Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
File:                     fBvFitldp4SStC2IY9Rej2qmqiQ.mft (raw, json)
Hash identifier:          dkBpEMBx7UoSH2Sl4ZAMeL83+W7A8eZLeimVxM6ZcjA=
Subject key identifier:   70:63:47:92:55:76:88:91:48:13:F9:E0:24:40:2F:CC:D1:77:FC:98
Authority key identifier: 7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24
Certificate issuer:       /CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
Certificate serial:       019F95B719645250C80075B1F3F4D81DE112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
Manifest number:          1709
Signing time:             Fri 24 Jul 2026 20:00:32 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:32 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:32 +0000
Files and hashes:         1: fBvFitldp4SStC2IY9Rej2qmqiQ.crl (hash: Ea08iJF+1yVJ8wx+9Friz1dgV5l3KEWng4p+N1CbdoQ=)
                          2: iS8uMVcfTxV4oFRPmDdhbpSZpws.roa (hash: MP/qvCm1sWW7tlIkjuMYgAfGTXxSGhkZeUhVHpOpueU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:19:64:52:50:c8:00:75:b1:f3:f4:d8:1d:e1:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c1bc58ad95da78492b42d8863d45e8f6aa6aa24
        Validity
            Not Before: Jul 24 20:00:32 2026 GMT
            Not After : Jul 25 20:00:32 2026 GMT
        Subject: CN=70634792557688914813f9e024402fccd177fc98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c4:67:1d:e5:fa:be:81:20:dd:b8:2d:81:1d:
                    c6:28:7a:90:1e:46:e0:70:78:88:ff:b8:8e:6d:8c:
                    50:92:51:6c:f5:7b:0d:1e:b0:12:aa:14:18:46:40:
                    39:5f:b1:03:45:20:6a:be:1d:b8:80:d9:83:93:66:
                    db:d6:e8:fa:43:79:5c:9b:3a:51:94:1a:40:ad:9c:
                    d3:f7:45:fb:ef:4d:17:62:24:ea:d2:fc:f5:67:c9:
                    d7:31:e8:4a:af:7e:54:7b:d1:8d:9d:fa:e5:17:6e:
                    72:34:aa:01:7f:fb:f3:68:2f:41:ad:4e:63:de:46:
                    3f:fb:ab:63:6a:10:a7:3f:a1:84:67:60:06:c9:cf:
                    4f:6a:3c:fa:59:88:f3:f4:85:32:a4:60:03:dc:c0:
                    e5:61:55:7c:6f:27:ae:b8:26:46:cd:d9:e6:76:8b:
                    cf:97:ac:65:b6:b1:2e:9a:97:6b:ba:7b:6b:4d:1f:
                    58:34:e8:e2:d5:ec:f0:35:c2:33:d6:bc:cf:da:39:
                    5d:05:d6:4d:1a:1d:dc:67:4b:36:4f:84:c2:76:6d:
                    23:d4:ac:ee:e1:bf:7a:46:9a:39:68:fd:53:72:62:
                    d1:7c:34:42:62:91:4e:5b:3e:bf:71:bd:db:eb:ae:
                    7c:79:7c:84:9f:71:43:ef:6a:bf:54:54:0e:e7:97:
                    0d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:63:47:92:55:76:88:91:48:13:F9:E0:24:40:2F:CC:D1:77:FC:98
            X509v3 Authority Key Identifier:
                keyid:7C:1B:C5:8A:D9:5D:A7:84:92:B4:2D:88:63:D4:5E:8F:6A:A6:AA:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fBvFitldp4SStC2IY9Rej2qmqiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5c8818-54d4-4f78-b31d-517f6ff3e4f9/1/fBvFitldp4SStC2IY9Rej2qmqiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9b:e7:80:2a:66:9d:f8:ca:36:9d:c4:12:21:84:2f:30:63:
         fb:7c:d1:7f:18:9d:5d:6a:03:1e:1f:d7:8b:b4:16:c1:df:8f:
         73:e4:51:26:78:5e:cd:7e:96:39:06:1b:0d:91:1d:7c:c8:c7:
         19:58:fc:ae:22:6f:fc:1d:17:7e:a7:36:1e:25:1c:cd:c0:11:
         ee:a2:08:dd:2b:c3:15:57:1c:5b:5e:2c:9f:c9:c2:0a:38:7a:
         17:67:a3:4b:2a:75:95:5b:4a:aa:83:5d:3c:73:28:c7:7c:9b:
         21:05:8a:dd:66:71:aa:a4:fe:68:d7:1d:7a:94:5a:7b:84:fc:
         2d:ab:26:35:0b:6c:40:40:d9:2b:a3:84:b4:59:b0:78:bb:bd:
         ac:bd:44:f4:5b:90:9d:58:6f:87:ed:87:42:fe:45:bf:04:17:
         bd:04:f9:ae:dc:a9:c6:83:59:bd:15:17:a5:04:3f:2c:bc:a2:
         13:67:72:24:a6:0c:43:51:8e:f7:1e:2e:1e:77:2b:85:15:2a:
         47:61:83:9a:cd:1e:9f:54:35:00:9e:44:27:fd:41:29:6f:59:
         d7:9a:86:38:7f:65:d3:5d:c9:25:b0:e4:82:ac:85:41:5f:e6:
         f7:fc:76:9b:7a:7e:d5:a1:e2:97:57:3e:d4:b5:5c:4d:cf:4b:
         19:a9:75:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VtxlkUlDIAHWx8/TYHeESMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjMWJjNThhZDk1ZGE3ODQ5MmI0MmQ4ODYzZDQ1ZThmNmFh
NmFhMjQwHhcNMjYwNzI0MjAwMDMyWhcNMjYwNzI1MjAwMDMyWjAzMTEwLwYDVQQD
Eyg3MDYzNDc5MjU1NzY4ODkxNDgxM2Y5ZTAyNDQwMmZjY2QxNzdmYzk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncRnHeX6voEg3bgtgR3GKHqQHkbg
cHiI/7iObYxQklFs9XsNHrASqhQYRkA5X7EDRSBqvh24gNmDk2bb1uj6Q3lcmzpR
lBpArZzT90X7700XYiTq0vz1Z8nXMehKr35Ue9GNnfrlF25yNKoBf/vzaC9BrU5j
3kY/+6tjahCnP6GEZ2AGyc9Pajz6WYjz9IUypGAD3MDlYVV8byeuuCZGzdnmdovP
l6xltrEumpdruntrTR9YNOji1ezwNcIz1rzP2jldBdZNGh3cZ0s2T4TCdm0j1Kzu
4b96Rpo5aP1TcmLRfDRCYpFOWz6/cb3b6658eXyEn3FD72q/VFQO55cN4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBjR5JVdoiRSBP54CRAL8zRd/yYMB8GA1UdIwQY
MBaAFHwbxYrZXaeEkrQtiGPUXo9qpqokMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQt
NTE3ZjZmZjNlNGY5LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81Yzg4MTgtNTRkNC00Zjc4LWIzMWQtNTE3ZjZmZjNlNGY5
LzEvZkJ2Rml0bGRwNFNTdEMySVk5UmVqMnFtcWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC5vngCpm
nfjKNp3EEiGELzBj+3zRfxidXWoDHh/Xi7QWwd+Pc+RRJnhezX6WOQYbDZEdfMjH
GVj8riJv/B0Xfqc2HiUczcAR7qII3SvDFVccW14sn8nCCjh6F2ejSyp1lVtKqoNd
PHMox3ybIQWK3WZxqqT+aNcdepRae4T8LasmNQtsQEDZK6OEtFmweLu9rL1E9FuQ
nVhvh+2HQv5FvwQXvQT5rtypxoNZvRUXpQQ/LLyiE2dyJKYMQ1GO9x4uHncrhRUq
R2GDms0en1Q1AJ5EJ/1BKW9Z15qGOH9l013JJbDkgqyFQV/m9/x2m3p+1aHil1c+
1LVcTc9LGal1Fg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 23:20:37 2026 by rpki-client