Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File:                     1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier:          OD2+T2QnYe5xXqMZqyuZs67vVqpHh5BD5zOcAhXutT8=
Subject key identifier:   64:26:7E:CC:5B:E1:EB:9F:A5:6D:D7:AA:E9:BC:CB:A4:34:5A:52:06
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer:       /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial:       019F8F10CF3D8CD116810A99AEA7A0296E88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number:          0FA0
Signing time:             Thu 23 Jul 2026 13:01:11 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:11 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:11 +0000
Files and hashes:         1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: ZB3AerKhr3oEImu4i0LpZCdHWEkMbaRN0SPR67Y0agE=)
                          2: qLRwkd2YTe3ugw9mUTb_30rZm1U.roa (hash: RlmstRhxEpTkCl9P39u47GrFJRHW47YR8wbbC8CphMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:cf:3d:8c:d1:16:81:0a:99:ae:a7:a0:29:6e:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
        Validity
            Not Before: Jul 23 13:01:11 2026 GMT
            Not After : Jul 24 13:01:11 2026 GMT
        Subject: CN=64267ecc5be1eb9fa56dd7aae9bccba4345a5206
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:dc:f6:f6:49:7d:00:6d:dd:a1:6a:04:c9:9b:
                    f1:e3:fe:44:45:ee:f7:2b:a7:52:a4:80:d3:ca:3f:
                    45:20:d4:3c:3e:20:da:fd:ee:d1:0d:1a:5b:8f:cb:
                    05:1c:67:d2:1e:62:08:6a:15:9b:e4:8a:09:5e:cb:
                    17:14:69:3b:6e:0a:c9:48:37:7b:f3:64:ac:e7:fa:
                    78:30:a1:83:4a:cf:5c:0d:a9:17:a2:32:56:76:13:
                    8f:68:7d:74:39:e8:03:b0:58:96:12:5a:b8:c5:8d:
                    a0:6c:01:63:a2:45:fc:b0:0f:b1:c5:a5:4f:cf:6b:
                    10:e9:64:b5:d2:f9:12:9f:03:0a:4b:5f:f6:59:38:
                    aa:dd:5a:9a:94:f8:5d:fb:8c:39:b6:9d:03:66:25:
                    aa:ea:0c:ed:fe:76:fc:c1:b0:31:8a:54:13:b3:1f:
                    0f:52:7b:dd:65:73:2b:9e:0a:96:7e:d0:15:d5:98:
                    ff:f4:17:ed:ea:61:b6:b2:4b:02:82:a2:d6:ee:3a:
                    fb:69:0d:e7:d3:18:06:3b:2f:8c:03:25:b4:ca:49:
                    30:db:8b:47:74:e7:40:d8:27:e7:7d:46:5f:0c:bd:
                    93:22:de:68:ff:bb:ed:1c:6d:7c:6c:38:fe:9c:0f:
                    e6:ab:f4:9b:d6:ab:05:a1:d8:2a:66:ff:6f:80:3c:
                    d9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:26:7E:CC:5B:E1:EB:9F:A5:6D:D7:AA:E9:BC:CB:A4:34:5A:52:06
            X509v3 Authority Key Identifier:
                keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:de:c3:c2:18:eb:65:c3:79:78:d9:04:c0:54:8a:a5:a9:25:
         8d:48:94:af:0c:df:6f:dd:36:a5:73:38:4a:a7:2a:b5:b9:a9:
         ef:25:74:27:f2:3d:90:f1:1c:d9:00:d2:3e:7b:de:08:fc:fb:
         e8:e0:7a:67:2b:eb:40:8f:e9:e7:3d:b3:41:54:67:d5:02:c3:
         9b:b6:16:d9:ab:49:6e:9d:fe:c1:6c:bd:99:98:71:c6:5a:7f:
         7f:d4:c7:80:26:2b:3f:fc:4f:12:55:ff:4f:5a:f6:22:44:2b:
         a6:0e:b0:ef:51:52:03:17:06:fd:ea:61:e1:d1:f3:69:1f:f4:
         36:3f:96:6c:0b:dd:4a:39:0c:a7:25:49:fa:6d:cc:92:11:dc:
         3f:8c:21:9d:1a:c3:ae:54:43:f3:a2:1c:a8:09:d9:e8:dd:67:
         bd:0d:99:fc:ea:9d:ee:1b:ff:1e:49:e2:df:35:c1:fc:43:ec:
         15:80:c9:92:76:69:76:a4:4c:01:57:2f:29:4c:d7:71:29:25:
         76:bb:ef:a6:c9:96:a7:ff:78:90:9b:52:ca:20:46:66:48:c5:
         cd:64:87:25:9c:98:70:a8:5d:3e:00:56:58:e4:2a:4d:d0:c7:
         04:5a:fe:7e:a9:31:7e:ab:ff:2a:2a:19:cd:5d:a3:7c:67:fe:
         f2:1c:6a:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PEM89jNEWgQqZrqegKW6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1YjgwMTgwYjQwZDU4NWI3MzY2NTg3ZGZiNWRlN2JmMzA3
Nzg0M2UwHhcNMjYwNzIzMTMwMTExWhcNMjYwNzI0MTMwMTExWjAzMTEwLwYDVQQD
Eyg2NDI2N2VjYzViZTFlYjlmYTU2ZGQ3YWFlOWJjY2JhNDM0NWE1MjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstz29kl9AG3doWoEyZvx4/5ERe73
K6dSpIDTyj9FINQ8PiDa/e7RDRpbj8sFHGfSHmIIahWb5IoJXssXFGk7bgrJSDd7
82Ss5/p4MKGDSs9cDakXojJWdhOPaH10OegDsFiWElq4xY2gbAFjokX8sA+xxaVP
z2sQ6WS10vkSnwMKS1/2WTiq3VqalPhd+4w5tp0DZiWq6gzt/nb8wbAxilQTsx8P
UnvdZXMrngqWftAV1Zj/9Bft6mG2sksCgqLW7jr7aQ3n0xgGOy+MAyW0ykkw24tH
dOdA2CfnfUZfDL2TIt5o/7vtHG18bDj+nA/mq/Sb1qsFodgqZv9vgDzZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQmfsxb4eufpW3Xqum8y6Q0WlIGMB8GA1UdIwQY
MBaAFNW4AYC0DVhbc2ZYfftd578wd4Q+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYt
MzE0MTFkOTE1NzZhLzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8wZTVhNzEtMmMwYi00ZjA0LTk0NjYtMzE0MTFkOTE1NzZh
LzEvMWJnQmdMUU5XRnR6WmxoOS0xM252ekIzaEQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADN7Dwhjr
ZcN5eNkEwFSKpakljUiUrwzfb902pXM4Sqcqtbmp7yV0J/I9kPEc2QDSPnveCPz7
6OB6ZyvrQI/p5z2zQVRn1QLDm7YW2atJbp3+wWy9mZhxxlp/f9THgCYrP/xPElX/
T1r2IkQrpg6w71FSAxcG/eph4dHzaR/0Nj+WbAvdSjkMpyVJ+m3MkhHcP4whnRrD
rlRD86IcqAnZ6N1nvQ2Z/Oqd7hv/Hkni3zXB/EPsFYDJknZpdqRMAVcvKUzXcSkl
drvvpsmWp/94kJtSyiBGZkjFzWSHJZyYcKhdPgBWWOQqTdDHBFr+fqkxfqv/KioZ
zV2jfGf+8hxqSg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:19:14 2026 by rpki-client