Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
File:                     Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft (raw, json)
Hash identifier:          9+HWI+81s7OJaAotLmmF5Dfxc28WsVEgHim0aKyMZ9o=
Subject key identifier:   1B:88:B8:13:05:D3:60:69:2F:93:2B:92:64:C4:FF:B4:86:88:72:87
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Certificate issuer:       /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial:       019F94375CAC5DC0182DC87678DF15767B82
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
Manifest number:          08E7
Signing time:             Fri 24 Jul 2026 13:01:23 +0000
Manifest this update:     Fri 24 Jul 2026 13:01:23 +0000
Manifest next update:     Sat 25 Jul 2026 13:01:23 +0000
Files and hashes:         1: O4W8V4ta9TPH3JBR2-Drko17mnI.roa (hash: eZbauCAYEP75NZzjmVokJXIEy1y7iTaIYD5JjGsUAuo=)
                          2: Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl (hash: rby90XRpdo4XXefe1PLuLzSni8Ed3QTKQ7/C9mcr08E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:37:5c:ac:5d:c0:18:2d:c8:76:78:df:15:76:7b:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
        Validity
            Not Before: Jul 24 13:01:23 2026 GMT
            Not After : Jul 25 13:01:23 2026 GMT
        Subject: CN=1b88b81305d360692f932b9264c4ffb486887287
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:02:22:c0:0b:55:7d:e0:cf:b7:d1:ca:e7:40:
                    1a:86:1d:d7:4c:52:49:bc:98:00:bf:3c:91:d1:f9:
                    4f:8d:6d:46:0f:bc:cf:ae:38:27:df:21:c7:de:db:
                    01:7c:38:38:13:3f:30:db:10:47:0a:25:b6:84:14:
                    b1:22:be:46:a0:b8:c8:d4:36:a9:eb:c2:fe:b7:bf:
                    1e:6c:f5:99:af:41:c7:70:98:29:17:dc:9e:c0:2f:
                    d9:d0:e7:84:e3:6a:22:e0:e6:39:92:17:15:19:26:
                    05:4a:91:07:ea:64:0d:b8:2f:60:8b:55:78:b6:e6:
                    4a:f2:cd:a3:40:af:a1:04:22:1c:aa:25:8b:02:d4:
                    48:ae:fa:82:76:67:a5:81:72:e4:fa:72:06:15:52:
                    70:83:3c:97:d7:ad:b4:df:c1:f0:10:b7:42:bc:5d:
                    4e:31:1e:09:d3:95:f7:53:85:99:bc:82:2a:76:63:
                    70:cc:16:4f:82:f6:12:39:e6:fd:9b:ae:ee:38:57:
                    7a:19:09:46:65:01:1d:ac:b7:e2:a3:6f:d8:55:f9:
                    30:b5:d2:89:40:fb:31:9e:ac:73:e4:37:d7:ff:0b:
                    43:9e:6d:b8:58:4f:68:a5:38:17:ba:0b:2b:2e:3b:
                    bf:26:3b:d2:3a:f0:ad:92:3e:43:13:81:17:51:1a:
                    6c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:88:B8:13:05:D3:60:69:2F:93:2B:92:64:C4:FF:B4:86:88:72:87
            X509v3 Authority Key Identifier:
                keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:72:1f:67:3b:71:4b:bb:20:6b:b9:e8:55:6c:4c:a6:94:33:
         a3:d5:d5:b2:cc:e7:59:08:4c:d4:79:3e:16:a5:a9:6d:a1:f9:
         b6:06:2b:40:39:2e:51:77:21:c5:26:ec:ca:33:68:4a:9c:ba:
         8c:a7:81:f1:a4:eb:28:cd:09:c2:27:9b:c6:67:c8:88:2e:d4:
         90:8f:8f:37:cd:4b:22:6a:dd:35:d3:23:a9:cb:c5:88:bd:a1:
         ac:c6:38:b6:c9:77:52:24:71:b7:4e:b2:9a:ff:5e:92:15:1c:
         61:7c:02:cd:6b:72:01:1c:1f:d1:9c:7c:39:bf:a8:82:61:a6:
         17:16:35:8c:12:b5:58:8a:f5:c5:b8:c0:5a:d4:49:a3:0e:ed:
         98:52:05:c3:be:f7:8e:db:fb:2b:16:2d:f2:90:9f:76:cf:8d:
         c3:38:ee:2f:5d:03:26:d1:82:49:6b:6f:9c:d9:df:b1:88:c9:
         6f:42:74:ab:22:b0:90:1a:13:96:00:33:99:ed:4a:6a:71:49:
         1d:ec:38:f7:58:3e:f0:39:80:99:6d:24:cb:a0:bd:36:d0:ec:
         b2:2d:db:9f:d7:7a:11:25:85:f3:1b:c0:64:8d:c1:26:3f:09:
         36:e6:3e:8c:0d:69:7c:12:fc:cf:66:0f:18:e2:cb:68:22:4f:
         1c:e6:8e:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UN1ysXcAYLch2eN8VdnuCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1ZWZmZTk4YzI0YzNkNmQ2MDg3YzhkMWQzZjkwMWI4Y2Nk
NDAwODgwHhcNMjYwNzI0MTMwMTIzWhcNMjYwNzI1MTMwMTIzWjAzMTEwLwYDVQQD
EygxYjg4YjgxMzA1ZDM2MDY5MmY5MzJiOTI2NGM0ZmZiNDg2ODg3Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwIiwAtVfeDPt9HK50Aahh3XTFJJ
vJgAvzyR0flPjW1GD7zPrjgn3yHH3tsBfDg4Ez8w2xBHCiW2hBSxIr5GoLjI1Dap
68L+t78ebPWZr0HHcJgpF9yewC/Z0OeE42oi4OY5khcVGSYFSpEH6mQNuC9gi1V4
tuZK8s2jQK+hBCIcqiWLAtRIrvqCdmelgXLk+nIGFVJwgzyX162038HwELdCvF1O
MR4J05X3U4WZvIIqdmNwzBZPgvYSOeb9m67uOFd6GQlGZQEdrLfio2/YVfkwtdKJ
QPsxnqxz5DfX/wtDnm24WE9opTgXugsrLju/JjvSOvCtkj5DE4EXURpskQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuIuBMF02BpL5MrkmTE/7SGiHKHMB8GA1UdIwQY
MBaAFEXv/pjCTD1tYIfI0dP5AbjM1ACIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAt
ZGViN2I5MTg5MTY5LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS8xZTRhNjQtN2FhMC00Yzk0LTliYjAtZGViN2I5MTg5MTY5
LzEvUmVfLW1NSk1QVzFnaDhqUjBfa0J1TXpVQUlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAInIfZztx
S7sga7noVWxMppQzo9XVssznWQhM1Hk+FqWpbaH5tgYrQDkuUXchxSbsyjNoSpy6
jKeB8aTrKM0JwiebxmfIiC7UkI+PN81LImrdNdMjqcvFiL2hrMY4tsl3UiRxt06y
mv9ekhUcYXwCzWtyARwf0Zx8Ob+ogmGmFxY1jBK1WIr1xbjAWtRJow7tmFIFw773
jtv7KxYt8pCfds+NwzjuL10DJtGCSWtvnNnfsYjJb0J0qyKwkBoTlgAzme1KanFJ
Hew491g+8DmAmW0ky6C9NtDssi3bn9d6ESWF8xvAZI3BJj8JNuY+jA1pfBL8z2YP
GOLLaCJPHOaO4A==
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:40:26 2026 by rpki-client