Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
File:                     oeX8Y1oad1V0t3muqczWUkzE0Pk.mft (raw, json)
Hash identifier:          C7hbZndRBiPvMhwMN7kuijYv8KsTAf85hHZfp+0pnDU=
Subject key identifier:   1B:5B:6C:FA:7A:D6:10:66:18:49:D7:05:D6:B8:93:E4:10:57:3D:9C
Authority key identifier: A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9
Certificate issuer:       /CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
Certificate serial:       019F935C44BDA359C5F8AF8921682D7B9510
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
Manifest number:          0344
Signing time:             Fri 24 Jul 2026 09:02:05 +0000
Manifest this update:     Fri 24 Jul 2026 09:02:05 +0000
Manifest next update:     Sat 25 Jul 2026 09:02:05 +0000
Files and hashes:         1: h0OnQS_LDhHmHtdq9MOUPdDXqMY.roa (hash: fvbR4O3MuxsJi7oWYqjm2ohLFx0/5Mha06ohU0AwT/A=)
                          2: hM3q0tm1hGdyTy4Pq63zsy3D7-Q.roa (hash: LpyLjFrIDk+LFAUQPWPNyV38HQSScxJQeF0sXMSFCqU=)
                          3: oeX8Y1oad1V0t3muqczWUkzE0Pk.crl (hash: hYYw3oUipzrxqLv602emcjsvQUWPSIlmUh2pCV49TSo=)
                          4: zY55egblxOayG_XFLEDuLnn2KzY.roa (hash: 3VtoSxzQ+1ALd4QWfODnz+BMqwgszTlt4xRR53OtSeY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5c:44:bd:a3:59:c5:f8:af:89:21:68:2d:7b:95:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1e5fc635a1a775574b779aea9ccd6524cc4d0f9
        Validity
            Not Before: Jul 24 09:02:05 2026 GMT
            Not After : Jul 25 09:02:05 2026 GMT
        Subject: CN=1b5b6cfa7ad610661849d705d6b893e410573d9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f6:17:ae:ca:49:16:32:61:f2:e2:d6:d6:ac:
                    60:28:c3:4c:61:f4:8f:c3:95:72:2b:9b:5b:26:d5:
                    4e:4a:47:9f:49:3e:32:e2:de:04:d3:10:2a:a9:e9:
                    1c:b3:a1:08:99:5f:ba:a5:66:b7:34:43:25:67:c5:
                    64:97:66:ec:8c:ea:ca:c1:06:15:d3:53:4d:ce:00:
                    7d:ab:b7:81:53:dd:46:9c:3f:dd:a6:92:84:99:56:
                    14:90:74:34:3f:c9:46:90:79:2a:ab:78:73:84:08:
                    44:f8:b7:2f:9b:2e:d8:c1:5b:30:94:b5:8f:c5:91:
                    55:5a:ac:92:e5:87:21:e5:5c:08:55:f3:da:3f:fe:
                    f5:7c:d8:f8:9e:1a:9c:ee:5d:f2:c9:d5:81:3e:ef:
                    53:2a:38:5c:4c:85:7e:a8:e9:c6:8e:89:92:2d:f3:
                    22:f3:de:a2:eb:82:e4:a5:1c:75:a2:07:94:0f:37:
                    df:67:f2:b5:a8:4f:64:f0:a6:a9:0f:69:06:9d:c5:
                    23:ab:b8:04:1d:3a:93:e6:9f:cb:7f:c4:95:2d:0e:
                    0b:1e:98:4b:4b:5c:8e:3f:6f:59:ce:f0:95:9f:7a:
                    1b:6c:35:13:dc:ec:e3:f5:a3:d9:af:59:a2:44:bd:
                    99:f1:95:2f:29:f8:c3:cd:7f:c0:65:f0:0e:02:85:
                    70:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5B:6C:FA:7A:D6:10:66:18:49:D7:05:D6:B8:93:E4:10:57:3D:9C
            X509v3 Authority Key Identifier:
                keyid:A1:E5:FC:63:5A:1A:77:55:74:B7:79:AE:A9:CC:D6:52:4C:C4:D0:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeX8Y1oad1V0t3muqczWUkzE0Pk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/07d0c7-dc1e-4089-bd48-7ee0e60bb053/1/oeX8Y1oad1V0t3muqczWUkzE0Pk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:a2:20:42:b1:8a:68:1b:b0:fb:fc:c8:16:87:d0:d1:35:b7:
         ee:34:b7:8c:aa:6f:d4:d0:91:8e:0c:88:1b:ac:59:24:cc:5a:
         1c:d3:7b:98:32:25:fe:ff:25:e8:28:11:56:46:9b:3b:d3:b4:
         72:55:0f:55:e3:fc:e9:40:3a:ab:90:6f:14:28:ae:26:51:75:
         e3:e8:c7:12:c3:2a:99:4a:d7:2a:53:27:8e:c9:d8:40:de:b3:
         36:c7:db:d3:06:02:5d:4d:19:2a:97:91:26:67:84:44:b1:aa:
         8c:a7:78:64:b8:a1:c1:51:42:0a:8e:10:52:f6:2e:7b:2d:70:
         21:dd:c3:f0:e0:5c:bd:74:f8:a7:43:9d:6d:e7:ce:6d:11:2f:
         cf:07:37:a1:3c:d8:85:ba:24:f5:83:0e:50:6f:7f:95:93:b7:
         6f:a6:a6:67:bd:84:63:6e:fe:3d:ef:34:63:e7:24:d8:86:df:
         81:0b:9c:5c:7d:d5:80:bd:cc:7c:89:8d:85:2a:1f:e3:63:71:
         47:7b:8a:42:a3:37:34:e5:3f:3b:b9:a7:69:bf:c5:91:ec:e9:
         be:0c:55:60:29:15:51:3f:8b:57:97:45:a8:e5:e3:4f:e9:93:
         6f:13:72:e0:f2:f7:2d:7a:50:a1:cd:7b:1e:69:d4:e7:2a:f5:
         86:6e:47:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TXES9o1nF+K+JIWgte5UQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGExZTVmYzYzNWExYTc3NTU3NGI3NzlhZWE5Y2NkNjUyNGNj
NGQwZjkwHhcNMjYwNzI0MDkwMjA1WhcNMjYwNzI1MDkwMjA1WjAzMTEwLwYDVQQD
EygxYjViNmNmYTdhZDYxMDY2MTg0OWQ3MDVkNmI4OTNlNDEwNTczZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfYXrspJFjJh8uLW1qxgKMNMYfSP
w5VyK5tbJtVOSkefST4y4t4E0xAqqekcs6EImV+6pWa3NEMlZ8Vkl2bsjOrKwQYV
01NNzgB9q7eBU91GnD/dppKEmVYUkHQ0P8lGkHkqq3hzhAhE+Lcvmy7YwVswlLWP
xZFVWqyS5Ych5VwIVfPaP/71fNj4nhqc7l3yydWBPu9TKjhcTIV+qOnGjomSLfMi
896i64LkpRx1ogeUDzffZ/K1qE9k8KapD2kGncUjq7gEHTqT5p/Lf8SVLQ4LHphL
S1yOP29ZzvCVn3obbDUT3Ozj9aPZr1miRL2Z8ZUvKfjDzX/AZfAOAoVwRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtbbPp61hBmGEnXBda4k+QQVz2cMB8GA1UdIwQY
MBaAFKHl/GNaGndVdLd5rqnM1lJMxND5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgt
N2VlMGU2MGJiMDUzLzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC8wN2QwYzctZGMxZS00MDg5LWJkNDgtN2VlMGU2MGJiMDUz
LzEvb2VYOFkxb2FkMVYwdDNtdXFjeldVa3pFMFBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqIgQrGK
aBuw+/zIFofQ0TW37jS3jKpv1NCRjgyIG6xZJMxaHNN7mDIl/v8l6CgRVkabO9O0
clUPVeP86UA6q5BvFCiuJlF14+jHEsMqmUrXKlMnjsnYQN6zNsfb0wYCXU0ZKpeR
JmeERLGqjKd4ZLihwVFCCo4QUvYuey1wId3D8OBcvXT4p0OdbefObREvzwc3oTzY
hbok9YMOUG9/lZO3b6amZ72EY27+Pe80Y+ck2IbfgQucXH3VgL3MfImNhSof42Nx
R3uKQqM3NOU/O7mnab/FkezpvgxVYCkVUT+LV5dFqOXjT+mTbxNy4PL3LXpQoc17
HmnU5yr1hm5HKg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 12:07:07 2026 by rpki-client