Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
File:                     DEd6vwon7eiG-8QkE9eonCJrEfo.mft (raw, json)
Hash identifier:          VIbxq4qiUV8B96qp5MsAO7eFXQJ7UfpCQanhulyCRZI=
Subject key identifier:   41:4A:98:22:BB:B2:75:6A:C8:86:E5:DF:69:56:DF:A3:E2:10:3E:70
Authority key identifier: 0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA
Certificate issuer:       /CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
Certificate serial:       019F90C83F6F76DFCCE9885275B50B1D56B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
Manifest number:          16DD
Signing time:             Thu 23 Jul 2026 21:01:10 +0000
Manifest this update:     Thu 23 Jul 2026 21:01:10 +0000
Manifest next update:     Fri 24 Jul 2026 21:01:10 +0000
Files and hashes:         1: DEd6vwon7eiG-8QkE9eonCJrEfo.crl (hash: xF19VzHNnMHhJC9A9XAOmo2YXbvfQxBtR/NN/eSMtik=)
                          2: I6B11vAuliEHXkaj56Cx_nMNtzM.roa (hash: zwWKRvjHFcgx4AfaFVQj5qA+i2zTNLuDDbo0ohM5s9o=)
                          3: aFA8TdWBrL0sKL1WgCpchD-t0-E.roa (hash: yrp0PGLJIdfIoFJTh2LRDBtU78Dj8mCkVBqMsQkNwT0=)
                          4: zbElgd4kOsYPerCSi4Ys9upL4XA.roa (hash: i1lrAyqBTfs/DpcBlpdmtWLhCahW3WY5O3LNfMBqc9Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:3f:6f:76:df:cc:e9:88:52:75:b5:0b:1d:56:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c477abf0a27ede886fbc42413d7a89c226b11fa
        Validity
            Not Before: Jul 23 21:01:10 2026 GMT
            Not After : Jul 24 21:01:10 2026 GMT
        Subject: CN=414a9822bbb2756ac886e5df6956dfa3e2103e70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:d8:b2:e4:4f:fa:2a:38:6a:ae:9f:5e:1f:
                    81:a6:ae:c8:fe:7c:81:05:b8:5f:0a:6f:52:6b:b9:
                    68:4b:91:c1:36:a9:6f:51:94:02:e0:84:59:f3:db:
                    b4:04:e8:26:87:72:45:1f:62:55:c6:d0:dc:e6:76:
                    b5:55:28:24:d2:cc:4e:c7:a9:e5:a9:3d:be:49:e6:
                    dd:cf:0c:1f:1e:74:4e:6e:b0:71:6e:ee:85:04:33:
                    26:8f:05:d6:d0:6a:c1:c4:f9:4b:86:73:cf:9f:70:
                    72:a0:fa:f6:8f:94:06:99:8b:b0:16:d4:51:8c:05:
                    06:24:25:cf:75:6e:40:5d:fc:6d:37:41:e2:b0:2a:
                    16:c2:e3:bc:02:1c:0a:f3:0b:f9:eb:f4:46:c2:43:
                    9a:eb:57:8a:21:06:b0:a1:f6:cf:d7:0f:37:76:d5:
                    f5:62:4f:e0:8d:63:59:c1:c5:a5:db:76:0c:ec:e3:
                    91:d3:40:f9:eb:9a:7f:c8:43:7f:fa:1a:45:e3:2c:
                    9e:d0:a0:c4:04:f3:f0:ef:e4:77:c4:f6:5b:49:be:
                    bf:35:b9:36:7a:cb:38:85:73:f9:52:43:bd:a0:ed:
                    f3:c8:6a:97:8b:13:ed:e3:5f:25:76:48:bc:1d:60:
                    1f:d5:e4:e0:83:4a:1c:d0:1d:25:f2:23:2d:08:b8:
                    69:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4A:98:22:BB:B2:75:6A:C8:86:E5:DF:69:56:DF:A3:E2:10:3E:70
            X509v3 Authority Key Identifier:
                keyid:0C:47:7A:BF:0A:27:ED:E8:86:FB:C4:24:13:D7:A8:9C:22:6B:11:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DEd6vwon7eiG-8QkE9eonCJrEfo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/556d3d-0422-4612-a217-18f4f66a50a0/1/DEd6vwon7eiG-8QkE9eonCJrEfo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:77:cd:75:08:12:b3:ae:4b:ec:a9:43:d9:5b:ba:f3:f8:36:
         29:41:55:ca:69:c0:b4:e4:66:33:6c:4b:f4:89:79:ee:5d:f6:
         bd:69:20:19:a3:78:0d:94:c2:93:d2:43:98:40:b9:c8:22:b3:
         16:4a:0a:e5:01:02:19:9d:53:a3:ce:0b:68:4e:38:52:5f:a5:
         7f:49:39:a6:e7:0d:47:3f:23:a8:8b:e0:d5:73:5f:0e:28:36:
         82:fc:d3:02:cc:5c:27:f7:e4:37:92:8d:82:fb:e7:02:dc:d4:
         ce:86:eb:be:53:e5:b1:c6:87:50:2e:a5:bd:8b:5e:62:35:7a:
         08:21:c6:60:2f:9c:61:27:e8:5f:ee:a9:5b:d2:37:90:9c:d7:
         6f:f0:d0:95:a0:fd:03:c4:14:39:80:bf:53:53:c3:1c:2b:20:
         9d:24:c2:33:56:a1:d1:86:0e:07:ab:de:2d:76:29:a1:23:03:
         aa:70:ec:88:5e:ba:6b:68:d4:85:89:2e:e1:9d:6b:06:53:69:
         31:4e:b7:f5:e4:76:fa:a1:a8:75:b6:39:50:56:fb:c1:29:5a:
         77:9b:d8:f6:55:cb:c7:4b:e0:81:75:b6:3a:a1:9b:ff:13:59:
         8f:62:02:7b:08:f5:37:9b:20:12:a3:85:65:3c:81:00:51:42:
         14:27:ab:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QyD9vdt/M6YhSdbULHVa2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNDc3YWJmMGEyN2VkZTg4NmZiYzQyNDEzZDdhODljMjI2
YjExZmEwHhcNMjYwNzIzMjEwMTEwWhcNMjYwNzI0MjEwMTEwWjAzMTEwLwYDVQQD
Eyg0MTRhOTgyMmJiYjI3NTZhYzg4NmU1ZGY2OTU2ZGZhM2UyMTAzZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgjYsuRP+io4aq6fXh+Bpq7I/nyB
BbhfCm9Sa7loS5HBNqlvUZQC4IRZ89u0BOgmh3JFH2JVxtDc5na1VSgk0sxOx6nl
qT2+SebdzwwfHnRObrBxbu6FBDMmjwXW0GrBxPlLhnPPn3ByoPr2j5QGmYuwFtRR
jAUGJCXPdW5AXfxtN0HisCoWwuO8AhwK8wv56/RGwkOa61eKIQawofbP1w83dtX1
Yk/gjWNZwcWl23YM7OOR00D565p/yEN/+hpF4yye0KDEBPPw7+R3xPZbSb6/Nbk2
ess4hXP5UkO9oO3zyGqXixPt418ldki8HWAf1eTgg0oc0B0l8iMtCLhp/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEFKmCK7snVqyIbl32lW36PiED5wMB8GA1UdIwQY
MBaAFAxHer8KJ+3ohvvEJBPXqJwiaxH6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTct
MThmNGY2NmE1MGEwLzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC81NTZkM2QtMDQyMi00NjEyLWEyMTctMThmNGY2NmE1MGEw
LzEvREVkNnZ3b243ZWlHLThRa0U5ZW9uQ0pyRWZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXHfNdQgS
s65L7KlD2Vu68/g2KUFVymnAtORmM2xL9Il57l32vWkgGaN4DZTCk9JDmEC5yCKz
FkoK5QECGZ1To84LaE44Ul+lf0k5pucNRz8jqIvg1XNfDig2gvzTAsxcJ/fkN5KN
gvvnAtzUzobrvlPlscaHUC6lvYteYjV6CCHGYC+cYSfoX+6pW9I3kJzXb/DQlaD9
A8QUOYC/U1PDHCsgnSTCM1ah0YYOB6veLXYpoSMDqnDsiF66a2jUhYku4Z1rBlNp
MU639eR2+qGodbY5UFb7wSlad5vY9lXLx0vggXW2OqGb/xNZj2ICewj1N5sgEqOF
ZTyBAFFCFCer5g==
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:15:25 2026 by rpki-client