Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
File:                     MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft (raw, json)
Hash identifier:          pXw2Ih77BM45dl5KqZNcObW2EG28Jj/TTk5zEySCxPs=
Subject key identifier:   C5:AF:4E:63:60:B2:A8:96:0A:91:8D:CC:F1:1E:7A:25:45:F0:AE:41
Authority key identifier: 32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A
Certificate issuer:       /CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
Certificate serial:       019F9059D141748B597527E2478B6B61AAD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
Manifest number:          0C02
Signing time:             Thu 23 Jul 2026 19:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 19:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 19:00:33 +0000
Files and hashes:         1: MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl (hash: xWB5cbwoggKLX8haeMiM6O9ozaxfS3+w2Z/c91ujHiY=)
                          2: b6AmtjEEmlVAVDEZuYD5VDgpfMQ.roa (hash: HS/ySeNB+y1+0+U3UPGT7SxmsyJMK83qGbLhBP5SbrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:59:d1:41:74:8b:59:75:27:e2:47:8b:6b:61:aa:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32d5c9c85ffb7463945e8126570b7e2851b3fb7a
        Validity
            Not Before: Jul 23 19:00:33 2026 GMT
            Not After : Jul 24 19:00:33 2026 GMT
        Subject: CN=c5af4e6360b2a8960a918dccf11e7a2545f0ae41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:fa:19:ff:af:6e:5a:56:10:ec:75:2e:1a:d9:
                    ff:ad:32:7a:fa:db:6c:9b:ac:1c:85:af:7e:66:2a:
                    0f:98:eb:a3:04:ac:33:d1:f7:ac:f7:a0:9f:2f:6a:
                    ff:bf:ee:15:7a:a2:4e:0d:00:40:c7:e0:35:86:c0:
                    5e:0f:45:6b:75:2b:4c:7d:fe:10:ea:ac:e1:f3:ef:
                    e3:96:20:bf:97:2e:16:10:d8:61:a7:9c:cc:c3:3f:
                    14:0b:1e:a3:40:68:e1:55:37:0e:bf:83:0c:8f:b9:
                    42:c3:4d:d9:d8:7b:d3:be:57:cf:2d:db:a2:26:27:
                    7a:20:48:37:8a:c0:2a:33:aa:21:ac:db:b5:6f:52:
                    9c:ea:14:96:85:f1:f6:cf:8b:16:14:2e:5c:22:bd:
                    cf:d9:32:8b:51:ca:2c:cf:99:29:ee:fa:8a:58:4c:
                    ca:ad:27:1e:51:a4:bf:d1:8b:69:f4:e8:3a:e1:f5:
                    63:80:c9:fd:39:bd:d0:56:c8:2e:b1:9a:d9:0d:4e:
                    36:a7:bc:4d:17:ef:cf:66:26:59:cf:85:b6:48:9e:
                    f5:9f:47:de:82:3c:ad:75:17:18:a3:51:f6:a7:89:
                    b3:f4:4f:0e:1b:fd:83:d9:09:3c:46:b6:44:9e:d1:
                    09:fc:4a:e4:6b:9a:23:1c:a6:9e:ba:49:fd:35:71:
                    b5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:AF:4E:63:60:B2:A8:96:0A:91:8D:CC:F1:1E:7A:25:45:F0:AE:41
            X509v3 Authority Key Identifier:
                keyid:32:D5:C9:C8:5F:FB:74:63:94:5E:81:26:57:0B:7E:28:51:B3:FB:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtXJyF_7dGOUXoEmVwt-KFGz-3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ad0351-006f-47aa-ab19-19c05f4f4a7b/1/MtXJyF_7dGOUXoEmVwt-KFGz-3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:4d:ec:03:90:c1:e8:68:cf:2a:c0:97:d6:3c:08:b2:86:cf:
         e2:66:8d:72:7b:f1:f6:bb:93:94:15:0e:38:d3:88:34:bc:2c:
         d6:43:01:97:63:e1:ca:f1:7e:3e:76:92:d8:d5:cd:6c:e7:d5:
         dd:f1:d5:ba:75:d4:32:3c:e5:31:23:7f:23:f7:39:0c:c5:89:
         b4:df:15:59:c8:23:66:05:8b:e8:7c:1a:9e:84:8d:87:c9:50:
         33:02:98:e0:1d:11:dc:44:10:2f:fa:86:d9:a6:c2:52:e9:23:
         81:a8:ba:7a:01:1b:25:52:71:34:39:db:ae:29:8f:b6:aa:3b:
         18:e5:46:06:26:68:f2:61:db:5c:8e:6b:d0:53:ed:d3:2c:32:
         f4:2b:75:0f:2e:68:b4:17:9f:06:a4:01:3a:88:e0:64:98:f7:
         cd:98:b6:bf:c3:94:47:f0:13:52:a4:9d:1a:da:09:ee:26:77:
         8e:46:3c:28:3c:67:a6:07:52:dd:04:9b:d6:12:8a:67:ba:e4:
         69:7b:b2:e9:de:e3:b6:40:af:0b:f5:5d:98:90:26:ad:a8:6a:
         52:4a:3f:21:5b:26:3e:03:70:ad:df:d2:4c:68:f4:be:74:6b:
         ed:c8:c5:25:28:c1:d2:30:b7:bf:c2:a0:56:69:d7:16:fa:4c:
         61:2d:17:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWdFBdItZdSfiR4trYarYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDVjOWM4NWZmYjc0NjM5NDVlODEyNjU3MGI3ZTI4NTFi
M2ZiN2EwHhcNMjYwNzIzMTkwMDMzWhcNMjYwNzI0MTkwMDMzWjAzMTEwLwYDVQQD
EyhjNWFmNGU2MzYwYjJhODk2MGE5MThkY2NmMTFlN2EyNTQ1ZjBhZTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/oZ/69uWlYQ7HUuGtn/rTJ6+tts
m6wcha9+ZioPmOujBKwz0fes96CfL2r/v+4VeqJODQBAx+A1hsBeD0VrdStMff4Q
6qzh8+/jliC/ly4WENhhp5zMwz8UCx6jQGjhVTcOv4MMj7lCw03Z2HvTvlfPLdui
Jid6IEg3isAqM6ohrNu1b1Kc6hSWhfH2z4sWFC5cIr3P2TKLUcosz5kp7vqKWEzK
rSceUaS/0Ytp9Og64fVjgMn9Ob3QVsgusZrZDU42p7xNF+/PZiZZz4W2SJ71n0fe
gjytdRcYo1H2p4mz9E8OG/2D2Qk8RrZEntEJ/Erka5ojHKaeukn9NXG1jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMWvTmNgsqiWCpGNzPEeeiVF8K5BMB8GA1UdIwQY
MBaAFDLVychf+3RjlF6BJlcLfihRs/t6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTkt
MTljMDVmNGY0YTdiLzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9hZDAzNTEtMDA2Zi00N2FhLWFiMTktMTljMDVmNGY0YTdi
LzEvTXRYSnlGXzdkR09VWG9FbVZ3dC1LRkd6LTNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACU3sA5DB
6GjPKsCX1jwIsobP4maNcnvx9ruTlBUOONOINLws1kMBl2PhyvF+PnaS2NXNbOfV
3fHVunXUMjzlMSN/I/c5DMWJtN8VWcgjZgWL6HwanoSNh8lQMwKY4B0R3EQQL/qG
2abCUukjgai6egEbJVJxNDnbrimPtqo7GOVGBiZo8mHbXI5r0FPt0ywy9Ct1Dy5o
tBefBqQBOojgZJj3zZi2v8OUR/ATUqSdGtoJ7iZ3jkY8KDxnpgdS3QSb1hKKZ7rk
aXuy6d7jtkCvC/VdmJAmrahqUko/IVsmPgNwrd/STGj0vnRr7cjFJSjB0jC3v8Kg
VmnXFvpMYS0XYw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:34:49 2026 by rpki-client