Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft
File:                     DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft (raw, json)
Hash identifier:          BVBvHhpEvZuat8UpyJz2imR+0noQfWCH5eWwbVDZyDQ=
Subject key identifier:   88:18:97:3E:71:06:83:47:2E:05:05:83:A9:2D:0F:7F:A3:47:C4:B0
Authority key identifier: 0C:82:74:BF:68:32:A5:D8:22:0D:E2:EA:E8:69:BA:4A:F3:56:39:F9
Certificate issuer:       /CN=0c8274bf6832a5d8220de2eae869ba4af35639f9
Certificate serial:       019F8F7E80B1CAED91F7D1F1511546E9705B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft
Manifest number:          3F
Signing time:             Thu 23 Jul 2026 15:01:00 +0000
Manifest this update:     Thu 23 Jul 2026 15:01:00 +0000
Manifest next update:     Fri 24 Jul 2026 15:01:00 +0000
Files and hashes:         1: DIJ0v2gypdgiDeLq6Gm6SvNWOfk.crl (hash: TIRLlmskFM6E0biqs3LBJI28DopWzSPMM1+KIHaSXSg=)
                          2: VktBJoJUVLsV4Fhdae-N5iKyV_M.roa (hash: qTtYxiyPtAWx3c3xC9fJLqpzGh+4lBcaN0sDlshomAs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:7e:80:b1:ca:ed:91:f7:d1:f1:51:15:46:e9:70:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c8274bf6832a5d8220de2eae869ba4af35639f9
        Validity
            Not Before: Jul 23 15:01:00 2026 GMT
            Not After : Jul 24 15:01:00 2026 GMT
        Subject: CN=8818973e710683472e050583a92d0f7fa347c4b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:98:3b:c5:a2:4e:0e:72:da:43:e8:59:a8:70:
                    83:96:9a:cd:42:0e:3a:24:00:14:45:b5:43:92:84:
                    be:f2:4a:bc:d0:22:9d:06:fe:45:89:a6:32:49:e5:
                    b3:36:7d:20:e4:cd:95:66:5a:dc:f9:2c:59:f8:49:
                    e2:11:7e:47:7a:a6:73:b8:6f:5f:f8:06:53:e2:b7:
                    23:01:4f:f8:ef:fe:d5:05:d1:ab:06:27:05:a5:36:
                    fa:2f:9a:e6:66:97:83:8d:75:0e:65:85:86:c9:f6:
                    be:a7:9b:05:1c:1d:fe:f9:64:eb:75:b2:54:a3:57:
                    41:14:ed:d6:37:7e:76:41:5b:8d:64:8d:8e:51:a8:
                    fc:60:e5:bd:98:fb:b1:29:90:2f:52:48:34:47:5a:
                    96:94:60:fb:16:0b:43:89:25:bb:13:a2:ed:62:ea:
                    07:31:cb:a5:3b:72:cc:33:03:f9:f6:5a:e5:bb:0a:
                    d1:0c:a2:55:63:22:ce:0c:e3:07:94:43:4c:bb:0c:
                    b7:c6:80:75:af:8d:23:02:a4:aa:bb:66:04:36:25:
                    a7:54:16:f7:7a:b8:01:81:55:bb:16:a3:c6:70:4d:
                    e5:0b:f2:1c:db:82:50:5a:6c:49:f9:45:1e:8a:d7:
                    5d:4e:8d:ab:d7:fc:59:2d:f7:cf:04:f1:f5:27:2e:
                    35:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:18:97:3E:71:06:83:47:2E:05:05:83:A9:2D:0F:7F:A3:47:C4:B0
            X509v3 Authority Key Identifier:
                keyid:0C:82:74:BF:68:32:A5:D8:22:0D:E2:EA:E8:69:BA:4A:F3:56:39:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/a8e04b-0dba-40ec-b126-f457d404ae2f/1/DIJ0v2gypdgiDeLq6Gm6SvNWOfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a4:5e:c8:14:bb:7e:6c:e3:0f:73:ac:c8:99:49:f4:9c:09:
         2f:3e:f4:81:2f:06:b2:e7:86:8b:79:b8:ad:3f:55:60:a3:2d:
         e9:95:c3:dd:e1:fe:a7:ae:cc:eb:18:60:7a:9f:7b:3a:a5:f4:
         a9:42:1a:98:e3:f1:63:db:63:49:36:c0:ba:11:b7:6f:76:70:
         2b:25:12:22:30:da:ee:a7:ba:15:15:06:99:9d:68:e2:c8:cd:
         08:eb:33:e6:60:04:dc:e8:fd:17:c9:a8:ef:a7:63:14:33:4b:
         d7:1a:76:10:92:18:9a:dc:16:47:62:be:bd:41:20:14:7f:7e:
         f9:a9:33:d4:de:fe:e0:80:20:c7:75:70:65:40:c2:ff:71:f6:
         01:a4:50:f2:aa:8b:85:27:f7:f9:a1:4c:70:7b:a0:6c:fb:cd:
         83:6b:c6:ee:63:d0:b8:f1:ec:1e:b9:25:3e:42:68:25:2b:10:
         ab:42:b1:4a:79:32:be:ae:e2:17:81:5c:82:15:31:61:e0:5e:
         0d:c8:09:cc:ec:fc:e7:6b:cb:d8:be:3b:8c:71:d3:86:8e:f3:
         be:5c:5c:70:ef:01:8a:e6:05:c8:d4:bc:92:37:29:45:cb:1a:
         9d:de:40:ab:e3:c8:55:45:f8:ee:b3:8c:be:3d:f8:bf:4d:82:
         01:5c:ac:ca
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PfoCxyu2R99HxURVG6XBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjODI3NGJmNjgzMmE1ZDgyMjBkZTJlYWU4NjliYTRhZjM1
NjM5ZjkwHhcNMjYwNzIzMTUwMTAwWhcNMjYwNzI0MTUwMTAwWjAzMTEwLwYDVQQD
Eyg4ODE4OTczZTcxMDY4MzQ3MmUwNTA1ODNhOTJkMGY3ZmEzNDdjNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupg7xaJODnLaQ+hZqHCDlprNQg46
JAAURbVDkoS+8kq80CKdBv5FiaYySeWzNn0g5M2VZlrc+SxZ+EniEX5HeqZzuG9f
+AZT4rcjAU/47/7VBdGrBicFpTb6L5rmZpeDjXUOZYWGyfa+p5sFHB3++WTrdbJU
o1dBFO3WN352QVuNZI2OUaj8YOW9mPuxKZAvUkg0R1qWlGD7FgtDiSW7E6LtYuoH
MculO3LMMwP59lrluwrRDKJVYyLODOMHlENMuwy3xoB1r40jAqSqu2YENiWnVBb3
ergBgVW7FqPGcE3lC/Ic24JQWmxJ+UUeitddTo2r1/xZLffPBPH1Jy41BQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgYlz5xBoNHLgUFg6ktD3+jR8SwMB8GA1UdIwQY
MBaAFAyCdL9oMqXYIg3i6uhpukrzVjn5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRElKMHYyZ3lwZGdpRGVMcTZHbTZTdk5XT2ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYt
ZjQ1N2Q0MDRhZTJmLzEvRElKMHYyZ3lwZGdpRGVMcTZHbTZTdk5XT2ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hOGUwNGItMGRiYS00MGVjLWIxMjYtZjQ1N2Q0MDRhZTJm
LzEvRElKMHYyZ3lwZGdpRGVMcTZHbTZTdk5XT2ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUaReyBS7
fmzjD3OsyJlJ9JwJLz70gS8GsueGi3m4rT9VYKMt6ZXD3eH+p67M6xhgep97OqX0
qUIamOPxY9tjSTbAuhG3b3ZwKyUSIjDa7qe6FRUGmZ1o4sjNCOsz5mAE3Oj9F8mo
76djFDNL1xp2EJIYmtwWR2K+vUEgFH9++akz1N7+4IAgx3VwZUDC/3H2AaRQ8qqL
hSf3+aFMcHugbPvNg2vG7mPQuPHsHrklPkJoJSsQq0KxSnkyvq7iF4FcghUxYeBe
DcgJzOz852vL2L47jHHTho7zvlxccO8BiuYFyNS8kjcpRcsand5Aq+PIVUX47rOM
vj34v02CAVysyg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:48 2026 by rpki-client