Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
File:                     2783kJzhe6U62QqGMjd6XZOHQ-U.mft (raw, json)
Hash identifier:          qgifE4iyP5ac/bsfbmjYwDhniXxY49e1wO79F2gmyNc=
Subject key identifier:   73:EC:45:26:DD:3A:33:A3:45:31:FC:FD:6C:1E:4F:4F:5B:9B:E9:74
Authority key identifier: DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5
Certificate issuer:       /CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
Certificate serial:       019F90912588C8CEC46DC46D2E9A9B41DA8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
Manifest number:          0F9C
Signing time:             Thu 23 Jul 2026 20:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 20:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 20:00:59 +0000
Files and hashes:         1: 2783kJzhe6U62QqGMjd6XZOHQ-U.crl (hash: THeS2Rh5pOCmNLmET6k/lshSKxqyYLNn4B10u0nER/0=)
                          2: TTwK20SxDSqzIyzV0QGO0SmjawA.roa (hash: x2Tzuet+mqmVtk1cFs2lJv6NLw6VZlQyasN9WGmhONs=)
                          3: XnoeLIkYNpYQWVse-yX5iRjTc1s.roa (hash: ptKlPyES08hICN66dmlPtZNxNra0j4is1IcwHdPzbr4=)
                          4: lEbAfouHoMhTrs36FwPLKCH2I7w.roa (hash: ccDJaCoETUQjCTdcoNlWxXPIM6P7uFIKkfsOSoduMMA=)
                          5: xu7t96CgIHN3hwNmggXTcfk-UpA.roa (hash: iRBThFuWjKJSamtnuVG+6/kq+wDEj0e0hvd45FkbUb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:25:88:c8:ce:c4:6d:c4:6d:2e:9a:9b:41:da:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbbf37909ce17ba53ad90a8632377a5d938743e5
        Validity
            Not Before: Jul 23 20:00:59 2026 GMT
            Not After : Jul 24 20:00:59 2026 GMT
        Subject: CN=73ec4526dd3a33a34531fcfd6c1e4f4f5b9be974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f7:57:ce:00:f6:09:32:91:07:c7:26:be:a7:
                    9e:c4:09:59:0d:8d:72:d1:45:22:6e:36:f1:5a:bb:
                    38:84:56:80:b9:4a:fa:5d:47:f4:ff:6d:90:21:6a:
                    2d:f8:d3:61:51:a1:8a:3d:62:ea:a7:2a:eb:6c:79:
                    08:7e:64:c0:6a:fe:df:f3:b1:a0:da:e4:15:ed:a6:
                    d5:7d:92:d5:bc:8d:df:f3:9e:bb:d8:db:2e:0a:55:
                    a8:86:36:aa:34:dc:6a:44:c0:c7:c2:df:48:0a:62:
                    ef:e9:cd:2d:88:33:fc:c8:6f:fb:32:ec:63:94:4c:
                    33:4a:32:4b:4d:6a:0b:70:97:15:90:45:b8:2a:b6:
                    c6:fc:19:22:79:4d:3c:fe:82:1c:2b:85:1e:75:51:
                    e4:03:48:2c:cd:14:2a:be:ae:cc:e9:91:c1:56:15:
                    4e:e1:2c:bd:b1:0e:1b:d7:58:09:14:75:6e:ba:93:
                    fa:8e:a6:c9:35:b5:b6:f8:c5:7e:e0:90:1b:d3:c8:
                    13:b8:47:3c:0d:9f:a8:36:e1:73:15:6e:1d:b0:ce:
                    47:f2:a7:88:0d:b6:57:31:57:fb:7e:c8:84:8b:a8:
                    91:25:d3:08:4a:36:ec:bb:0e:4a:ad:b4:9c:08:52:
                    98:1d:84:33:25:58:e3:85:09:33:ff:be:18:93:20:
                    5f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:EC:45:26:DD:3A:33:A3:45:31:FC:FD:6C:1E:4F:4F:5B:9B:E9:74
            X509v3 Authority Key Identifier:
                keyid:DB:BF:37:90:9C:E1:7B:A5:3A:D9:0A:86:32:37:7A:5D:93:87:43:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2783kJzhe6U62QqGMjd6XZOHQ-U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/1373a0-8c3d-4283-a5ce-822ea43dc18d/1/2783kJzhe6U62QqGMjd6XZOHQ-U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:36:e5:ca:b8:b3:59:73:0b:fe:b0:fe:c8:2b:3c:21:7d:63:
         ce:2a:ec:b6:9e:81:4f:e5:3a:62:01:85:69:dc:f1:c8:2b:60:
         42:66:fe:ab:fc:1d:2a:ec:a5:f4:eb:14:d4:d4:49:a0:40:0d:
         be:f9:c8:fb:75:14:7f:26:37:3c:93:9b:fd:9b:cd:33:24:bc:
         38:84:4b:ea:63:31:c5:e4:cd:dc:45:1d:b8:2f:57:44:1d:a3:
         64:d3:44:c8:1b:c8:46:d4:5c:b3:f7:63:59:e2:b0:a9:3e:d8:
         53:43:e4:62:36:49:f9:a4:b5:55:6a:84:cd:81:79:50:0d:5a:
         05:7b:2a:26:91:d0:e2:e7:cc:2b:4b:4f:7b:5a:9e:10:d5:9c:
         22:67:62:bb:b6:bc:9b:68:04:fc:b9:a4:22:bf:ab:cd:f1:d2:
         1d:f2:e7:d3:93:d8:f9:1f:3c:7b:14:ec:e9:ec:2d:81:62:31:
         8d:2a:f0:2b:aa:6e:68:50:cd:b7:20:82:5f:0b:dd:1f:43:2a:
         aa:bd:aa:ac:87:93:f0:7f:b6:e9:a3:62:c5:b6:29:3f:4b:17:
         8f:b8:02:b1:a6:d5:9d:2c:de:73:29:83:7a:8b:df:bc:94:4c:
         20:3e:1d:7c:eb:0e:37:e3:da:5f:c0:3a:dc:63:28:5f:d0:8f:
         66:62:6f:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QkSWIyM7EbcRtLpqbQdqLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiYmYzNzkwOWNlMTdiYTUzYWQ5MGE4NjMyMzc3YTVkOTM4
NzQzZTUwHhcNMjYwNzIzMjAwMDU5WhcNMjYwNzI0MjAwMDU5WjAzMTEwLwYDVQQD
Eyg3M2VjNDUyNmRkM2EzM2EzNDUzMWZjZmQ2YzFlNGY0ZjViOWJlOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfdXzgD2CTKRB8cmvqeexAlZDY1y
0UUibjbxWrs4hFaAuUr6XUf0/22QIWot+NNhUaGKPWLqpyrrbHkIfmTAav7f87Gg
2uQV7abVfZLVvI3f85672NsuClWohjaqNNxqRMDHwt9ICmLv6c0tiDP8yG/7Muxj
lEwzSjJLTWoLcJcVkEW4KrbG/BkieU08/oIcK4UedVHkA0gszRQqvq7M6ZHBVhVO
4Sy9sQ4b11gJFHVuupP6jqbJNbW2+MV+4JAb08gTuEc8DZ+oNuFzFW4dsM5H8qeI
DbZXMVf7fsiEi6iRJdMISjbsuw5KrbScCFKYHYQzJVjjhQkz/74YkyBfUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPsRSbdOjOjRTH8/WweT09bm+l0MB8GA1UdIwQY
MBaAFNu/N5Cc4XulOtkKhjI3el2Th0PlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2Ut
ODIyZWE0M2RjMThkLzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8xMzczYTAtOGMzZC00MjgzLWE1Y2UtODIyZWE0M2RjMThk
LzEvMjc4M2tKemhlNlU2MlFxR01qZDZYWk9IUS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDblyriz
WXML/rD+yCs8IX1jzirstp6BT+U6YgGFadzxyCtgQmb+q/wdKuyl9OsU1NRJoEAN
vvnI+3UUfyY3PJOb/ZvNMyS8OIRL6mMxxeTN3EUduC9XRB2jZNNEyBvIRtRcs/dj
WeKwqT7YU0PkYjZJ+aS1VWqEzYF5UA1aBXsqJpHQ4ufMK0tPe1qeENWcImdiu7a8
m2gE/LmkIr+rzfHSHfLn05PY+R88exTs6ewtgWIxjSrwK6puaFDNtyCCXwvdH0Mq
qr2qrIeT8H+26aNixbYpP0sXj7gCsabVnSzecymDeovfvJRMID4dfOsON+PaX8A6
3GMoX9CPZmJvcA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:03:44 2026 by rpki-client