Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
File:                     DghrZ9iYllO662i40kq56b0Mryo.mft (raw, json)
Hash identifier:          pn/cfAogWjDG8oXNfyjF8BAhEec63hkHGwzlVjxMj8Q=
Subject key identifier:   E7:B6:48:04:BB:FB:05:AB:D9:D5:7D:6F:14:FE:C3:F6:2D:5F:8F:60
Authority key identifier: 0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A
Certificate issuer:       /CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
Certificate serial:       019F9323ABF9A7806216742D81BA42CCD6E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
Manifest number:          1442
Signing time:             Fri 24 Jul 2026 08:00:16 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:16 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:16 +0000
Files and hashes:         1: 9z2R7mR7CTqEMhJ2KlrHCYJ3vjc.roa (hash: FvuJb6Wc0/pGsiV3BQi7hOtAMeCwlp8+eAq8AekfMKM=)
                          2: DghrZ9iYllO662i40kq56b0Mryo.crl (hash: JwFL+zG0roqB1k40hHA9eBksivorJ70uMk9d+lT5YgU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:ab:f9:a7:80:62:16:74:2d:81:ba:42:cc:d6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e086b67d8989653baeb68b8d24ab9e9bd0caf2a
        Validity
            Not Before: Jul 24 08:00:16 2026 GMT
            Not After : Jul 25 08:00:16 2026 GMT
        Subject: CN=e7b64804bbfb05abd9d57d6f14fec3f62d5f8f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:62:44:79:bb:65:92:87:29:b9:f8:3a:18:e0:
                    8e:58:b9:c9:65:26:a7:31:a3:6e:24:b9:1c:89:8a:
                    af:7d:19:70:7b:d0:91:c6:49:df:52:e7:31:f7:ea:
                    5a:ce:a8:10:af:bd:ea:a1:55:6f:c8:31:3c:e7:76:
                    d9:23:f2:e8:f4:00:12:d1:3a:ec:e4:e4:69:12:3c:
                    ce:bd:bf:8b:65:51:28:1a:21:f5:74:35:b6:78:c8:
                    b8:b2:9b:3b:1f:a4:02:e4:a0:85:41:3f:f7:01:43:
                    6c:da:54:ef:9d:87:22:b4:ea:fd:19:ba:98:4c:68:
                    d1:86:6c:78:1d:34:8e:fe:f4:a0:ec:15:b6:06:56:
                    9b:c8:86:3e:04:d8:c0:db:8b:9e:9e:bf:63:94:dc:
                    de:c8:80:20:6b:c3:8b:a5:89:98:c4:12:3a:c0:5c:
                    1a:56:b2:dd:6e:1a:cd:a3:39:7d:f0:02:86:dd:64:
                    cc:47:67:c9:c2:8c:40:95:43:2c:df:9b:a4:aa:d1:
                    a2:e9:c9:04:fb:86:7e:99:93:40:aa:25:a1:1b:39:
                    77:aa:7c:2e:04:8e:c5:b0:bc:3b:75:67:3b:dd:40:
                    64:0a:b9:33:61:8e:53:2c:39:7a:95:a2:71:92:cd:
                    6b:49:39:b8:64:17:2b:3a:09:06:10:1f:fc:e5:f8:
                    57:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B6:48:04:BB:FB:05:AB:D9:D5:7D:6F:14:FE:C3:F6:2D:5F:8F:60
            X509v3 Authority Key Identifier:
                keyid:0E:08:6B:67:D8:98:96:53:BA:EB:68:B8:D2:4A:B9:E9:BD:0C:AF:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DghrZ9iYllO662i40kq56b0Mryo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/3796fa-c02e-45f9-a1a4-622bb4899887/1/DghrZ9iYllO662i40kq56b0Mryo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a3:fb:67:cd:b1:8c:e4:05:c3:48:71:fc:3f:4f:2f:03:fa:
         14:0c:ea:ba:92:59:f9:39:71:3a:cc:3d:bb:cd:a3:8b:9c:34:
         e4:59:de:ef:65:b7:a0:7b:5e:13:2e:74:52:03:8b:d8:55:91:
         85:58:b1:db:5c:82:6a:db:d2:a4:34:8a:4c:c5:aa:55:d6:31:
         d3:18:fc:a3:34:55:42:0d:d3:3a:f8:ed:85:ed:f4:86:1e:f6:
         75:32:a6:0e:bf:6a:66:0d:f1:75:c8:62:60:87:22:56:e6:3d:
         eb:dd:7d:25:75:2e:91:f7:b7:bd:0b:fb:7d:85:87:75:69:44:
         fd:e4:87:f7:34:84:71:29:7f:4e:9e:71:cf:3b:52:c7:a8:fd:
         81:a3:c8:0e:c3:44:d8:b5:bc:5b:16:bd:ea:71:c8:9d:60:d9:
         dd:13:86:e9:cd:4f:e1:3b:18:a7:2e:2b:23:d5:79:c9:7f:49:
         b1:3c:2c:5b:42:86:16:88:5b:32:cd:46:9d:25:fa:7a:0e:3f:
         6b:43:2c:0c:83:16:91:99:f4:76:1a:a6:b7:fa:3d:15:54:b1:
         96:c9:65:b6:58:dd:06:43:be:29:18:61:b7:17:1a:e1:df:24:
         10:58:3c:63:3f:a6:5b:3e:06:d3:80:cd:c1:f6:4d:19:97:0a:
         dd:46:ca:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TI6v5p4BiFnQtgbpCzNbhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMDg2YjY3ZDg5ODk2NTNiYWViNjhiOGQyNGFiOWU5YmQw
Y2FmMmEwHhcNMjYwNzI0MDgwMDE2WhcNMjYwNzI1MDgwMDE2WjAzMTEwLwYDVQQD
EyhlN2I2NDgwNGJiZmIwNWFiZDlkNTdkNmYxNGZlYzNmNjJkNWY4ZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWJEebtlkocpufg6GOCOWLnJZSan
MaNuJLkciYqvfRlwe9CRxknfUucx9+pazqgQr73qoVVvyDE853bZI/Lo9AAS0Trs
5ORpEjzOvb+LZVEoGiH1dDW2eMi4sps7H6QC5KCFQT/3AUNs2lTvnYcitOr9GbqY
TGjRhmx4HTSO/vSg7BW2BlabyIY+BNjA24uenr9jlNzeyIAga8OLpYmYxBI6wFwa
VrLdbhrNozl98AKG3WTMR2fJwoxAlUMs35ukqtGi6ckE+4Z+mZNAqiWhGzl3qnwu
BI7FsLw7dWc73UBkCrkzYY5TLDl6laJxks1rSTm4ZBcrOgkGEB/85fhX5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOe2SAS7+wWr2dV9bxT+w/YtX49gMB8GA1UdIwQY
MBaAFA4Ia2fYmJZTuutouNJKuem9DK8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQt
NjIyYmI0ODk5ODg3LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8zNzk2ZmEtYzAyZS00NWY5LWExYTQtNjIyYmI0ODk5ODg3
LzEvRGdoclo5aVlsbE82NjJpNDBrcTU2YjBNcnlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUKP7Z82x
jOQFw0hx/D9PLwP6FAzqupJZ+TlxOsw9u82ji5w05Fne72W3oHteEy50UgOL2FWR
hVix21yCatvSpDSKTMWqVdYx0xj8ozRVQg3TOvjthe30hh72dTKmDr9qZg3xdchi
YIciVuY96919JXUukfe3vQv7fYWHdWlE/eSH9zSEcSl/Tp5xzztSx6j9gaPIDsNE
2LW8Wxa96nHInWDZ3ROG6c1P4TsYpy4rI9V5yX9JsTwsW0KGFohbMs1GnSX6eg4/
a0MsDIMWkZn0dhqmt/o9FVSxlslltljdBkO+KRhhtxca4d8kEFg8Yz+mWz4G04DN
wfZNGZcK3UbKRQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:55:05 2026 by rpki-client