Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
File:                     7f_7PGYeL3ileFvpWRYESwavUdI.mft (raw, json)
Hash identifier:          4lJn4kcR+pOlsDqrJ9PDRfrdcJj/609sQHKCLML4HnY=
Subject key identifier:   61:48:27:02:8B:17:0D:A1:2E:BC:E5:B1:5E:3C:DD:4E:AD:06:58:22
Authority key identifier: ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2
Certificate issuer:       /CN=edfffb3c661e2f78a5785be95916044b06af51d2
Certificate serial:       019F91DB2C342CAB473439109E985B727BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
Manifest number:          0886
Signing time:             Fri 24 Jul 2026 02:01:27 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:27 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:27 +0000
Files and hashes:         1: 7f_7PGYeL3ileFvpWRYESwavUdI.crl (hash: r964dpaqTCRIgTYo8cwAihKrMHHWmb+77hMf1xqbCHE=)
                          2: BWIZr-nud-sEKOoW3DCRA8EhEvc.roa (hash: 6TCqPkoGCc+2S8ZxG8MXnHCO6YpDnBpJUoZP1mlGMlc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:db:2c:34:2c:ab:47:34:39:10:9e:98:5b:72:7b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edfffb3c661e2f78a5785be95916044b06af51d2
        Validity
            Not Before: Jul 24 02:01:27 2026 GMT
            Not After : Jul 25 02:01:27 2026 GMT
        Subject: CN=614827028b170da12ebce5b15e3cdd4ead065822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:44:8d:96:9c:c6:40:27:8d:f2:19:0f:54:5b:
                    d7:ca:e6:37:2a:93:6a:42:91:f9:57:42:20:a4:bb:
                    48:22:fa:ed:e0:c8:c3:26:6b:e0:18:6e:26:81:5a:
                    2e:e1:28:4e:a9:bd:c2:79:bf:cd:8a:bc:9c:b3:64:
                    1c:56:21:76:a8:4a:26:36:f7:c9:2f:66:9b:fc:2b:
                    f1:84:46:ca:ad:4e:fe:26:29:34:71:a6:64:31:5a:
                    3d:22:da:f6:e5:3e:7d:df:de:8f:c3:bf:fe:9c:61:
                    a2:51:6a:2a:24:0c:18:59:86:7f:76:6a:11:95:08:
                    f1:d9:37:2a:07:e5:76:40:e2:56:40:5a:56:fe:02:
                    bf:b7:f4:44:78:17:c1:7c:b7:d8:93:98:71:de:b8:
                    7b:ee:e3:53:46:85:4d:6a:2c:fb:fe:e3:e0:d2:19:
                    52:c0:c1:97:0e:f2:06:af:93:7a:12:ba:38:16:d6:
                    ca:bb:e3:3d:3d:96:46:a2:be:7e:b5:dc:c2:52:19:
                    a1:7e:6f:91:3b:f5:e8:b1:66:da:8b:1c:90:db:ef:
                    5c:91:05:5e:4a:e8:d3:91:eb:3a:a8:7a:97:4e:07:
                    b3:f4:02:05:ed:06:c8:57:83:d5:a4:55:33:b6:20:
                    6f:20:e8:54:52:28:96:e6:34:9a:e5:d2:01:e2:d4:
                    9c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:48:27:02:8B:17:0D:A1:2E:BC:E5:B1:5E:3C:DD:4E:AD:06:58:22
            X509v3 Authority Key Identifier:
                keyid:ED:FF:FB:3C:66:1E:2F:78:A5:78:5B:E9:59:16:04:4B:06:AF:51:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f_7PGYeL3ileFvpWRYESwavUdI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a38e4f-4d10-4b9f-8f2f-a9893545c3c5/1/7f_7PGYeL3ileFvpWRYESwavUdI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:03:46:50:5e:f1:5e:31:be:8d:48:19:7c:1e:41:7a:2a:6e:
         1c:c7:a2:61:8a:07:6f:72:9b:b9:35:8e:14:8b:a8:40:34:6c:
         08:79:d8:24:ce:5e:6d:95:d1:05:b7:2c:c6:34:63:54:c1:17:
         18:92:16:f3:76:4d:2d:c4:31:4d:91:d6:16:2d:6a:29:ac:f6:
         ff:e0:7e:65:a8:6c:78:f7:20:ac:05:bb:6d:80:dd:60:bd:4c:
         d7:16:6d:0b:c1:fd:c4:46:81:1f:48:70:bc:b4:ca:e4:db:a5:
         12:b4:65:49:ce:6c:48:af:1b:0e:db:d9:d3:ec:29:17:25:9a:
         a0:0e:fc:b6:52:41:8b:d9:65:a4:d8:a8:de:c4:f2:92:0b:ad:
         25:6d:7a:91:ad:47:a5:ad:cd:ce:cc:fb:aa:e6:4d:05:2d:0d:
         d0:e5:f1:a9:05:3a:2f:f0:c5:6d:2d:ea:15:0b:e0:f0:b7:73:
         34:cb:6c:33:ff:50:ff:b5:39:21:16:0c:98:a5:00:ce:f3:35:
         75:24:4c:7b:08:56:cd:22:3e:54:5f:f5:da:13:62:2e:19:1e:
         76:ac:e1:ae:6d:6e:5b:20:e7:dd:16:77:79:80:6a:22:4e:d2:
         1b:47:9c:8b:87:28:d3:5a:59:b4:3e:e6:41:7a:ee:b0:1e:d4:
         95:c4:13:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2yw0LKtHNDkQnphbcnvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZmZmYjNjNjYxZTJmNzhhNTc4NWJlOTU5MTYwNDRiMDZh
ZjUxZDIwHhcNMjYwNzI0MDIwMTI3WhcNMjYwNzI1MDIwMTI3WjAzMTEwLwYDVQQD
Eyg2MTQ4MjcwMjhiMTcwZGExMmViY2U1YjE1ZTNjZGQ0ZWFkMDY1ODIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyUSNlpzGQCeN8hkPVFvXyuY3KpNq
QpH5V0IgpLtIIvrt4MjDJmvgGG4mgVou4ShOqb3Ceb/Nirycs2QcViF2qEomNvfJ
L2ab/CvxhEbKrU7+Jik0caZkMVo9Itr25T59396Pw7/+nGGiUWoqJAwYWYZ/dmoR
lQjx2TcqB+V2QOJWQFpW/gK/t/REeBfBfLfYk5hx3rh77uNTRoVNaiz7/uPg0hlS
wMGXDvIGr5N6Ero4FtbKu+M9PZZGor5+tdzCUhmhfm+RO/XosWbaixyQ2+9ckQVe
SujTkes6qHqXTgez9AIF7QbIV4PVpFUztiBvIOhUUiiW5jSa5dIB4tSciQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFIJwKLFw2hLrzlsV483U6tBlgiMB8GA1UdIwQY
MBaAFO3/+zxmHi94pXhb6VkWBEsGr1HSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYt
YTk4OTM1NDVjM2M1LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9hMzhlNGYtNGQxMC00YjlmLThmMmYtYTk4OTM1NDVjM2M1
LzEvN2ZfN1BHWWVMM2lsZUZ2cFdSWUVTd2F2VWRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQNGUF7x
XjG+jUgZfB5BeipuHMeiYYoHb3KbuTWOFIuoQDRsCHnYJM5ebZXRBbcsxjRjVMEX
GJIW83ZNLcQxTZHWFi1qKaz2/+B+ZahsePcgrAW7bYDdYL1M1xZtC8H9xEaBH0hw
vLTK5NulErRlSc5sSK8bDtvZ0+wpFyWaoA78tlJBi9llpNio3sTykgutJW16ka1H
pa3Nzsz7quZNBS0N0OXxqQU6L/DFbS3qFQvg8LdzNMtsM/9Q/7U5IRYMmKUAzvM1
dSRMewhWzSI+VF/12hNiLhkedqzhrm1uWyDn3RZ3eYBqIk7SG0eci4co01pZtD7m
QXrusB7UlcQTxw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:25 2026 by rpki-client