Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
File:                     d1F6r0j2aaC-yOxqyGgrTBJObTA.mft (raw, json)
Hash identifier:          tICc/Bdwc5AAZJCGKEisQafF/za2Y/Ysb6g9DLwYUAE=
Subject key identifier:   13:3B:D5:59:E7:11:19:A2:BB:B2:AB:61:57:B6:5B:51:E4:24:14:DE
Authority key identifier: 77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30
Certificate issuer:       /CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
Certificate serial:       019F9323BBA092F9255758209E4371732E0C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
Manifest number:          0740
Signing time:             Fri 24 Jul 2026 08:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:20 +0000
Files and hashes:         1: d1F6r0j2aaC-yOxqyGgrTBJObTA.crl (hash: mUYJQovmDUS/kUt84XlRsXttvYeT5OO1VpzSQ2qX6QQ=)
                          2: kPvxZ2OyeoUeAIvW5z89UU8ASkE.roa (hash: Sv6cjXS82obyL50XzOiS7kDFeEpRD0eJe0mAtx0A7U8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:bb:a0:92:f9:25:57:58:20:9e:43:71:73:2e:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77517aaf48f669a0bec8ec6ac8682b4c124e6d30
        Validity
            Not Before: Jul 24 08:00:20 2026 GMT
            Not After : Jul 25 08:00:20 2026 GMT
        Subject: CN=133bd559e71119a2bbb2ab6157b65b51e42414de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:1a:ae:83:14:96:d8:3d:78:0d:4c:f0:68:ed:
                    60:05:01:92:c9:c5:f1:f5:50:c0:21:2f:1a:cc:47:
                    22:7d:ac:cc:2d:70:27:1e:ba:09:9f:c0:3b:b7:a7:
                    6a:91:c2:c2:f6:b3:b7:29:4b:22:b3:a5:2a:1f:fc:
                    77:63:55:03:a7:bb:64:25:86:b2:97:4c:1a:62:0a:
                    30:2e:3f:19:0c:07:9e:1f:f2:33:a6:4e:ef:8f:2e:
                    a6:7f:12:64:b5:a4:5a:44:55:e7:28:c1:03:42:c5:
                    bb:cf:97:d0:f4:7e:57:a2:b2:7a:2d:44:c4:48:4a:
                    79:0e:b3:a3:cd:0a:08:b4:0e:fc:5b:72:c4:bc:eb:
                    4a:61:4f:cf:be:41:26:06:22:fc:cc:e2:60:2a:2e:
                    44:a9:9f:6d:2f:44:02:63:07:46:3e:ee:3f:9e:12:
                    0e:be:8b:a8:9a:e1:5a:97:67:45:72:96:62:ea:84:
                    ef:6b:ac:13:7f:f9:e1:20:ab:dc:a0:a6:ec:45:2b:
                    51:7f:40:e2:15:6c:c7:3f:f9:8a:77:25:02:91:3d:
                    45:52:07:29:fd:1a:d6:d1:78:ac:4d:c4:ca:78:52:
                    70:9f:39:17:96:26:e2:b6:a0:f5:b9:94:f6:95:49:
                    fd:31:52:cf:94:e1:ba:cb:70:c6:0a:4e:23:cb:40:
                    59:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:3B:D5:59:E7:11:19:A2:BB:B2:AB:61:57:B6:5B:51:E4:24:14:DE
            X509v3 Authority Key Identifier:
                keyid:77:51:7A:AF:48:F6:69:A0:BE:C8:EC:6A:C8:68:2B:4C:12:4E:6D:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1F6r0j2aaC-yOxqyGgrTBJObTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f6a579-244c-4610-bbea-24c626e7f520/1/d1F6r0j2aaC-yOxqyGgrTBJObTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ff:62:35:33:0c:ad:43:44:6d:b1:cc:eb:df:56:38:a9:b0:
         6a:46:21:ca:dd:af:28:41:5e:44:be:08:97:3d:d7:46:0c:50:
         07:20:5b:71:7f:84:88:a4:ad:8b:64:a1:7e:ca:fc:45:5f:5c:
         ec:1a:4c:92:9c:66:05:80:d3:d4:cd:58:02:f2:66:1c:9c:17:
         68:b0:e6:17:a1:17:84:25:45:ac:5b:60:f6:e8:4b:13:a3:46:
         fa:e0:77:79:59:a9:59:9e:2d:6a:e8:c7:3f:56:2a:89:84:45:
         fe:a4:c8:34:ce:a8:27:b9:2f:de:6e:bd:13:5d:d1:4d:0c:dd:
         0e:47:01:b8:d9:77:c6:f9:fe:3c:98:61:3d:ef:42:40:69:d1:
         b0:21:c1:e7:bb:81:7e:b5:d2:1d:80:33:40:a0:39:ea:9f:3e:
         03:a2:98:07:dd:f2:3d:78:1b:5e:f9:d7:93:08:9c:cf:a0:d7:
         26:e7:75:e5:9e:c1:6a:60:42:73:55:26:97:c1:76:12:a9:2b:
         e9:22:cc:17:e5:93:aa:5e:a4:56:ad:c8:f5:18:6e:4d:9d:6e:
         20:df:33:97:3b:46:bf:b5:f7:a3:60:6e:5f:6b:08:fa:b0:1d:
         a8:5d:67:56:76:73:b7:87:aa:16:62:bc:3a:f3:8c:c9:71:a4:
         9a:15:5b:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI7ugkvklV1ggnkNxcy4MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NTE3YWFmNDhmNjY5YTBiZWM4ZWM2YWM4NjgyYjRjMTI0
ZTZkMzAwHhcNMjYwNzI0MDgwMDIwWhcNMjYwNzI1MDgwMDIwWjAzMTEwLwYDVQQD
EygxMzNiZDU1OWU3MTExOWEyYmJiMmFiNjE1N2I2NWI1MWU0MjQxNGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hqugxSW2D14DUzwaO1gBQGSycXx
9VDAIS8azEcifazMLXAnHroJn8A7t6dqkcLC9rO3KUsis6UqH/x3Y1UDp7tkJYay
l0waYgowLj8ZDAeeH/Izpk7vjy6mfxJktaRaRFXnKMEDQsW7z5fQ9H5XorJ6LUTE
SEp5DrOjzQoItA78W3LEvOtKYU/PvkEmBiL8zOJgKi5EqZ9tL0QCYwdGPu4/nhIO
vouomuFal2dFcpZi6oTva6wTf/nhIKvcoKbsRStRf0DiFWzHP/mKdyUCkT1FUgcp
/RrW0XisTcTKeFJwnzkXlibitqD1uZT2lUn9MVLPlOG6y3DGCk4jy0BZLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBM71VnnERmiu7KrYVe2W1HkJBTeMB8GA1UdIwQY
MBaAFHdReq9I9mmgvsjsashoK0wSTm0wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEt
MjRjNjI2ZTdmNTIwLzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYS9mNmE1NzktMjQ0Yy00NjEwLWJiZWEtMjRjNjI2ZTdmNTIw
LzEvZDFGNnIwajJhYUMteU94cXlHZ3JUQkpPYlRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANP9iNTMM
rUNEbbHM699WOKmwakYhyt2vKEFeRL4Ilz3XRgxQByBbcX+EiKSti2Shfsr8RV9c
7BpMkpxmBYDT1M1YAvJmHJwXaLDmF6EXhCVFrFtg9uhLE6NG+uB3eVmpWZ4taujH
P1YqiYRF/qTINM6oJ7kv3m69E13RTQzdDkcBuNl3xvn+PJhhPe9CQGnRsCHB57uB
frXSHYAzQKA56p8+A6KYB93yPXgbXvnXkwicz6DXJud15Z7BamBCc1Uml8F2Eqkr
6SLMF+WTql6kVq3I9RhuTZ1uIN8zlztGv7X3o2BuX2sI+rAdqF1nVnZzt4eqFmK8
OvOMyXGkmhVb9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:41:55 2026 by rpki-client