Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
File:                     C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft (raw, json)
Hash identifier:          9lJTIJjCFTTFyTLYhhlN3V2ktTCZerVF7fj+2P+BP2I=
Subject key identifier:   32:98:9D:23:E6:66:79:89:C8:B4:FA:FB:2D:DB:08:53:75:4B:69:CE
Authority key identifier: 0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4
Certificate issuer:       /CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
Certificate serial:       019FAA88AF6431230E647AC516A9B3A12E9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
Manifest number:          1916
Signing time:             Tue 28 Jul 2026 21:01:52 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:52 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:52 +0000
Files and hashes:         1: 61ugHkbatEiWTW_1eKYKqCu8qbY.roa (hash: 8Ns+XB7ZudJ9zzWr083jFxqXZ3ELplfe29YSHWs6xj0=)
                          2: C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl (hash: V0cGvZh78K5oGWFOEXk0vXHAqUVFzfDsEPss1eKZoXE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:af:64:31:23:0e:64:7a:c5:16:a9:b3:a1:2e:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0bb71e4264ce62c35e1cee64d18765d33290f2a4
        Validity
            Not Before: Jul 28 21:01:52 2026 GMT
            Not After : Jul 29 21:01:52 2026 GMT
        Subject: CN=32989d23e6667989c8b4fafb2ddb0853754b69ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:18:6d:16:52:80:f2:93:1e:6f:48:57:e4:c7:
                    6b:8f:1b:5e:fe:f3:25:6f:80:8b:65:b3:30:70:69:
                    8f:5c:24:32:ff:5b:8d:d0:b8:e0:7e:82:5b:35:50:
                    25:64:83:f1:24:ed:ff:28:1a:2f:cb:e6:d8:ca:47:
                    25:61:6a:d9:e5:52:a5:3c:6f:e3:ab:d6:6f:9a:a5:
                    af:6c:42:76:9b:ca:9b:66:30:8e:84:50:22:bf:31:
                    d9:78:ee:ba:9b:de:40:0b:b3:a6:09:55:d3:17:08:
                    54:29:6a:05:0b:9a:e7:84:6c:0a:93:56:71:29:ea:
                    fe:47:4c:84:be:d6:59:f4:5d:34:3c:f3:12:6c:6e:
                    9a:96:8d:b4:38:09:ba:ed:f7:20:9d:b7:6f:6c:9d:
                    09:64:15:e5:e8:f3:6b:1d:ba:50:98:63:6c:8b:04:
                    c5:d4:0e:5c:b7:13:a6:80:7f:38:82:dd:82:83:4d:
                    ef:30:b0:6c:97:0b:93:07:59:86:ee:c6:f8:08:73:
                    51:a9:29:be:32:89:7c:ab:fc:a7:18:4f:70:97:4c:
                    2c:0b:21:85:24:55:4d:32:a2:08:18:f8:b3:d5:43:
                    8b:04:b5:93:6b:4a:1c:fa:0e:a9:13:68:c0:4e:1d:
                    65:76:3c:e2:66:60:5f:4a:77:b9:15:6c:63:2f:be:
                    70:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:98:9D:23:E6:66:79:89:C8:B4:FA:FB:2D:DB:08:53:75:4B:69:CE
            X509v3 Authority Key Identifier:
                keyid:0B:B7:1E:42:64:CE:62:C3:5E:1C:EE:64:D1:87:65:D3:32:90:F2:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/13da09-5e0e-45cb-95a3-ca545838afc0/1/C7ceQmTOYsNeHO5k0Ydl0zKQ8qQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:39:d5:54:c3:49:f6:e7:37:14:ae:57:9e:34:5f:b6:7e:bd:
         f5:0a:a7:37:eb:91:00:b2:d1:ca:42:eb:e7:15:80:00:92:a0:
         2f:cb:56:8e:92:60:82:78:a2:c8:3d:92:94:7d:80:39:7a:c0:
         62:d3:4e:41:0c:c8:ca:f4:80:ec:d2:24:4a:76:03:ac:54:ea:
         96:50:9a:da:fd:94:41:57:04:b4:11:94:13:77:c9:af:b9:89:
         b9:1e:e6:13:cd:96:ec:7d:af:fc:cd:37:c2:51:80:d0:78:6f:
         cc:5a:fc:e9:5c:8b:7d:e2:3e:c4:60:1d:75:c6:8c:a4:7c:a6:
         63:90:54:4e:20:1d:3c:7f:70:af:28:cd:35:f9:c2:a5:6e:0b:
         bc:78:58:34:3d:3f:7c:37:5c:8e:a6:51:37:42:13:01:53:4d:
         2f:c9:d8:6e:9f:18:15:7f:4f:84:8a:1f:dc:fd:f8:b3:1e:e0:
         ce:60:34:b8:7b:34:1c:73:e1:e9:73:a0:87:83:99:21:32:85:
         4b:a7:02:18:b3:e3:41:51:f8:12:26:f3:b4:87:16:dc:ae:c8:
         d0:b2:35:c2:f6:7d:ac:dc:d7:a4:f9:67:af:d5:85:0b:c1:5c:
         2b:08:90:25:5b:94:34:fb:40:1e:a3:4f:89:56:69:63:5f:52:
         19:b9:87:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiK9kMSMOZHrFFqmzoS6dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYjcxZTQyNjRjZTYyYzM1ZTFjZWU2NGQxODc2NWQzMzI5
MGYyYTQwHhcNMjYwNzI4MjEwMTUyWhcNMjYwNzI5MjEwMTUyWjAzMTEwLwYDVQQD
EygzMjk4OWQyM2U2NjY3OTg5YzhiNGZhZmIyZGRiMDg1Mzc1NGI2OWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRhtFlKA8pMeb0hX5Mdrjxte/vMl
b4CLZbMwcGmPXCQy/1uN0LjgfoJbNVAlZIPxJO3/KBovy+bYykclYWrZ5VKlPG/j
q9ZvmqWvbEJ2m8qbZjCOhFAivzHZeO66m95AC7OmCVXTFwhUKWoFC5rnhGwKk1Zx
Ker+R0yEvtZZ9F00PPMSbG6alo20OAm67fcgnbdvbJ0JZBXl6PNrHbpQmGNsiwTF
1A5ctxOmgH84gt2Cg03vMLBslwuTB1mG7sb4CHNRqSm+Mol8q/ynGE9wl0wsCyGF
JFVNMqIIGPiz1UOLBLWTa0oc+g6pE2jATh1ldjziZmBfSne5FWxjL75wvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKYnSPmZnmJyLT6+y3bCFN1S2nOMB8GA1UdIwQY
MBaAFAu3HkJkzmLDXhzuZNGHZdMykPKkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMt
Y2E1NDU4MzhhZmMwLzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8xM2RhMDktNWUwZS00NWNiLTk1YTMtY2E1NDU4MzhhZmMw
LzEvQzdjZVFtVE9Zc05lSE81azBZZGwwektROHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABznVVMNJ
9uc3FK5XnjRftn699QqnN+uRALLRykLr5xWAAJKgL8tWjpJggniiyD2SlH2AOXrA
YtNOQQzIyvSA7NIkSnYDrFTqllCa2v2UQVcEtBGUE3fJr7mJuR7mE82W7H2v/M03
wlGA0HhvzFr86VyLfeI+xGAddcaMpHymY5BUTiAdPH9wryjNNfnCpW4LvHhYND0/
fDdcjqZRN0ITAVNNL8nYbp8YFX9PhIof3P34sx7gzmA0uHs0HHPh6XOgh4OZITKF
S6cCGLPjQVH4EibztIcW3K7I0LI1wvZ9rNzXpPlnr9WFC8FcKwiQJVuUNPtAHqNP
iVZpY19SGbmHCA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:39:01 2026 by rpki-client