Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
File:                     eD8ukq1ZxwyM3CiygCniKXBcbJE.mft (raw, json)
Hash identifier:          QD/1mao+9Xetw5hK2OBDosZURH6fQyGD/Er+KOgIXvg=
Subject key identifier:   BD:BA:0B:AF:1B:99:07:3C:E2:9E:D4:E0:6B:72:9D:2D:16:36:BA:0F
Authority key identifier: 78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91
Certificate issuer:       /CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
Certificate serial:       019F90C77C233B7E8EB370941430DF29DB4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
Manifest number:          0EB7
Signing time:             Thu 23 Jul 2026 21:00:20 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:20 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:20 +0000
Files and hashes:         1: cqkPcUlhylPWROpeUvaKpM1IHzI.roa (hash: Vj/WfOnXkP6T4SuWUuZJIwljoQd2+9R6QoAl56Tye4o=)
                          2: eD8ukq1ZxwyM3CiygCniKXBcbJE.crl (hash: y0E3ftnPPf/Gui8VHQJ8elBu3UEfmD9ui4yrFx8/MqM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:7c:23:3b:7e:8e:b3:70:94:14:30:df:29:db:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=783f2e92ad59c70c8cdc28b28029e229705c6c91
        Validity
            Not Before: Jul 23 21:00:20 2026 GMT
            Not After : Jul 24 21:00:20 2026 GMT
        Subject: CN=bdba0baf1b99073ce29ed4e06b729d2d1636ba0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8a:ef:3b:80:49:a9:f7:8e:b3:20:82:64:13:
                    79:6a:8c:9c:ed:56:17:fb:50:b1:6a:ce:0d:54:4e:
                    48:16:69:60:14:66:58:12:13:b5:e8:f9:65:dd:4a:
                    54:2d:6a:c0:f4:c9:07:ac:a4:b1:7b:ee:28:6b:fe:
                    cb:d7:f7:5b:0f:7a:50:b3:22:72:ee:3e:40:56:7d:
                    d1:6b:7d:2d:f2:da:7c:f5:86:86:b2:23:a9:b7:e6:
                    ca:5b:c8:98:6f:28:ff:e2:97:5c:17:5f:25:41:8a:
                    c7:4b:9a:0f:b3:74:c6:19:97:82:79:27:7d:1e:b2:
                    64:a4:92:b3:8a:0a:e9:e4:72:37:f4:aa:20:88:a6:
                    e4:64:d4:74:85:63:97:96:da:4c:dd:9a:96:d5:48:
                    7d:f0:85:14:b6:75:6e:15:a0:a1:5c:06:9f:7e:7f:
                    f8:9d:e9:a8:fb:b4:73:82:b6:cf:fb:65:ba:56:0b:
                    71:5b:16:1f:06:27:12:cb:cb:aa:d9:5b:2e:81:e1:
                    a6:8c:84:54:a8:68:b2:a6:dc:29:4a:27:25:e5:71:
                    f1:84:60:79:f0:c1:dc:f4:51:76:8b:a9:15:e1:73:
                    5a:1c:d0:ed:e9:da:97:92:c6:3f:e4:47:47:24:1b:
                    d3:ea:f0:89:83:14:7f:4b:64:7d:ff:5d:b4:a9:28:
                    be:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:BA:0B:AF:1B:99:07:3C:E2:9E:D4:E0:6B:72:9D:2D:16:36:BA:0F
            X509v3 Authority Key Identifier:
                keyid:78:3F:2E:92:AD:59:C7:0C:8C:DC:28:B2:80:29:E2:29:70:5C:6C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eD8ukq1ZxwyM3CiygCniKXBcbJE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/57b414-5091-4657-a9b4-e9af566f2c14/1/eD8ukq1ZxwyM3CiygCniKXBcbJE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:c8:8c:9d:de:e7:75:c2:8f:01:03:84:ec:07:64:30:71:a8:
         a1:c1:51:3d:0a:13:20:a9:2a:af:a9:dc:d3:2e:9c:dc:ce:39:
         b3:bb:8b:9c:e7:99:04:ad:65:0e:bd:4b:8d:82:27:d4:7d:12:
         f8:e7:38:f8:04:aa:7f:39:68:64:d2:a9:3b:7f:f4:fb:f0:1e:
         24:00:0a:e9:a0:28:60:2a:73:61:2e:f7:ab:d4:2a:fb:aa:81:
         5b:1d:de:12:7c:2f:36:c7:3f:34:e7:e7:aa:8f:e2:08:97:7e:
         4c:19:ab:a7:dd:76:8b:66:fd:f7:a2:2d:8b:de:27:25:87:22:
         bd:95:22:5b:64:15:88:27:a5:bc:8f:5a:8b:40:32:bc:a5:c0:
         50:71:b6:1b:83:e3:39:9f:f2:32:f3:6f:55:f7:75:c5:9f:e3:
         2a:c8:fb:1e:aa:14:c6:de:97:62:46:73:bb:6f:57:f9:f9:4e:
         53:68:a7:ff:06:74:77:07:37:8a:b9:1b:fb:9d:c6:42:5a:bc:
         6d:11:a3:06:7c:ca:01:3b:8c:b8:51:d3:dc:45:aa:51:df:e3:
         e7:c5:c1:1f:91:71:8c:61:52:65:e4:3b:47:8a:62:10:fe:c8:
         31:11:dd:b1:3f:6e:9b:6d:31:a9:ff:23:a6:3a:6f:2c:c1:44:
         c3:cc:b8:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx3wjO36Os3CUFDDfKdtMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc4M2YyZTkyYWQ1OWM3MGM4Y2RjMjhiMjgwMjllMjI5NzA1
YzZjOTEwHhcNMjYwNzIzMjEwMDIwWhcNMjYwNzI0MjEwMDIwWjAzMTEwLwYDVQQD
EyhiZGJhMGJhZjFiOTkwNzNjZTI5ZWQ0ZTA2YjcyOWQyZDE2MzZiYTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44rvO4BJqfeOsyCCZBN5aoyc7VYX
+1Cxas4NVE5IFmlgFGZYEhO16Pll3UpULWrA9MkHrKSxe+4oa/7L1/dbD3pQsyJy
7j5AVn3Ra30t8tp89YaGsiOpt+bKW8iYbyj/4pdcF18lQYrHS5oPs3TGGZeCeSd9
HrJkpJKzigrp5HI39KogiKbkZNR0hWOXltpM3ZqW1Uh98IUUtnVuFaChXAaffn/4
nemo+7RzgrbP+2W6VgtxWxYfBicSy8uq2VsugeGmjIRUqGiyptwpSicl5XHxhGB5
8MHc9FF2i6kV4XNaHNDt6dqXksY/5EdHJBvT6vCJgxR/S2R9/120qSi+XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL26C68bmQc84p7U4GtynS0WNroPMB8GA1UdIwQY
MBaAFHg/LpKtWccMjNwosoAp4ilwXGyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQt
ZTlhZjU2NmYyYzE0LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS81N2I0MTQtNTA5MS00NjU3LWE5YjQtZTlhZjU2NmYyYzE0
LzEvZUQ4dWtxMVp4d3lNM0NpeWdDbmlLWEJjYkpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASMiMnd7n
dcKPAQOE7AdkMHGoocFRPQoTIKkqr6nc0y6c3M45s7uLnOeZBK1lDr1LjYIn1H0S
+Oc4+ASqfzloZNKpO3/0+/AeJAAK6aAoYCpzYS73q9Qq+6qBWx3eEnwvNsc/NOfn
qo/iCJd+TBmrp912i2b996Iti94nJYcivZUiW2QViCelvI9ai0AyvKXAUHG2G4Pj
OZ/yMvNvVfd1xZ/jKsj7HqoUxt6XYkZzu29X+flOU2in/wZ0dwc3irkb+53GQlq8
bRGjBnzKATuMuFHT3EWqUd/j58XBH5FxjGFSZeQ7R4piEP7IMRHdsT9um20xqf8j
pjpvLMFEw8y4SA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:24:05 2026 by rpki-client