Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
File:                     _PyV8biAEebcM9BBuYsxMHdsQo8.mft (raw, json)
Hash identifier:          yafU6EhIK9+tNuZOmKAFFOPK1Dnkkux0hm5Z2nV1RwM=
Subject key identifier:   8B:D5:0B:A0:4D:AE:1B:B0:05:64:27:CC:8B:68:76:E1:C4:FD:88:EB
Authority key identifier: FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F
Certificate issuer:       /CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
Certificate serial:       019F9090A3EC90869AB819320E4BB9D962EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
Manifest number:          0B39
Signing time:             Thu 23 Jul 2026 20:00:25 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:25 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:25 +0000
Files and hashes:         1: _PyV8biAEebcM9BBuYsxMHdsQo8.crl (hash: pAAl4SxsG/VufVdJC/vDluqmHZR8P7DF5Dpuk+zwocM=)
                          2: jON8jV9Q2GLdoq1oYbTtzWvSeAw.roa (hash: CpfaNm7QCE9dRH1Z5uGSs1NzanRsXUOVz00UoK4+1jY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:90:a3:ec:90:86:9a:b8:19:32:0e:4b:b9:d9:62:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fcfc95f1b88011e6dc33d041b98b3130776c428f
        Validity
            Not Before: Jul 23 20:00:25 2026 GMT
            Not After : Jul 24 20:00:25 2026 GMT
        Subject: CN=8bd50ba04dae1bb0056427cc8b6876e1c4fd88eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:a6:89:c9:e8:1f:0d:8c:77:c9:c5:01:9a:
                    dd:6b:d8:db:44:77:41:08:7a:79:b7:be:59:83:15:
                    5b:ae:2b:37:95:c7:46:45:f4:f2:ba:29:b3:7c:0c:
                    56:15:fc:bb:8b:a5:23:a7:22:df:65:d9:1c:fc:46:
                    47:5a:98:ca:18:3c:e9:0b:5c:52:23:8d:3d:e9:44:
                    00:3f:82:99:4e:78:48:8e:fa:51:e0:3e:ac:9c:e6:
                    af:4c:ca:23:bd:80:60:c5:85:62:bc:6f:60:27:49:
                    83:90:4e:c1:36:f2:15:ef:89:01:08:f4:07:09:98:
                    bc:3b:d9:ab:60:c2:71:eb:b7:a0:8d:a9:ca:5d:5a:
                    c1:6f:77:99:c1:90:9a:f2:65:1a:5d:1a:3f:41:74:
                    bc:14:02:82:41:5e:26:58:d3:18:47:48:ec:5d:a7:
                    88:aa:f1:5c:e3:40:91:76:96:d0:c4:c6:48:4d:a6:
                    de:e6:d4:91:ab:4b:90:28:f7:f0:b1:53:49:9f:5c:
                    3c:01:7c:a1:c2:83:94:db:6c:6e:37:e6:e8:70:2e:
                    d8:96:f9:6d:d3:cd:34:af:a3:77:2d:cc:01:63:6a:
                    85:e8:06:48:99:d5:8e:0e:f2:c5:5e:2c:c9:27:79:
                    bd:47:11:00:f4:93:3d:2f:07:56:d5:c0:38:0b:a5:
                    1b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:D5:0B:A0:4D:AE:1B:B0:05:64:27:CC:8B:68:76:E1:C4:FD:88:EB
            X509v3 Authority Key Identifier:
                keyid:FC:FC:95:F1:B8:80:11:E6:DC:33:D0:41:B9:8B:31:30:77:6C:42:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PyV8biAEebcM9BBuYsxMHdsQo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/372d29-075e-47fa-9c8f-8f4b0645d604/1/_PyV8biAEebcM9BBuYsxMHdsQo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:79:73:e7:2e:31:c2:bc:5c:ae:cf:34:db:d2:d3:5f:7f:02:
         e2:3d:a7:ac:98:f4:e6:99:8d:05:81:8f:fe:7c:e4:14:b5:1c:
         63:1d:49:65:5e:d8:b2:5e:4c:f8:d0:d1:aa:58:01:28:8e:63:
         21:b4:ad:67:a0:09:e2:38:db:57:6a:99:0d:da:f6:85:3c:fc:
         53:6e:6a:fc:3e:39:22:f0:ec:21:2b:64:db:66:98:c4:27:01:
         47:f3:fd:d2:a6:13:9c:aa:31:07:aa:9f:27:06:6a:22:40:f9:
         bd:3c:ea:0f:43:de:52:b4:8f:86:1e:15:a7:1a:7d:f7:3a:72:
         d1:32:4a:36:26:78:c9:81:ad:fe:bb:78:ab:6e:d3:09:90:ae:
         e7:72:9c:b8:8d:51:6f:a2:0a:ba:84:5e:d5:bc:4e:ee:39:cd:
         19:41:b4:f3:6c:35:96:0a:64:7b:19:4a:9c:fa:ac:2e:01:b9:
         3a:ac:9a:3b:c6:a3:0d:02:b2:ca:be:d9:c5:a8:b4:9a:0c:30:
         bb:96:f5:b3:fe:4d:b6:e6:04:4d:0b:82:6d:e3:9e:74:0b:b5:
         6d:5e:ea:c0:31:a4:78:23:dd:a5:39:70:20:a2:75:79:78:e9:
         4c:65:dc:96:7c:f2:a6:55:05:f3:6c:3d:49:aa:81:ac:e1:87:
         97:bb:fe:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkKPskIaauBkyDku52WLrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZmM5NWYxYjg4MDExZTZkYzMzZDA0MWI5OGIzMTMwNzc2
YzQyOGYwHhcNMjYwNzIzMjAwMDI1WhcNMjYwNzI0MjAwMDI1WjAzMTEwLwYDVQQD
Eyg4YmQ1MGJhMDRkYWUxYmIwMDU2NDI3Y2M4YjY4NzZlMWM0ZmQ4OGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurmmicnoHw2Md8nFAZrda9jbRHdB
CHp5t75ZgxVbris3lcdGRfTyuimzfAxWFfy7i6UjpyLfZdkc/EZHWpjKGDzpC1xS
I4096UQAP4KZTnhIjvpR4D6snOavTMojvYBgxYVivG9gJ0mDkE7BNvIV74kBCPQH
CZi8O9mrYMJx67egjanKXVrBb3eZwZCa8mUaXRo/QXS8FAKCQV4mWNMYR0jsXaeI
qvFc40CRdpbQxMZITabe5tSRq0uQKPfwsVNJn1w8AXyhwoOU22xuN+bocC7Ylvlt
0800r6N3LcwBY2qF6AZImdWODvLFXizJJ3m9RxEA9JM9LwdW1cA4C6UbqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvVC6BNrhuwBWQnzItoduHE/YjrMB8GA1UdIwQY
MBaAFPz8lfG4gBHm3DPQQbmLMTB3bEKPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYt
OGY0YjA2NDVkNjA0LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zNzJkMjktMDc1ZS00N2ZhLTljOGYtOGY0YjA2NDVkNjA0
LzEvX1B5VjhiaUFFZWJjTTlCQnVZc3hNSGRzUW84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKHlz5y4x
wrxcrs8029LTX38C4j2nrJj05pmNBYGP/nzkFLUcYx1JZV7Ysl5M+NDRqlgBKI5j
IbStZ6AJ4jjbV2qZDdr2hTz8U25q/D45IvDsIStk22aYxCcBR/P90qYTnKoxB6qf
JwZqIkD5vTzqD0PeUrSPhh4Vpxp99zpy0TJKNiZ4yYGt/rt4q27TCZCu53KcuI1R
b6IKuoRe1bxO7jnNGUG082w1lgpkexlKnPqsLgG5OqyaO8ajDQKyyr7Zxai0mgww
u5b1s/5NtuYETQuCbeOedAu1bV7qwDGkeCPdpTlwIKJ1eXjpTGXclnzyplUF82w9
SaqBrOGHl7v+zg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:04:38 2026 by rpki-client