Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
File:                     dThqb64eVfV2pAW9dLfwjnpsRlM.mft (raw, json)
Hash identifier:          5w24t6hDqfXHF4wTayg9IURNcEyMlAeTVxvO2tmXRl8=
Subject key identifier:   DA:BC:15:83:16:67:BA:24:D8:7A:9B:47:82:AC:8C:7A:A5:DB:3C:37
Authority key identifier: 75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53
Certificate issuer:       /CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
Certificate serial:       019FAA510A692D4F68FB533A9772BDDE3BFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
Manifest number:          0C80
Signing time:             Tue 28 Jul 2026 20:01:05 +0000
Manifest this update:     Tue 28 Jul 2026 20:01:05 +0000
Manifest next update:     Wed 29 Jul 2026 20:01:05 +0000
Files and hashes:         1: EySyBrJAYfrjCqEYxsmXvPf3H5s.roa (hash: nhjndHhWgofWmTA2EVlrwEYSs042l2huk+iYyhoh+2o=)
                          2: YjThpUKY8dmKpHgsGQ94ajjW1mw.roa (hash: mU028HajfQlA+sa9l/YSlDKUMFBYx7IaDAclqqbnoIg=)
                          3: dThqb64eVfV2pAW9dLfwjnpsRlM.crl (hash: fhrPp7VqL55H13O7aO74z3HgG2P9tjCwJxT3YNWb5Ic=)
                          4: iC9fUn104zY4OEHwbqWBMRhqfeY.roa (hash: G+diZWtaeUYf2mFGQ7Kk9MtmoUpwbZKTbE2sRgcMjNs=)
                          5: zyy7DFvxeNDAh4pOqGvmANgdfpY.roa (hash: hmel/U2e/Q6evOOJkJluvCudwlyZpvn4SGB/ShoJCY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:51:0a:69:2d:4f:68:fb:53:3a:97:72:bd:de:3b:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75386a6fae1e55f576a405bd74b7f08e7a6c4653
        Validity
            Not Before: Jul 28 20:01:05 2026 GMT
            Not After : Jul 29 20:01:05 2026 GMT
        Subject: CN=dabc15831667ba24d87a9b4782ac8c7aa5db3c37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:87:86:36:20:0e:84:68:41:fb:5f:44:7d:ad:
                    ba:a8:1d:ad:9f:a6:46:da:16:8a:82:d2:30:da:69:
                    20:30:58:2f:f4:a2:e0:38:1e:36:7e:c5:ba:3c:0c:
                    3a:55:c4:43:ea:0d:85:12:80:b1:72:36:de:02:12:
                    b9:2b:9f:1c:b7:32:93:93:87:f9:9f:c9:52:51:50:
                    d7:c9:66:d1:0b:d3:10:4f:90:11:8f:89:ca:48:65:
                    53:68:02:b0:0e:d0:cb:33:e1:83:10:4a:2a:66:5b:
                    fa:33:06:ad:28:9a:df:9f:93:23:c2:02:6a:7a:df:
                    df:c9:7a:83:b0:75:f0:64:01:99:f0:0e:30:3b:47:
                    29:da:9e:dc:a0:e7:e2:18:3e:37:aa:4f:64:c1:45:
                    37:f0:2d:f1:a2:7f:6a:58:ef:01:d8:a8:9c:73:d5:
                    bf:23:cb:c4:59:69:26:52:55:25:be:09:43:ad:28:
                    7f:43:7f:b9:f3:1d:ff:df:9d:ed:1d:8c:59:f6:35:
                    b7:4d:c4:3b:7b:34:6e:79:ad:85:0e:18:6d:51:ef:
                    2e:21:12:3f:d1:3f:b0:f0:94:4e:ca:a3:c0:fd:1b:
                    dd:49:b1:23:e7:0b:32:77:3b:5d:65:8a:61:73:e6:
                    22:6d:2a:2e:d6:77:4f:e7:01:ec:41:6d:35:f2:35:
                    1a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BC:15:83:16:67:BA:24:D8:7A:9B:47:82:AC:8C:7A:A5:DB:3C:37
            X509v3 Authority Key Identifier:
                keyid:75:38:6A:6F:AE:1E:55:F5:76:A4:05:BD:74:B7:F0:8E:7A:6C:46:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dThqb64eVfV2pAW9dLfwjnpsRlM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/d9a01c-5c91-4d00-a09a-f8792f577b9a/1/dThqb64eVfV2pAW9dLfwjnpsRlM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:70:c8:e7:36:a3:34:76:50:4b:3d:06:cd:85:4a:3b:a9:35:
         0f:e4:08:ad:ae:d3:8a:ed:6e:21:ee:ae:c9:8e:34:8f:45:1a:
         09:be:5a:16:d6:22:37:fd:75:4d:68:c3:b7:2d:58:e3:3e:b1:
         ee:e8:51:04:05:d7:3f:3a:d2:a7:85:48:e1:a2:93:11:06:6e:
         ca:4f:a7:a4:18:cd:c8:11:42:af:5c:69:14:9a:bc:77:c0:29:
         ca:35:50:f2:17:48:65:40:00:c8:05:d1:1d:f3:54:09:88:55:
         25:08:12:61:40:49:3b:81:07:e2:28:fd:ce:34:4a:35:b4:fa:
         ee:ea:3f:22:6f:59:d1:80:0a:3d:e8:b1:2e:9d:a7:b6:a8:06:
         ea:0f:14:97:96:70:55:e9:60:62:69:65:64:53:30:0f:54:f0:
         f1:35:9f:1e:85:02:35:f3:f0:e2:0f:d8:83:da:73:55:38:92:
         ac:6f:f6:a2:7b:13:2e:39:e1:83:ad:34:c6:84:a3:ed:70:fa:
         eb:99:7d:32:3d:59:5a:cc:3f:54:83:e3:b4:0c:2f:f5:2b:81:
         3b:48:c4:70:3b:cd:eb:82:fc:76:ad:20:5e:80:04:b5:4a:17:
         43:e6:bc:9b:2e:80:61:66:15:13:b2:82:4b:43:35:fe:3b:d5:
         a1:ee:ee:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUQppLU9o+1M6l3K93jv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1Mzg2YTZmYWUxZTU1ZjU3NmE0MDViZDc0YjdmMDhlN2E2
YzQ2NTMwHhcNMjYwNzI4MjAwMTA1WhcNMjYwNzI5MjAwMTA1WjAzMTEwLwYDVQQD
EyhkYWJjMTU4MzE2NjdiYTI0ZDg3YTliNDc4MmFjOGM3YWE1ZGIzYzM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIeGNiAOhGhB+19Efa26qB2tn6ZG
2haKgtIw2mkgMFgv9KLgOB42fsW6PAw6VcRD6g2FEoCxcjbeAhK5K58ctzKTk4f5
n8lSUVDXyWbRC9MQT5ARj4nKSGVTaAKwDtDLM+GDEEoqZlv6MwatKJrfn5MjwgJq
et/fyXqDsHXwZAGZ8A4wO0cp2p7coOfiGD43qk9kwUU38C3xon9qWO8B2Kicc9W/
I8vEWWkmUlUlvglDrSh/Q3+58x3/353tHYxZ9jW3TcQ7ezRuea2FDhhtUe8uIRI/
0T+w8JROyqPA/RvdSbEj5wsydztdZYphc+YibSou1ndP5wHsQW018jUaYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNq8FYMWZ7ok2HqbR4KsjHql2zw3MB8GA1UdIwQY
MBaAFHU4am+uHlX1dqQFvXS38I56bEZTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEt
Zjg3OTJmNTc3YjlhLzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9kOWEwMWMtNWM5MS00ZDAwLWEwOWEtZjg3OTJmNTc3Yjlh
LzEvZFRocWI2NGVWZlYycEFXOWRMZndqbnBzUmxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkHDI5zaj
NHZQSz0GzYVKO6k1D+QIra7Tiu1uIe6uyY40j0UaCb5aFtYiN/11TWjDty1Y4z6x
7uhRBAXXPzrSp4VI4aKTEQZuyk+npBjNyBFCr1xpFJq8d8ApyjVQ8hdIZUAAyAXR
HfNUCYhVJQgSYUBJO4EH4ij9zjRKNbT67uo/Im9Z0YAKPeixLp2ntqgG6g8Ul5Zw
VelgYmllZFMwD1Tw8TWfHoUCNfPw4g/Yg9pzVTiSrG/2onsTLjnhg600xoSj7XD6
65l9Mj1ZWsw/VIPjtAwv9SuBO0jEcDvN64L8dq0gXoAEtUoXQ+a8my6AYWYVE7KC
S0M1/jvVoe7unA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:36:15 2026 by rpki-client