Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
File:                     d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft (raw, json)
Hash identifier:          GAeQjo1cSo0+uuvUi+ukmT9pl1W5q7o5lfeiHr0LvdA=
Subject key identifier:   08:64:9B:60:DE:A2:A0:55:E2:98:32:C9:83:2F:FA:FE:6F:6C:99:1D
Authority key identifier: 77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B
Certificate issuer:       /CN=77724112f0285d830c87ee3256d51968f15bb90b
Certificate serial:       019F940021DB99DE4A84D8BC61C71BCBE84D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
Manifest number:          0185
Signing time:             Fri 24 Jul 2026 12:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 12:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 12:01:04 +0000
Files and hashes:         1: 6p1ednwrZQ_JDbcmNlbUx0LPSFQ.roa (hash: hIJJSdmlqRlS5NfeTFhoCLt5Vs93+x5E1RzMdfdB3oA=)
                          2: d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl (hash: UtNfyfKAvHxMDvaBZ9/krAYIcsoP6+Ba9WrRAis+glU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:00:21:db:99:de:4a:84:d8:bc:61:c7:1b:cb:e8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77724112f0285d830c87ee3256d51968f15bb90b
        Validity
            Not Before: Jul 24 12:01:04 2026 GMT
            Not After : Jul 25 12:01:04 2026 GMT
        Subject: CN=08649b60dea2a055e29832c9832ffafe6f6c991d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f8:d1:05:aa:85:07:75:3f:8f:d2:48:7e:2a:
                    b2:39:29:5b:8f:45:10:f7:17:d8:d9:e4:e0:0c:b1:
                    f5:1e:c6:80:57:c7:9a:69:ea:88:63:c5:43:5c:b5:
                    e9:4a:15:5c:f9:1c:45:28:84:5d:d3:f1:18:d1:e9:
                    7d:9c:79:8a:fd:b3:1f:bc:f3:77:c1:f3:da:25:3b:
                    db:fd:4d:5c:af:f0:b0:d0:f8:da:ee:56:31:a1:5e:
                    25:46:34:43:4e:21:4d:73:4c:7e:ea:cd:8a:88:d2:
                    5a:72:4e:74:76:42:aa:c0:08:2f:dd:97:52:0b:0f:
                    27:9a:99:08:12:d8:c3:e5:5d:99:d3:32:00:d8:d4:
                    86:f2:73:39:c9:4d:fb:b4:8d:19:e9:6d:1e:91:c6:
                    dd:0c:06:e3:2a:ae:33:26:a7:92:70:3c:0f:6d:3b:
                    15:eb:69:5e:e8:24:bd:0a:bd:ba:46:98:3f:80:de:
                    6a:a4:36:b1:9c:90:82:5a:74:f3:c2:57:fc:61:0d:
                    48:08:6d:48:75:6c:da:9a:7a:8a:0e:ab:12:9b:b7:
                    8d:41:96:b4:9d:32:d8:29:06:dc:58:8c:75:09:9f:
                    c6:6b:21:ad:a7:78:45:13:09:f1:ee:60:9d:9b:56:
                    37:9f:98:32:8f:a7:09:16:82:0c:fe:3a:cc:b4:65:
                    f6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:64:9B:60:DE:A2:A0:55:E2:98:32:C9:83:2F:FA:FE:6F:6C:99:1D
            X509v3 Authority Key Identifier:
                keyid:77:72:41:12:F0:28:5D:83:0C:87:EE:32:56:D5:19:68:F1:5B:B9:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3JBEvAoXYMMh-4yVtUZaPFbuQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b27704-ef52-44a7-bdd1-f9f91e4e31fa/1/d3JBEvAoXYMMh-4yVtUZaPFbuQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:13:f9:8d:d6:e2:c5:56:12:59:b5:e4:3a:b2:87:57:53:3e:
         19:0c:ab:94:7c:18:bf:3e:78:91:a7:9a:3f:05:d4:b3:1b:b6:
         a7:d2:f0:0d:d0:7f:ae:93:1a:3f:a5:36:49:5f:1b:0e:60:7c:
         f4:b3:4b:c4:ff:30:ad:2a:c8:8b:06:96:d9:77:68:e2:f1:0c:
         97:81:36:2a:50:a0:88:38:9f:22:3a:81:c7:fd:ec:29:06:e7:
         d6:3a:d8:c7:fb:4b:cf:87:e8:64:0f:23:0a:e1:19:8e:fb:73:
         59:cb:85:f4:0e:a5:e4:57:c0:d6:71:83:74:bb:72:71:e0:ad:
         96:34:af:56:de:b0:a1:db:1c:2d:02:3f:61:7a:38:11:d7:4f:
         f2:eb:0c:b6:07:32:1e:8c:96:aa:e1:0e:08:f2:fe:f9:a3:50:
         f2:83:f0:af:fa:94:4d:95:ed:ea:71:d8:f1:90:e3:35:69:06:
         a5:31:74:a2:be:c6:e0:9f:18:93:03:e7:c3:38:6d:76:6e:c7:
         18:88:e0:f4:55:66:b3:64:7d:d0:48:bd:ad:9b:b4:87:53:c1:
         c2:c0:fa:eb:99:ad:bf:d1:ff:bf:96:4d:3f:b5:83:39:4b:90:
         59:0c:23:c8:69:ba:a7:f1:45:8a:3f:07:cd:e2:c1:6a:8f:fe:
         1b:a9:ac:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UACHbmd5KhNi8Yccby+hNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NzI0MTEyZjAyODVkODMwYzg3ZWUzMjU2ZDUxOTY4ZjE1
YmI5MGIwHhcNMjYwNzI0MTIwMTA0WhcNMjYwNzI1MTIwMTA0WjAzMTEwLwYDVQQD
EygwODY0OWI2MGRlYTJhMDU1ZTI5ODMyYzk4MzJmZmFmZTZmNmM5OTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vjRBaqFB3U/j9JIfiqyOSlbj0UQ
9xfY2eTgDLH1HsaAV8eaaeqIY8VDXLXpShVc+RxFKIRd0/EY0el9nHmK/bMfvPN3
wfPaJTvb/U1cr/Cw0Pja7lYxoV4lRjRDTiFNc0x+6s2KiNJack50dkKqwAgv3ZdS
Cw8nmpkIEtjD5V2Z0zIA2NSG8nM5yU37tI0Z6W0ekcbdDAbjKq4zJqeScDwPbTsV
62le6CS9Cr26Rpg/gN5qpDaxnJCCWnTzwlf8YQ1ICG1IdWzamnqKDqsSm7eNQZa0
nTLYKQbcWIx1CZ/GayGtp3hFEwnx7mCdm1Y3n5gyj6cJFoIM/jrMtGX2pQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhkm2DeoqBV4pgyyYMv+v5vbJkdMB8GA1UdIwQY
MBaAFHdyQRLwKF2DDIfuMlbVGWjxW7kLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDNKQkV2QW9YWU1NaC00eVZ0VVphUEZidVFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iMjc3MDQtZWY1Mi00NGE3LWJkZDEt
ZjlmOTFlNGUzMWZhLzEvZDNKQkV2QW9YWU1NaC00eVZ0VVphUEZidVFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iMjc3MDQtZWY1Mi00NGE3LWJkZDEtZjlmOTFlNGUzMWZh
LzEvZDNKQkV2QW9YWU1NaC00eVZ0VVphUEZidVFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRP5jdbi
xVYSWbXkOrKHV1M+GQyrlHwYvz54kaeaPwXUsxu2p9LwDdB/rpMaP6U2SV8bDmB8
9LNLxP8wrSrIiwaW2Xdo4vEMl4E2KlCgiDifIjqBx/3sKQbn1jrYx/tLz4foZA8j
CuEZjvtzWcuF9A6l5FfA1nGDdLtyceCtljSvVt6wodscLQI/YXo4EddP8usMtgcy
HoyWquEOCPL++aNQ8oPwr/qUTZXt6nHY8ZDjNWkGpTF0or7G4J8YkwPnwzhtdm7H
GIjg9FVms2R90Ei9rZu0h1PBwsD665mtv9H/v5ZNP7WDOUuQWQwjyGm6p/FFij8H
zeLBao/+G6msyw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 15:07:30 2026 by rpki-client