Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
File:                     0ZMX0nI53HsNVBM74aplydwB9DQ.mft (raw, json)
Hash identifier:          dJheG6dF1SEh/qEolnvN2J7DPq2mREUhckZMN6hzMlg=
Subject key identifier:   47:F0:0B:0C:1C:91:19:27:D4:75:2F:BF:1D:56:E5:28:8B:69:7A:C8
Authority key identifier: D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34
Certificate issuer:       /CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
Certificate serial:       019F8F10D3B4AAC21D58E3D8952B0B4B0776
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
Manifest number:          1508
Signing time:             Thu 23 Jul 2026 13:01:12 +0000
Manifest this update:     Thu 23 Jul 2026 13:01:12 +0000
Manifest next update:     Fri 24 Jul 2026 13:01:12 +0000
Files and hashes:         1: 0ZMX0nI53HsNVBM74aplydwB9DQ.crl (hash: +jB2mSDWldN3XNQjYFroXpBkCtOQIQ4WkVPd6AnuW8k=)
                          2: TJgG5JgLQBCuHjTc6SCRX0Gwecs.roa (hash: sbP+Ctp1kLffFP2dFlRcWQm0kZSgtgHBUAs9I18M36w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:10:d3:b4:aa:c2:1d:58:e3:d8:95:2b:0b:4b:07:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d19317d27239dc7b0d54133be1aa65c9dc01f434
        Validity
            Not Before: Jul 23 13:01:12 2026 GMT
            Not After : Jul 24 13:01:12 2026 GMT
        Subject: CN=47f00b0c1c911927d4752fbf1d56e5288b697ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:56:07:0e:9c:4b:18:93:3c:da:e8:6a:e5:09:
                    4a:f7:ef:d2:d2:d9:94:a3:95:3f:f8:52:85:bb:d9:
                    2e:51:cd:eb:57:ad:ad:32:cf:1b:9e:28:15:4f:c7:
                    5e:e9:b4:a4:2b:76:08:34:ce:46:1b:9b:1f:17:78:
                    f8:1f:f2:2c:5b:92:a3:70:15:4b:1b:a9:25:02:7f:
                    03:90:69:a4:c4:7a:9c:3f:b0:6c:cf:0d:b2:17:6f:
                    a4:2b:a6:d2:25:e6:5f:9d:6f:4f:2e:28:5c:a6:f7:
                    a4:fc:3b:af:81:d3:65:87:32:fe:57:2b:a8:eb:90:
                    c4:27:40:fe:c1:33:22:e5:96:2c:ff:dd:5f:ac:74:
                    b5:54:0c:5d:7b:51:f7:4b:05:a4:49:c0:17:97:ab:
                    31:6f:7c:be:37:db:a1:e7:93:cb:e2:a4:3f:97:3d:
                    ad:1e:37:d8:f4:94:34:01:82:1f:e9:5b:d9:c8:8c:
                    78:70:93:a5:85:b9:e6:e0:01:8e:cb:fc:21:25:72:
                    19:82:7d:0b:1e:13:00:e8:e0:48:94:40:b6:fb:4b:
                    4c:3a:9c:d4:fe:ed:84:87:00:f0:2e:8b:8a:40:18:
                    3a:d4:b3:72:9a:ea:d0:93:fa:ed:65:7c:de:13:0b:
                    50:5a:3d:0b:15:72:51:fb:cc:3e:1c:cf:d1:8f:2d:
                    d2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:F0:0B:0C:1C:91:19:27:D4:75:2F:BF:1D:56:E5:28:8B:69:7A:C8
            X509v3 Authority Key Identifier:
                keyid:D1:93:17:D2:72:39:DC:7B:0D:54:13:3B:E1:AA:65:C9:DC:01:F4:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZMX0nI53HsNVBM74aplydwB9DQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e71e2e-9542-489c-9bff-e6d9588ce7e7/1/0ZMX0nI53HsNVBM74aplydwB9DQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:8c:56:10:2f:cf:56:84:9e:fe:b8:db:69:1d:1f:ae:a5:8c:
         0a:64:bd:1e:fc:8a:a7:aa:c0:a0:0c:f7:e3:f9:10:d8:ec:e1:
         39:5c:7b:fe:44:2b:0e:b9:56:25:37:5b:0a:6e:c1:a5:b8:d6:
         30:79:63:de:ac:30:ac:13:a2:e7:b7:d0:b9:9f:fe:7c:f0:c4:
         00:08:8e:d4:14:71:18:f1:5b:f9:3d:a1:64:fe:18:a2:0c:3a:
         07:f1:05:8f:5d:8a:75:bf:c4:b7:fc:53:7b:50:5a:94:bb:b7:
         f6:cc:51:96:e6:a7:57:99:4d:d4:a9:5f:73:71:d8:32:a6:56:
         70:6a:d4:85:bd:b9:37:0c:43:9a:82:68:8f:99:70:5c:23:d3:
         75:a3:77:c8:98:d6:4d:4b:c0:c4:11:51:85:cb:5f:1c:c4:16:
         4d:e7:2f:1b:45:73:b0:0a:3c:31:23:54:03:a4:35:e0:d0:2d:
         27:6f:c6:08:1b:00:0c:21:22:6c:03:cf:b4:1f:7f:59:5d:5d:
         3b:b3:18:f1:5c:2f:9f:01:7f:1e:bc:92:b1:9a:3a:24:84:ea:
         a7:17:16:fd:01:e4:e2:4b:30:3c:64:bf:e6:08:83:ae:16:31:
         06:c0:a7:be:6c:78:e7:bf:94:79:41:6a:d5:85:f2:16:b3:02:
         df:0b:f2:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PENO0qsIdWOPYlSsLSwd2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTMxN2QyNzIzOWRjN2IwZDU0MTMzYmUxYWE2NWM5ZGMw
MWY0MzQwHhcNMjYwNzIzMTMwMTEyWhcNMjYwNzI0MTMwMTEyWjAzMTEwLwYDVQQD
Eyg0N2YwMGIwYzFjOTExOTI3ZDQ3NTJmYmYxZDU2ZTUyODhiNjk3YWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lYHDpxLGJM82uhq5QlK9+/S0tmU
o5U/+FKFu9kuUc3rV62tMs8bnigVT8de6bSkK3YINM5GG5sfF3j4H/IsW5KjcBVL
G6klAn8DkGmkxHqcP7Bszw2yF2+kK6bSJeZfnW9PLihcpvek/DuvgdNlhzL+Vyuo
65DEJ0D+wTMi5ZYs/91frHS1VAxde1H3SwWkScAXl6sxb3y+N9uh55PL4qQ/lz2t
HjfY9JQ0AYIf6VvZyIx4cJOlhbnm4AGOy/whJXIZgn0LHhMA6OBIlEC2+0tMOpzU
/u2EhwDwLouKQBg61LNymurQk/rtZXzeEwtQWj0LFXJR+8w+HM/Rjy3S6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfwCwwckRkn1HUvvx1W5SiLaXrIMB8GA1UdIwQY
MBaAFNGTF9JyOdx7DVQTO+GqZcncAfQ0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYt
ZTZkOTU4OGNlN2U3LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lNzFlMmUtOTU0Mi00ODljLTliZmYtZTZkOTU4OGNlN2U3
LzEvMFpNWDBuSTUzSHNOVkJNNzRhcGx5ZHdCOURRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAoxWEC/P
VoSe/rjbaR0frqWMCmS9HvyKp6rAoAz34/kQ2OzhOVx7/kQrDrlWJTdbCm7BpbjW
MHlj3qwwrBOi57fQuZ/+fPDEAAiO1BRxGPFb+T2hZP4Yogw6B/EFj12Kdb/Et/xT
e1BalLu39sxRluanV5lN1Klfc3HYMqZWcGrUhb25NwxDmoJoj5lwXCPTdaN3yJjW
TUvAxBFRhctfHMQWTecvG0VzsAo8MSNUA6Q14NAtJ2/GCBsADCEibAPPtB9/WV1d
O7MY8VwvnwF/HrySsZo6JITqpxcW/QHk4kswPGS/5giDrhYxBsCnvmx457+UeUFq
1YXyFrMC3wvyZg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:56 2026 by rpki-client