Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
File:                     rnmjPOer5bhoQPOwbZjsisCfWaU.mft (raw, json)
Hash identifier:          XNuLRuaJD8wgEUvM99V5uC+0up7kiDPIPClcz0foL44=
Subject key identifier:   7D:99:CE:81:F3:A2:99:D1:DF:DC:99:8E:E1:D2:20:07:78:DD:3B:21
Authority key identifier: AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5
Certificate issuer:       /CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
Certificate serial:       019F8FCE5F3920BB20B902518EA209565309
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
Manifest number:          08
Signing time:             Thu 23 Jul 2026 16:28:14 +0000
Manifest this update:     Thu 23 Jul 2026 16:28:14 +0000
Manifest next update:     Fri 24 Jul 2026 16:28:14 +0000
Files and hashes:         1: Ww2AuCw4TsHoB3xAMbgWAbsB8OU.asa (hash: 11oxpuurr9BhexM7p9ojLvPrhmCX07aJw5MUTE0usgU=)
                          2: rnmjPOer5bhoQPOwbZjsisCfWaU.crl (hash: LSm79c826GMN24eWyLmx0zooBZXHMA0nNC66c1ZduCI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ce:5f:39:20:bb:20:b9:02:51:8e:a2:09:56:53:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae79a33ce7abe5b86840f3b06d98ec8ac09f59a5
        Validity
            Not Before: Jul 23 16:28:14 2026 GMT
            Not After : Jul 24 16:28:14 2026 GMT
        Subject: CN=7d99ce81f3a299d1dfdc998ee1d2200778dd3b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:4d:49:f0:62:7d:07:99:5b:a1:bb:a0:6a:0b:
                    4e:77:29:92:a1:bf:8d:da:15:96:9b:49:4a:22:f6:
                    2d:00:73:21:2f:79:1b:63:e4:a9:95:92:bc:32:ac:
                    30:65:92:0c:32:e8:5f:31:e0:53:c3:32:ad:cd:3f:
                    5d:b9:31:01:62:e8:d6:4c:60:fc:56:25:bf:9a:25:
                    23:c7:a2:be:85:53:62:08:96:d3:be:cc:1e:4a:80:
                    c7:71:fd:83:26:02:7a:fe:e1:45:eb:ab:28:2f:54:
                    3e:33:ab:6e:ea:f0:20:35:3e:6c:6c:0e:a8:99:2d:
                    cc:29:d1:67:67:c6:ad:22:98:a5:39:7e:5a:f3:03:
                    30:5e:f9:22:49:c2:55:f4:60:47:6f:6b:57:27:43:
                    e6:36:65:02:bc:7c:07:02:ad:b8:c2:f3:0e:62:27:
                    92:8e:be:6f:5c:0d:a7:c5:a9:ad:64:5b:bc:ae:c6:
                    e3:f7:7b:f1:52:12:eb:47:71:0c:c5:92:f3:c2:27:
                    0b:a2:e4:c2:17:41:2e:36:82:c8:ee:4d:de:47:4d:
                    8b:9e:25:1e:a6:48:49:b1:af:39:b3:9e:66:db:f7:
                    aa:8f:2a:ba:4c:10:01:c0:a8:19:aa:b9:cc:52:44:
                    e3:31:9e:77:e8:a8:35:54:25:2f:51:77:be:16:c8:
                    96:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:99:CE:81:F3:A2:99:D1:DF:DC:99:8E:E1:D2:20:07:78:DD:3B:21
            X509v3 Authority Key Identifier:
                keyid:AE:79:A3:3C:E7:AB:E5:B8:68:40:F3:B0:6D:98:EC:8A:C0:9F:59:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnmjPOer5bhoQPOwbZjsisCfWaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5871d2-12ad-4389-ad62-43ed92bce6a7/1/rnmjPOer5bhoQPOwbZjsisCfWaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:72:44:92:70:ec:d2:8e:34:fd:d4:b6:ef:c2:11:01:5e:0b:
         8a:88:15:ec:cb:4a:ed:ef:e0:db:8b:4a:f6:7c:c3:ff:9f:51:
         97:4c:ae:2b:b6:ba:2a:e8:c6:bb:bb:f5:77:cc:e4:35:f4:a1:
         71:b3:a4:33:ec:49:f2:99:0e:4f:8c:e6:fe:c4:3d:9f:71:ec:
         84:b7:a1:18:38:84:aa:6c:d5:d9:8d:84:96:1b:f0:82:0d:26:
         77:10:f2:b6:e6:3b:a2:f5:8a:f5:95:e8:d7:1d:d5:ab:14:49:
         cf:11:f9:12:96:61:3e:9a:db:81:00:3e:1d:81:a7:25:14:f3:
         d1:fa:92:de:6a:f1:e2:fc:63:32:21:4a:b2:0d:8b:a8:2f:0c:
         b1:2a:21:3c:d7:e7:d4:5a:53:48:64:6a:56:a8:10:66:7d:c9:
         28:69:19:e1:10:03:d9:2a:0c:a8:ec:0a:c3:c8:e7:3d:25:61:
         87:f8:cb:dc:b3:f7:fc:da:fa:d9:c2:bb:7d:43:af:6e:66:7c:
         05:d2:f7:ce:49:7b:f2:7c:48:52:74:25:2a:ac:43:81:62:34:
         db:4a:ef:df:b8:df:21:f8:1c:3c:c0:ed:d8:68:f1:f9:01:bd:
         c7:c1:95:63:a8:54:7c:de:c6:9b:95:3d:80:13:ad:74:5b:5a:
         9b:1f:cd:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Pzl85ILsguQJRjqIJVlMJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNzlhMzNjZTdhYmU1Yjg2ODQwZjNiMDZkOThlYzhhYzA5
ZjU5YTUwHhcNMjYwNzIzMTYyODE0WhcNMjYwNzI0MTYyODE0WjAzMTEwLwYDVQQD
Eyg3ZDk5Y2U4MWYzYTI5OWQxZGZkYzk5OGVlMWQyMjAwNzc4ZGQzYjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA801J8GJ9B5lbobugagtOdymSob+N
2hWWm0lKIvYtAHMhL3kbY+SplZK8MqwwZZIMMuhfMeBTwzKtzT9duTEBYujWTGD8
ViW/miUjx6K+hVNiCJbTvsweSoDHcf2DJgJ6/uFF66soL1Q+M6tu6vAgNT5sbA6o
mS3MKdFnZ8atIpilOX5a8wMwXvkiScJV9GBHb2tXJ0PmNmUCvHwHAq24wvMOYieS
jr5vXA2nxamtZFu8rsbj93vxUhLrR3EMxZLzwicLouTCF0EuNoLI7k3eR02LniUe
pkhJsa85s55m2/eqjyq6TBABwKgZqrnMUkTjMZ536Kg1VCUvUXe+FsiWhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2ZzoHzopnR39yZjuHSIAd43TshMB8GA1UdIwQY
MBaAFK55ozznq+W4aEDzsG2Y7IrAn1mlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm5talBPZXI1YmhvUVBPd2JaanNpc0NmV2FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS81ODcxZDItMTJhZC00Mzg5LWFkNjIt
NDNlZDkyYmNlNmE3LzEvcm5talBPZXI1YmhvUVBPd2JaanNpc0NmV2FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS81ODcxZDItMTJhZC00Mzg5LWFkNjItNDNlZDkyYmNlNmE3
LzEvcm5talBPZXI1YmhvUVBPd2JaanNpc0NmV2FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOnJEknDs
0o40/dS278IRAV4LiogV7MtK7e/g24tK9nzD/59Rl0yuK7a6KujGu7v1d8zkNfSh
cbOkM+xJ8pkOT4zm/sQ9n3HshLehGDiEqmzV2Y2Elhvwgg0mdxDytuY7ovWK9ZXo
1x3VqxRJzxH5EpZhPprbgQA+HYGnJRTz0fqS3mrx4vxjMiFKsg2LqC8MsSohPNfn
1FpTSGRqVqgQZn3JKGkZ4RAD2SoMqOwKw8jnPSVhh/jL3LP3/Nr62cK7fUOvbmZ8
BdL3zkl78nxIUnQlKqxDgWI020rv37jfIfgcPMDt2Gjx+QG9x8GVY6hUfN7Gm5U9
gBOtdFtamx/NJQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:08:03 2026 by rpki-client