Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File:                     v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier:          9u4Q/Ox7JfzXG8m4/xlHI2HQs/BipGmeUI29LOGc2fU=
Subject key identifier:   8C:DA:A3:DB:7D:71:39:7C:D4:DB:A9:2C:C2:76:B9:01:E2:19:17:80
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer:       /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial:       019F90C76BF7BA33F65412304778C426756F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number:          0E18
Signing time:             Thu 23 Jul 2026 21:00:16 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:16 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:16 +0000
Files and hashes:         1: 5KeRhOyb086eeciztDQbKFDzrso.roa (hash: ySXvhH64ggwnsQNYdFNSvhmS1S+iYiesXOZvpdcRhg8=)
                          2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: UNF+zCIYwTb6GnE18y/c8Fc03iMg+d015nXDlW8pByA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:6b:f7:ba:33:f6:54:12:30:47:78:c4:26:75:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
        Validity
            Not Before: Jul 23 21:00:16 2026 GMT
            Not After : Jul 24 21:00:16 2026 GMT
        Subject: CN=8cdaa3db7d71397cd4dba92cc276b901e2191780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:17:39:3b:a8:7d:58:12:ec:a2:01:56:18:
                    21:25:a6:e1:59:d2:46:b5:b0:44:b5:ac:58:aa:16:
                    e7:94:f8:ae:fb:30:c6:b2:01:71:21:dc:36:1b:a8:
                    37:4b:2a:97:ae:b5:26:13:8b:8a:bf:8e:39:8a:45:
                    8a:80:6c:98:f9:61:75:bb:56:7c:b2:f2:a0:76:32:
                    d3:a5:44:e4:43:1d:89:69:50:c6:4b:1e:0f:b1:df:
                    8b:9c:7d:19:27:a0:c2:9a:55:8f:c4:2c:39:9d:cb:
                    62:a8:ef:40:c8:96:fe:fa:1b:1a:d8:0b:03:dd:bd:
                    ef:d5:62:ea:22:81:c7:18:c2:0b:53:b0:40:ff:a2:
                    9f:9d:ef:e1:a2:ad:fe:c0:83:b2:e6:18:9e:d9:f0:
                    5d:45:7f:ae:8f:ad:22:5f:2c:3f:0f:ae:21:28:ad:
                    e7:8a:fc:ec:bb:d1:37:8c:9a:10:c8:4c:83:01:99:
                    c5:a4:8f:b0:89:53:07:ba:89:4c:93:e7:c9:66:f9:
                    a3:9a:a1:2b:08:11:a9:85:c5:85:33:d0:8e:14:2a:
                    a2:94:8b:aa:12:0a:84:46:ec:f7:af:26:37:51:b7:
                    23:b6:49:16:ff:4a:1e:6c:46:64:3c:39:d8:ff:4b:
                    91:0f:90:60:5e:90:52:23:ea:77:b6:1c:7c:44:35:
                    49:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:DA:A3:DB:7D:71:39:7C:D4:DB:A9:2C:C2:76:B9:01:E2:19:17:80
            X509v3 Authority Key Identifier:
                keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:76:20:60:4b:a2:6b:fe:2f:2c:b1:bb:1f:b9:48:49:18:f7:
         69:56:44:eb:f2:21:6c:99:40:9f:f2:56:3d:79:a4:f6:77:1a:
         fa:4d:61:67:8a:8e:42:a7:5e:df:9b:79:f6:5e:63:8e:6b:12:
         b5:1a:1f:88:38:97:3f:27:78:5d:70:f4:b3:9d:95:67:b8:8d:
         db:2d:7c:ee:b6:4c:a7:e4:30:8a:84:e7:2e:f4:f6:16:18:b4:
         fc:52:85:25:59:f7:37:45:54:d9:a2:40:ed:54:f8:59:85:85:
         4c:35:8f:59:70:cc:5e:ef:02:df:a1:16:cb:ed:fa:b7:8e:91:
         d3:1f:5b:1d:46:e1:7f:93:d1:3b:ab:d5:88:4d:72:98:a7:1d:
         28:47:3c:35:3e:f4:d2:18:53:2d:a5:83:3c:96:4a:f3:01:5d:
         9e:f8:fb:4b:10:49:92:74:98:77:e6:b5:c2:28:cc:1f:95:46:
         13:6d:27:c8:76:3a:e0:48:ff:e2:03:de:bc:90:a4:31:0e:32:
         fa:d9:b9:32:67:7c:ec:4b:99:39:89:36:21:2c:8e:86:78:9d:
         41:1a:bf:53:2e:9c:a5:62:67:98:c9:e3:a5:00:1e:5c:cb:66:
         e7:26:2e:6b:24:db:89:0a:84:ea:62:e0:0d:6e:6d:96:67:85:
         c2:bb:56:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx2v3ujP2VBIwR3jEJnVvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmYmIwMzAxNmM4M2NlYThhYTRmYTljMzZhMzY0M2E1NjVj
YzkzZTYwHhcNMjYwNzIzMjEwMDE2WhcNMjYwNzI0MjEwMDE2WjAzMTEwLwYDVQQD
Eyg4Y2RhYTNkYjdkNzEzOTdjZDRkYmE5MmNjMjc2YjkwMWUyMTkxNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWkXOTuofVgS7KIBVhghJabhWdJG
tbBEtaxYqhbnlPiu+zDGsgFxIdw2G6g3SyqXrrUmE4uKv445ikWKgGyY+WF1u1Z8
svKgdjLTpUTkQx2JaVDGSx4Psd+LnH0ZJ6DCmlWPxCw5nctiqO9AyJb++hsa2AsD
3b3v1WLqIoHHGMILU7BA/6Kfne/hoq3+wIOy5hie2fBdRX+uj60iXyw/D64hKK3n
ivzsu9E3jJoQyEyDAZnFpI+wiVMHuolMk+fJZvmjmqErCBGphcWFM9COFCqilIuq
EgqERuz3ryY3UbcjtkkW/0oebEZkPDnY/0uRD5BgXpBSI+p3thx8RDVJBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIzao9t9cTl81NupLMJ2uQHiGReAMB8GA1UdIwQY
MBaAFL+7AwFsg86oqk+pw2o2Q6VlzJPmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmIt
NDE0ZjA5YjkyYzE1LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC8zZjNlNTctMGUwMC00ZjJmLTk3NmItNDE0ZjA5YjkyYzE1
LzEvdjdzREFXeUR6cWlxVDZuRGFqWkRwV1hNay1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARXYgYEui
a/4vLLG7H7lISRj3aVZE6/IhbJlAn/JWPXmk9nca+k1hZ4qOQqde35t59l5jjmsS
tRofiDiXPyd4XXD0s52VZ7iN2y187rZMp+QwioTnLvT2Fhi0/FKFJVn3N0VU2aJA
7VT4WYWFTDWPWXDMXu8C36EWy+36t46R0x9bHUbhf5PRO6vViE1ymKcdKEc8NT70
0hhTLaWDPJZK8wFdnvj7SxBJknSYd+a1wijMH5VGE20nyHY64Ej/4gPevJCkMQ4y
+tm5Mmd87EuZOYk2ISyOhnidQRq/Uy6cpWJnmMnjpQAeXMtm5yYuayTbiQqE6mLg
DW5tlmeFwrtW1w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:05:12 2026 by rpki-client