7H/zixG7dkQYj
FffX4ZoOqT+IBBO5n3K0lhI7mKZ0Oz6YMKnerfkbIiGp9SdTIpdw74hHLNEcRVkP
WcsPdFSHu/w6XA4SPfqpIySm3GMLb644tEq5APELm2lvbjT+Ucj9N5r+ZF2WRYKD
kyHRJxNbD5ZwRSbAQS5zDR2DRqAqHPPhUOb6Q3fPY38Nm7kxhh+QraGNXesgWTky
cIvhWHyHqAry5g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:37:54 2026 by rpki-client