Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
File:                     b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft (raw, json)
Hash identifier:          Zkx4TZwTqpDpqeS7lGeJDJvWlk/PvNgUxIrTOyUKBdw=
Subject key identifier:   C2:4A:84:44:43:13:95:43:72:CF:DD:D9:9C:47:A6:8B:6D:E0:E2:99
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Certificate issuer:       /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial:       019F8EA239B0109FDB9B731A83EFA1985746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
Manifest number:          0A1F
Signing time:             Thu 23 Jul 2026 11:00:24 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:24 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:24 +0000
Files and hashes:         1: CfaW0dz4EssFT4uPeycU_-E5pBA.roa (hash: 9n7jzXckIle53b2vQSpxdK5FHw2p4wSKjNLr3PO/AtM=)
                          2: b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl (hash: 9vzd8wyBtY41deqwRvCzcdLy+ZaTr9uWM9EtiUO6M2A=)
                          3: ekljz6keL0jMzgXLL61-BbfOA_o.asa (hash: 6SVDUniDMkK7s4GO2Jl3pm29NsYfbDB+Ywpn4YNVyP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:39:b0:10:9f:db:9b:73:1a:83:ef:a1:98:57:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
        Validity
            Not Before: Jul 23 11:00:24 2026 GMT
            Not After : Jul 24 11:00:24 2026 GMT
        Subject: CN=c24a84444313954372cfddd99c47a68b6de0e299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:20:8e:a5:ef:b5:4f:79:96:27:7a:db:40:11:
                    70:9f:0c:53:93:ca:b9:64:31:90:3e:5c:8c:10:47:
                    00:f0:91:c2:af:f8:b5:8b:de:50:dd:a3:10:72:b9:
                    fa:50:ca:98:00:5c:22:62:59:2e:be:7b:25:36:52:
                    3e:52:49:84:77:f7:5f:11:3a:44:40:9b:cc:55:b7:
                    6b:eb:0a:53:4b:80:05:f6:98:9c:d4:82:32:59:7a:
                    26:5d:1a:67:d5:9e:1a:1d:9b:f0:32:5b:7e:3d:1c:
                    fe:ba:dc:46:5d:f9:fa:51:97:05:25:af:b4:a4:13:
                    84:6f:76:f6:c3:f8:ac:97:4f:5a:11:c3:ad:f4:de:
                    28:d3:03:f2:68:81:e6:cc:ad:18:f5:49:02:c5:5c:
                    e9:50:eb:58:4c:8d:ff:18:02:b7:5e:37:d6:f7:b7:
                    48:9f:2a:46:04:dd:4f:a7:43:02:fb:e9:35:13:0b:
                    6b:c4:8b:d3:55:e7:28:3f:df:41:cb:36:9f:f0:25:
                    6a:54:e1:8f:4c:78:3a:0d:d8:a9:01:85:99:64:f7:
                    66:b1:06:9a:fc:09:4a:5d:f6:33:e4:be:14:ef:f7:
                    1a:53:38:62:98:0f:32:ac:50:9e:31:7a:3e:49:b9:
                    95:49:c0:60:89:34:6c:d5:6e:5d:ef:20:e6:aa:35:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4A:84:44:43:13:95:43:72:CF:DD:D9:9C:47:A6:8B:6D:E0:E2:99
            X509v3 Authority Key Identifier:
                keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:12:ba:1b:44:7f:9e:01:c9:ec:93:f4:8b:7f:df:72:d9:1e:
         9f:55:fc:35:b1:5a:91:3d:e7:5f:60:22:b8:9e:71:ea:1f:0e:
         a8:c0:13:5e:ba:e2:89:94:fe:0c:33:53:36:ab:8f:2e:44:43:
         47:90:ec:51:84:f3:50:0a:56:7b:45:07:35:c1:a2:09:10:b9:
         24:fe:a9:69:c8:13:4a:f1:a2:4e:62:4c:1d:1c:6e:9b:82:74:
         5d:eb:d8:b1:c6:71:fd:5c:c1:f6:b6:bd:74:e9:87:de:bd:10:
         5f:9d:01:b4:f1:71:22:2f:ba:ff:32:d6:c4:55:c1:48:47:4d:
         f7:01:c8:9d:89:50:35:ba:bd:58:1a:c1:62:b9:68:66:81:3c:
         01:ef:03:8b:16:dd:da:bd:97:bf:f3:d4:42:a5:5d:6f:db:d7:
         17:20:b3:b4:0b:8b:d3:d9:79:b8:71:4e:c3:7d:07:99:93:3d:
         bd:b1:80:95:69:7a:c2:22:a5:ed:d6:d8:1b:91:aa:86:4d:60:
         86:aa:5b:a7:2e:2a:ec:68:7d:f2:7e:8b:f0:5d:92:d4:2a:66:
         14:29:61:b6:6d:ad:29:61:b3:93:01:38:23:90:e9:29:ce:a0:
         7e:c3:7c:6a:c8:1c:10:10:5b:f0:f6:78:c9:76:5e:c4:56:d9:
         ba:7d:3b:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OojmwEJ/bm3Mag++hmFdGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZmU3YjIxYjYyMTgzZDVlM2Q0YWUxYjkzZmYwMDkwOTI4
MmM5MTIwHhcNMjYwNzIzMTEwMDI0WhcNMjYwNzI0MTEwMDI0WjAzMTEwLwYDVQQD
EyhjMjRhODQ0NDQzMTM5NTQzNzJjZmRkZDk5YzQ3YTY4YjZkZTBlMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CCOpe+1T3mWJ3rbQBFwnwxTk8q5
ZDGQPlyMEEcA8JHCr/i1i95Q3aMQcrn6UMqYAFwiYlkuvnslNlI+UkmEd/dfETpE
QJvMVbdr6wpTS4AF9pic1IIyWXomXRpn1Z4aHZvwMlt+PRz+utxGXfn6UZcFJa+0
pBOEb3b2w/isl09aEcOt9N4o0wPyaIHmzK0Y9UkCxVzpUOtYTI3/GAK3XjfW97dI
nypGBN1Pp0MC++k1EwtrxIvTVecoP99Byzaf8CVqVOGPTHg6DdipAYWZZPdmsQaa
/AlKXfYz5L4U7/caUzhimA8yrFCeMXo+SbmVScBgiTRs1W5d7yDmqjWqYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMJKhERDE5VDcs/d2ZxHpott4OKZMB8GA1UdIwQY
MBaAFG/+eyG2IYPV49SuG5P/AJCSgskSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2Et
YTRiYmIxYmM5OGM2LzEvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9hYTA2YjYtZTc2Ni00YWQ5LWFhN2EtYTRiYmIxYmM5OGM2
LzEvYl81N0liWWhnOVhqMUs0YmtfOEFrSktDeVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBK6G0R/
ngHJ7JP0i3/fctken1X8NbFakT3nX2AiuJ5x6h8OqMATXrriiZT+DDNTNquPLkRD
R5DsUYTzUApWe0UHNcGiCRC5JP6pacgTSvGiTmJMHRxum4J0XevYscZx/VzB9ra9
dOmH3r0QX50BtPFxIi+6/zLWxFXBSEdN9wHInYlQNbq9WBrBYrloZoE8Ae8Dixbd
2r2Xv/PUQqVdb9vXFyCztAuL09l5uHFOw30HmZM9vbGAlWl6wiKl7dbYG5Gqhk1g
hqpbpy4q7Gh98n6L8F2S1CpmFClhtm2tKWGzkwE4I5DpKc6gfsN8asgcEBBb8PZ4
yXZexFbZun07mQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:01 2026 by rpki-client