Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
File:                     d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft (raw, json)
Hash identifier:          xVpZUXidXN+mi0ZN11bPwt7fHf9VLb0+SstXQFU4Zh0=
Subject key identifier:   B1:57:8F:B8:71:28:C9:04:DB:71:BD:35:B5:D4:73:C0:55:72:39:D7
Authority key identifier: 77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E
Certificate issuer:       /CN=77c7b457f9af042924142373ce090f7fa876257e
Certificate serial:       019F9090BDEC300EDC6029C1A85F84E1D042
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
Manifest number:          1286
Signing time:             Thu 23 Jul 2026 20:00:32 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:32 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:32 +0000
Files and hashes:         1: VxfD5b_ylAB_MTnBIwWLQed3wsQ.roa (hash: dPV7nvv66J/N7qMIMaqxbPZi7u5SK+lm/oBP/6Z99x8=)
                          2: d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl (hash: uDWF+dzU0G2m1LA6bWGUiOaLk9LsSeru54T1kfISOyU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:bd:ec:30:0e:dc:60:29:c1:a8:5f:84:e1:d0:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77c7b457f9af042924142373ce090f7fa876257e
        Validity
            Not Before: Jul 23 20:00:32 2026 GMT
            Not After : Jul 24 20:00:32 2026 GMT
        Subject: CN=b1578fb87128c904db71bd35b5d473c0557239d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:71:cd:5a:c7:28:8e:64:6d:5d:2b:15:37:bd:
                    96:ef:15:ff:99:85:1a:84:d7:b6:6e:59:ef:93:5b:
                    cb:17:99:e2:91:c3:6a:98:bf:7a:13:03:55:1b:40:
                    e5:6c:9c:57:6a:4a:70:6d:46:41:0b:f5:af:59:65:
                    a8:35:f6:60:fe:dc:04:68:e2:d3:31:4b:dd:c8:32:
                    7b:8d:2e:38:ee:65:1b:da:28:c3:9a:46:e3:f0:83:
                    8f:2c:78:4c:74:19:0e:94:fe:62:fa:ac:c3:a9:24:
                    b2:25:a4:c9:c1:47:dc:c2:55:15:4b:17:32:d0:51:
                    da:f2:58:92:62:4b:5c:eb:83:bc:ca:5d:4f:f3:81:
                    f2:fe:bb:1e:26:2a:e9:ec:a5:b9:6c:cf:00:b1:d1:
                    f3:be:f0:49:4a:6d:18:88:fa:89:d8:97:5c:d8:0c:
                    46:7f:ee:b2:ca:e5:bd:18:38:3c:45:72:57:12:13:
                    3f:ad:90:3e:14:5a:35:b3:ab:89:95:9f:80:cb:31:
                    70:ca:b7:8e:d8:51:8d:8e:bf:02:42:43:86:a8:a6:
                    01:87:16:ff:27:e8:10:81:df:ae:3c:f5:d3:51:8e:
                    da:6d:e2:d0:62:b9:c1:ba:2c:82:6f:41:36:bc:00:
                    da:28:5d:71:52:70:0f:2e:5f:c5:04:70:c7:ba:ee:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:57:8F:B8:71:28:C9:04:DB:71:BD:35:B5:D4:73:C0:55:72:39:D7
            X509v3 Authority Key Identifier:
                keyid:77:C7:B4:57:F9:AF:04:29:24:14:23:73:CE:09:0F:7F:A8:76:25:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8e0V_mvBCkkFCNzzgkPf6h2JX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d0b7d-db96-4387-93ec-8469cf659101/1/d8e0V_mvBCkkFCNzzgkPf6h2JX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:2b:bb:5c:7a:c4:ef:a0:c1:aa:4d:e7:53:c7:a6:a9:3d:d8:
         5e:5b:0c:34:0f:49:92:7a:de:a1:ca:5a:48:fa:90:00:10:16:
         9a:72:24:6b:d0:b5:b1:3a:83:01:3a:8c:4e:83:13:87:d2:1e:
         56:d6:4c:48:6f:a8:8b:ac:4c:e7:b9:c0:9d:d0:e3:1b:0b:b7:
         74:8c:d2:ee:29:96:23:fa:4e:55:0d:c6:bf:8f:ee:0f:e3:86:
         9a:40:7e:36:57:94:aa:70:bf:df:87:9f:1d:b1:a8:70:51:d0:
         b8:66:65:61:54:40:80:ed:9b:2d:cc:10:ce:7d:ca:bb:ff:76:
         c1:6c:6b:65:0b:9c:6b:d9:67:89:71:5f:6d:68:4a:c5:66:0c:
         43:fc:15:14:a5:dc:49:64:a7:b4:de:67:65:3c:39:a8:4d:7b:
         af:6d:b3:be:10:ca:69:97:1b:5b:5b:1b:f0:87:e8:27:5b:88:
         58:bc:b7:37:fe:d0:4a:69:20:59:8d:72:3f:f0:d0:f0:23:63:
         b0:0d:e3:7a:85:97:a1:41:97:88:10:6f:64:f4:9d:04:08:5c:
         79:ec:8a:53:15:44:84:95:ab:28:bc:a2:ef:3f:ce:a3:88:c7:
         fb:d6:01:95:03:d8:0d:3f:84:e8:01:fe:82:c3:e2:b6:7f:f5:
         92:3a:65:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkL3sMA7cYCnBqF+E4dBCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzdiNDU3ZjlhZjA0MjkyNDE0MjM3M2NlMDkwZjdmYTg3
NjI1N2UwHhcNMjYwNzIzMjAwMDMyWhcNMjYwNzI0MjAwMDMyWjAzMTEwLwYDVQQD
EyhiMTU3OGZiODcxMjhjOTA0ZGI3MWJkMzViNWQ0NzNjMDU1NzIzOWQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXHNWscojmRtXSsVN72W7xX/mYUa
hNe2blnvk1vLF5nikcNqmL96EwNVG0DlbJxXakpwbUZBC/WvWWWoNfZg/twEaOLT
MUvdyDJ7jS447mUb2ijDmkbj8IOPLHhMdBkOlP5i+qzDqSSyJaTJwUfcwlUVSxcy
0FHa8liSYktc64O8yl1P84Hy/rseJirp7KW5bM8AsdHzvvBJSm0YiPqJ2Jdc2AxG
f+6yyuW9GDg8RXJXEhM/rZA+FFo1s6uJlZ+AyzFwyreO2FGNjr8CQkOGqKYBhxb/
J+gQgd+uPPXTUY7abeLQYrnBuiyCb0E2vADaKF1xUnAPLl/FBHDHuu6PMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLFXj7hxKMkE23G9NbXUc8BVcjnXMB8GA1UdIwQY
MBaAFHfHtFf5rwQpJBQjc84JD3+odiV+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMt
ODQ2OWNmNjU5MTAxLzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS81ZDBiN2QtZGI5Ni00Mzg3LTkzZWMtODQ2OWNmNjU5MTAx
LzEvZDhlMFZfbXZCQ2trRkNOenpna1BmNmgySlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyu7XHrE
76DBqk3nU8emqT3YXlsMNA9JknreocpaSPqQABAWmnIka9C1sTqDATqMToMTh9Ie
VtZMSG+oi6xM57nAndDjGwu3dIzS7imWI/pOVQ3Gv4/uD+OGmkB+NleUqnC/34ef
HbGocFHQuGZlYVRAgO2bLcwQzn3Ku/92wWxrZQuca9lniXFfbWhKxWYMQ/wVFKXc
SWSntN5nZTw5qE17r22zvhDKaZcbW1sb8IfoJ1uIWLy3N/7QSmkgWY1yP/DQ8CNj
sA3jeoWXoUGXiBBvZPSdBAhceeyKUxVEhJWrKLyi7z/Oo4jH+9YBlQPYDT+E6AH+
gsPitn/1kjpl0g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:16:50 2026 by rpki-client