Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
File:                     sgkwhUDE35ubt9Yyf6e11JAIBow.mft (raw, json)
Hash identifier:          nlVpxIp//zPNN7qtalBI0rZVn0w8GJ4qSy5CpoUw6M0=
Subject key identifier:   0A:32:B5:0F:F0:A6:30:86:2F:4B:63:4A:18:23:CC:ED:8F:00:FE:95
Authority key identifier: B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C
Certificate issuer:       /CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
Certificate serial:       019F9135EACEB04077D7002FAB766570ABA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
Manifest number:          06EE
Signing time:             Thu 23 Jul 2026 23:00:57 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:57 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:57 +0000
Files and hashes:         1: NDmhXzZ8uEuR9tjCtcKsEKDgyyw.roa (hash: 5IZVF4mjF20orEhDUu/WVZB3xhzdmh0JCOjJNcS3hA4=)
                          2: P1pi-fzHu11nz54MgyJAbBSwILI.roa (hash: UTJfTUyPTVBn82h248K6mdRAAGmP9nekxHQ3ON0RaUA=)
                          3: oiH1aC3hd-YG_5l_iFQf6YzX1ZI.roa (hash: /ZDMc+U53FKEQ3a7RMNSx6X/as7T1UTJjmNtNBktR18=)
                          4: sgkwhUDE35ubt9Yyf6e11JAIBow.crl (hash: EkalzTu/JRR7FmtQxHYgWibpog5yhx893N6Ir2t/6Jw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:ea:ce:b0:40:77:d7:00:2f:ab:76:65:70:ab:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b209308540c4df9b9bb7d6327fa7b5d49008068c
        Validity
            Not Before: Jul 23 23:00:57 2026 GMT
            Not After : Jul 24 23:00:57 2026 GMT
        Subject: CN=0a32b50ff0a630862f4b634a1823cced8f00fe95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b4:d7:ef:f0:54:f4:8f:cb:09:6c:6f:ef:e6:
                    b0:10:04:53:5b:16:ce:7f:62:b8:e7:86:d0:15:9a:
                    75:b3:e7:06:00:34:76:8f:22:2a:8f:f2:52:5b:ff:
                    cc:c6:41:d1:4d:58:0f:3a:38:79:7c:2d:88:f5:29:
                    62:eb:48:b8:9d:f1:38:c3:00:fb:98:5e:1d:b5:6d:
                    36:6a:ba:d5:be:10:9d:43:22:dd:a6:01:34:89:11:
                    95:11:47:68:b4:fb:e7:e4:98:d3:d4:93:9b:ad:96:
                    54:f3:56:a8:b5:48:de:0a:bb:62:1a:ca:00:0b:be:
                    96:e7:b9:87:6b:3b:9b:91:b0:96:d9:75:5b:dc:9b:
                    66:b4:3e:70:d9:ce:03:6a:c3:d7:59:c5:49:6a:35:
                    99:e4:bd:97:5f:bb:39:c0:98:55:50:3f:8f:9c:6c:
                    ba:bf:e9:25:7c:6e:00:6b:ff:da:da:9a:de:5b:a9:
                    e0:ef:65:21:cd:fa:71:2b:0d:be:87:b6:c3:1c:5c:
                    27:d1:56:70:c3:e8:8c:46:b6:cf:dc:73:1e:f2:71:
                    7a:48:1c:94:05:f1:d5:5f:d8:29:bf:4e:95:52:3f:
                    45:a2:dc:83:e6:6d:1e:3b:4f:b5:8e:43:8f:9b:d8:
                    17:17:be:ca:81:bc:89:ec:42:5f:09:cc:a7:3a:c9:
                    78:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:32:B5:0F:F0:A6:30:86:2F:4B:63:4A:18:23:CC:ED:8F:00:FE:95
            X509v3 Authority Key Identifier:
                keyid:B2:09:30:85:40:C4:DF:9B:9B:B7:D6:32:7F:A7:B5:D4:90:08:06:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sgkwhUDE35ubt9Yyf6e11JAIBow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/880eb2-fa65-47ca-8a00-6480c3d1f4e4/1/sgkwhUDE35ubt9Yyf6e11JAIBow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:52:8f:c0:df:30:70:3a:97:01:0f:a1:53:e1:e1:59:de:a2:
         e3:20:b3:4c:da:29:ea:3c:db:d1:58:6d:03:6f:fa:8b:d5:f0:
         e7:ea:56:c7:a6:fd:3b:a4:e1:60:2a:a9:b2:9e:96:d7:3e:13:
         3e:0c:6d:cc:c0:e2:5a:12:47:a7:5f:8f:87:46:4f:cf:ba:f6:
         59:29:f4:ec:a0:8f:f4:fd:b5:f7:9a:28:14:71:a7:25:cf:44:
         fd:4e:01:52:c8:54:31:f4:74:1b:47:91:55:f1:ef:33:95:5d:
         01:04:ff:5a:87:cc:77:f4:0c:ae:e8:ac:4f:fd:ea:47:48:61:
         5b:b0:85:fd:12:8b:a7:02:5e:d2:2f:ea:d7:87:89:c7:62:7e:
         6a:e2:57:23:43:dd:9e:7a:17:83:d7:af:03:55:10:01:17:78:
         07:51:2b:24:03:1a:e9:1f:24:09:97:61:14:f2:9c:eb:12:f2:
         3a:4e:0e:b2:d9:9e:18:22:b1:f7:98:0c:65:32:28:32:dd:c1:
         c0:67:9d:a7:46:03:cf:45:be:11:36:34:53:42:4e:fa:e3:c7:
         b7:d0:c8:45:43:57:67:1d:f7:9e:7c:bd:4c:9b:a2:f1:d2:7d:
         d3:71:ed:96:62:96:6b:dd:0e:ef:f0:be:ae:dc:a2:78:09:d5:
         e4:52:85:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNerOsEB31wAvq3ZlcKujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMDkzMDg1NDBjNGRmOWI5YmI3ZDYzMjdmYTdiNWQ0OTAw
ODA2OGMwHhcNMjYwNzIzMjMwMDU3WhcNMjYwNzI0MjMwMDU3WjAzMTEwLwYDVQQD
EygwYTMyYjUwZmYwYTYzMDg2MmY0YjYzNGExODIzY2NlZDhmMDBmZTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbTX7/BU9I/LCWxv7+awEARTWxbO
f2K454bQFZp1s+cGADR2jyIqj/JSW//MxkHRTVgPOjh5fC2I9Sli60i4nfE4wwD7
mF4dtW02arrVvhCdQyLdpgE0iRGVEUdotPvn5JjT1JObrZZU81aotUjeCrtiGsoA
C76W57mHazubkbCW2XVb3JtmtD5w2c4DasPXWcVJajWZ5L2XX7s5wJhVUD+PnGy6
v+klfG4Aa//a2preW6ng72UhzfpxKw2+h7bDHFwn0VZww+iMRrbP3HMe8nF6SByU
BfHVX9gpv06VUj9FotyD5m0eO0+1jkOPm9gXF77KgbyJ7EJfCcynOsl4mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAoytQ/wpjCGL0tjShgjzO2PAP6VMB8GA1UdIwQY
MBaAFLIJMIVAxN+bm7fWMn+ntdSQCAaMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAt
NjQ4MGMzZDFmNGU0LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi84ODBlYjItZmE2NS00N2NhLThhMDAtNjQ4MGMzZDFmNGU0
LzEvc2drd2hVREUzNXVidDlZeWY2ZTExSkFJQm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclKPwN8w
cDqXAQ+hU+HhWd6i4yCzTNop6jzb0VhtA2/6i9Xw5+pWx6b9O6ThYCqpsp6W1z4T
PgxtzMDiWhJHp1+Ph0ZPz7r2WSn07KCP9P2195ooFHGnJc9E/U4BUshUMfR0G0eR
VfHvM5VdAQT/WofMd/QMruisT/3qR0hhW7CF/RKLpwJe0i/q14eJx2J+auJXI0Pd
nnoXg9evA1UQARd4B1ErJAMa6R8kCZdhFPKc6xLyOk4OstmeGCKx95gMZTIoMt3B
wGedp0YDz0W+ETY0U0JO+uPHt9DIRUNXZx33nny9TJui8dJ903HtlmKWa90O7/C+
rtyieAnV5FKFaQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:59:21 2026 by rpki-client