Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File:                     jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier:          EsK3FL5/HsFl55MTW0eelw7p6ERX1RIXUB6SIdlTcRw=
Subject key identifier:   29:C1:AF:16:95:8D:F1:4E:E3:C9:CB:66:33:D4:1F:6F:7E:D8:19:F6
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer:       /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial:       019FA93DF0676B7865BEB834FE26D1C23CEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number:          05C8
Signing time:             Tue 28 Jul 2026 15:00:36 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:36 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:36 +0000
Files and hashes:         1: Qu7i1hfHBSzNKAEQCFhBjLBdX88.roa (hash: txu1MfU2gFXJdRpf1GKWelwI6kKmpvlKQLQat4JHcus=)
                          2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: JLNII1zHHodqz078MttD7GnldYZqWralEMBLp8/3yPg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:f0:67:6b:78:65:be:b8:34:fe:26:d1:c2:3c:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
        Validity
            Not Before: Jul 28 15:00:36 2026 GMT
            Not After : Jul 29 15:00:36 2026 GMT
        Subject: CN=29c1af16958df14ee3c9cb6633d41f6f7ed819f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:e0:8a:28:8c:72:8e:f2:f5:7e:7d:0b:a0:
                    bd:66:c4:f7:50:d0:b8:ce:21:f4:1b:f2:75:96:8e:
                    cf:a1:87:9e:06:67:dc:db:ad:8f:2d:df:e9:dd:f3:
                    11:63:99:78:f2:b3:72:db:25:66:34:60:d7:c7:91:
                    b6:73:a7:bb:14:2d:4c:3a:42:6a:3c:d8:15:93:21:
                    d1:bd:92:20:08:0c:10:54:26:7a:46:87:97:e9:1b:
                    d9:3c:85:f2:bb:e1:67:33:3c:41:e6:cf:eb:cb:57:
                    a3:ef:15:47:11:38:b5:12:8d:3f:ca:cf:ac:0b:2a:
                    06:be:e3:18:0a:a8:e5:24:ee:ea:7f:b8:c1:4a:c2:
                    6d:ff:df:7b:90:64:91:65:eb:05:ab:64:dc:23:19:
                    08:ef:f3:aa:d5:35:9f:c9:34:1d:07:71:ec:fb:1e:
                    47:35:05:ba:fc:9f:9d:e9:a4:37:39:53:90:87:e2:
                    a2:dd:3a:16:8a:21:84:e8:b6:9e:95:e4:6e:b2:12:
                    c0:a5:8e:06:af:d2:9c:ba:22:61:3e:43:72:21:c8:
                    81:fa:ef:ec:2e:8a:f2:66:54:29:42:d2:a7:c9:c5:
                    1e:52:48:c1:13:7f:69:9d:92:f6:47:80:0a:2d:2f:
                    e5:11:ee:74:85:55:12:88:5a:31:25:fe:7b:1e:77:
                    30:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C1:AF:16:95:8D:F1:4E:E3:C9:CB:66:33:D4:1F:6F:7E:D8:19:F6
            X509v3 Authority Key Identifier:
                keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:c2:fb:b3:e0:6a:4d:62:27:0e:f7:da:c4:c0:23:c8:0e:b7:
         8c:85:91:28:35:28:cf:20:f3:d2:60:ed:0a:9a:61:cb:9d:f8:
         1b:e4:64:43:34:4e:ce:d0:e8:33:f5:06:a5:93:4c:95:ce:05:
         98:cf:90:e9:d3:1a:88:ff:62:40:95:40:dc:1f:85:8d:d6:99:
         16:09:ab:5f:f5:fc:23:24:5f:7f:0e:18:f1:f2:9e:6a:76:d9:
         f1:dc:81:8c:63:e4:ad:eb:1f:35:5b:90:40:fb:f3:fd:90:92:
         8d:bc:7b:46:db:d7:c9:23:1a:c1:9f:00:56:93:7a:b0:56:2f:
         6c:bf:f9:93:6f:1f:e6:40:36:d6:4f:3f:6c:9f:bf:6b:3e:91:
         ef:b0:68:11:45:b3:01:21:f1:85:c0:a5:0b:28:86:e0:c3:41:
         09:7e:f1:d7:6f:4f:b3:7e:00:7f:ae:3a:fb:3a:5b:1b:4d:42:
         fd:0e:90:10:a6:af:66:04:39:07:5e:ab:ef:e2:ca:f5:68:d2:
         d8:b6:4e:d4:d8:75:af:5d:13:00:07:61:82:35:e3:09:cd:54:
         2a:b7:24:9f:5b:a4:83:99:dd:95:05:b3:39:80:39:26:ca:dc:
         08:74:d1:0a:ee:f7:e2:1a:ee:7f:d6:e6:00:cb:fe:09:0f:6b:
         b6:a6:bf:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPfBna3hlvrg0/ibRwjzuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhjY2M4MmE1YmVlM2E5MzYzMzAzYzMzY2RjZGQzNmVmYzY4
ZjhiNDQwHhcNMjYwNzI4MTUwMDM2WhcNMjYwNzI5MTUwMDM2WjAzMTEwLwYDVQQD
EygyOWMxYWYxNjk1OGRmMTRlZTNjOWNiNjYzM2Q0MWY2ZjdlZDgxOWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSLgiiiMco7y9X59C6C9ZsT3UNC4
ziH0G/J1lo7PoYeeBmfc262PLd/p3fMRY5l48rNy2yVmNGDXx5G2c6e7FC1MOkJq
PNgVkyHRvZIgCAwQVCZ6RoeX6RvZPIXyu+FnMzxB5s/ry1ej7xVHETi1Eo0/ys+s
CyoGvuMYCqjlJO7qf7jBSsJt/997kGSRZesFq2TcIxkI7/Oq1TWfyTQdB3Hs+x5H
NQW6/J+d6aQ3OVOQh+Ki3ToWiiGE6LaeleRushLApY4Gr9KcuiJhPkNyIciB+u/s
LoryZlQpQtKnycUeUkjBE39pnZL2R4AKLS/lEe50hVUSiFoxJf57Hncw7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnBrxaVjfFO48nLZjPUH29+2Bn2MB8GA1UdIwQY
MBaAFIzMgqW+46k2MwPDPNzdNu/Gj4tEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQt
YmViZGExNjA4ZDA5LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9lYjVmZDItYjk3NC00N2M5LWI5MjQtYmViZGExNjA4ZDA5
LzEvak15Q3BiN2pxVFl6QThNODNOMDI3OGFQaTBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAML7s+Bq
TWInDvfaxMAjyA63jIWRKDUozyDz0mDtCpphy534G+RkQzROztDoM/UGpZNMlc4F
mM+Q6dMaiP9iQJVA3B+FjdaZFgmrX/X8IyRffw4Y8fKeanbZ8dyBjGPkresfNVuQ
QPvz/ZCSjbx7RtvXySMawZ8AVpN6sFYvbL/5k28f5kA21k8/bJ+/az6R77BoEUWz
ASHxhcClCyiG4MNBCX7x129Ps34Af646+zpbG01C/Q6QEKavZgQ5B16r7+LK9WjS
2LZO1Nh1r10TAAdhgjXjCc1UKrckn1ukg5ndlQWzOYA5JsrcCHTRCu734hruf9bm
AMv+CQ9rtqa/RA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:52 2026 by rpki-client