Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File:                     Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier:          xY46JZ1P/u5ECMWhcyfABjb4pfxeIvHyGhmGQa9GFug=
Subject key identifier:   45:63:9D:CD:89:1C:E0:FE:14:65:C8:D7:80:F5:82:33:22:98:5D:35
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer:       /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial:       019F93C94B040BA170AE42E1D3B269519348
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number:          0908
Signing time:             Fri 24 Jul 2026 11:01:10 +0000
Manifest this update:     Fri 24 Jul 2026 11:01:10 +0000
Manifest next update:     Sat 25 Jul 2026 11:01:10 +0000
Files and hashes:         1: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: /NknT3NU+D35zso6205nAXuiX/jeiIEzFVgGIZ1tb/A=)
                          2: Qjw5IzowUZzLtbf0lhiIbzGOObU.roa (hash: q/OL57QOoSpVCQTaWDYehgDv/Wd/sKn7NeJmKiof6Xw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c9:4b:04:0b:a1:70:ae:42:e1:d3:b2:69:51:93:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
        Validity
            Not Before: Jul 24 11:01:10 2026 GMT
            Not After : Jul 25 11:01:10 2026 GMT
        Subject: CN=45639dcd891ce0fe1465c8d780f5823322985d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ec:b8:35:f7:b9:56:df:80:68:67:70:0e:bc:
                    29:81:25:b4:30:35:8e:a9:0e:61:3a:1b:96:f3:f2:
                    16:20:12:e9:3b:68:c1:c1:c2:6e:6d:6c:96:10:5d:
                    96:dd:84:6e:66:00:90:a2:78:dc:13:f7:bd:8e:02:
                    ff:85:4f:8f:b1:d2:47:29:95:9a:44:92:fb:9d:ae:
                    03:18:3d:14:a4:b9:f9:0f:4c:40:1a:58:05:34:fd:
                    95:02:db:56:6a:61:f7:5b:2a:70:76:5a:af:d2:a1:
                    4f:a5:60:9d:93:79:4c:b8:b2:35:38:65:cc:24:78:
                    bd:79:98:a9:9c:f2:9f:17:25:b7:c0:d0:98:94:c3:
                    df:c6:c2:fc:d5:0b:96:33:c3:37:53:32:f8:96:a2:
                    d3:3d:ea:c4:a0:20:b2:cf:33:3c:b6:8b:3a:65:ae:
                    c5:89:ad:2a:44:58:80:a7:bf:07:ea:63:14:5e:af:
                    8c:6e:98:62:17:0a:1d:d9:24:fc:1b:13:fe:60:40:
                    be:7b:37:53:41:5b:c4:9a:8d:1e:a8:da:eb:fe:6b:
                    23:b7:ac:56:ef:19:58:2f:e9:81:8a:05:74:c0:8d:
                    39:a6:84:91:7a:76:29:0b:8a:48:65:49:ee:3a:b5:
                    12:09:09:b4:a5:0b:84:3d:7e:f8:28:1a:be:80:e1:
                    64:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:63:9D:CD:89:1C:E0:FE:14:65:C8:D7:80:F5:82:33:22:98:5D:35
            X509v3 Authority Key Identifier:
                keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:dc:b8:fe:7c:6f:56:e6:20:c2:12:70:08:d8:bd:60:32:3c:
         33:49:45:c3:37:1f:f2:69:ee:d9:61:fc:0e:e3:b3:53:b0:d1:
         bf:0d:b6:88:41:c5:af:ab:77:37:60:f0:37:ff:7d:50:75:40:
         cd:3c:4e:39:e9:d5:d0:a6:f2:fc:3b:d5:f0:ce:81:db:39:b7:
         30:13:dd:0c:fd:a0:bb:67:5c:3f:ec:73:12:82:39:84:e6:2e:
         11:69:51:7d:e6:e3:0f:9f:36:10:fa:e8:5f:84:4c:09:84:e9:
         9e:93:ba:43:b9:5b:18:fb:f4:26:1e:0b:b3:c4:29:69:b6:bd:
         33:84:88:fe:89:28:1e:0e:62:c0:fb:b9:30:9a:0b:37:9c:68:
         d0:13:8a:eb:90:87:fa:71:d0:fc:dd:c9:15:5b:72:4f:d2:2f:
         d2:97:ab:74:ee:fb:23:ab:81:a0:e2:43:ba:c8:ce:fd:b4:52:
         1d:58:e2:da:e8:60:a3:4c:56:6a:39:3c:d4:33:31:85:64:81:
         76:53:42:03:c4:99:f9:20:af:e7:6c:05:05:2a:49:7e:3c:e6:
         80:41:53:81:84:15:6b:7d:81:f0:29:06:68:02:1b:44:66:98:
         55:fc:b3:4e:99:38:2f:94:fa:a7:d5:46:15:f3:35:72:1f:96:
         61:35:b4:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TyUsEC6FwrkLh07JpUZNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3MWRhNzUxMjhkYTc1ODJlMTBmNmE0YmYyMmI5MzkxMzQ5
YmE5ZjEwHhcNMjYwNzI0MTEwMTEwWhcNMjYwNzI1MTEwMTEwWjAzMTEwLwYDVQQD
Eyg0NTYzOWRjZDg5MWNlMGZlMTQ2NWM4ZDc4MGY1ODIzMzIyOTg1ZDM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+y4Nfe5Vt+AaGdwDrwpgSW0MDWO
qQ5hOhuW8/IWIBLpO2jBwcJubWyWEF2W3YRuZgCQonjcE/e9jgL/hU+PsdJHKZWa
RJL7na4DGD0UpLn5D0xAGlgFNP2VAttWamH3Wypwdlqv0qFPpWCdk3lMuLI1OGXM
JHi9eZipnPKfFyW3wNCYlMPfxsL81QuWM8M3UzL4lqLTPerEoCCyzzM8tos6Za7F
ia0qRFiAp78H6mMUXq+MbphiFwod2ST8GxP+YEC+ezdTQVvEmo0eqNrr/msjt6xW
7xlYL+mBigV0wI05poSRenYpC4pIZUnuOrUSCQm0pQuEPX74KBq+gOFkywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEVjnc2JHOD+FGXI14D1gjMimF01MB8GA1UdIwQY
MBaAFBcdp1Eo2nWC4Q9qS/Irk5E0m6nxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2Mt
NjFkZWFhNTYzMWIyLzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC81OWY3NDMtZjFjNS00MmY4LTg2N2MtNjFkZWFhNTYzMWIy
LzEvRngyblVTamFkWUxoRDJwTDhpdVRrVFNicWZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdy4/nxv
VuYgwhJwCNi9YDI8M0lFwzcf8mnu2WH8DuOzU7DRvw22iEHFr6t3N2DwN/99UHVA
zTxOOenV0Kby/DvV8M6B2zm3MBPdDP2gu2dcP+xzEoI5hOYuEWlRfebjD582EPro
X4RMCYTpnpO6Q7lbGPv0Jh4Ls8Qpaba9M4SI/okoHg5iwPu5MJoLN5xo0BOK65CH
+nHQ/N3JFVtyT9Iv0perdO77I6uBoOJDusjO/bRSHVji2uhgo0xWajk81DMxhWSB
dlNCA8SZ+SCv52wFBSpJfjzmgEFTgYQVa32B8CkGaAIbRGaYVfyzTpk4L5T6p9VG
FfM1ch+WYTW0kQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:15:23 2026 by rpki-client