Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
File:                     5lluFVL8CliEqIGzUoF9C3MAkIM.mft (raw, json)
Hash identifier:          i2kaM08hWTPRG2gI/Fw8VtdTKG8J0s0sToQKBl9U6Vo=
Subject key identifier:   32:04:EC:D1:FC:2F:5D:24:2C:52:C5:E9:C4:15:CD:9D:36:D8:54:42
Authority key identifier: E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83
Certificate issuer:       /CN=e6596e1552fc0a5884a881b352817d0b73009083
Certificate serial:       019F9211AB39498293339F1AC09765BD4102
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
Manifest number:          0927
Signing time:             Fri 24 Jul 2026 03:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:59 +0000
Files and hashes:         1: 1bqNsOJJ8fekiGjNmHIxOifScpk.roa (hash: awuwmLZI74s+JrAhvYcfSETsMAtPOVKMZXnh9sFIapk=)
                          2: 5lluFVL8CliEqIGzUoF9C3MAkIM.crl (hash: RBOpsfpX40NafUTNXVwy4ArXycCrSM2wc/Xyo44ZN/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:ab:39:49:82:93:33:9f:1a:c0:97:65:bd:41:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6596e1552fc0a5884a881b352817d0b73009083
        Validity
            Not Before: Jul 24 03:00:59 2026 GMT
            Not After : Jul 25 03:00:59 2026 GMT
        Subject: CN=3204ecd1fc2f5d242c52c5e9c415cd9d36d85442
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d2:47:20:a4:fa:cf:a7:52:3d:d6:ae:fc:10:
                    d8:83:5e:29:07:5a:47:1c:2b:f3:c2:85:e9:df:25:
                    29:b5:a6:94:33:df:b8:b7:ba:5e:80:91:47:52:69:
                    b8:42:0d:ed:05:7e:07:4f:d1:80:f8:c4:87:c8:e9:
                    6e:93:39:7a:69:5a:30:21:d7:39:c4:b8:42:21:32:
                    08:69:37:d9:15:2f:05:f4:1b:c1:35:23:00:02:e3:
                    49:ee:72:5d:d8:80:e7:9b:2e:53:a9:df:d2:8d:24:
                    17:2d:db:68:c8:e4:20:e0:e6:9e:cd:49:d8:b1:de:
                    0f:53:55:78:93:ba:a6:0d:56:02:85:ff:79:d2:e6:
                    64:58:11:97:13:e7:8d:63:56:0d:dc:85:ee:da:f9:
                    6d:e2:7a:c5:08:3a:e2:30:49:af:3f:0f:7b:87:6f:
                    87:5b:45:d5:78:d8:18:d3:e5:a6:2e:99:79:6a:b8:
                    a3:c8:a7:2b:8d:1e:b6:f4:d6:d8:eb:93:d2:f8:b7:
                    ae:8c:7f:25:86:77:2c:ef:b1:55:24:1a:81:00:ed:
                    bb:18:c8:69:33:a4:d0:7e:9b:29:e4:70:77:45:ee:
                    b9:d0:40:99:ba:59:06:02:e7:73:d8:b6:cb:6e:77:
                    d5:d8:11:c2:73:b6:04:ae:b2:99:e5:3e:de:29:70:
                    e9:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:04:EC:D1:FC:2F:5D:24:2C:52:C5:E9:C4:15:CD:9D:36:D8:54:42
            X509v3 Authority Key Identifier:
                keyid:E6:59:6E:15:52:FC:0A:58:84:A8:81:B3:52:81:7D:0B:73:00:90:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lluFVL8CliEqIGzUoF9C3MAkIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/0ca287-3eef-414c-883a-081691257a26/1/5lluFVL8CliEqIGzUoF9C3MAkIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:60:99:ff:ab:15:f3:79:06:98:68:22:72:6d:08:fe:0d:ab:
         49:16:e5:45:a1:72:89:4a:9b:ba:3c:3d:e8:f8:2c:d6:90:66:
         7a:7b:a1:12:89:2d:75:98:09:1d:a4:ff:d1:f1:f0:26:2e:db:
         73:9d:ff:c0:7e:11:2d:b4:ac:66:e9:56:9d:d6:35:86:0a:5a:
         11:5e:40:69:a7:44:0f:1e:6c:e2:07:dd:b3:1d:04:88:55:0a:
         6d:10:73:92:b3:8d:95:9f:76:e8:17:95:ed:f5:b4:92:90:db:
         95:d3:96:9d:be:be:a9:70:41:29:81:89:66:c5:09:cf:8c:0c:
         bd:e6:61:d3:5d:00:53:dc:d2:4a:41:b8:d8:9a:23:81:27:07:
         81:be:d4:15:76:bd:5e:b3:fb:1a:a1:7e:4a:0c:d8:d5:76:8d:
         9d:4a:75:71:ae:0b:f0:6e:0c:97:21:10:e7:ce:4a:6e:5d:39:
         f2:e1:7b:bb:a9:31:4c:c7:be:87:2c:97:43:4f:96:27:c7:0f:
         79:d4:61:79:51:47:ae:32:93:75:7b:d0:94:da:b5:3c:61:ce:
         53:79:02:c0:2f:b2:d1:33:f3:0c:ff:fb:43:05:75:1a:34:17:
         fa:2b:79:6b:dc:3e:ae:e1:f6:1e:f8:60:e4:c9:63:27:74:98:
         ca:a1:ac:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEas5SYKTM58awJdlvUECMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2NTk2ZTE1NTJmYzBhNTg4NGE4ODFiMzUyODE3ZDBiNzMw
MDkwODMwHhcNMjYwNzI0MDMwMDU5WhcNMjYwNzI1MDMwMDU5WjAzMTEwLwYDVQQD
EygzMjA0ZWNkMWZjMmY1ZDI0MmM1MmM1ZTljNDE1Y2Q5ZDM2ZDg1NDQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudJHIKT6z6dSPdau/BDYg14pB1pH
HCvzwoXp3yUptaaUM9+4t7pegJFHUmm4Qg3tBX4HT9GA+MSHyOlukzl6aVowIdc5
xLhCITIIaTfZFS8F9BvBNSMAAuNJ7nJd2IDnmy5Tqd/SjSQXLdtoyOQg4OaezUnY
sd4PU1V4k7qmDVYChf950uZkWBGXE+eNY1YN3IXu2vlt4nrFCDriMEmvPw97h2+H
W0XVeNgY0+WmLpl5arijyKcrjR629NbY65PS+LeujH8lhncs77FVJBqBAO27GMhp
M6TQfpsp5HB3Re650ECZulkGAudz2LbLbnfV2BHCc7YErrKZ5T7eKXDpqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIE7NH8L10kLFLF6cQVzZ022FRCMB8GA1UdIwQY
MBaAFOZZbhVS/ApYhKiBs1KBfQtzAJCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8wY2EyODctM2VlZi00MTRjLTg4M2Et
MDgxNjkxMjU3YTI2LzEvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8wY2EyODctM2VlZi00MTRjLTg4M2EtMDgxNjkxMjU3YTI2
LzEvNWxsdUZWTDhDbGlFcUlHelVvRjlDM01Ba0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGCZ/6sV
83kGmGgicm0I/g2rSRblRaFyiUqbujw96Pgs1pBmenuhEoktdZgJHaT/0fHwJi7b
c53/wH4RLbSsZulWndY1hgpaEV5AaadEDx5s4gfdsx0EiFUKbRBzkrONlZ926BeV
7fW0kpDbldOWnb6+qXBBKYGJZsUJz4wMveZh010AU9zSSkG42JojgScHgb7UFXa9
XrP7GqF+SgzY1XaNnUp1ca4L8G4MlyEQ585Kbl058uF7u6kxTMe+hyyXQ0+WJ8cP
edRheVFHrjKTdXvQlNq1PGHOU3kCwC+y0TPzDP/7QwV1GjQX+it5a9w+ruH2Hvhg
5MljJ3SYyqGseA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 08:23:18 2026 by rpki-client