Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
File:                     5tF7E2U_8ePngi6x5eChf01PeIE.mft (raw, json)
Hash identifier:          DyBi83aV8qphOEPsjZ/AlNDFSqJzRd6sy+c5LQMutMQ=
Subject key identifier:   6A:FE:19:B3:EC:51:CA:38:67:B4:B7:65:59:A0:24:5C:F8:E3:2D:79
Authority key identifier: E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81
Certificate issuer:       /CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
Certificate serial:       019F927F44AD36035A4D1788F4F71314D2BD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
Manifest number:          0FDD
Signing time:             Fri 24 Jul 2026 05:00:41 +0000
Manifest this update:     Fri 24 Jul 2026 05:00:41 +0000
Manifest next update:     Sat 25 Jul 2026 05:00:41 +0000
Files and hashes:         1: 5tF7E2U_8ePngi6x5eChf01PeIE.crl (hash: H6zIogvwY6KiQ8eUR4dprh3/U8OoWDECWbKymdgjdZ4=)
                          2: KdkSplDy4QjMpE4fLCxjhJLFG-A.roa (hash: GJjKbZNtY1x/kWqwNINR2VUda7Jb8+5oqTMBWfwhVbU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:7f:44:ad:36:03:5a:4d:17:88:f4:f7:13:14:d2:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6d17b13653ff1e3e7822eb1e5e0a17f4d4f7881
        Validity
            Not Before: Jul 24 05:00:41 2026 GMT
            Not After : Jul 25 05:00:41 2026 GMT
        Subject: CN=6afe19b3ec51ca3867b4b76559a0245cf8e32d79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:7d:f3:f5:77:d3:0a:ee:ee:36:00:ae:82:
                    8f:c5:e7:c9:6d:5f:12:a6:d2:95:88:21:c3:ef:10:
                    b5:38:a4:be:e8:e1:f8:36:17:71:dc:d2:94:a4:f3:
                    25:2d:f5:4c:89:c7:7a:b1:a4:67:5f:f4:26:a8:95:
                    0e:4b:51:29:39:f3:67:10:4a:9b:18:d7:57:10:4d:
                    74:10:6a:43:ce:22:29:dc:11:8e:5e:1b:eb:4e:02:
                    47:5e:b9:f9:e3:2b:a6:4d:11:63:90:70:18:fd:b5:
                    80:c6:73:e2:a0:5c:fa:e1:ca:6d:ae:69:e2:16:71:
                    81:d5:0a:78:3a:91:bf:4e:42:3a:a6:67:f7:73:9b:
                    f5:31:22:ee:52:ae:c3:05:f5:23:c8:4a:8c:92:93:
                    66:14:f9:7a:57:eb:5d:83:8e:2e:ec:00:ac:cb:10:
                    13:d5:22:bf:f8:17:4a:b4:7e:44:7d:e0:a3:9f:16:
                    fa:64:18:14:01:d0:3b:da:b7:1f:35:5a:f1:b0:3e:
                    f2:1d:8e:c3:e8:82:e5:1d:17:64:20:32:89:6c:74:
                    1b:fc:08:45:b0:f5:62:d1:18:5f:4f:70:4d:99:9a:
                    8a:7e:53:da:1a:21:8b:bb:01:d8:14:95:94:11:9b:
                    72:09:6c:0d:4a:15:e0:61:97:97:86:a1:3a:cf:9c:
                    fd:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:FE:19:B3:EC:51:CA:38:67:B4:B7:65:59:A0:24:5C:F8:E3:2D:79
            X509v3 Authority Key Identifier:
                keyid:E6:D1:7B:13:65:3F:F1:E3:E7:82:2E:B1:E5:E0:A1:7F:4D:4F:78:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5tF7E2U_8ePngi6x5eChf01PeIE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/884e3e-7b53-475c-861f-6acd581d4b0f/1/5tF7E2U_8ePngi6x5eChf01PeIE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:63:c5:62:49:c3:93:3c:77:f5:40:07:c1:6d:6c:13:29:14:
         c3:90:fe:17:b7:94:4f:3b:a8:aa:9b:8a:c4:a8:52:19:db:78:
         5f:fd:90:82:f0:de:99:00:22:52:e2:f6:60:fe:60:07:66:cc:
         58:ba:88:0e:ba:7c:f7:51:51:69:ef:0a:ed:e6:46:b4:7e:5a:
         30:5b:49:53:ee:10:46:fc:11:53:46:a1:21:9d:1a:2d:e2:7b:
         5b:f0:fe:55:89:01:e3:5d:f7:f2:5f:94:3a:d8:c4:4d:c7:a9:
         36:6f:0f:14:2a:9e:a5:ff:03:e0:a3:cd:cb:6f:a1:9d:36:c2:
         1d:ed:72:89:d6:51:1d:55:07:9d:a7:a9:dd:7d:87:03:29:70:
         2a:f7:30:0d:08:0f:f0:b7:dc:1f:60:d8:dd:31:03:eb:50:cb:
         83:af:fe:a7:19:9e:d9:81:1f:33:4c:2a:26:91:d7:89:dc:4c:
         f0:85:58:fd:8d:38:9f:9f:59:b0:b1:b8:c4:75:99:4d:2f:fb:
         75:6c:2f:43:e8:fa:f0:03:f7:75:68:e6:eb:aa:79:c2:e6:40:
         44:2a:bf:62:f7:23:32:2f:23:69:2e:0d:83:1e:14:ff:42:f4:
         30:8c:b4:24:a8:1c:f4:26:65:20:f6:a2:f9:be:0c:d8:47:9a:
         1b:5b:79:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf0StNgNaTReI9PcTFNK9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2ZDE3YjEzNjUzZmYxZTNlNzgyMmViMWU1ZTBhMTdmNGQ0
Zjc4ODEwHhcNMjYwNzI0MDUwMDQxWhcNMjYwNzI1MDUwMDQxWjAzMTEwLwYDVQQD
Eyg2YWZlMTliM2VjNTFjYTM4NjdiNGI3NjU1OWEwMjQ1Y2Y4ZTMyZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudp98/V30wru7jYAroKPxefJbV8S
ptKViCHD7xC1OKS+6OH4Nhdx3NKUpPMlLfVMicd6saRnX/QmqJUOS1EpOfNnEEqb
GNdXEE10EGpDziIp3BGOXhvrTgJHXrn54yumTRFjkHAY/bWAxnPioFz64cptrmni
FnGB1Qp4OpG/TkI6pmf3c5v1MSLuUq7DBfUjyEqMkpNmFPl6V+tdg44u7ACsyxAT
1SK/+BdKtH5EfeCjnxb6ZBgUAdA72rcfNVrxsD7yHY7D6ILlHRdkIDKJbHQb/AhF
sPVi0RhfT3BNmZqKflPaGiGLuwHYFJWUEZtyCWwNShXgYZeXhqE6z5z97QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGr+GbPsUco4Z7S3ZVmgJFz44y15MB8GA1UdIwQY
MBaAFObRexNlP/Hj54IuseXgoX9NT3iBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYt
NmFjZDU4MWQ0YjBmLzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS84ODRlM2UtN2I1My00NzVjLTg2MWYtNmFjZDU4MWQ0YjBm
LzEvNXRGN0UyVV84ZVBuZ2k2eDVlQ2hmMDFQZUlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyWPFYknD
kzx39UAHwW1sEykUw5D+F7eUTzuoqpuKxKhSGdt4X/2QgvDemQAiUuL2YP5gB2bM
WLqIDrp891FRae8K7eZGtH5aMFtJU+4QRvwRU0ahIZ0aLeJ7W/D+VYkB41338l+U
OtjETcepNm8PFCqepf8D4KPNy2+hnTbCHe1yidZRHVUHnaep3X2HAylwKvcwDQgP
8LfcH2DY3TED61DLg6/+pxme2YEfM0wqJpHXidxM8IVY/Y04n59ZsLG4xHWZTS/7
dWwvQ+j68AP3dWjm66p5wuZARCq/YvcjMi8jaS4Ngx4U/0L0MIy0JKgc9CZlIPai
+b4M2EeaG1t58g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:22:19 2026 by rpki-client