Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File:                     sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier:          oOdUPH8zazhcJq+vzJda+8m0JsM7/abcJaYm9zcjxvw=
Subject key identifier:   E9:C2:C6:66:AF:7C:A6:D0:11:AC:AF:27:06:BC:46:4C:69:5B:5D:05
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer:       /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial:       019F95809F13B3BDF64069346890F3E01E41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number:          14BB
Signing time:             Fri 24 Jul 2026 19:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 19:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 19:01:02 +0000
Files and hashes:         1: LefKdaCkJCuLWYomPbn7aYaCwt8.roa (hash: dTxOv7XhsigiPPaBEnDTEGV1JBMdxI+S2HXrs+TPL+s=)
                          2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: uwsjsW2jthRv8/35I5gzUVHE9Vsh2JSre8ooW+q0PrE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:9f:13:b3:bd:f6:40:69:34:68:90:f3:e0:1e:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
        Validity
            Not Before: Jul 24 19:01:02 2026 GMT
            Not After : Jul 25 19:01:02 2026 GMT
        Subject: CN=e9c2c666af7ca6d011acaf2706bc464c695b5d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c0:11:f3:95:d6:51:23:03:f5:1f:c8:43:d3:
                    f1:33:0d:b8:f9:bd:07:60:cf:85:67:62:c3:eb:c7:
                    6b:d1:b8:54:69:61:82:69:e4:b1:66:f6:de:24:3e:
                    7d:68:05:64:50:3d:65:c2:aa:13:e1:c3:2c:d3:70:
                    64:5a:a2:e3:aa:f4:a2:2d:cc:58:0c:13:8c:81:29:
                    88:41:9e:a1:c9:a5:be:22:a1:bc:5a:a0:99:3c:35:
                    7f:b7:fc:ae:29:2a:92:1c:54:83:61:f1:67:45:90:
                    c0:f2:43:29:cd:ae:36:ae:1e:80:5e:35:82:3c:f5:
                    04:cb:83:63:dc:f4:65:d5:39:c7:a6:64:f7:35:28:
                    a7:0e:86:b4:a9:33:09:bf:64:4e:4d:ff:4e:20:ec:
                    c6:d2:41:50:b0:c8:dc:7e:47:bf:28:4a:6d:76:e4:
                    23:73:1b:20:48:e1:a7:82:a4:15:e7:3d:25:9d:c0:
                    d6:77:7b:de:f4:bc:ef:9b:42:69:9b:51:81:21:eb:
                    ca:42:f3:17:35:28:8f:95:67:62:cc:f0:52:6d:f7:
                    6f:7a:56:35:aa:a3:29:d3:6d:29:4a:b4:96:4a:30:
                    9c:36:e6:22:c7:4a:b5:35:c5:49:b3:93:f2:84:24:
                    8f:7c:68:f5:b7:a1:2c:dc:e3:e3:b0:eb:6a:d6:26:
                    2f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C2:C6:66:AF:7C:A6:D0:11:AC:AF:27:06:BC:46:4C:69:5B:5D:05
            X509v3 Authority Key Identifier:
                keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:4f:9e:42:17:1a:17:4b:a6:48:0b:c8:d8:5c:ca:34:0d:be:
         fe:ad:cd:d1:fd:d2:9a:65:ce:ed:ab:c6:11:63:b2:be:32:13:
         d1:1a:47:3a:f8:19:8d:5a:22:35:4d:61:37:58:9f:b7:ce:46:
         b9:50:36:ee:00:c6:b0:24:44:c2:06:6b:4d:6f:28:e2:ef:93:
         37:08:87:53:bc:40:84:2a:43:4d:34:30:43:d8:2a:8d:4b:c4:
         d1:18:15:35:71:7a:1a:05:12:29:f5:de:13:fe:b8:42:92:d5:
         e5:d4:1c:b6:8c:60:c2:73:80:c0:d3:96:5b:5f:26:b2:62:fc:
         8f:a5:ba:05:9d:34:2e:71:4f:66:20:ce:58:d7:dd:7d:08:36:
         e6:86:d2:1c:fb:8d:c4:f7:d1:0d:b8:93:cc:59:7b:d5:9b:32:
         98:14:41:30:b9:7b:03:9d:8e:01:16:47:08:ce:c3:0f:8f:55:
         d9:f4:68:7d:31:de:27:19:19:a2:7e:8d:03:1b:64:51:48:de:
         3a:6c:b4:01:df:46:fa:be:e7:b0:15:4c:c1:93:66:46:02:0d:
         80:b2:88:26:dc:70:3a:9d:8d:c2:78:a6:64:94:1e:b1:81:73:
         f5:f9:4b:83:86:d9:1d:36:46:72:69:fe:33:ec:89:82:6a:14:
         a9:de:6b:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VgJ8Ts732QGk0aJDz4B5BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmEwYzdhYmMxMDc5NjkxNWUzMzViYTE5NzgwZTQ3M2Uw
Mjc5NjkwHhcNMjYwNzI0MTkwMTAyWhcNMjYwNzI1MTkwMTAyWjAzMTEwLwYDVQQD
EyhlOWMyYzY2NmFmN2NhNmQwMTFhY2FmMjcwNmJjNDY0YzY5NWI1ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosAR85XWUSMD9R/IQ9PxMw24+b0H
YM+FZ2LD68dr0bhUaWGCaeSxZvbeJD59aAVkUD1lwqoT4cMs03BkWqLjqvSiLcxY
DBOMgSmIQZ6hyaW+IqG8WqCZPDV/t/yuKSqSHFSDYfFnRZDA8kMpza42rh6AXjWC
PPUEy4Nj3PRl1TnHpmT3NSinDoa0qTMJv2ROTf9OIOzG0kFQsMjcfke/KEptduQj
cxsgSOGngqQV5z0lncDWd3ve9Lzvm0Jpm1GBIevKQvMXNSiPlWdizPBSbfdvelY1
qqMp020pSrSWSjCcNuYix0q1NcVJs5PyhCSPfGj1t6Es3OPjsOtq1iYvqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnCxmavfKbQEayvJwa8RkxpW10FMB8GA1UdIwQY
MBaAFLD6DHq8EHlpFeM1uhl4Dkc+AnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMt
ZGY4NTRmNDdiYWY0LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMtZGY4NTRmNDdiYWY0
LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQE+eQhca
F0umSAvI2FzKNA2+/q3N0f3SmmXO7avGEWOyvjIT0RpHOvgZjVoiNU1hN1ift85G
uVA27gDGsCREwgZrTW8o4u+TNwiHU7xAhCpDTTQwQ9gqjUvE0RgVNXF6GgUSKfXe
E/64QpLV5dQctoxgwnOAwNOWW18msmL8j6W6BZ00LnFPZiDOWNfdfQg25obSHPuN
xPfRDbiTzFl71ZsymBRBMLl7A52OARZHCM7DD49V2fRofTHeJxkZon6NAxtkUUje
Omy0Ad9G+r7nsBVMwZNmRgINgLKIJtxwOp2NwnimZJQesYFz9flLg4bZHTZGcmn+
M+yJgmoUqd5rJw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:11:22 2026 by rpki-client