Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
File:                     1EeBPOUqgj6h78mg9JM8XTNT7is.mft (raw, json)
Hash identifier:          9Ogr1/FKIk6s2+oFbkmJpxQzeBS1X/1RW8zWUAubz98=
Subject key identifier:   E1:DA:3F:56:5C:AA:39:A4:7D:DE:1A:5D:33:7B:E5:16:B5:5D:96:4E
Authority key identifier: D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B
Certificate issuer:       /CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
Certificate serial:       019F90C8241B7DCAC47823E3DCA1761C7119
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
Manifest number:          1126
Signing time:             Thu 23 Jul 2026 21:01:03 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:03 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:03 +0000
Files and hashes:         1: 1EeBPOUqgj6h78mg9JM8XTNT7is.crl (hash: Ms+jpD2voaCavszJ2IaeHl8lVgdBSTRO1RqbW3hlnVI=)
                          2: 3erXQOAGECj5Y6vmnhGhIcd5-n0.roa (hash: 2WH+ODOD46XHxqKVl9QqMpQ4varGLr3ciy4ehJamGPA=)
                          3: MPu6fCIQbDestuwTup6NlHm47os.roa (hash: /jMdojA5j2YqODXH/EpQYe19xNhK2fsG++ttAxdcuPc=)
                          4: zj1m99tPwrcxyT6BDJGJ3CugkIQ.roa (hash: twU1/m+1xw/8GtDgcT70cwUdWMg3Z1khilZnPoO3Wpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:24:1b:7d:ca:c4:78:23:e3:dc:a1:76:1c:71:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d447813ce52a823ea1efc9a0f4933c5d3353ee2b
        Validity
            Not Before: Jul 23 21:01:03 2026 GMT
            Not After : Jul 24 21:01:03 2026 GMT
        Subject: CN=e1da3f565caa39a47dde1a5d337be516b55d964e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:45:63:dd:3a:c2:4b:73:e3:56:a4:fa:e9:2a:
                    d8:d7:2a:51:34:cf:3b:6c:09:1d:bc:99:9e:15:ac:
                    56:17:e6:8c:7d:1c:91:df:f0:29:f6:bc:74:a1:a9:
                    49:27:36:86:94:67:1e:fe:41:fa:56:0b:3a:6f:21:
                    12:7d:e0:b9:9a:d0:df:1d:64:3a:22:32:66:ec:21:
                    4d:a8:1a:d8:93:29:1f:3a:13:4f:4d:77:dc:f8:5b:
                    cb:e1:98:11:4a:4a:71:17:23:eb:0f:cb:fa:52:9d:
                    97:77:5a:f1:da:49:80:5b:6d:5c:9f:b6:38:f0:de:
                    ec:1b:51:cd:81:2c:d1:73:ac:dd:24:68:6f:e1:68:
                    e6:cc:e8:9a:ad:b8:98:68:e0:76:fd:e2:29:55:92:
                    9f:f9:dd:c0:08:d6:6d:6e:e6:4a:fe:e6:7a:52:34:
                    75:02:7e:26:d4:c0:b1:7b:89:5f:cd:b0:c9:49:69:
                    fa:2e:d6:4c:55:59:91:c4:36:df:c8:7d:18:6a:14:
                    f8:8a:be:a9:87:64:3c:9f:97:0c:d7:70:a1:2e:85:
                    e2:15:54:a5:69:e0:9c:d9:ec:a0:1f:6f:1e:bf:f1:
                    f2:30:9b:aa:36:85:b5:2b:1b:b8:8f:90:44:58:cc:
                    c0:5e:05:26:a3:82:ea:00:ba:f2:96:ba:28:62:84:
                    2e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DA:3F:56:5C:AA:39:A4:7D:DE:1A:5D:33:7B:E5:16:B5:5D:96:4E
            X509v3 Authority Key Identifier:
                keyid:D4:47:81:3C:E5:2A:82:3E:A1:EF:C9:A0:F4:93:3C:5D:33:53:EE:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EeBPOUqgj6h78mg9JM8XTNT7is.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/fa77d3-cedb-459d-95cf-dc7e126ca234/1/1EeBPOUqgj6h78mg9JM8XTNT7is.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:95:54:b2:43:7d:02:9f:a7:07:59:e4:29:b6:55:82:27:01:
         a7:7e:7c:a0:55:e6:48:0b:be:f4:0a:39:99:05:b1:27:55:96:
         cc:d7:b4:c1:19:f3:f3:ba:18:15:1b:63:f4:a4:32:6d:35:e7:
         00:f4:df:9f:5f:71:85:8f:fe:ad:2e:b3:d3:52:d1:43:4b:9c:
         e0:f1:1d:a2:0e:88:05:e7:84:25:fd:0c:91:6e:da:06:02:53:
         8e:e0:1e:81:6e:e2:16:08:f2:34:3c:9b:47:5e:98:60:0e:d9:
         53:91:3a:37:6f:f1:99:93:17:32:98:aa:14:e0:13:15:5d:e8:
         c3:2e:06:c2:d6:38:29:35:59:ae:fe:2c:ac:36:8a:d7:50:09:
         ec:22:46:f0:ad:b5:77:5a:7a:e6:0d:53:97:94:4f:ff:72:ea:
         24:e7:44:27:d2:e9:f1:71:3a:83:68:34:8c:7d:de:55:f1:8e:
         4d:1b:be:f4:af:de:3c:85:64:0f:23:ec:ba:13:73:6f:5e:61:
         f7:27:74:d5:c9:04:78:31:74:68:a9:8a:d5:f4:20:fa:f5:f5:
         f4:96:e6:28:f6:23:7d:b7:fa:11:5c:37:f3:7f:4f:8f:12:98:
         41:e7:ff:dc:0a:1d:f9:77:1c:83:9a:95:e7:3a:35:de:cb:91:
         88:cf:25:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyCQbfcrEeCPj3KF2HHEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDc4MTNjZTUyYTgyM2VhMWVmYzlhMGY0OTMzYzVkMzM1
M2VlMmIwHhcNMjYwNzIzMjEwMTAzWhcNMjYwNzI0MjEwMTAzWjAzMTEwLwYDVQQD
EyhlMWRhM2Y1NjVjYWEzOWE0N2RkZTFhNWQzMzdiZTUxNmI1NWQ5NjRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUVj3TrCS3PjVqT66SrY1ypRNM87
bAkdvJmeFaxWF+aMfRyR3/Ap9rx0oalJJzaGlGce/kH6Vgs6byESfeC5mtDfHWQ6
IjJm7CFNqBrYkykfOhNPTXfc+FvL4ZgRSkpxFyPrD8v6Up2Xd1rx2kmAW21cn7Y4
8N7sG1HNgSzRc6zdJGhv4WjmzOiarbiYaOB2/eIpVZKf+d3ACNZtbuZK/uZ6UjR1
An4m1MCxe4lfzbDJSWn6LtZMVVmRxDbfyH0YahT4ir6ph2Q8n5cM13ChLoXiFVSl
aeCc2eygH28ev/HyMJuqNoW1Kxu4j5BEWMzAXgUmo4LqALrylrooYoQutQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOHaP1Zcqjmkfd4aXTN75Ra1XZZOMB8GA1UdIwQY
MBaAFNRHgTzlKoI+oe/JoPSTPF0zU+4rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2Yt
ZGM3ZTEyNmNhMjM0LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9mYTc3ZDMtY2VkYi00NTlkLTk1Y2YtZGM3ZTEyNmNhMjM0
LzEvMUVlQlBPVXFnajZoNzhtZzlKTThYVE5UN2lzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkpVUskN9
Ap+nB1nkKbZVgicBp358oFXmSAu+9Ao5mQWxJ1WWzNe0wRnz87oYFRtj9KQybTXn
APTfn19xhY/+rS6z01LRQ0uc4PEdog6IBeeEJf0MkW7aBgJTjuAegW7iFgjyNDyb
R16YYA7ZU5E6N2/xmZMXMpiqFOATFV3owy4GwtY4KTVZrv4srDaK11AJ7CJG8K21
d1p65g1Tl5RP/3LqJOdEJ9Lp8XE6g2g0jH3eVfGOTRu+9K/ePIVkDyPsuhNzb15h
9yd01ckEeDF0aKmK1fQg+vX19JbmKPYjfbf6EVw3839PjxKYQef/3Aod+Xccg5qV
5zo13suRiM8lNA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:21:47 2026 by rpki-client