Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
File:                     f-PWO0pbQEtf-Dy_KxUlowR39lw.mft (raw, json)
Hash identifier:          jej8D9i2kfO72lLpQb0UchXlbYdrvQYy+KwOfXORFeA=
Subject key identifier:   F8:6C:BE:A5:85:BE:95:A2:44:71:97:44:B7:57:09:8E:21:8E:38:E8
Authority key identifier: 7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C
Certificate issuer:       /CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
Certificate serial:       019F951260BC06CCAF8E46C457E63518EEF9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
Manifest number:          0709
Signing time:             Fri 24 Jul 2026 17:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:37 +0000
Files and hashes:         1: 2BwDzZ1-4qodQHGn7IRXAaLWAn8.roa (hash: KLT4hK24Sh8oeO2o5C+Q82TS186W3R8CPounbGac6TY=)
                          2: f-PWO0pbQEtf-Dy_KxUlowR39lw.crl (hash: UoR7rzqaNXvhJ8tciKy+K0OpPuvcwhJD93wkt7Zi3yI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 16:41:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:60:bc:06:cc:af:8e:46:c4:57:e6:35:18:ee:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7fe3d63b4a5b404b5ff83cbf2b1525a30477f65c
        Validity
            Not Before: Jul 24 17:00:37 2026 GMT
            Not After : Jul 25 17:00:37 2026 GMT
        Subject: CN=f86cbea585be95a244719744b757098e218e38e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7c:ac:04:a2:8c:73:7d:59:76:1c:5e:fd:bf:
                    07:66:ac:1b:34:42:f2:ef:6b:8b:f2:64:b4:6d:8a:
                    32:6f:5c:b3:19:c4:33:45:21:4f:4b:9f:a4:3b:fd:
                    a3:d3:a5:f0:5b:fb:38:04:7d:da:7b:e5:ea:62:70:
                    a4:f6:2a:98:01:a6:ec:f8:6e:3b:b8:0f:bf:be:02:
                    e4:d7:c3:d1:9c:da:dd:cf:72:89:24:5c:e1:c6:b9:
                    5f:46:25:62:a6:29:bb:d3:2d:a1:a9:d7:54:57:f4:
                    80:01:9a:00:25:53:02:4c:17:75:ca:e1:49:e3:1f:
                    39:0d:2a:13:fa:97:c2:82:9b:a2:da:75:f0:97:1f:
                    62:d2:a8:b9:ae:8a:54:22:e5:23:73:f0:5f:41:56:
                    0b:98:98:fd:81:f6:07:65:8f:57:d4:1c:f6:b8:3e:
                    14:99:18:68:20:18:9f:99:5c:88:dd:da:d6:c4:88:
                    38:1c:83:98:34:e7:d8:dc:31:79:cc:ff:61:d9:83:
                    7d:90:21:b5:e7:63:b1:d6:46:91:c7:22:ba:0c:66:
                    55:ff:14:26:9e:71:c7:43:9a:bb:49:49:9a:92:de:
                    6f:94:4c:02:17:a8:4f:6c:54:54:13:89:56:6f:58:
                    31:c8:1f:9a:0a:3c:08:36:c6:d2:01:fe:ce:9c:74:
                    03:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:6C:BE:A5:85:BE:95:A2:44:71:97:44:B7:57:09:8E:21:8E:38:E8
            X509v3 Authority Key Identifier:
                keyid:7F:E3:D6:3B:4A:5B:40:4B:5F:F8:3C:BF:2B:15:25:A3:04:77:F6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f-PWO0pbQEtf-Dy_KxUlowR39lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/81a672-fe98-4d3f-9b83-2cb7a3b6e42f/1/f-PWO0pbQEtf-Dy_KxUlowR39lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:b3:a2:37:3d:30:6d:59:66:2d:9f:73:95:c9:ce:9a:b2:a9:
         56:50:59:b1:ad:48:d7:bf:14:eb:72:f0:e0:1d:3c:0d:ac:be:
         04:18:02:de:bb:66:34:ec:87:0a:3b:38:bf:7f:7d:3a:5e:fd:
         3e:37:21:2a:b6:5f:9a:41:97:bb:bb:df:2a:aa:41:55:9b:cd:
         0e:b0:e4:c5:f8:1a:5a:92:b6:77:f8:83:7f:d0:ed:fe:ae:9d:
         a1:15:c6:fd:94:53:c0:41:c6:c9:b9:ff:84:dd:64:d4:99:62:
         1e:a6:fe:3d:83:ee:e8:bc:73:34:a1:a9:06:d5:07:ae:bf:45:
         3f:6f:4d:13:e8:de:fa:ec:eb:1f:ec:e1:bb:b6:b2:d0:8f:00:
         32:e8:c2:06:11:48:4b:89:ca:c8:39:7c:f2:8a:26:0a:2e:70:
         83:c3:f6:ba:9d:45:e7:70:ba:b4:45:93:04:f5:8b:57:8d:a3:
         bf:f4:e5:e8:b9:36:2b:57:2f:ed:ab:6c:68:60:dd:3c:ec:d3:
         0b:a6:de:71:d4:9e:bd:ea:c9:fd:c7:5a:13:4c:f6:7f:52:f4:
         f7:b1:d0:00:76:be:7e:64:46:b3:8a:e2:c0:aa:bd:7b:39:e5:
         57:61:bb:29:82:44:30:ca:57:a3:56:84:be:a7:28:23:10:d2:
         3b:5a:41:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEmC8BsyvjkbEV+Y1GO75MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZTNkNjNiNGE1YjQwNGI1ZmY4M2NiZjJiMTUyNWEzMDQ3
N2Y2NWMwHhcNMjYwNzI0MTcwMDM3WhcNMjYwNzI1MTcwMDM3WjAzMTEwLwYDVQQD
EyhmODZjYmVhNTg1YmU5NWEyNDQ3MTk3NDRiNzU3MDk4ZTIxOGUzOGU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3ysBKKMc31Zdhxe/b8HZqwbNELy
72uL8mS0bYoyb1yzGcQzRSFPS5+kO/2j06XwW/s4BH3ae+XqYnCk9iqYAabs+G47
uA+/vgLk18PRnNrdz3KJJFzhxrlfRiVipim70y2hqddUV/SAAZoAJVMCTBd1yuFJ
4x85DSoT+pfCgpui2nXwlx9i0qi5ropUIuUjc/BfQVYLmJj9gfYHZY9X1Bz2uD4U
mRhoIBifmVyI3drWxIg4HIOYNOfY3DF5zP9h2YN9kCG152Ox1kaRxyK6DGZV/xQm
nnHHQ5q7SUmakt5vlEwCF6hPbFRUE4lWb1gxyB+aCjwINsbSAf7OnHQDyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPhsvqWFvpWiRHGXRLdXCY4hjjjoMB8GA1UdIwQY
MBaAFH/j1jtKW0BLX/g8vysVJaMEd/ZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMt
MmNiN2EzYjZlNDJmLzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi84MWE2NzItZmU5OC00ZDNmLTliODMtMmNiN2EzYjZlNDJm
LzEvZi1QV08wcGJRRXRmLUR5X0t4VWxvd1IzOWx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkLOiNz0w
bVlmLZ9zlcnOmrKpVlBZsa1I178U63Lw4B08Day+BBgC3rtmNOyHCjs4v399Ol79
PjchKrZfmkGXu7vfKqpBVZvNDrDkxfgaWpK2d/iDf9Dt/q6doRXG/ZRTwEHGybn/
hN1k1JliHqb+PYPu6LxzNKGpBtUHrr9FP29NE+je+uzrH+zhu7ay0I8AMujCBhFI
S4nKyDl88oomCi5wg8P2up1F53C6tEWTBPWLV42jv/Tl6Lk2K1cv7atsaGDdPOzT
C6becdSeverJ/cdaE0z2f1L097HQAHa+fmRGs4riwKq9eznlV2G7KYJEMMpXo1aE
vqcoIxDSO1pBPg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:33 2026 by rpki-client