Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
File:                     169EtH8IvQvo_AX5sMFaWrxiA6o.mft (raw, json)
Hash identifier:          AFtq79BGJUWVXiRVcxZQF/sE2FxnZQhbtmvlTWmhRCM=
Subject key identifier:   84:3E:9F:E0:5E:B6:05:8B:47:80:36:9E:6B:89:16:26:89:94:94:BA
Authority key identifier: D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA
Certificate issuer:       /CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
Certificate serial:       019F8FB56D0B3F145CE7D63752A2D7320FB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
Manifest number:          0F6E
Signing time:             Thu 23 Jul 2026 16:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 16:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 16:00:59 +0000
Files and hashes:         1: 169EtH8IvQvo_AX5sMFaWrxiA6o.crl (hash: 1lCroljJ6U/PR2cB8Cv7awTp8rNdMzbxqgTzI3ESqZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:b5:6d:0b:3f:14:5c:e7:d6:37:52:a2:d7:32:0f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7af44b47f08bd0be8fc05f9b0c15a5abc6203aa
        Validity
            Not Before: Jul 23 16:00:59 2026 GMT
            Not After : Jul 24 16:00:59 2026 GMT
        Subject: CN=843e9fe05eb6058b4780369e6b891626899494ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8e:ad:fe:3a:01:e1:3d:68:55:49:2c:8b:6b:
                    3f:25:3a:18:4a:fa:8f:86:b6:05:5a:00:01:5f:23:
                    fb:8d:0d:83:02:d6:6e:e6:eb:ca:4e:39:9f:2a:df:
                    e0:d7:f6:a2:2e:b4:19:4b:a6:1c:e1:7f:d6:09:ee:
                    04:2f:f7:29:bd:a3:8c:52:0b:82:bc:71:f2:5a:c6:
                    30:d1:61:46:01:0a:d2:05:91:80:f2:b9:ae:04:01:
                    40:76:63:e3:ab:79:7a:26:43:2d:81:b4:6f:87:b3:
                    b8:50:41:00:94:dd:81:60:ba:27:37:87:45:e5:12:
                    96:5e:32:95:73:77:9b:42:81:32:0f:d6:37:79:7c:
                    68:c3:3f:a1:01:98:a2:e6:92:66:6e:34:e9:dc:00:
                    c0:0a:d7:f4:6a:f3:9f:62:17:0f:59:80:d1:d5:e6:
                    13:5e:c9:f2:b7:7f:ab:a3:85:08:e3:86:a6:2d:f1:
                    98:91:ae:fe:f1:f2:f6:23:68:4f:8d:d0:87:22:29:
                    8e:af:a0:ac:dd:46:d5:33:d0:af:d1:df:70:d7:41:
                    83:ca:70:0a:0a:e6:77:fd:58:e5:99:ed:c3:d3:99:
                    69:bb:70:9c:98:80:ef:64:30:fd:d3:38:f2:28:3d:
                    6a:2e:d7:c7:e9:cc:ca:da:29:2f:b1:60:49:4d:91:
                    bb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:3E:9F:E0:5E:B6:05:8B:47:80:36:9E:6B:89:16:26:89:94:94:BA
            X509v3 Authority Key Identifier:
                keyid:D7:AF:44:B4:7F:08:BD:0B:E8:FC:05:F9:B0:C1:5A:5A:BC:62:03:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/169EtH8IvQvo_AX5sMFaWrxiA6o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/fbbb53-5da2-44f6-8c9f-19b0269d103c/1/169EtH8IvQvo_AX5sMFaWrxiA6o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:81:da:8e:ea:f5:5b:c6:df:03:3a:76:eb:e4:87:fb:45:9f:
         76:3c:35:6c:88:39:24:18:7b:d6:16:a3:49:7c:a2:9a:73:2e:
         86:da:a4:ee:5e:ea:90:67:f7:e1:21:d3:fa:04:28:f3:6e:6e:
         22:88:70:43:a1:5f:fc:16:86:f5:d3:84:1a:0a:ff:94:8a:80:
         87:84:7c:bd:3b:be:0e:c7:c5:a3:80:75:76:c1:77:81:b2:b6:
         2f:e1:f7:ae:d7:89:fc:37:8e:4c:07:5e:bc:33:83:4f:63:5f:
         bf:83:72:41:2a:52:73:71:c1:9a:a4:2e:f7:e0:6f:91:37:95:
         66:7f:2a:07:0d:03:d9:e8:1c:a7:26:ba:3d:c3:40:2f:73:c4:
         4b:5b:4c:c3:80:ef:40:2f:ef:9f:f2:8e:fe:0e:f5:4a:06:ab:
         19:99:00:98:46:9f:15:d8:56:69:e6:3d:2e:72:dd:83:ab:b3:
         de:25:bc:1a:20:31:87:19:a6:e7:8a:22:fe:fc:35:50:c6:b1:
         3f:05:49:10:7b:e2:ab:59:53:16:ad:16:8d:14:0f:57:5e:0a:
         99:9d:cf:5a:62:04:b6:19:f6:1c:e3:72:6e:17:8e:5a:5b:16:
         ce:16:72:e3:b9:36:7d:67:d0:2c:f7:2a:53:4f:b4:c4:1c:f9:
         a7:6d:1d:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PtW0LPxRc59Y3UqLXMg+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3YWY0NGI0N2YwOGJkMGJlOGZjMDVmOWIwYzE1YTVhYmM2
MjAzYWEwHhcNMjYwNzIzMTYwMDU5WhcNMjYwNzI0MTYwMDU5WjAzMTEwLwYDVQQD
Eyg4NDNlOWZlMDVlYjYwNThiNDc4MDM2OWU2Yjg5MTYyNjg5OTQ5NGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo6t/joB4T1oVUksi2s/JToYSvqP
hrYFWgABXyP7jQ2DAtZu5uvKTjmfKt/g1/aiLrQZS6Yc4X/WCe4EL/cpvaOMUguC
vHHyWsYw0WFGAQrSBZGA8rmuBAFAdmPjq3l6JkMtgbRvh7O4UEEAlN2BYLonN4dF
5RKWXjKVc3ebQoEyD9Y3eXxowz+hAZii5pJmbjTp3ADACtf0avOfYhcPWYDR1eYT
Xsnyt3+ro4UI44amLfGYka7+8fL2I2hPjdCHIimOr6Cs3UbVM9Cv0d9w10GDynAK
CuZ3/Vjlme3D05lpu3CcmIDvZDD90zjyKD1qLtfH6czK2ikvsWBJTZG7SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIQ+n+BetgWLR4A2nmuJFiaJlJS6MB8GA1UdIwQY
MBaAFNevRLR/CL0L6PwF+bDBWlq8YgOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYt
MTliMDI2OWQxMDNjLzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9mYmJiNTMtNWRhMi00NGY2LThjOWYtMTliMDI2OWQxMDNj
LzEvMTY5RXRIOEl2UXZvX0FYNXNNRmFXcnhpQTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeIHajur1
W8bfAzp26+SH+0Wfdjw1bIg5JBh71hajSXyimnMuhtqk7l7qkGf34SHT+gQo825u
IohwQ6Ff/BaG9dOEGgr/lIqAh4R8vTu+DsfFo4B1dsF3gbK2L+H3rteJ/DeOTAde
vDODT2Nfv4NyQSpSc3HBmqQu9+BvkTeVZn8qBw0D2egcpya6PcNAL3PES1tMw4Dv
QC/vn/KO/g71SgarGZkAmEafFdhWaeY9LnLdg6uz3iW8GiAxhxmm54oi/vw1UMax
PwVJEHviq1lTFq0WjRQPV14KmZ3PWmIEthn2HONybheOWlsWzhZy47k2fWfQLPcq
U0+0xBz5p20dlg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:28:00 2026 by rpki-client