Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
File:                     mUT4EqDgAsOOhOR2KL26A4WYCQs.mft (raw, json)
Hash identifier:          5Jity3DN2/w+ftCbNDC9G6r/9g6nrs0L2Zi2Tmfw6Mo=
Subject key identifier:   02:FD:CF:DD:23:67:F9:5F:37:39:29:2F:0B:DF:75:E5:C3:0D:DA:A5
Authority key identifier: 99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B
Certificate issuer:       /CN=9944f812a0e002c38e84e47628bdba038598090b
Certificate serial:       019F91DB3D251B6D4D7D6A863812E20B9834
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
Manifest number:          0F54
Signing time:             Fri 24 Jul 2026 02:01:32 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:32 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:32 +0000
Files and hashes:         1: RTCwtH7ZWIYWogG8SzF47UbA26A.roa (hash: cp0ZS5qVAjMrv/xO5fzJ4jhrguG1YkL8kQ9RzgIwSl4=)
                          2: T2785FZtezCL_6MGZVNWjJWLkV4.roa (hash: vLx5BTbQ5gwqNSQW0r0QpCkolwPmMCxbInfB7uOoJt8=)
                          3: mUT4EqDgAsOOhOR2KL26A4WYCQs.crl (hash: LC6H/QJsHuo2IO88KSyeDBx1ziD6+gbhiRWJx4OA9tM=)
                          4: tIO_Frmyb630hOFMV5X9t-LFjlM.roa (hash: A+6xfI16vy2Eu1vSrt6AeJ63kgJErM2gSoHCauuaBDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:3d:25:1b:6d:4d:7d:6a:86:38:12:e2:0b:98:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9944f812a0e002c38e84e47628bdba038598090b
        Validity
            Not Before: Jul 24 02:01:32 2026 GMT
            Not After : Jul 25 02:01:32 2026 GMT
        Subject: CN=02fdcfdd2367f95f3739292f0bdf75e5c30ddaa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:a3:78:8b:09:73:d8:57:97:38:f9:35:20:
                    2c:c2:b7:d4:d6:dd:85:ee:6a:00:a8:bf:bb:e4:bd:
                    4b:49:58:49:74:fe:6d:21:18:1d:97:f8:25:64:26:
                    e7:3e:f3:39:13:91:f3:67:d0:43:1c:93:d4:d5:54:
                    78:7e:c4:81:30:31:99:85:7f:28:0d:f3:ca:7b:77:
                    02:28:55:9e:c0:3d:23:2f:af:2b:da:0b:ec:63:78:
                    62:c9:f7:da:f0:56:97:aa:49:dc:3a:c0:ed:5d:fe:
                    ca:bc:5e:99:06:96:14:6c:b0:9f:80:7c:7f:5d:42:
                    46:a0:3a:15:30:93:55:ad:76:31:69:fb:d1:bd:98:
                    a6:38:ae:47:ef:20:50:cc:6e:ed:f6:18:45:64:a8:
                    7e:66:7c:a4:09:f4:30:05:80:e8:3d:0f:ce:87:b7:
                    6b:f4:eb:76:5d:69:54:c4:c6:75:6f:bf:5e:9a:17:
                    48:c7:1d:4b:5f:44:ed:e1:41:73:4c:94:24:68:4d:
                    95:d8:7f:28:68:92:25:6a:5d:c6:a6:17:ed:f4:88:
                    d4:06:d0:99:62:f7:cf:35:8b:b7:7e:c6:8b:16:7c:
                    46:35:a7:9e:b5:be:4f:ed:ea:8a:d8:70:7f:cb:98:
                    86:79:64:be:b3:be:b6:02:a0:29:36:1b:22:37:23:
                    82:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:FD:CF:DD:23:67:F9:5F:37:39:29:2F:0B:DF:75:E5:C3:0D:DA:A5
            X509v3 Authority Key Identifier:
                keyid:99:44:F8:12:A0:E0:02:C3:8E:84:E4:76:28:BD:BA:03:85:98:09:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mUT4EqDgAsOOhOR2KL26A4WYCQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/3c6cb5-a72c-4701-ae6c-306c5651343e/1/mUT4EqDgAsOOhOR2KL26A4WYCQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:30:ca:cd:c5:d1:a1:44:75:1f:f3:02:32:05:35:72:2d:82:
         0b:a2:08:34:58:5b:31:a6:c0:5b:32:12:1a:82:6a:37:8b:ec:
         92:1f:78:f9:65:66:e7:0d:cb:50:10:fb:95:09:ac:d3:31:c4:
         a2:14:95:57:53:73:c1:b7:15:57:58:03:23:eb:e9:9f:84:40:
         af:52:d0:7b:6f:25:ab:1d:59:23:89:54:69:b6:cf:23:61:df:
         a0:8a:5a:2e:02:8f:9a:0d:1f:97:db:04:1b:a8:56:22:98:ff:
         df:26:bc:83:48:a9:44:91:4b:69:8e:df:24:af:2b:f0:45:3a:
         24:27:74:1f:a8:0c:73:4a:91:2a:61:f5:70:04:66:e5:fa:67:
         bd:5f:3d:3c:37:73:6f:5f:a3:cc:27:c0:9c:30:3a:a3:27:2b:
         bc:51:9b:00:8f:37:00:92:df:a9:40:0a:1b:f0:07:a3:f5:6f:
         19:4f:91:30:68:0b:e0:91:72:d4:9a:51:d3:fc:19:e1:40:85:
         8b:56:d7:65:01:5d:9d:6c:d4:d7:f4:51:7b:cd:bb:3b:45:e8:
         07:72:c5:26:e0:09:1a:2d:80:ea:0b:69:16:5b:fa:a2:40:b7:
         c5:89:3c:b1:55:59:24:03:c9:d0:65:87:47:b2:0d:5b:de:6c:
         48:c0:00:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2z0lG21NfWqGOBLiC5g0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NDRmODEyYTBlMDAyYzM4ZTg0ZTQ3NjI4YmRiYTAzODU5
ODA5MGIwHhcNMjYwNzI0MDIwMTMyWhcNMjYwNzI1MDIwMTMyWjAzMTEwLwYDVQQD
EygwMmZkY2ZkZDIzNjdmOTVmMzczOTI5MmYwYmRmNzVlNWMzMGRkYWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCqjeIsJc9hXlzj5NSAswrfU1t2F
7moAqL+75L1LSVhJdP5tIRgdl/glZCbnPvM5E5HzZ9BDHJPU1VR4fsSBMDGZhX8o
DfPKe3cCKFWewD0jL68r2gvsY3hiyffa8FaXqkncOsDtXf7KvF6ZBpYUbLCfgHx/
XUJGoDoVMJNVrXYxafvRvZimOK5H7yBQzG7t9hhFZKh+ZnykCfQwBYDoPQ/Oh7dr
9Ot2XWlUxMZ1b79emhdIxx1LX0Tt4UFzTJQkaE2V2H8oaJIlal3Gphft9IjUBtCZ
YvfPNYu3fsaLFnxGNaeetb5P7eqK2HB/y5iGeWS+s762AqApNhsiNyOCsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAL9z90jZ/lfNzkpLwvfdeXDDdqlMB8GA1UdIwQY
MBaAFJlE+BKg4ALDjoTkdii9ugOFmAkLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMt
MzA2YzU2NTEzNDNlLzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zYzZjYjUtYTcyYy00NzAxLWFlNmMtMzA2YzU2NTEzNDNl
LzEvbVVUNEVxRGdBc09PaE9SMktMMjZBNFdZQ1FzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUzDKzcXR
oUR1H/MCMgU1ci2CC6IINFhbMabAWzISGoJqN4vskh94+WVm5w3LUBD7lQms0zHE
ohSVV1NzwbcVV1gDI+vpn4RAr1LQe28lqx1ZI4lUabbPI2HfoIpaLgKPmg0fl9sE
G6hWIpj/3ya8g0ipRJFLaY7fJK8r8EU6JCd0H6gMc0qRKmH1cARm5fpnvV89PDdz
b1+jzCfAnDA6oycrvFGbAI83AJLfqUAKG/AHo/VvGU+RMGgL4JFy1JpR0/wZ4UCF
i1bXZQFdnWzU1/RRe827O0XoB3LFJuAJGi2A6gtpFlv6okC3xYk8sVVZJAPJ0GWH
R7INW95sSMAAPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:54:07 2026 by rpki-client