Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
File:                     C0BTBtBWGjedd4lHK3j7IraHCpw.mft (raw, json)
Hash identifier:          T1ueXlYNE60QpdYAJVrPz2tyyHvj5QWvrK1mfApPwqk=
Subject key identifier:   57:8E:19:25:BA:79:0C:2E:EC:C8:87:C7:DF:4F:80:92:7B:9D:75:F2
Authority key identifier: 0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C
Certificate issuer:       /CN=0b405306d0561a379d7789472b78fb22b6870a9c
Certificate serial:       019F935C3214399BEC9169F79568B697FEBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
Manifest number:          0195
Signing time:             Fri 24 Jul 2026 09:02:00 +0000
Manifest this update:     Fri 24 Jul 2026 09:02:00 +0000
Manifest next update:     Sat 25 Jul 2026 09:02:00 +0000
Files and hashes:         1: C0BTBtBWGjedd4lHK3j7IraHCpw.crl (hash: AP8tkrevcB1EOF8D62WqbdNOeP0SrEH0VpvCvT6eWNs=)
                          2: s-OrRs_NYP_NP52qUqP6fghVc0I.roa (hash: o9FcxytVD/Gn0DANPhKF76P+ooE5vX+ccvZ9870ZhzU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:32:14:39:9b:ec:91:69:f7:95:68:b6:97:fe:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b405306d0561a379d7789472b78fb22b6870a9c
        Validity
            Not Before: Jul 24 09:02:00 2026 GMT
            Not After : Jul 25 09:02:00 2026 GMT
        Subject: CN=578e1925ba790c2eecc887c7df4f80927b9d75f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:41:07:d0:41:a1:d7:3c:d4:05:d3:d5:e3:
                    90:60:ab:9e:59:28:84:cb:95:f5:df:30:3f:9f:73:
                    27:64:0b:06:cd:5b:47:43:1c:c2:46:99:2f:af:19:
                    a0:f3:eb:51:a6:ea:b9:22:7d:d6:12:8d:79:73:1f:
                    24:66:28:79:b4:1a:db:ef:97:0c:6c:b7:c3:6e:a4:
                    a8:06:72:42:0c:10:6f:24:8a:ef:a6:99:50:20:e7:
                    87:b2:4b:8f:38:4b:ad:27:83:ec:f1:6a:01:3e:cf:
                    2c:35:37:2f:a5:1a:40:1d:66:cd:bc:0d:e6:aa:75:
                    28:ea:70:f8:ff:0a:1d:02:3b:a8:fe:59:09:f7:6a:
                    b9:ab:14:bc:b8:0c:19:de:95:b6:6a:9d:0f:9c:2e:
                    18:42:14:8c:37:9e:51:c0:9c:a9:0c:95:bc:d3:97:
                    47:95:c9:93:24:f3:8d:83:24:fe:7b:a4:93:eb:7a:
                    a3:6c:74:d5:30:a7:b8:ef:1e:5a:84:33:82:b8:c0:
                    a3:56:81:15:ab:0a:c2:72:95:a0:94:d4:a0:20:85:
                    8f:19:cb:e9:e0:d1:28:82:65:aa:1e:d9:1b:00:87:
                    71:ee:89:ae:d3:cc:5b:48:e8:a0:51:ae:b3:2d:12:
                    2d:48:ee:a1:d4:29:eb:a2:12:3b:0e:32:b1:78:58:
                    5d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:8E:19:25:BA:79:0C:2E:EC:C8:87:C7:DF:4F:80:92:7B:9D:75:F2
            X509v3 Authority Key Identifier:
                keyid:0B:40:53:06:D0:56:1A:37:9D:77:89:47:2B:78:FB:22:B6:87:0A:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0BTBtBWGjedd4lHK3j7IraHCpw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/350ada-969a-46c1-9eae-7bbc9684708b/1/C0BTBtBWGjedd4lHK3j7IraHCpw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b5:9c:95:16:7c:d5:1c:b4:0b:33:35:fb:c6:dc:63:a3:c6:
         38:46:1c:a9:db:c7:bc:a6:4f:8b:4f:e8:68:28:8c:89:12:74:
         37:38:d0:80:eb:78:55:fe:a8:f4:98:4b:fa:c1:08:c1:74:03:
         be:a1:a8:d2:ff:84:8b:c0:c1:81:3b:e5:d0:b0:b5:f2:e5:37:
         bc:f4:41:c8:c1:5c:27:b1:cf:9f:29:ba:da:43:5e:81:7c:01:
         66:60:3b:2e:40:2b:00:ca:2e:5e:1a:61:83:54:27:73:a6:ea:
         b6:0f:ae:80:ee:ec:34:be:c9:61:41:88:55:d1:d6:8f:af:53:
         b3:60:72:09:99:b4:fb:66:bb:cc:a3:3e:d4:91:fa:87:78:3b:
         7e:00:fa:fe:eb:b7:1f:96:17:8d:88:68:9d:e2:64:6c:df:5c:
         15:7e:00:ce:0d:74:a3:12:66:21:bc:d3:0f:3d:ec:5e:b6:a3:
         52:58:30:91:ea:0a:b0:f3:bb:e3:b6:6d:8d:c4:eb:95:c4:f1:
         20:4e:2a:02:b9:82:b6:68:5c:7f:8a:42:da:0a:fb:4a:61:00:
         55:c7:54:8b:63:f6:7d:cc:e1:7f:02:0d:90:f7:95:78:ab:66:
         be:be:29:1a:7f:16:80:10:e9:d7:cd:b8:87:64:38:a5:da:24:
         0d:6d:04:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXDIUOZvskWn3lWi2l/6+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNDA1MzA2ZDA1NjFhMzc5ZDc3ODk0NzJiNzhmYjIyYjY4
NzBhOWMwHhcNMjYwNzI0MDkwMjAwWhcNMjYwNzI1MDkwMjAwWjAzMTEwLwYDVQQD
Eyg1NzhlMTkyNWJhNzkwYzJlZWNjODg3YzdkZjRmODA5MjdiOWQ3NWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoINBB9BBodc81AXT1eOQYKueWSiE
y5X13zA/n3MnZAsGzVtHQxzCRpkvrxmg8+tRpuq5In3WEo15cx8kZih5tBrb75cM
bLfDbqSoBnJCDBBvJIrvpplQIOeHskuPOEutJ4Ps8WoBPs8sNTcvpRpAHWbNvA3m
qnUo6nD4/wodAjuo/lkJ92q5qxS8uAwZ3pW2ap0PnC4YQhSMN55RwJypDJW805dH
lcmTJPONgyT+e6ST63qjbHTVMKe47x5ahDOCuMCjVoEVqwrCcpWglNSgIIWPGcvp
4NEogmWqHtkbAIdx7omu08xbSOigUa6zLRItSO6h1CnrohI7DjKxeFhdZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFeOGSW6eQwu7MiHx99PgJJ7nXXyMB8GA1UdIwQY
MBaAFAtAUwbQVho3nXeJRyt4+yK2hwqcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBCVEJ0QldHamVkZDRsSEszajdJcmFIQ3B3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8zNTBhZGEtOTY5YS00NmMxLTllYWUt
N2JiYzk2ODQ3MDhiLzEvQzBCVEJ0QldHamVkZDRsSEszajdJcmFIQ3B3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8zNTBhZGEtOTY5YS00NmMxLTllYWUtN2JiYzk2ODQ3MDhi
LzEvQzBCVEJ0QldHamVkZDRsSEszajdJcmFIQ3B3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7WclRZ8
1Ry0CzM1+8bcY6PGOEYcqdvHvKZPi0/oaCiMiRJ0NzjQgOt4Vf6o9JhL+sEIwXQD
vqGo0v+Ei8DBgTvl0LC18uU3vPRByMFcJ7HPnym62kNegXwBZmA7LkArAMouXhph
g1Qnc6bqtg+ugO7sNL7JYUGIVdHWj69Ts2ByCZm0+2a7zKM+1JH6h3g7fgD6/uu3
H5YXjYhoneJkbN9cFX4Azg10oxJmIbzTDz3sXrajUlgwkeoKsPO747ZtjcTrlcTx
IE4qArmCtmhcf4pC2gr7SmEAVcdUi2P2fczhfwINkPeVeKtmvr4pGn8WgBDp1824
h2Q4pdokDW0E5A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:42:10 2026 by rpki-client