Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
File:                     0L1Mp_MxqirZEkCmWDoXbABeimM.mft (raw, json)
Hash identifier:          LJ6rLd52BRJyyq/xp1UoAiBAsNNfNQrlVyC+cbi3Ugo=
Subject key identifier:   5E:2D:15:BF:49:49:13:D1:27:84:BF:49:AF:C3:BA:98:59:CE:B6:CC
Authority key identifier: D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63
Certificate issuer:       /CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
Certificate serial:       019F9135B1C070478BFE5FFFEDE4B9831420
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
Manifest number:          0F91
Signing time:             Thu 23 Jul 2026 23:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:42 +0000
Files and hashes:         1: 0L1Mp_MxqirZEkCmWDoXbABeimM.crl (hash: UKE8f9XqrYSm0q12ngi9cikcN41IH+zSAmkUxzS6POU=)
                          2: SxTqFSaVYKNp7RXjp-9P-WYLFPk.roa (hash: ZmAlezL/eOxIgz3wvBspKHt49atyoUhtEGugoI4vkno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:b1:c0:70:47:8b:fe:5f:ff:ed:e4:b9:83:14:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0bd4ca7f331aa2ad91240a6583a176c005e8a63
        Validity
            Not Before: Jul 23 23:00:42 2026 GMT
            Not After : Jul 24 23:00:42 2026 GMT
        Subject: CN=5e2d15bf494913d12784bf49afc3ba9859ceb6cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:47:33:57:66:16:81:8d:a9:2e:61:9a:01:7e:
                    88:4a:dd:90:2f:56:c9:6d:68:51:e4:54:a6:b1:73:
                    0f:f3:b9:22:37:f5:d8:29:74:57:3f:5c:4b:b3:41:
                    f7:d8:24:ed:6e:92:b4:51:99:bf:27:d3:12:0c:60:
                    50:f7:f6:0d:73:57:1c:06:b0:58:d1:f2:3f:56:96:
                    2c:2b:ed:e0:64:cf:00:0d:0a:8b:c8:b0:ec:db:95:
                    1d:c9:da:ac:9e:f2:c1:04:2f:5c:21:3b:9d:de:e6:
                    27:c5:58:42:a7:df:5e:f4:0c:44:c5:f4:6e:1f:a1:
                    a3:77:56:f0:f6:b1:63:7a:c5:da:84:75:24:31:18:
                    8e:53:cb:76:56:bd:a6:df:47:ef:c0:cb:65:08:ee:
                    89:d4:99:01:e7:88:2f:26:50:33:99:bf:ab:89:24:
                    09:68:9b:0e:56:6f:e9:27:0c:15:8f:d5:b6:80:58:
                    7b:7c:05:da:15:85:bf:75:c4:6f:5f:ad:cb:32:4c:
                    f2:31:96:3c:ba:29:b9:7f:38:d3:46:b0:84:b5:2e:
                    a6:43:6d:72:94:ed:17:13:f8:6f:7b:fc:65:1a:8d:
                    2c:81:de:97:84:50:09:4e:77:ed:61:b6:5b:3d:59:
                    57:0a:4e:40:f5:58:76:10:7e:d2:e6:65:69:14:e4:
                    d8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2D:15:BF:49:49:13:D1:27:84:BF:49:AF:C3:BA:98:59:CE:B6:CC
            X509v3 Authority Key Identifier:
                keyid:D0:BD:4C:A7:F3:31:AA:2A:D9:12:40:A6:58:3A:17:6C:00:5E:8A:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0L1Mp_MxqirZEkCmWDoXbABeimM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1d9440-cee8-4383-b0a0-e0b5a92df940/1/0L1Mp_MxqirZEkCmWDoXbABeimM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:9d:4a:9b:fa:4b:af:8a:7c:d2:a8:65:6f:1d:82:35:2b:05:
         44:b2:9e:be:2e:69:6c:c9:ee:80:61:ee:3e:8d:2c:63:c3:de:
         f8:03:74:29:3d:4b:6a:4e:d1:92:52:13:a8:eb:ea:15:4c:62:
         bf:b8:c0:4b:3b:f0:4c:28:e6:0e:16:ee:18:12:6d:8f:a3:61:
         5b:03:91:1c:a0:62:bb:dc:a0:9b:5b:a6:09:2e:a3:d4:30:10:
         75:23:13:36:f0:c6:fd:aa:c0:a8:1b:bd:eb:d8:01:4d:8d:47:
         07:9c:3f:d4:77:f3:a6:f9:cb:b3:38:0e:14:8c:04:34:75:cd:
         14:97:6f:62:f2:5a:61:70:9c:a3:c0:18:f5:c0:19:ce:7a:39:
         66:04:d9:63:c2:c2:99:4e:49:b7:ce:75:35:92:6d:3f:66:e1:
         b9:96:c4:38:2a:ae:5f:90:fc:a8:3d:4f:e1:fb:4f:7b:43:77:
         1f:90:ed:2c:94:f5:85:87:ca:55:1b:54:d2:d2:bf:b4:46:18:
         64:dd:23:fd:9e:c9:26:e6:41:50:68:3a:18:4f:6d:38:4e:41:
         07:dd:22:6c:cf:20:6d:5a:2f:a1:ef:5c:41:2f:02:96:81:a4:
         45:86:61:c9:53:ce:77:90:a3:c8:d0:2d:61:c1:62:f9:b4:06:
         4f:cf:f1:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNbHAcEeL/l//7eS5gxQgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwYmQ0Y2E3ZjMzMWFhMmFkOTEyNDBhNjU4M2ExNzZjMDA1
ZThhNjMwHhcNMjYwNzIzMjMwMDQyWhcNMjYwNzI0MjMwMDQyWjAzMTEwLwYDVQQD
Eyg1ZTJkMTViZjQ5NDkxM2QxMjc4NGJmNDlhZmMzYmE5ODU5Y2ViNmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEczV2YWgY2pLmGaAX6ISt2QL1bJ
bWhR5FSmsXMP87kiN/XYKXRXP1xLs0H32CTtbpK0UZm/J9MSDGBQ9/YNc1ccBrBY
0fI/VpYsK+3gZM8ADQqLyLDs25UdydqsnvLBBC9cITud3uYnxVhCp99e9AxExfRu
H6Gjd1bw9rFjesXahHUkMRiOU8t2Vr2m30fvwMtlCO6J1JkB54gvJlAzmb+riSQJ
aJsOVm/pJwwVj9W2gFh7fAXaFYW/dcRvX63LMkzyMZY8uim5fzjTRrCEtS6mQ21y
lO0XE/hve/xlGo0sgd6XhFAJTnftYbZbPVlXCk5A9Vh2EH7S5mVpFOTYeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF4tFb9JSRPRJ4S/Sa/DuphZzrbMMB8GA1UdIwQY
MBaAFNC9TKfzMaoq2RJAplg6F2wAXopjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAt
ZTBiNWE5MmRmOTQwLzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xZDk0NDAtY2VlOC00MzgzLWIwYTAtZTBiNWE5MmRmOTQw
LzEvMEwxTXBfTXhxaXJaRWtDbVdEb1hiQUJlaW1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFZ1Km/pL
r4p80qhlbx2CNSsFRLKevi5pbMnugGHuPo0sY8Pe+AN0KT1Lak7RklITqOvqFUxi
v7jASzvwTCjmDhbuGBJtj6NhWwORHKBiu9ygm1umCS6j1DAQdSMTNvDG/arAqBu9
69gBTY1HB5w/1HfzpvnLszgOFIwENHXNFJdvYvJaYXCco8AY9cAZzno5ZgTZY8LC
mU5Jt851NZJtP2bhuZbEOCquX5D8qD1P4ftPe0N3H5DtLJT1hYfKVRtU0tK/tEYY
ZN0j/Z7JJuZBUGg6GE9tOE5BB90ibM8gbVovoe9cQS8CloGkRYZhyVPOd5CjyNAt
YcFi+bQGT8/x/A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:02:19 2026 by rpki-client