Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/05obNYWAyC_Nszv5KnlhCiXbbls.mft
File:                     05obNYWAyC_Nszv5KnlhCiXbbls.mft (raw, json)
Hash identifier:          8sBGWOw0PHPq+vMwOz1DyJVzvchFKxTb2+VO3YIzUTk=
Subject key identifier:   02:10:30:8B:C4:B8:D8:7E:07:98:F3:71:70:E4:90:C6:45:59:81:CF
Authority key identifier: D3:9A:1B:35:85:80:C8:2F:CD:B3:3B:F9:2A:79:61:0A:25:DB:6E:5B
Certificate issuer:       /CN=d39a1b358580c82fcdb33bf92a79610a25db6e5b
Certificate serial:       019F8F10E934A27931DBB17F01347819089E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/05obNYWAyC_Nszv5KnlhCiXbbls.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/05obNYWAyC_Nszv5KnlhCiXbbls.mft
Manifest number:          65
Signing time:             Thu 23 Jul 2026 13:01:17 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:17 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:17 +0000
Files and hashes:         1: 05obNYWAyC_Nszv5KnlhCiXbbls.crl (hash: yJ1fERH8QVdC/GL8y8BHvJVTBEos442rQoh65uvHSik=)
                          2: UQwijTTDKbfsJZWKMY6xFKq52Ww.roa (hash: yyHR+9xpLGlaichAp86CMAnywJHr3C7oHvjKLNA6OvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/05obNYWAyC_Nszv5KnlhCiXbbls.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/05obNYWAyC_Nszv5KnlhCiXbbls.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/05obNYWAyC_Nszv5KnlhCiXbbls.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:e9:34:a2:79:31:db:b1:7f:01:34:78:19:08:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d39a1b358580c82fcdb33bf92a79610a25db6e5b
        Validity
            Not Before: Jul 23 13:01:17 2026 GMT
            Not After : Jul 24 13:01:17 2026 GMT
        Subject: CN=0210308bc4b8d87e0798f37170e490c6455981cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:d7:b8:86:78:c6:74:19:b9:af:32:b7:4c:
                    b5:66:55:eb:bd:8b:58:fe:d7:41:62:1a:cc:73:9b:
                    06:c1:c4:cc:cd:65:fc:6a:08:d9:99:24:6f:78:af:
                    8e:e3:45:a9:c6:95:2a:80:4b:c0:77:2a:00:86:91:
                    7e:07:ff:5b:23:b1:2f:eb:e1:2d:ef:26:e5:1b:7c:
                    90:c8:4d:72:08:96:27:32:e2:28:48:56:2e:fd:58:
                    95:37:97:91:67:2e:f4:36:96:f1:03:54:0e:f5:a3:
                    ef:83:25:cf:f9:d8:79:01:70:6b:76:02:fd:99:cb:
                    44:41:a4:39:c6:11:47:59:2e:aa:2f:24:bc:80:c5:
                    29:2b:81:51:27:3f:73:8f:b9:12:52:bf:a0:82:7e:
                    11:02:a6:1a:a4:55:da:d3:9b:61:73:27:5f:aa:2f:
                    9d:b5:9f:af:78:d8:20:18:7a:9d:97:91:66:ae:73:
                    9a:b1:d1:92:6f:fe:be:5e:06:36:04:36:71:45:b9:
                    c9:09:18:4d:ea:b0:ef:67:ce:e4:fc:83:e8:ad:70:
                    88:21:d7:c4:39:c4:ea:dc:cb:72:0a:99:af:97:cd:
                    f9:8f:ae:cd:0b:cb:69:ad:25:d5:9b:a9:fc:06:15:
                    e4:13:04:47:f0:2f:96:94:f0:3e:cc:a7:41:69:15:
                    01:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:10:30:8B:C4:B8:D8:7E:07:98:F3:71:70:E4:90:C6:45:59:81:CF
            X509v3 Authority Key Identifier:
                keyid:D3:9A:1B:35:85:80:C8:2F:CD:B3:3B:F9:2A:79:61:0A:25:DB:6E:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/05obNYWAyC_Nszv5KnlhCiXbbls.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/05obNYWAyC_Nszv5KnlhCiXbbls.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1ffc37-98d2-4e31-a2f8-c70074af8ca6/1/05obNYWAyC_Nszv5KnlhCiXbbls.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:6e:c1:a5:78:b7:62:e1:01:99:4e:cd:22:6a:45:f2:1d:fd:
         c6:e7:76:97:26:fe:31:1c:cd:70:8d:18:7d:fa:62:92:29:5c:
         a1:b0:d8:1c:79:74:ef:c6:c6:f2:52:d2:66:b6:6e:31:3f:68:
         fc:a1:c3:d0:b3:4f:11:98:86:73:45:69:1c:79:a6:0d:71:55:
         3d:21:14:c5:a7:20:31:f3:e3:16:61:a5:e5:aa:b3:cc:76:6f:
         aa:7a:df:90:98:71:55:5c:b0:d8:00:53:42:6f:ca:56:1f:4c:
         b8:81:31:1b:77:ff:1c:99:7c:de:88:c5:bd:57:f1:7e:77:79:
         4c:de:cc:cc:bc:73:c9:01:98:72:33:1c:36:1f:28:0f:89:a0:
         b0:54:e3:cb:32:57:f1:1c:98:43:1e:3e:e6:43:4c:46:3c:b9:
         04:dd:e6:6d:35:44:21:1f:53:81:ae:44:5f:55:cd:24:8c:82:
         1a:83:c4:0e:0e:85:35:90:e1:f6:d7:4e:4d:4f:1a:9d:0a:16:
         2e:2d:02:26:6b:7e:27:15:6b:84:54:b5:e7:82:2f:5c:5d:61:
         4b:a8:f5:7c:a6:8f:0f:c6:24:b0:60:de:8c:e4:1d:5d:43:62:
         5a:d2:73:50:af:a9:c9:2f:b0:42:fc:1a:e6:25:19:48:44:ba:
         0c:68:c4:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEOk0onkx27F/ATR4GQieMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzOWExYjM1ODU4MGM4MmZjZGIzM2JmOTJhNzk2MTBhMjVk
YjZlNWIwHhcNMjYwNzIzMTMwMTE3WhcNMjYwNzI0MTMwMTE3WjAzMTEwLwYDVQQD
EygwMjEwMzA4YmM0YjhkODdlMDc5OGYzNzE3MGU0OTBjNjQ1NTk4MWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWrXuIZ4xnQZua8yt0y1ZlXrvYtY
/tdBYhrMc5sGwcTMzWX8agjZmSRveK+O40WpxpUqgEvAdyoAhpF+B/9bI7Ev6+Et
7yblG3yQyE1yCJYnMuIoSFYu/ViVN5eRZy70NpbxA1QO9aPvgyXP+dh5AXBrdgL9
mctEQaQ5xhFHWS6qLyS8gMUpK4FRJz9zj7kSUr+ggn4RAqYapFXa05thcydfqi+d
tZ+veNggGHqdl5FmrnOasdGSb/6+XgY2BDZxRbnJCRhN6rDvZ87k/IPorXCIIdfE
OcTq3MtyCpmvl835j67NC8tprSXVm6n8BhXkEwRH8C+WlPA+zKdBaRUBuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIQMIvEuNh+B5jzcXDkkMZFWYHPMB8GA1UdIwQY
MBaAFNOaGzWFgMgvzbM7+Sp5YQol225bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDVvYk5ZV0F5Q19Oc3p2NUtubGhDaVhiYmxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8xZmZjMzctOThkMi00ZTMxLWEyZjgt
YzcwMDc0YWY4Y2E2LzEvMDVvYk5ZV0F5Q19Oc3p2NUtubGhDaVhiYmxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8xZmZjMzctOThkMi00ZTMxLWEyZjgtYzcwMDc0YWY4Y2E2
LzEvMDVvYk5ZV0F5Q19Oc3p2NUtubGhDaVhiYmxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm27BpXi3
YuEBmU7NImpF8h39xud2lyb+MRzNcI0YffpikilcobDYHHl078bG8lLSZrZuMT9o
/KHD0LNPEZiGc0VpHHmmDXFVPSEUxacgMfPjFmGl5aqzzHZvqnrfkJhxVVyw2ABT
Qm/KVh9MuIExG3f/HJl83ojFvVfxfnd5TN7MzLxzyQGYcjMcNh8oD4mgsFTjyzJX
8RyYQx4+5kNMRjy5BN3mbTVEIR9Tga5EX1XNJIyCGoPEDg6FNZDh9tdOTU8anQoW
Li0CJmt+JxVrhFS154IvXF1hS6j1fKaPD8YksGDejOQdXUNiWtJzUK+pyS+wQvwa
5iUZSES6DGjENA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:27:13 2026 by rpki-client