Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
File:                     7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft (raw, json)
Hash identifier:          +TrHEzATi3BiMjsX9lz3ELA5vUBnKMBeTCTkmk5bgUA=
Subject key identifier:   73:A8:83:14:A3:E3:2F:61:E7:10:83:07:F0:6E:1F:35:2D:E9:12:15
Authority key identifier: ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8
Certificate issuer:       /CN=ed476a7486b785451293571126c5f9da3ec485d8
Certificate serial:       019F916CE8ECDFF917AE2DA6195BA4351F38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
Manifest number:          1959
Signing time:             Fri 24 Jul 2026 00:01:01 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:01 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:01 +0000
Files and hashes:         1: 7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl (hash: ffyuJJWFfsqQyno4xj6TFK9PcZ7WIKue3fmoxcs9b5E=)
                          2: NJ53-rR_xX4WzjhOA9BrYV2nSLM.roa (hash: QoLJTTNt4EV3su31vq7GYg/U/5yk5wlrs70Rl9FmejU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:e8:ec:df:f9:17:ae:2d:a6:19:5b:a4:35:1f:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed476a7486b785451293571126c5f9da3ec485d8
        Validity
            Not Before: Jul 24 00:01:01 2026 GMT
            Not After : Jul 25 00:01:01 2026 GMT
        Subject: CN=73a88314a3e32f61e7108307f06e1f352de91215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1f:5c:e8:7e:d3:5d:88:d4:90:bc:b1:8d:63:
                    2f:55:82:1e:17:20:09:c6:7c:59:26:fc:f6:75:91:
                    aa:1a:05:a2:d6:1f:78:87:be:53:65:c0:fb:e7:18:
                    2b:18:49:48:20:1c:25:88:05:53:07:8c:83:c1:5a:
                    a5:cc:ee:00:cc:5d:2d:4e:a5:55:0a:67:60:15:d6:
                    c2:cb:1c:ea:2a:f7:2d:da:ef:60:c8:00:a1:71:c8:
                    23:40:24:a8:71:8b:0a:6b:8a:7d:cb:b2:c8:b8:5c:
                    72:a2:bb:8d:91:5b:62:42:5b:d6:02:c0:2b:3e:c4:
                    a3:5f:85:78:60:3f:b1:83:dd:69:9b:db:5f:56:41:
                    83:59:d9:8b:22:db:dc:e0:1c:da:e2:bd:14:f2:0e:
                    5e:7e:f9:59:2e:c1:2a:a9:fb:f5:06:f4:ff:ad:89:
                    95:ea:bd:02:df:60:3c:93:94:bf:f1:7e:42:78:97:
                    21:8b:cf:80:e9:5e:71:01:1c:9b:8f:01:d0:94:3c:
                    45:ae:3a:92:21:6e:41:3b:40:fb:7a:dc:97:49:8f:
                    2d:46:2a:3e:7d:66:de:58:29:48:11:a6:62:1f:a4:
                    42:1f:ab:36:4a:76:42:53:61:ee:8a:1b:1e:f0:05:
                    13:15:1a:19:62:25:a9:97:67:b3:5b:fc:75:8d:c6:
                    b4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A8:83:14:A3:E3:2F:61:E7:10:83:07:F0:6E:1F:35:2D:E9:12:15
            X509v3 Authority Key Identifier:
                keyid:ED:47:6A:74:86:B7:85:45:12:93:57:11:26:C5:F9:DA:3E:C4:85:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UdqdIa3hUUSk1cRJsX52j7Ehdg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/a0147b-058d-4f2d-b603-61f9e54ed239/1/7UdqdIa3hUUSk1cRJsX52j7Ehdg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:48:2e:4b:49:a2:f1:f2:c2:3d:08:01:2b:8f:9c:fc:ef:47:
         5d:1c:2e:85:af:ff:34:f8:cc:56:1b:83:19:56:5f:9d:c3:5a:
         0f:81:87:77:76:d2:01:6b:41:0a:e7:7b:3e:c0:f6:97:6a:8e:
         f0:fe:9e:72:2e:39:cb:b0:d3:3b:a1:3a:1f:e8:a1:0a:ee:f7:
         0c:5d:86:e4:e8:39:fa:1b:4b:94:26:c2:c3:90:5a:eb:37:77:
         b5:09:a7:d1:81:9d:22:5a:c0:39:e1:26:e4:0a:dc:30:e9:af:
         74:78:85:bd:39:b3:19:6f:ed:31:91:0f:2f:c6:2a:14:64:a0:
         2e:a7:dc:be:02:00:17:67:41:bd:17:5d:92:dc:c6:e9:02:af:
         a7:d7:bb:b4:96:d4:09:f9:9f:42:e1:08:78:90:3c:21:64:04:
         b8:ab:e9:e6:22:cf:89:69:79:2e:65:2b:d4:17:56:98:96:93:
         27:bc:09:3d:80:c5:6e:4b:0b:11:ae:d7:23:89:f0:68:dc:a3:
         ea:86:e4:0e:7e:f7:c2:52:fb:be:3d:42:1f:9d:a3:9c:3f:a8:
         85:b8:ba:ce:5f:71:d5:8d:2f:36:0f:bb:05:6a:2e:0f:30:d3:
         f0:06:aa:0b:ff:9a:b8:bb:dd:d8:9f:7e:d9:44:29:84:35:27:
         e3:f0:1d:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbOjs3/kXri2mGVukNR84MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNDc2YTc0ODZiNzg1NDUxMjkzNTcxMTI2YzVmOWRhM2Vj
NDg1ZDgwHhcNMjYwNzI0MDAwMTAxWhcNMjYwNzI1MDAwMTAxWjAzMTEwLwYDVQQD
Eyg3M2E4ODMxNGEzZTMyZjYxZTcxMDgzMDdmMDZlMWYzNTJkZTkxMjE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsh9c6H7TXYjUkLyxjWMvVYIeFyAJ
xnxZJvz2dZGqGgWi1h94h75TZcD75xgrGElIIBwliAVTB4yDwVqlzO4AzF0tTqVV
CmdgFdbCyxzqKvct2u9gyAChccgjQCSocYsKa4p9y7LIuFxyoruNkVtiQlvWAsAr
PsSjX4V4YD+xg91pm9tfVkGDWdmLItvc4Bza4r0U8g5efvlZLsEqqfv1BvT/rYmV
6r0C32A8k5S/8X5CeJchi8+A6V5xARybjwHQlDxFrjqSIW5BO0D7etyXSY8tRio+
fWbeWClIEaZiH6RCH6s2SnZCU2Huihse8AUTFRoZYiWpl2ezW/x1jca0fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHOogxSj4y9h5xCDB/BuHzUt6RIVMB8GA1UdIwQY
MBaAFO1HanSGt4VFEpNXESbF+do+xIXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMt
NjFmOWU1NGVkMjM5LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9hMDE0N2ItMDU4ZC00ZjJkLWI2MDMtNjFmOWU1NGVkMjM5
LzEvN1VkcWRJYTNoVVVTazFjUkpzWDUyajdFaGRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOEguS0mi
8fLCPQgBK4+c/O9HXRwuha//NPjMVhuDGVZfncNaD4GHd3bSAWtBCud7PsD2l2qO
8P6eci45y7DTO6E6H+ihCu73DF2G5Og5+htLlCbCw5Ba6zd3tQmn0YGdIlrAOeEm
5ArcMOmvdHiFvTmzGW/tMZEPL8YqFGSgLqfcvgIAF2dBvRddktzG6QKvp9e7tJbU
CfmfQuEIeJA8IWQEuKvp5iLPiWl5LmUr1BdWmJaTJ7wJPYDFbksLEa7XI4nwaNyj
6obkDn73wlL7vj1CH52jnD+ohbi6zl9x1Y0vNg+7BWouDzDT8AaqC/+auLvd2J9+
2UQphDUn4/AdRg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 02:45:54 2026 by rpki-client