Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File:                     1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier:          RG5xAjIodG3PdO7hWSGFcNrHgArqwBehFGA/GK5di9s=
Subject key identifier:   80:38:A2:06:7C:9C:51:AF:AD:86:30:2B:ED:4D:AD:59:A1:CD:95:50
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer:       /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial:       019F91A3BE40D1649C48B6D1E128931A6304
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number:          1333
Signing time:             Fri 24 Jul 2026 01:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:55 +0000
Files and hashes:         1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: Hss4m0Z0PM4v3+6T2P04um7iotBWu3t5gbLUDISGENI=)
                          2: MNcRXpZmo9U1VGyp7iNoe-ahRYc.roa (hash: sUVdf+DEbppS/mcQWvKY4TguTZDnt2ApNazCAD8Sm+4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:be:40:d1:64:9c:48:b6:d1:e1:28:93:1a:63:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
        Validity
            Not Before: Jul 24 01:00:55 2026 GMT
            Not After : Jul 25 01:00:55 2026 GMT
        Subject: CN=8038a2067c9c51afad86302bed4dad59a1cd9550
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:21:e8:88:4a:f6:47:08:6a:5e:20:48:e5:50:
                    4b:4b:6e:e1:78:b8:17:18:91:31:63:ad:24:bc:cd:
                    20:a9:d6:8d:35:2d:e7:57:28:49:f6:d4:6e:9f:63:
                    08:ef:98:38:92:5d:f2:4d:a3:c9:b4:ce:a0:af:89:
                    85:64:85:8e:15:88:6e:b2:82:c4:16:d6:04:bc:d2:
                    18:fe:79:75:3a:fc:82:4e:99:b7:c0:3b:56:89:28:
                    58:92:09:ce:83:a9:a8:37:23:7d:3f:c6:ba:7d:9a:
                    ef:4f:b2:e9:69:ca:e5:64:7f:24:dc:dc:e4:bb:88:
                    05:bd:db:eb:81:c5:20:4f:be:dc:7a:ce:e2:07:79:
                    d6:43:54:24:0d:47:a9:99:95:92:33:bc:10:ee:12:
                    77:f8:38:63:0b:eb:cb:c2:8e:09:f5:82:cf:46:40:
                    a6:36:23:d6:d5:21:c5:5d:d0:ea:85:ad:3a:59:db:
                    ab:65:4a:e6:da:0c:ec:75:59:36:68:7a:40:66:b2:
                    5b:e6:3e:e4:8d:b7:29:6b:4b:39:3e:64:fa:e9:f3:
                    bb:68:b5:e7:99:18:5a:4b:70:c4:2c:c2:b8:34:a8:
                    df:62:be:f2:c6:b3:cf:6c:23:1b:af:cd:fe:d6:2e:
                    ca:64:31:2a:70:19:88:1f:3a:e0:52:b3:ce:60:db:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:38:A2:06:7C:9C:51:AF:AD:86:30:2B:ED:4D:AD:59:A1:CD:95:50
            X509v3 Authority Key Identifier:
                keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:78:b9:8c:44:d0:b9:8b:5a:94:00:95:45:03:ce:9e:70:b8:
         e8:e8:1c:38:80:7f:6d:4b:43:d0:7e:5c:b4:f1:82:4c:e7:e8:
         35:f3:3a:53:42:f2:3d:f8:49:56:74:61:4b:b5:73:65:3b:94:
         d8:8b:39:7d:80:c6:a4:11:e0:a8:73:56:33:83:a7:0a:fc:8f:
         10:23:f0:eb:74:38:3b:13:06:f8:57:34:c4:6f:94:ff:06:a4:
         07:8b:2f:9b:aa:a6:f8:06:fe:97:38:2f:98:23:a0:9c:68:81:
         a1:82:17:42:71:98:d7:99:04:b0:c2:2a:b4:01:f1:46:80:0e:
         ab:4a:9e:8d:19:c7:a2:70:0b:80:47:00:c5:50:cd:db:4f:87:
         97:11:68:8a:87:24:5e:7f:d7:60:11:58:ac:39:c4:3a:22:3b:
         1b:f2:4b:5b:f1:01:f2:35:57:ff:5c:8b:b2:15:bb:03:61:c6:
         85:26:3a:81:99:3b:ee:8b:66:f4:e9:3e:46:fe:26:dd:a5:ef:
         86:94:57:b5:a2:6e:fe:01:db:f6:ed:28:8b:3d:20:8c:85:49:
         c2:1b:3e:e7:7b:3a:f9:e0:46:bd:e2:35:81:91:e5:b2:48:e7:
         ba:fb:f8:10:59:d9:ec:96:a8:21:bc:c9:0e:94:89:58:20:44:
         dd:b9:67:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ro75A0WScSLbR4SiTGmMEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmQ3OTQ5ZTY5ODQ0MWRiZTlhYmM1NjA5YzQ5ZWFjYTcz
Yzk3OTYwHhcNMjYwNzI0MDEwMDU1WhcNMjYwNzI1MDEwMDU1WjAzMTEwLwYDVQQD
Eyg4MDM4YTIwNjdjOWM1MWFmYWQ4NjMwMmJlZDRkYWQ1OWExY2Q5NTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyHoiEr2RwhqXiBI5VBLS27heLgX
GJExY60kvM0gqdaNNS3nVyhJ9tRun2MI75g4kl3yTaPJtM6gr4mFZIWOFYhusoLE
FtYEvNIY/nl1OvyCTpm3wDtWiShYkgnOg6moNyN9P8a6fZrvT7LpacrlZH8k3Nzk
u4gFvdvrgcUgT77ces7iB3nWQ1QkDUepmZWSM7wQ7hJ3+DhjC+vLwo4J9YLPRkCm
NiPW1SHFXdDqha06WdurZUrm2gzsdVk2aHpAZrJb5j7kjbcpa0s5PmT66fO7aLXn
mRhaS3DELMK4NKjfYr7yxrPPbCMbr83+1i7KZDEqcBmIHzrgUrPOYNvm1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIA4ogZ8nFGvrYYwK+1NrVmhzZVQMB8GA1UdIwQY
MBaAFNYteUnmmEQdvpq8VgnEnqynPJeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUt
MTViMjFhOWI0MzI1LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUtMTViMjFhOWI0MzI1
LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnni5jETQ
uYtalACVRQPOnnC46OgcOIB/bUtD0H5ctPGCTOfoNfM6U0LyPfhJVnRhS7VzZTuU
2Is5fYDGpBHgqHNWM4OnCvyPECPw63Q4OxMG+Fc0xG+U/wakB4svm6qm+Ab+lzgv
mCOgnGiBoYIXQnGY15kEsMIqtAHxRoAOq0qejRnHonALgEcAxVDN20+HlxFoiock
Xn/XYBFYrDnEOiI7G/JLW/EB8jVX/1yLshW7A2HGhSY6gZk77otm9Ok+Rv4m3aXv
hpRXtaJu/gHb9u0oiz0gjIVJwhs+53s6+eBGveI1gZHlskjnuvv4EFnZ7JaoIbzJ
DpSJWCBE3bln9A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:18:26 2026 by rpki-client