Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
File:                     fbwuyjJHd9dL8uc8FbDMf_PudaI.mft (raw, json)
Hash identifier:          kNMaX4RbrTsr/Px4AWaOxPxVN8p4CpQA2+JSxC689LA=
Subject key identifier:   3B:3D:68:D2:9A:79:78:53:83:3C:9D:EF:66:A5:D6:CC:E3:D9:42:4C
Authority key identifier: 7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2
Certificate issuer:       /CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
Certificate serial:       019F92ED290F010865DE58800B47C1CB1F10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
Manifest number:          10B3
Signing time:             Fri 24 Jul 2026 07:00:43 +0000
Manifest this update:     Fri 24 Jul 2026 07:00:43 +0000
Manifest next update:     Sat 25 Jul 2026 07:00:43 +0000
Files and hashes:         1: E-Y_gwpxgwRrl1lIC6Qt5FVODDg.roa (hash: aqMe+D+uy8WqFD3eIJAUxX8y1d5aAQPp+/6GTJIpBpo=)
                          2: fbwuyjJHd9dL8uc8FbDMf_PudaI.crl (hash: UZIZJkx4ewrFygOFmA8CbCLGgq2WMTJC/VLmw4ezMls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:29:0f:01:08:65:de:58:80:0b:47:c1:cb:1f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dbc2eca324777d74bf2e73c15b0cc7ff3ee75a2
        Validity
            Not Before: Jul 24 07:00:43 2026 GMT
            Not After : Jul 25 07:00:43 2026 GMT
        Subject: CN=3b3d68d29a797853833c9def66a5d6cce3d9424c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b0:af:3c:45:3c:3a:69:17:a9:e3:cc:94:e2:
                    cb:3b:3f:0d:cc:b3:09:06:c4:e3:15:fb:ae:a7:ab:
                    ef:49:a8:9e:01:ca:3e:a8:1d:74:5b:1b:86:5c:f0:
                    d8:b8:0f:23:f5:b7:0e:87:4e:b1:2f:31:6f:b1:93:
                    ef:02:71:37:64:52:b3:67:46:23:95:27:4c:22:9c:
                    12:90:59:60:ba:e2:1d:bd:d6:11:c5:58:26:b2:5f:
                    8f:36:29:15:4c:ce:f7:7c:26:af:f4:ad:65:a2:3f:
                    fb:db:14:37:12:18:61:55:5f:dd:65:06:e0:97:3d:
                    c4:56:c7:64:9b:61:41:b5:69:71:61:0c:2f:c8:c9:
                    ce:3c:8d:66:00:e5:a1:58:d2:69:6c:aa:15:be:2b:
                    dd:76:75:d5:2e:6a:ce:63:57:a4:05:d6:98:c9:dd:
                    6b:3d:f6:7a:ed:60:96:ae:8d:7c:67:d6:f4:e3:74:
                    84:c6:fd:7b:ed:b5:8e:30:e2:d6:0e:95:71:24:b3:
                    d0:32:fd:1b:dd:7f:14:8a:ce:63:42:98:e9:6e:68:
                    26:3f:b5:78:d8:4c:24:58:ad:c2:f4:02:87:b3:56:
                    78:0f:af:f3:74:bc:ee:1f:3f:02:40:bf:24:91:1c:
                    ce:56:dc:41:00:52:f3:64:a8:08:c8:40:93:61:81:
                    30:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3D:68:D2:9A:79:78:53:83:3C:9D:EF:66:A5:D6:CC:E3:D9:42:4C
            X509v3 Authority Key Identifier:
                keyid:7D:BC:2E:CA:32:47:77:D7:4B:F2:E7:3C:15:B0:CC:7F:F3:EE:75:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbwuyjJHd9dL8uc8FbDMf_PudaI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7677e2-c971-4ae7-a7b3-c8d119ee2053/1/fbwuyjJHd9dL8uc8FbDMf_PudaI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:32:38:f7:68:bd:7c:e4:2c:86:30:ed:39:67:d4:aa:14:0f:
         84:88:8c:a3:65:10:1e:8f:9d:53:08:d2:f2:e1:ee:8b:66:d3:
         48:8c:f9:72:8d:ba:0b:b0:14:2a:6c:54:69:60:1a:f5:1a:8e:
         bc:dd:43:64:02:29:22:24:3d:ae:21:d3:25:cf:b0:89:d0:08:
         e4:85:2c:76:0c:7a:40:18:ff:aa:ea:ed:c8:f0:65:1c:f0:fe:
         28:0b:ff:2b:82:96:95:72:fc:4e:58:c4:55:b3:4a:d0:a4:30:
         3d:da:4f:33:03:3a:24:84:25:48:97:b7:5a:2c:fd:31:cd:21:
         74:99:6f:98:96:79:f0:04:c2:da:50:a7:99:c2:a7:99:ab:40:
         ae:5c:93:bc:f8:a0:5b:36:97:e8:5f:b9:09:db:96:55:66:9e:
         be:31:88:91:67:12:73:13:6c:b8:86:59:96:aa:cb:0d:50:05:
         aa:18:10:30:8a:3f:6c:f9:a9:39:e0:3c:2d:89:0d:2a:d5:e3:
         02:3a:e3:36:4e:4a:24:79:0c:87:ec:de:06:a5:97:45:e8:6f:
         44:fe:a1:0d:2e:37:71:83:6c:fc:82:52:53:f0:a8:68:cd:84:
         92:36:ac:07:7e:f9:17:43:74:df:c6:04:28:53:be:9a:0f:de:
         1a:49:7e:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+S7SkPAQhl3liAC0fByx8QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkYmMyZWNhMzI0Nzc3ZDc0YmYyZTczYzE1YjBjYzdmZjNl
ZTc1YTIwHhcNMjYwNzI0MDcwMDQzWhcNMjYwNzI1MDcwMDQzWjAzMTEwLwYDVQQD
EygzYjNkNjhkMjlhNzk3ODUzODMzYzlkZWY2NmE1ZDZjY2UzZDk0MjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07CvPEU8OmkXqePMlOLLOz8NzLMJ
BsTjFfuup6vvSaieAco+qB10WxuGXPDYuA8j9bcOh06xLzFvsZPvAnE3ZFKzZ0Yj
lSdMIpwSkFlguuIdvdYRxVgmsl+PNikVTM73fCav9K1loj/72xQ3EhhhVV/dZQbg
lz3EVsdkm2FBtWlxYQwvyMnOPI1mAOWhWNJpbKoVvivddnXVLmrOY1ekBdaYyd1r
PfZ67WCWro18Z9b043SExv177bWOMOLWDpVxJLPQMv0b3X8Uis5jQpjpbmgmP7V4
2EwkWK3C9AKHs1Z4D6/zdLzuHz8CQL8kkRzOVtxBAFLzZKgIyECTYYEwxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs9aNKaeXhTgzyd72al1szj2UJMMB8GA1UdIwQY
MBaAFH28LsoyR3fXS/LnPBWwzH/z7nWiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmJ3dXlqSkhkOWRMOHVjOEZiRE1mX1B1ZGFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS83Njc3ZTItYzk3MS00YWU3LWE3YjMt
YzhkMTE5ZWUyMDUzLzEvZmJ3dXlqSkhkOWRMOHVjOEZiRE1mX1B1ZGFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS83Njc3ZTItYzk3MS00YWU3LWE3YjMtYzhkMTE5ZWUyMDUz
LzEvZmJ3dXlqSkhkOWRMOHVjOEZiRE1mX1B1ZGFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKzI492i9
fOQshjDtOWfUqhQPhIiMo2UQHo+dUwjS8uHui2bTSIz5co26C7AUKmxUaWAa9RqO
vN1DZAIpIiQ9riHTJc+widAI5IUsdgx6QBj/qurtyPBlHPD+KAv/K4KWlXL8TljE
VbNK0KQwPdpPMwM6JIQlSJe3Wiz9Mc0hdJlvmJZ58ATC2lCnmcKnmatArlyTvPig
WzaX6F+5CduWVWaevjGIkWcScxNsuIZZlqrLDVAFqhgQMIo/bPmpOeA8LYkNKtXj
AjrjNk5KJHkMh+zeBqWXRehvRP6hDS43cYNs/IJSU/CoaM2EkjasB375F0N038YE
KFO+mg/eGkl+1Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:53:45 2026 by rpki-client