Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
File:                     PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft (raw, json)
Hash identifier:          tk4tSoXiAHQIcZ/pIM6A2nIrj7M7xNvYYFuKj4i/kF4=
Subject key identifier:   C1:53:99:8D:E3:91:00:C7:54:F4:5D:B4:A6:74:BA:61:A3:17:D2:0D
Authority key identifier: 3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09
Certificate issuer:       /CN=3de4598e21736501a73944c107114c850c7d8b09
Certificate serial:       019F9436E9CF6A16D734E3B0554BA720B24E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
Manifest number:          16F4
Signing time:             Fri 24 Jul 2026 13:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 13:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 13:00:54 +0000
Files and hashes:         1: OVRZqerAEA6FdBHYTHLhizGh3Lk.roa (hash: W21lAIvc4nqkkHrKrS73psgIVNPGbE549XUQirrqwIg=)
                          2: PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl (hash: XPj1kw2ryPtETzZM2DEKx24cK5UXZi6brvYKcJGKrgY=)
                          3: e44guLfP35rbMYmq1et0-pJl0Xg.roa (hash: xefm7hUzpQcUW8PNo6qYp/Qx0pr2/QhPaTWWMRnSDm8=)
                          4: iDGiu9b2-5gZed1g0VFujNY9Peg.roa (hash: ZId1dGdqtQ2GMpbChYr39bY2N4BezjujTh90i4mM35w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:36:e9:cf:6a:16:d7:34:e3:b0:55:4b:a7:20:b2:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de4598e21736501a73944c107114c850c7d8b09
        Validity
            Not Before: Jul 24 13:00:54 2026 GMT
            Not After : Jul 25 13:00:54 2026 GMT
        Subject: CN=c153998de39100c754f45db4a674ba61a317d20d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:e6:46:f8:c5:5b:e9:19:43:17:d6:35:61:
                    c8:54:d0:24:98:92:90:48:09:a5:2f:5b:31:74:00:
                    a0:52:c2:46:40:03:0a:b2:cc:f3:c9:6f:16:df:f0:
                    6f:51:d8:b0:f4:f6:b5:1d:2d:16:cd:90:82:79:fe:
                    77:b3:0b:2c:34:cf:a0:f1:3f:f4:a8:b8:96:f1:12:
                    2d:e9:7a:eb:44:7f:47:f8:93:b5:f0:d6:e3:a1:52:
                    90:81:ef:4a:e6:d0:e9:6e:85:1f:5e:da:ec:18:0c:
                    49:7e:2f:85:13:57:e1:82:67:3a:ca:21:87:f6:f0:
                    c5:c1:33:7d:06:82:aa:c2:6e:b9:ad:37:e8:26:9b:
                    ff:93:43:de:f3:46:4b:30:63:26:aa:9b:0e:d7:db:
                    4a:bc:4a:44:eb:db:15:1b:9a:14:96:e2:a3:73:ef:
                    16:19:ca:80:c2:7b:f9:03:cf:c1:2c:fd:03:e5:d7:
                    d0:35:8b:a5:5d:80:75:53:36:e4:4c:6c:5f:be:5c:
                    01:74:d6:8e:18:18:77:d0:55:57:6b:81:4f:b2:5f:
                    a0:b6:fe:63:34:77:4e:21:08:2e:42:ce:cf:72:ac:
                    de:6b:0b:e1:af:dd:09:19:6b:3b:ed:b2:25:bd:b3:
                    8a:c8:94:38:88:90:b6:32:52:34:16:31:80:53:bc:
                    51:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:53:99:8D:E3:91:00:C7:54:F4:5D:B4:A6:74:BA:61:A3:17:D2:0D
            X509v3 Authority Key Identifier:
                keyid:3D:E4:59:8E:21:73:65:01:A7:39:44:C1:07:11:4C:85:0C:7D:8B:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeRZjiFzZQGnOUTBBxFMhQx9iwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/4d3b8c-7239-483c-a48c-7d608bee3167/1/PeRZjiFzZQGnOUTBBxFMhQx9iwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e4:3e:47:ec:6b:80:20:b0:db:02:18:d3:3d:f3:38:eb:23:
         ab:b3:81:b8:0e:a4:d9:5c:db:61:16:30:5a:98:df:b4:09:70:
         29:07:14:91:e1:49:95:05:07:e9:33:25:81:b8:05:fa:33:db:
         7a:75:15:21:0c:fb:20:2c:d3:4b:f4:bf:16:e4:30:de:81:7a:
         b6:8f:b3:70:9f:27:72:c1:56:63:dd:94:bd:40:10:7d:08:02:
         86:1e:88:7a:a1:cd:6d:81:f8:84:4e:53:30:c6:73:71:62:f0:
         15:6d:9e:ca:52:6c:6f:5d:24:7b:33:8b:bb:ae:85:e0:60:2e:
         ef:2e:01:0e:16:e3:f6:92:fe:91:8f:16:c7:86:28:b5:6e:60:
         d8:73:30:0b:4f:28:3a:c6:3d:6a:67:e8:98:63:81:22:b1:11:
         97:d8:08:bc:4e:08:70:ca:5c:eb:ee:73:cb:2e:aa:72:12:69:
         27:00:86:0c:e3:07:7d:69:0e:dc:c4:b4:fe:ac:60:2f:81:34:
         12:cd:d4:fb:6c:ff:e5:2b:92:65:17:fc:8d:34:b0:3a:32:d3:
         8b:8b:be:dd:09:be:e1:f7:09:83:ad:16:55:3c:54:4d:c4:04:
         23:83:fd:d9:cc:83:ab:3b:91:60:0b:6a:41:5f:2e:a0:fb:a5:
         f0:5a:b7:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UNunPahbXNOOwVUunILJOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZTQ1OThlMjE3MzY1MDFhNzM5NDRjMTA3MTE0Yzg1MGM3
ZDhiMDkwHhcNMjYwNzI0MTMwMDU0WhcNMjYwNzI1MTMwMDU0WjAzMTEwLwYDVQQD
EyhjMTUzOTk4ZGUzOTEwMGM3NTRmNDVkYjRhNjc0YmE2MWEzMTdkMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxnmRvjFW+kZQxfWNWHIVNAkmJKQ
SAmlL1sxdACgUsJGQAMKsszzyW8W3/BvUdiw9Pa1HS0WzZCCef53swssNM+g8T/0
qLiW8RIt6XrrRH9H+JO18NbjoVKQge9K5tDpboUfXtrsGAxJfi+FE1fhgmc6yiGH
9vDFwTN9BoKqwm65rTfoJpv/k0Pe80ZLMGMmqpsO19tKvEpE69sVG5oUluKjc+8W
GcqAwnv5A8/BLP0D5dfQNYulXYB1UzbkTGxfvlwBdNaOGBh30FVXa4FPsl+gtv5j
NHdOIQguQs7Pcqzeawvhr90JGWs77bIlvbOKyJQ4iJC2MlI0FjGAU7xRKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFTmY3jkQDHVPRdtKZ0umGjF9INMB8GA1UdIwQY
MBaAFD3kWY4hc2UBpzlEwQcRTIUMfYsJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMt
N2Q2MDhiZWUzMTY3LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi80ZDNiOGMtNzIzOS00ODNjLWE0OGMtN2Q2MDhiZWUzMTY3
LzEvUGVSWmppRnpaUUduT1VUQkJ4Rk1oUXg5aXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGuQ+R+xr
gCCw2wIY0z3zOOsjq7OBuA6k2VzbYRYwWpjftAlwKQcUkeFJlQUH6TMlgbgF+jPb
enUVIQz7ICzTS/S/FuQw3oF6to+zcJ8ncsFWY92UvUAQfQgChh6IeqHNbYH4hE5T
MMZzcWLwFW2eylJsb10kezOLu66F4GAu7y4BDhbj9pL+kY8Wx4YotW5g2HMwC08o
OsY9amfomGOBIrERl9gIvE4IcMpc6+5zyy6qchJpJwCGDOMHfWkO3MS0/qxgL4E0
Es3U+2z/5SuSZRf8jTSwOjLTi4u+3Qm+4fcJg60WVTxUTcQEI4P92cyDqzuRYAtq
QV8uoPul8Fq36A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:42:00 2026 by rpki-client