Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
File:                     sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft (raw, json)
Hash identifier:          5yyylf6Ub1xh9rJ/Mz6iNwWMGI4aw1xrZfdwpvH/R8A=
Subject key identifier:   D2:2D:25:24:C1:C2:CD:9F:D3:DB:1B:5D:4D:DD:41:D5:E4:AD:4A:E8
Authority key identifier: B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4
Certificate issuer:       /CN=b1cdc26d44eaf85654481e9581043e14887765b4
Certificate serial:       019FA93E0B54726D87278F567BAD9A94BC6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
Manifest number:          1531
Signing time:             Tue 28 Jul 2026 15:00:43 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:43 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:43 +0000
Files and hashes:         1: 35qhAQKnv1mZjO22yTQ-wyvYzto.asa (hash: OjstDLpxFizovicdQpcPnjVqRrDOAeV/hfCot+ezciw=)
                          2: Zopjwe1rzd92yl72g_6NHQcrS2g.roa (hash: nDvQP9lRFjKHJxmHIMp23P7uE0RhUeA887SfeMIm2EU=)
                          3: g2idL-D8suQFsQoE5OmsRPApfGw.roa (hash: czmirE4/eGdQOoSaanjSLhXcburfB40hJBvEhvVcnZ8=)
                          4: jmDndIYIGgfpBEWWzSh6LHZQ2es.asa (hash: uHpXZzgGL3Rk2CN+F5Efi6PUzkboBx9FgZH/bc5JSPs=)
                          5: sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl (hash: EsyBiKi/hP402IXfVP+YjiGFHkEpuAO65VwpOA06HY0=)
                          6: xJVZmwhY7utaptENw2W7cxJs8A0.roa (hash: 6LO6+5kQiWhvtv1cMZ+cZDZ7KIpd7UwlqzDqG/cJAzE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:0b:54:72:6d:87:27:8f:56:7b:ad:9a:94:bc:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b1cdc26d44eaf85654481e9581043e14887765b4
        Validity
            Not Before: Jul 28 15:00:43 2026 GMT
            Not After : Jul 29 15:00:43 2026 GMT
        Subject: CN=d22d2524c1c2cd9fd3db1b5d4ddd41d5e4ad4ae8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:8f:b9:08:aa:d9:4b:ea:52:bd:9e:06:73:e8:
                    f0:6c:c4:85:9e:3d:ae:36:3e:4b:4d:7f:95:5b:33:
                    ed:7a:ac:40:da:6a:d7:8b:b6:b7:c9:03:c3:cd:ee:
                    7d:cf:c8:53:6e:2d:88:c2:c6:b7:12:01:89:07:f3:
                    fb:00:2d:07:59:5b:7b:e6:d7:3f:2e:aa:78:16:64:
                    80:5f:a2:30:94:85:8b:94:7f:34:ab:39:fc:5c:ea:
                    0c:89:0d:f5:43:54:7c:22:66:d5:50:11:b0:70:2e:
                    14:9b:4f:bb:90:9d:e8:a9:8c:db:97:39:01:10:8f:
                    36:5d:f4:8a:84:8b:6b:2a:5f:2a:7f:ee:d0:f6:28:
                    e0:3b:60:bc:ba:76:54:4b:36:f1:18:03:68:ec:2d:
                    7d:b3:2a:22:88:04:c0:6f:14:12:be:45:9b:56:a6:
                    98:35:29:72:ef:a9:cf:b4:4d:e2:31:5f:15:f0:a6:
                    89:e3:cb:5a:42:8d:e8:df:74:10:04:f5:39:a6:4e:
                    eb:8e:3d:9d:11:14:fc:16:e7:68:3f:fa:c0:11:41:
                    60:c4:f9:5a:3e:72:06:43:98:ec:1d:75:e7:ce:a3:
                    b7:9c:bd:27:9f:8e:34:05:8a:8d:1e:d2:27:21:1d:
                    00:45:2e:65:e1:91:50:e4:4d:86:81:3d:91:b4:0c:
                    d6:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:2D:25:24:C1:C2:CD:9F:D3:DB:1B:5D:4D:DD:41:D5:E4:AD:4A:E8
            X509v3 Authority Key Identifier:
                keyid:B1:CD:C2:6D:44:EA:F8:56:54:48:1E:95:81:04:3E:14:88:77:65:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/aaadac-4809-4955-ac62-8f9ca0ebccab/1/sc3CbUTq-FZUSB6VgQQ-FIh3ZbQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6c:db:c6:f1:7e:c9:fc:1b:06:f2:e8:c1:f9:8d:ec:64:1c:
         a3:69:7f:fc:a1:45:4f:60:8e:36:24:99:3d:b2:f0:f7:f4:ea:
         d1:8c:1a:3d:33:81:85:15:55:4a:c1:09:24:f0:43:4b:12:92:
         47:fb:46:2f:b9:12:ed:e1:3a:07:1d:84:ae:4b:ab:84:a7:22:
         09:bd:a8:c5:2e:f9:1b:24:2a:ac:3b:ba:eb:ff:a8:5a:01:1b:
         59:ff:7a:87:e8:64:7b:67:df:a2:19:13:f1:ef:3b:2e:a7:24:
         e7:6b:bb:89:e4:23:66:f5:e9:cb:14:88:89:da:1b:4e:0e:c3:
         d5:6f:a4:58:7d:c0:e1:ce:ae:a4:79:a0:a3:1f:78:10:15:25:
         25:06:25:c0:3d:0f:b6:51:04:34:0e:43:37:de:63:6c:af:27:
         73:cd:df:a2:bf:99:62:59:2a:d8:7e:5f:6b:ce:c3:d9:03:8f:
         23:73:19:3f:cf:cf:66:10:f7:e4:d2:43:4f:a2:45:54:0e:c8:
         0e:36:a6:70:35:5a:9e:84:80:4a:e6:e5:fa:fe:f0:cc:27:78:
         91:ec:f5:3b:a9:58:81:16:a2:53:51:df:56:2e:84:a5:c1:52:
         59:e3:90:49:b6:8b:b0:7a:7e:d8:85:19:5c:42:7d:a0:4e:51:
         6f:b8:c1:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPgtUcm2HJ49We62alLxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxY2RjMjZkNDRlYWY4NTY1NDQ4MWU5NTgxMDQzZTE0ODg3
NzY1YjQwHhcNMjYwNzI4MTUwMDQzWhcNMjYwNzI5MTUwMDQzWjAzMTEwLwYDVQQD
EyhkMjJkMjUyNGMxYzJjZDlmZDNkYjFiNWQ0ZGRkNDFkNWU0YWQ0YWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5o+5CKrZS+pSvZ4Gc+jwbMSFnj2u
Nj5LTX+VWzPteqxA2mrXi7a3yQPDze59z8hTbi2Iwsa3EgGJB/P7AC0HWVt75tc/
Lqp4FmSAX6IwlIWLlH80qzn8XOoMiQ31Q1R8ImbVUBGwcC4Um0+7kJ3oqYzblzkB
EI82XfSKhItrKl8qf+7Q9ijgO2C8unZUSzbxGANo7C19syoiiATAbxQSvkWbVqaY
NSly76nPtE3iMV8V8KaJ48taQo3o33QQBPU5pk7rjj2dERT8FudoP/rAEUFgxPla
PnIGQ5jsHXXnzqO3nL0nn440BYqNHtInIR0ARS5l4ZFQ5E2GgT2RtAzW7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNItJSTBws2f09sbXU3dQdXkrUroMB8GA1UdIwQY
MBaAFLHNwm1E6vhWVEgelYEEPhSId2W0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjIt
OGY5Y2EwZWJjY2FiLzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hYWFkYWMtNDgwOS00OTU1LWFjNjItOGY5Y2EwZWJjY2Fi
LzEvc2MzQ2JVVHEtRlpVU0I2VmdRUS1GSWgzWmJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2zbxvF+
yfwbBvLowfmN7GQco2l//KFFT2CONiSZPbLw9/Tq0YwaPTOBhRVVSsEJJPBDSxKS
R/tGL7kS7eE6Bx2ErkurhKciCb2oxS75GyQqrDu66/+oWgEbWf96h+hke2ffohkT
8e87Lqck52u7ieQjZvXpyxSIidobTg7D1W+kWH3A4c6upHmgox94EBUlJQYlwD0P
tlEENA5DN95jbK8nc83for+ZYlkq2H5fa87D2QOPI3MZP8/PZhD35NJDT6JFVA7I
DjamcDVanoSASubl+v7wzCd4kez1O6lYgRaiU1HfVi6EpcFSWeOQSbaLsHp+2IUZ
XEJ9oE5Rb7jB6A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:18:15 2026 by rpki-client