Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
File:                     7oO8RYo2ltZS---GPl7kDwCW8Zc.mft (raw, json)
Hash identifier:          SNFhPQrwaJF1gBcKgqegX/5YYCuRARkIcaxLcTUGgvw=
Subject key identifier:   F1:09:C6:D9:9F:A7:6F:70:4C:3F:BF:46:70:11:36:1B:09:CB:F6:E7
Authority key identifier: EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97
Certificate issuer:       /CN=ee83bc458a3696d652fbef863e5ee40f0096f197
Certificate serial:       019F90FEC3BAF3032DD3BEAAF16949EFA735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 22:00:43 +0000
Manifest this update:     Thu 23 Jul 2026 22:00:43 +0000
Manifest next update:     Fri 24 Jul 2026 22:00:43 +0000
Files and hashes:         1: 7oO8RYo2ltZS---GPl7kDwCW8Zc.crl (hash: WNvgN07cPH09xUnxk4Rj195Q9uWowyO8b4jwBOO0bqo=)
                          2: pIgvzLjixs4_sf2VopagAU-SJ2k.roa (hash: 8W+ULMj0Umqs1HGvdH4mGs4tGpsjhjBCqHgwP2+9Xgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:fe:c3:ba:f3:03:2d:d3:be:aa:f1:69:49:ef:a7:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee83bc458a3696d652fbef863e5ee40f0096f197
        Validity
            Not Before: Jul 23 22:00:43 2026 GMT
            Not After : Jul 24 22:00:43 2026 GMT
        Subject: CN=f109c6d99fa76f704c3fbf467011361b09cbf6e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f4:1b:7c:ca:66:4d:23:77:be:61:79:9b:39:
                    3c:15:55:18:e4:bb:da:8d:3f:69:4c:b3:b3:38:35:
                    09:6b:97:36:47:01:d1:fe:04:92:7e:09:a6:c6:d2:
                    46:9f:68:00:64:4d:29:08:99:4d:25:be:d5:5e:fd:
                    fb:aa:62:5a:c5:5b:ee:f7:d5:3c:55:13:f0:a1:f3:
                    97:3f:6a:61:83:d2:e8:62:e9:06:97:30:81:59:1d:
                    2e:ec:f6:d1:2d:46:a1:79:08:6b:7a:be:70:77:99:
                    8f:80:c2:56:5e:4b:8d:bf:d9:c6:af:5c:0a:d7:31:
                    d9:bd:cb:7f:76:0c:f2:b8:cf:2d:50:c5:dd:92:b4:
                    75:c5:fb:f7:a6:f1:99:c2:b8:e4:a2:58:b6:20:d6:
                    59:dd:c9:46:0a:0a:93:2a:48:c0:75:76:87:e2:88:
                    7c:4b:b0:1b:34:04:e3:83:48:59:52:c3:ba:40:a5:
                    db:1c:a2:5a:89:08:1f:5c:18:b7:06:03:3a:4b:62:
                    63:d7:88:c2:18:2b:45:93:4e:ea:49:eb:26:2e:20:
                    f4:23:f2:d5:ad:10:80:24:40:c5:f0:f5:ba:29:40:
                    60:ac:c8:1d:2f:0c:e5:78:3a:aa:20:35:1f:42:f1:
                    74:58:11:1b:e7:df:c3:b6:bc:ce:80:96:84:b1:ce:
                    09:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:09:C6:D9:9F:A7:6F:70:4C:3F:BF:46:70:11:36:1B:09:CB:F6:E7
            X509v3 Authority Key Identifier:
                keyid:EE:83:BC:45:8A:36:96:D6:52:FB:EF:86:3E:5E:E4:0F:00:96:F1:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7oO8RYo2ltZS---GPl7kDwCW8Zc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/274f5c-a7bc-464d-9666-7c281d07e155/1/7oO8RYo2ltZS---GPl7kDwCW8Zc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:aa:ba:b8:78:2c:c7:db:db:d0:d9:82:15:e2:41:fe:a5:2c:
         80:36:95:f7:65:3c:89:5a:cc:68:6d:65:c6:12:60:21:0b:d1:
         5a:95:3f:a6:09:6e:47:a6:06:da:a9:e6:54:c9:42:fa:45:db:
         5d:f4:ef:a9:86:55:d0:b2:ae:5d:3b:6b:36:3c:3e:38:9c:e7:
         c8:e5:38:95:f3:97:6b:58:50:45:ec:7e:65:dc:3d:a8:92:78:
         c3:95:d1:72:43:81:40:06:09:1c:8e:40:48:91:52:e4:41:40:
         3e:6e:93:35:c9:6d:37:ff:1e:f2:eb:c9:5d:d6:df:16:6a:0e:
         d4:93:c7:24:5a:09:66:82:1d:de:d1:9a:bc:89:ff:4e:a3:f7:
         51:38:d3:39:73:d6:d5:91:01:48:9e:36:4b:36:f7:23:8f:f9:
         05:6f:2e:d1:6f:bb:37:f5:87:ce:9a:08:22:ee:f9:6c:b0:ff:
         dd:d4:c3:95:26:c3:3e:2a:36:86:13:d1:b5:a6:d7:19:6f:3c:
         69:6c:d6:87:f9:c5:20:60:bf:48:ba:d5:2f:f9:73:62:bf:f2:
         6b:97:f8:7a:f9:65:9f:e2:8a:e4:f0:00:e2:88:d3:93:b9:6b:
         3a:6a:33:53:6c:5e:ed:90:3d:9b:83:90:8e:55:b2:18:2d:78:
         77:15:5c:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Q/sO68wMt076q8WlJ76c1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlODNiYzQ1OGEzNjk2ZDY1MmZiZWY4NjNlNWVlNDBmMDA5
NmYxOTcwHhcNMjYwNzIzMjIwMDQzWhcNMjYwNzI0MjIwMDQzWjAzMTEwLwYDVQQD
EyhmMTA5YzZkOTlmYTc2ZjcwNGMzZmJmNDY3MDExMzYxYjA5Y2JmNmU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvQbfMpmTSN3vmF5mzk8FVUY5Lva
jT9pTLOzODUJa5c2RwHR/gSSfgmmxtJGn2gAZE0pCJlNJb7VXv37qmJaxVvu99U8
VRPwofOXP2phg9LoYukGlzCBWR0u7PbRLUaheQhrer5wd5mPgMJWXkuNv9nGr1wK
1zHZvct/dgzyuM8tUMXdkrR1xfv3pvGZwrjkoli2INZZ3clGCgqTKkjAdXaH4oh8
S7AbNATjg0hZUsO6QKXbHKJaiQgfXBi3BgM6S2Jj14jCGCtFk07qSesmLiD0I/LV
rRCAJEDF8PW6KUBgrMgdLwzleDqqIDUfQvF0WBEb59/DtrzOgJaEsc4JfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEJxtmfp29wTD+/RnARNhsJy/bnMB8GA1UdIwQY
MBaAFO6DvEWKNpbWUvvvhj5e5A8AlvGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYt
N2MyODFkMDdlMTU1LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8yNzRmNWMtYTdiYy00NjRkLTk2NjYtN2MyODFkMDdlMTU1
LzEvN29POFJZbzJsdFpTLS0tR1BsN2tEd0NXOFpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO6q6uHgs
x9vb0NmCFeJB/qUsgDaV92U8iVrMaG1lxhJgIQvRWpU/pgluR6YG2qnmVMlC+kXb
XfTvqYZV0LKuXTtrNjw+OJznyOU4lfOXa1hQRex+Zdw9qJJ4w5XRckOBQAYJHI5A
SJFS5EFAPm6TNcltN/8e8uvJXdbfFmoO1JPHJFoJZoId3tGavIn/TqP3UTjTOXPW
1ZEBSJ42Szb3I4/5BW8u0W+7N/WHzpoIIu75bLD/3dTDlSbDPio2hhPRtabXGW88
aWzWh/nFIGC/SLrVL/lzYr/ya5f4evlln+KK5PAA4ojTk7lrOmozU2xe7ZA9m4OQ
jlWyGC14dxVc/g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:09:21 2026 by rpki-client