Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
File:                     9r15bwtjNc_hKKXPm5fudoCC7Y0.mft (raw, json)
Hash identifier:          tsTZpLLg9V/8EuDH3NfWnxcNvZ4SlanZyBP5oQHEpbo=
Subject key identifier:   C8:F5:5B:61:FC:DD:E9:AC:29:CD:77:39:A4:4B:C1:E7:C9:A1:5C:03
Authority key identifier: F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D
Certificate issuer:       /CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
Certificate serial:       019F9022AC65BDC33AEB213EEEE32A6B89F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
Manifest number:          04BE
Signing time:             Thu 23 Jul 2026 18:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:19 +0000
Files and hashes:         1: 9r15bwtjNc_hKKXPm5fudoCC7Y0.crl (hash: 284BMxJIt2CVZ7X1yaNVr+qkeohSqe1V8zGlnJqq0+g=)
                          2: lGujuiPQvSmFHQAKi24Db9fPtPs.roa (hash: yXgFWbLf2xOQ/uIv3drvR9A3/BacWeZUxwc8Zd5w1cI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:ac:65:bd:c3:3a:eb:21:3e:ee:e3:2a:6b:89:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6bd796f0b6335cfe128a5cf9b97ee768082ed8d
        Validity
            Not Before: Jul 23 18:00:19 2026 GMT
            Not After : Jul 24 18:00:19 2026 GMT
        Subject: CN=c8f55b61fcdde9ac29cd7739a44bc1e7c9a15c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:14:24:82:0b:36:8a:45:5f:8b:73:2c:2e:51:
                    06:73:cd:0c:82:1b:ff:70:c9:ae:58:9c:e0:fd:6e:
                    89:e1:4c:29:2d:cf:65:26:bf:ce:3f:cc:2d:78:f3:
                    0e:6e:86:d2:76:85:03:b2:4b:6d:44:41:c0:4c:bf:
                    7e:ae:5b:94:7e:8a:ee:08:51:45:61:d0:78:87:f5:
                    34:6e:58:90:13:28:43:96:0d:1a:c7:f7:19:7d:bd:
                    e5:7f:5d:c3:ee:18:8c:49:2a:d2:72:46:62:24:09:
                    ed:5e:42:bf:09:b2:95:6e:d2:7f:c8:bb:13:f0:ad:
                    40:20:f3:d7:7e:11:05:81:ab:a7:6f:ff:02:dc:02:
                    8b:c0:8f:4e:84:8e:5a:d0:08:d0:ed:4f:d9:d0:5c:
                    8d:35:86:3f:8c:3f:1c:97:47:bf:1e:0a:c8:30:96:
                    17:3c:f9:33:01:82:6c:5d:52:02:72:95:0f:62:62:
                    75:d8:b2:37:81:a7:17:e5:39:ab:6d:2a:20:53:1b:
                    b7:20:57:b1:2d:08:a7:47:9b:47:83:7d:f2:d2:8a:
                    3e:af:e1:72:d0:3a:c3:9e:32:89:f4:24:41:a1:0c:
                    23:86:a3:d7:47:a1:5c:a9:16:5d:d3:bb:44:36:9c:
                    1e:14:03:7d:da:c7:2a:c7:7e:57:0c:77:f1:a6:62:
                    a8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F5:5B:61:FC:DD:E9:AC:29:CD:77:39:A4:4B:C1:E7:C9:A1:5C:03
            X509v3 Authority Key Identifier:
                keyid:F6:BD:79:6F:0B:63:35:CF:E1:28:A5:CF:9B:97:EE:76:80:82:ED:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9r15bwtjNc_hKKXPm5fudoCC7Y0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/e2c821-6d00-4770-af2a-3ee7c72e01eb/1/9r15bwtjNc_hKKXPm5fudoCC7Y0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d7:15:c6:84:d5:b3:62:cb:2f:81:5e:86:f0:8a:62:89:47:
         38:b1:24:27:8e:bd:f3:06:3e:c0:d2:c0:19:cd:e9:05:06:25:
         cc:14:d2:b1:57:5e:ea:c0:34:58:e1:6d:dd:7a:4b:8d:9f:bd:
         71:6c:c1:48:dc:e2:8a:63:e3:7b:51:8f:0a:87:5e:6b:4e:76:
         85:90:7d:6c:51:54:67:d9:08:96:f2:96:2d:af:56:81:d0:19:
         08:61:68:c1:79:c0:7f:3d:9a:5b:12:4d:af:61:93:0d:51:89:
         40:0e:1b:a7:8e:55:d7:8e:b7:5f:fb:79:d8:63:e5:22:db:aa:
         1f:48:d6:6e:d9:1d:e2:2d:cc:64:11:b3:b3:cc:3b:2a:85:dd:
         00:f7:90:23:78:c3:4a:0c:c4:8e:bb:06:f0:ee:e6:5b:c9:0a:
         f4:ab:12:15:aa:bf:26:9d:4c:af:48:18:30:75:5a:76:91:12:
         f8:d6:85:73:dd:df:10:b3:27:c7:ba:ad:7d:d0:e6:6d:f9:d9:
         51:c6:80:66:e0:24:d3:63:86:97:57:8b:c6:3e:42:eb:e2:ec:
         bc:66:a7:9b:68:a3:1e:a7:76:ef:a6:c2:7d:c1:1b:f8:11:42:
         7e:f3:9a:25:18:a4:24:99:3a:40:fc:70:bd:ed:b2:e9:da:34:
         15:c3:b9:50
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QIqxlvcM66yE+7uMqa4n1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YmQ3OTZmMGI2MzM1Y2ZlMTI4YTVjZjliOTdlZTc2ODA4
MmVkOGQwHhcNMjYwNzIzMTgwMDE5WhcNMjYwNzI0MTgwMDE5WjAzMTEwLwYDVQQD
EyhjOGY1NWI2MWZjZGRlOWFjMjljZDc3MzlhNDRiYzFlN2M5YTE1YzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRQkggs2ikVfi3MsLlEGc80Mghv/
cMmuWJzg/W6J4UwpLc9lJr/OP8wtePMObobSdoUDskttREHATL9+rluUforuCFFF
YdB4h/U0bliQEyhDlg0ax/cZfb3lf13D7hiMSSrSckZiJAntXkK/CbKVbtJ/yLsT
8K1AIPPXfhEFgaunb/8C3AKLwI9OhI5a0AjQ7U/Z0FyNNYY/jD8cl0e/HgrIMJYX
PPkzAYJsXVICcpUPYmJ12LI3gacX5TmrbSogUxu3IFexLQinR5tHg33y0oo+r+Fy
0DrDnjKJ9CRBoQwjhqPXR6FcqRZd07tENpweFAN92scqx35XDHfxpmKowwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMj1W2H83emsKc13OaRLwefJoVwDMB8GA1UdIwQY
MBaAFPa9eW8LYzXP4Silz5uX7naAgu2NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9lMmM4MjEtNmQwMC00NzcwLWFmMmEt
M2VlN2M3MmUwMWViLzEvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9lMmM4MjEtNmQwMC00NzcwLWFmMmEtM2VlN2M3MmUwMWVi
LzEvOXIxNWJ3dGpOY19oS0tYUG01ZnVkb0NDN1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKNcVxoTV
s2LLL4FehvCKYolHOLEkJ4698wY+wNLAGc3pBQYlzBTSsVde6sA0WOFt3XpLjZ+9
cWzBSNziimPje1GPCodea052hZB9bFFUZ9kIlvKWLa9WgdAZCGFowXnAfz2aWxJN
r2GTDVGJQA4bp45V1463X/t52GPlItuqH0jWbtkd4i3MZBGzs8w7KoXdAPeQI3jD
SgzEjrsG8O7mW8kK9KsSFaq/Jp1Mr0gYMHVadpES+NaFc93fELMnx7qtfdDmbfnZ
UcaAZuAk02OGl1eLxj5C6+LsvGanm2ijHqd276bCfcEb+BFCfvOaJRikJJk6QPxw
ve2y6do0FcO5UA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:50:11 2026 by rpki-client