Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
File:                     0uuxFmwGDbJd-U8CvS-PnabE3Us.mft (raw, json)
Hash identifier:          kob4ItEVo4xuNzleDHbGYW/1Mhh6ZISEMp7JxPNAjQU=
Subject key identifier:   02:7B:85:CF:B9:15:1A:90:2B:28:CD:1C:66:78:93:8D:56:33:86:30
Authority key identifier: D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B
Certificate issuer:       /CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
Certificate serial:       019F91DABF6B7CB7374E5E2ACAA89203DF37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
Manifest number:          1582
Signing time:             Fri 24 Jul 2026 02:00:59 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:59 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:59 +0000
Files and hashes:         1: 0uuxFmwGDbJd-U8CvS-PnabE3Us.crl (hash: gPG1vspnAoTsz9AaDdLf6ImHkzA6SnGHipKol78HncM=)
                          2: 6SrhIYq9krVCM2Q_wIAA5M-Z-Lc.roa (hash: sAYJD+I7oIyAkdboyJMkSqHc+dfvfVcmdQnsD35+5Do=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:bf:6b:7c:b7:37:4e:5e:2a:ca:a8:92:03:df:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2ebb1166c060db25df94f02bd2f8f9da6c4dd4b
        Validity
            Not Before: Jul 24 02:00:59 2026 GMT
            Not After : Jul 25 02:00:59 2026 GMT
        Subject: CN=027b85cfb9151a902b28cd1c6678938d56338630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:c0:72:c0:bf:86:ad:7d:ef:33:63:97:5f:d2:
                    bd:1b:3d:55:24:c8:95:ea:89:cb:9b:c6:22:cc:b2:
                    f1:ec:9f:74:6a:da:e9:29:8f:c5:97:93:42:47:be:
                    ec:55:9e:a5:33:e2:72:61:5d:d6:5e:d3:03:5a:4f:
                    80:9e:49:ce:ca:89:bf:b5:3a:4e:f4:0d:96:6b:c9:
                    e0:bf:9f:fe:cd:2c:a2:26:f3:0a:96:ed:ae:ef:f3:
                    3e:2a:f6:62:1d:df:c3:fe:bc:83:84:08:45:03:56:
                    ca:eb:37:07:ce:cd:b7:fa:9c:e9:60:74:58:06:17:
                    97:e8:be:12:95:e9:52:24:e3:0d:2b:cc:d4:c8:44:
                    44:37:50:86:96:26:57:9c:1d:a8:43:f1:dc:38:24:
                    c7:a2:57:73:e3:35:2f:c1:08:f6:9a:d5:26:e4:ac:
                    4c:5a:31:cf:e6:2e:40:ff:1d:3b:55:0a:9f:53:eb:
                    b2:e7:3a:7b:85:59:40:04:d9:53:74:86:70:3d:81:
                    97:11:d0:d4:8f:4d:7e:3d:25:06:56:a5:b7:0a:c1:
                    c2:ab:55:f3:97:f2:bc:75:9c:f7:15:31:dd:7c:0c:
                    2e:17:e5:7f:3a:71:eb:20:73:b5:99:24:da:70:10:
                    59:cb:68:ef:3d:cc:e5:53:ca:b3:9b:74:47:96:45:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:7B:85:CF:B9:15:1A:90:2B:28:CD:1C:66:78:93:8D:56:33:86:30
            X509v3 Authority Key Identifier:
                keyid:D2:EB:B1:16:6C:06:0D:B2:5D:F9:4F:02:BD:2F:8F:9D:A6:C4:DD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0uuxFmwGDbJd-U8CvS-PnabE3Us.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fbd382-10d0-4684-8836-eed1d0967078/1/0uuxFmwGDbJd-U8CvS-PnabE3Us.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:dd:f1:cf:29:da:61:1c:25:3d:ff:4b:71:cd:5a:9a:f4:2e:
         81:e0:be:f3:83:6c:07:f4:22:fa:17:bf:ca:9d:ef:17:c9:50:
         02:40:f4:b3:ea:37:38:db:5b:3f:66:fe:78:3c:52:5d:76:e6:
         6c:16:11:d5:ad:a4:c2:2f:1d:74:6e:93:b7:df:6c:00:bf:27:
         38:6b:69:c6:d5:91:80:75:a9:25:8c:14:d4:52:34:27:7f:96:
         f6:dd:8c:4f:f1:a0:17:05:34:e1:6a:5d:7f:f8:a8:bb:28:98:
         6e:ec:d9:e9:90:1c:37:0f:20:42:19:75:42:5c:7a:0a:3e:93:
         40:77:ce:17:13:20:7c:d2:a5:45:25:20:eb:10:19:e7:22:08:
         3e:8b:92:71:8f:e2:18:77:4e:68:41:f2:1f:90:66:12:02:ae:
         7c:31:9e:78:d3:f9:a9:42:ec:14:e2:5f:71:b6:1a:ab:64:26:
         0b:93:de:a8:6c:8d:f5:b7:a2:98:80:91:4d:7b:8a:cc:76:e1:
         1c:0d:ab:bd:00:6d:d8:d8:75:03:c8:56:a0:d1:d2:e4:1d:c4:
         44:76:ff:e9:ae:e1:93:55:e4:01:c2:3b:0b:09:08:b6:e2:4b:
         3e:00:2e:bb:cd:84:0b:c9:02:ec:58:44:f9:35:42:5e:a7:99:
         8d:83:b7:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2r9rfLc3Tl4qyqiSA983MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyZWJiMTE2NmMwNjBkYjI1ZGY5NGYwMmJkMmY4ZjlkYTZj
NGRkNGIwHhcNMjYwNzI0MDIwMDU5WhcNMjYwNzI1MDIwMDU5WjAzMTEwLwYDVQQD
EygwMjdiODVjZmI5MTUxYTkwMmIyOGNkMWM2Njc4OTM4ZDU2MzM4NjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMBywL+GrX3vM2OXX9K9Gz1VJMiV
6onLm8YizLLx7J90atrpKY/Fl5NCR77sVZ6lM+JyYV3WXtMDWk+AnknOyom/tTpO
9A2Wa8ngv5/+zSyiJvMKlu2u7/M+KvZiHd/D/ryDhAhFA1bK6zcHzs23+pzpYHRY
BheX6L4SlelSJOMNK8zUyEREN1CGliZXnB2oQ/HcOCTHoldz4zUvwQj2mtUm5KxM
WjHP5i5A/x07VQqfU+uy5zp7hVlABNlTdIZwPYGXEdDUj01+PSUGVqW3CsHCq1Xz
l/K8dZz3FTHdfAwuF+V/OnHrIHO1mSTacBBZy2jvPczlU8qzm3RHlkXp6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJ7hc+5FRqQKyjNHGZ4k41WM4YwMB8GA1UdIwQY
MBaAFNLrsRZsBg2yXflPAr0vj52mxN1LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYt
ZWVkMWQwOTY3MDc4LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mYmQzODItMTBkMC00Njg0LTg4MzYtZWVkMWQwOTY3MDc4
LzEvMHV1eEZtd0dEYkpkLVU4Q3ZTLVBuYWJFM1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMN3xzyna
YRwlPf9Lcc1amvQugeC+84NsB/Qi+he/yp3vF8lQAkD0s+o3ONtbP2b+eDxSXXbm
bBYR1a2kwi8ddG6Tt99sAL8nOGtpxtWRgHWpJYwU1FI0J3+W9t2MT/GgFwU04Wpd
f/iouyiYbuzZ6ZAcNw8gQhl1Qlx6Cj6TQHfOFxMgfNKlRSUg6xAZ5yIIPouScY/i
GHdOaEHyH5BmEgKufDGeeNP5qULsFOJfcbYaq2QmC5PeqGyN9beimICRTXuKzHbh
HA2rvQBt2Nh1A8hWoNHS5B3ERHb/6a7hk1XkAcI7CwkItuJLPgAuu82EC8kC7FhE
+TVCXqeZjYO37A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:32:33 2026 by rpki-client