Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
File:                     7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft (raw, json)
Hash identifier:          RSGXRnyOBZfE1D1bgCDUWuQ4vsQiSzUVvbereXqBuV4=
Subject key identifier:   98:F6:84:74:99:81:5A:24:03:10:42:A1:19:06:09:3E:9B:96:B9:63
Authority key identifier: EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36
Certificate issuer:       /CN=ef24e3b328d1191efe115521c6fec6adb556dc36
Certificate serial:       019F9059AB2555A371B781BE3A21AC86FB5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
Manifest number:          1052
Signing time:             Thu 23 Jul 2026 19:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:23 +0000
Files and hashes:         1: 7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl (hash: d7CrjJKcxkqo2gMDmbIOIxZKRKrlZ/pLq+ENXb/O/Cg=)
                          2: rC0spcl-pdrTbDRKzG5ofIHYKcI.roa (hash: lCBqHzXRs9Yu91X4wPPiBVftfQRsm2XGgS23G8xgYj0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:ab:25:55:a3:71:b7:81:be:3a:21:ac:86:fb:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef24e3b328d1191efe115521c6fec6adb556dc36
        Validity
            Not Before: Jul 23 19:00:23 2026 GMT
            Not After : Jul 24 19:00:23 2026 GMT
        Subject: CN=98f6847499815a24031042a11906093e9b96b963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:80:b0:1c:10:92:5e:10:08:81:28:99:ad:12:
                    2b:78:d3:83:3f:3e:7c:54:93:a2:c7:4d:8f:b5:9f:
                    17:37:a9:30:49:1f:af:cb:81:7a:64:be:9d:2f:32:
                    b6:f7:4c:ae:da:ce:5a:62:6e:05:ce:79:2c:82:a4:
                    c6:39:3a:60:c5:65:c8:0f:58:7c:65:b1:ad:52:f5:
                    1e:1e:6b:4c:4a:92:35:83:ca:77:5c:30:74:eb:97:
                    b0:e2:b2:5e:b2:b7:ac:df:cc:65:3f:17:8e:9b:90:
                    51:85:b8:4d:50:f7:2a:b7:8e:dc:d7:be:84:d5:5a:
                    ef:76:6d:1d:15:ff:9f:06:7d:cb:e3:75:78:4a:09:
                    d1:21:e5:c3:ed:7a:66:fc:f7:7c:c4:d0:26:77:7e:
                    9b:95:1b:b8:8c:b9:87:34:6e:5e:c7:c1:89:e6:3f:
                    d6:33:07:33:1e:74:d0:d3:1a:2d:30:b0:1d:13:e4:
                    b9:15:3b:77:db:5d:86:34:68:cc:0e:c6:53:89:a5:
                    ec:c6:b4:05:b3:04:d7:6c:7c:82:9f:60:16:4b:a4:
                    40:bf:40:94:10:3b:16:83:27:c3:ca:1c:31:a8:b0:
                    53:0e:0f:e7:6d:5d:c1:4f:14:83:94:19:49:d8:b9:
                    a9:53:b2:b4:10:88:01:6f:7f:98:ba:10:64:b1:cb:
                    64:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F6:84:74:99:81:5A:24:03:10:42:A1:19:06:09:3E:9B:96:B9:63
            X509v3 Authority Key Identifier:
                keyid:EF:24:E3:B3:28:D1:19:1E:FE:11:55:21:C6:FE:C6:AD:B5:56:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7yTjsyjRGR7-EVUhxv7GrbVW3DY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/f4bfc1-e3f1-4fc9-aee6-08230cc50ea9/1/7yTjsyjRGR7-EVUhxv7GrbVW3DY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:5e:9d:5e:d7:0c:cd:e7:b1:c8:68:34:f3:af:8d:ca:b9:3e:
         d0:b4:d7:ea:62:76:ac:bf:fa:42:21:29:95:f8:d9:6c:58:91:
         ed:52:bc:1f:d2:72:71:0a:8c:87:fd:34:59:39:f5:45:a0:d0:
         5f:ec:96:9f:66:05:12:c2:dd:d1:be:34:fa:58:47:19:ab:e6:
         65:27:91:23:99:08:03:3c:69:c0:72:65:e1:e4:fe:8b:0c:1a:
         b2:7b:69:0d:a8:03:91:7b:88:c5:68:47:f0:43:bd:e1:dd:f2:
         ad:84:07:47:20:ef:be:88:e9:8c:fd:f8:f0:fd:08:f2:07:dd:
         4c:5b:fd:8e:7e:40:9b:cc:76:c4:ed:90:77:95:6d:d0:94:b4:
         87:f7:1c:72:46:4f:65:52:c8:08:f9:ea:de:bf:63:a8:c7:24:
         3f:da:1f:83:e7:66:90:f6:21:00:ae:5d:ba:4c:7d:bf:8c:a5:
         0e:7a:38:67:fb:0b:65:6c:55:7a:ad:be:bf:9f:42:37:0b:ec:
         ba:2e:43:84:da:69:2c:07:63:2a:61:f7:af:48:23:23:63:94:
         22:6a:f4:75:3f:24:4c:2a:c1:b9:eb:57:6f:56:04:c3:ab:12:
         a8:83:5e:b8:ee:5b:7e:79:dc:62:05:15:51:e4:b1:55:3f:73:
         4b:0c:5c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWaslVaNxt4G+OiGshvtcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmMjRlM2IzMjhkMTE5MWVmZTExNTUyMWM2ZmVjNmFkYjU1
NmRjMzYwHhcNMjYwNzIzMTkwMDIzWhcNMjYwNzI0MTkwMDIzWjAzMTEwLwYDVQQD
Eyg5OGY2ODQ3NDk5ODE1YTI0MDMxMDQyYTExOTA2MDkzZTliOTZiOTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnICwHBCSXhAIgSiZrRIreNODPz58
VJOix02PtZ8XN6kwSR+vy4F6ZL6dLzK290yu2s5aYm4FznksgqTGOTpgxWXID1h8
ZbGtUvUeHmtMSpI1g8p3XDB065ew4rJesres38xlPxeOm5BRhbhNUPcqt47c176E
1Vrvdm0dFf+fBn3L43V4SgnRIeXD7Xpm/Pd8xNAmd36blRu4jLmHNG5ex8GJ5j/W
MwczHnTQ0xotMLAdE+S5FTt3212GNGjMDsZTiaXsxrQFswTXbHyCn2AWS6RAv0CU
EDsWgyfDyhwxqLBTDg/nbV3BTxSDlBlJ2LmpU7K0EIgBb3+YuhBksctkcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj2hHSZgVokAxBCoRkGCT6blrljMB8GA1UdIwQY
MBaAFO8k47Mo0Rke/hFVIcb+xq21Vtw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYt
MDgyMzBjYzUwZWE5LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9mNGJmYzEtZTNmMS00ZmM5LWFlZTYtMDgyMzBjYzUwZWE5
LzEvN3lUanN5alJHUjctRVZVaHh2N0dyYlZXM0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp16dXtcM
zeexyGg086+Nyrk+0LTX6mJ2rL/6QiEplfjZbFiR7VK8H9JycQqMh/00WTn1RaDQ
X+yWn2YFEsLd0b40+lhHGavmZSeRI5kIAzxpwHJl4eT+iwwasntpDagDkXuIxWhH
8EO94d3yrYQHRyDvvojpjP348P0I8gfdTFv9jn5Am8x2xO2Qd5Vt0JS0h/ccckZP
ZVLICPnq3r9jqMckP9ofg+dmkPYhAK5dukx9v4ylDno4Z/sLZWxVeq2+v59CNwvs
ui5DhNppLAdjKmH3r0gjI2OUImr0dT8kTCrBuetXb1YEw6sSqINeuO5bfnncYgUV
UeSxVT9zSwxc7w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:27 2026 by rpki-client