Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
File:                     _nB-d2cwwsLsumue6VchKtWNXNs.mft (raw, json)
Hash identifier:          ZU9IA1KIP3xm1RhcT1SACxGvQ8rdotBKhzNFFdiWaIc=
Subject key identifier:   98:5E:2F:0A:DD:DE:D2:EB:26:30:CE:20:D5:9A:48:F2:A5:D6:2B:46
Authority key identifier: FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB
Certificate issuer:       /CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
Certificate serial:       019F9135E1AB4F45B8CDFCCFEE857FB75980
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
Manifest number:          109C
Signing time:             Thu 23 Jul 2026 23:00:55 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:55 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:55 +0000
Files and hashes:         1: DMGubU8hxCTGRODvSctDVfieplo.roa (hash: Phcij8bggmf+/AXpZc+JPHtEh1M9qDukJgittDIR+o0=)
                          2: _nB-d2cwwsLsumue6VchKtWNXNs.crl (hash: c8lVFxe9z3BkBRv6athEi7wSNs4lvWLacE8eEcOzr88=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:e1:ab:4f:45:b8:cd:fc:cf:ee:85:7f:b7:59:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe707e776730c2c2ecba6b9ee957212ad58d5cdb
        Validity
            Not Before: Jul 23 23:00:55 2026 GMT
            Not After : Jul 24 23:00:55 2026 GMT
        Subject: CN=985e2f0addded2eb2630ce20d59a48f2a5d62b46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fc:44:d4:ae:49:0f:5e:0c:f4:ea:e9:77:b7:
                    c8:1c:ad:da:81:d7:5c:5d:15:97:73:43:02:46:b0:
                    86:01:b5:ee:fe:2e:7c:63:d8:01:49:1e:35:d6:95:
                    f7:b3:25:c9:da:02:96:bc:a5:3e:6f:6e:dd:c7:35:
                    34:bb:e0:49:08:c3:35:da:90:bb:61:70:5c:6e:d9:
                    a0:8a:5f:4d:f6:bb:d2:04:b2:b0:76:3b:b5:3f:f1:
                    6b:37:7d:e6:15:cb:1d:e9:9e:2c:c1:e0:39:9e:3b:
                    a5:42:b4:3a:71:a7:fa:6b:d1:b9:c6:4b:27:a8:ab:
                    2d:0a:9b:81:4f:e5:3e:22:2b:e3:fb:f1:66:bf:d8:
                    f0:29:7d:5c:4a:ab:b8:bc:ce:70:13:10:74:27:31:
                    c8:b8:fb:09:3e:90:6c:ee:36:f5:4d:d1:53:c6:94:
                    ac:c3:30:ce:93:1f:c7:4a:a6:d7:c4:ab:ef:fc:5d:
                    af:6a:01:38:57:e1:3f:2b:0b:55:c6:e1:60:98:1d:
                    63:f1:33:97:17:d7:a5:f9:12:8d:9a:e0:8f:dd:8c:
                    62:97:47:6c:6a:07:9e:f3:5a:97:f0:f3:70:51:89:
                    67:70:8b:ad:19:f2:65:b2:f5:97:62:ef:26:1e:9f:
                    3c:8d:73:c6:1e:73:42:4c:78:01:72:f0:b2:68:5f:
                    7d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:5E:2F:0A:DD:DE:D2:EB:26:30:CE:20:D5:9A:48:F2:A5:D6:2B:46
            X509v3 Authority Key Identifier:
                keyid:FE:70:7E:77:67:30:C2:C2:EC:BA:6B:9E:E9:57:21:2A:D5:8D:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nB-d2cwwsLsumue6VchKtWNXNs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5fbda6-bfce-4d9d-a4db-871540330859/1/_nB-d2cwwsLsumue6VchKtWNXNs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:de:f9:ce:69:77:5e:08:04:61:16:d2:aa:dc:2a:c6:74:3d:
         c0:6a:60:33:e7:65:f2:33:51:6f:63:98:d7:ed:07:3e:d9:07:
         ad:50:d6:0a:1a:21:06:46:ba:c3:75:90:23:61:f1:c5:74:9b:
         31:2c:95:ed:c3:0f:1f:68:dc:ca:d8:1f:8a:43:8d:9b:ee:90:
         41:b5:d0:f6:4a:46:b0:ea:4f:bb:7f:3e:cd:6a:43:d6:aa:42:
         b6:1c:2b:b6:57:56:51:66:7e:2a:84:13:30:d4:7b:43:42:c7:
         20:88:1e:a4:4b:c8:53:03:3a:87:18:db:36:f5:00:6c:20:98:
         76:16:2b:d1:6d:8c:78:ec:08:74:94:3c:a2:c8:52:fc:87:c2:
         98:cb:3f:17:00:9f:74:90:8e:9c:86:78:c9:96:73:86:4f:b0:
         1e:40:01:2d:56:ce:ee:bb:9d:3b:1e:45:da:63:90:a1:3c:49:
         4e:b1:d9:86:8d:e1:ff:66:b0:4d:f7:33:b5:3b:2e:47:60:fd:
         4f:6a:8b:7b:4c:2a:ba:32:59:a9:eb:e6:35:6e:a7:51:78:d4:
         73:0d:01:42:e9:24:41:fc:63:3c:1a:7d:01:8d:b6:ec:3e:5c:
         06:75:67:e2:9c:56:9d:46:cb:55:51:d6:d7:17:4f:3d:92:a4:
         0c:85:e5:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RNeGrT0W4zfzP7oV/t1mAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzA3ZTc3NjczMGMyYzJlY2JhNmI5ZWU5NTcyMTJhZDU4
ZDVjZGIwHhcNMjYwNzIzMjMwMDU1WhcNMjYwNzI0MjMwMDU1WjAzMTEwLwYDVQQD
Eyg5ODVlMmYwYWRkZGVkMmViMjYzMGNlMjBkNTlhNDhmMmE1ZDYyYjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfxE1K5JD14M9Orpd7fIHK3agddc
XRWXc0MCRrCGAbXu/i58Y9gBSR411pX3syXJ2gKWvKU+b27dxzU0u+BJCMM12pC7
YXBcbtmgil9N9rvSBLKwdju1P/FrN33mFcsd6Z4sweA5njulQrQ6caf6a9G5xksn
qKstCpuBT+U+Iivj+/Fmv9jwKX1cSqu4vM5wExB0JzHIuPsJPpBs7jb1TdFTxpSs
wzDOkx/HSqbXxKvv/F2vagE4V+E/KwtVxuFgmB1j8TOXF9el+RKNmuCP3Yxil0ds
agee81qX8PNwUYlncIutGfJlsvWXYu8mHp88jXPGHnNCTHgBcvCyaF994wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJheLwrd3tLrJjDOINWaSPKl1itGMB8GA1UdIwQY
MBaAFP5wfndnMMLC7LprnulXISrVjVzbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGIt
ODcxNTQwMzMwODU5LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81ZmJkYTYtYmZjZS00ZDlkLWE0ZGItODcxNTQwMzMwODU5
LzEvX25CLWQyY3d3c0xzdW11ZTZWY2hLdFdOWE5zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQd75zml3
XggEYRbSqtwqxnQ9wGpgM+dl8jNRb2OY1+0HPtkHrVDWChohBka6w3WQI2HxxXSb
MSyV7cMPH2jcytgfikONm+6QQbXQ9kpGsOpPu38+zWpD1qpCthwrtldWUWZ+KoQT
MNR7Q0LHIIgepEvIUwM6hxjbNvUAbCCYdhYr0W2MeOwIdJQ8oshS/IfCmMs/FwCf
dJCOnIZ4yZZzhk+wHkABLVbO7rudOx5F2mOQoTxJTrHZho3h/2awTfcztTsuR2D9
T2qLe0wqujJZqevmNW6nUXjUcw0BQukkQfxjPBp9AY227D5cBnVn4pxWnUbLVVHW
1xdPPZKkDIXlrA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:55:06 2026 by rpki-client