Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
File:                     biCb10rb00nQEq8KpjDR_oZpxy8.mft (raw, json)
Hash identifier:          zWSEh4m4i2ALFdXo9uZHSb9tpo3zQS6mWmhnDFLmlQs=
Subject key identifier:   04:DA:1A:1C:11:12:D2:52:9B:13:50:66:12:39:46:DD:64:B7:7A:AD
Authority key identifier: 6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F
Certificate issuer:       /CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
Certificate serial:       019FAB99F3AAAAC73803B76EB5B4E18988CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
Manifest number:          26
Signing time:             Wed 29 Jul 2026 02:00:21 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:21 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:21 +0000
Files and hashes:         1: biCb10rb00nQEq8KpjDR_oZpxy8.crl (hash: kdItaO9mhO3CbRya4065hX9FSEFp0yDSg9XdpeGRvN0=)
                          2: gVsDXRrQxcRN9YXzPmKoZtqqxtg.roa (hash: NCJiLrBZtffVOZc4ol0jkKNp/1gSMV3KomI3oO87hZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:99:f3:aa:aa:c7:38:03:b7:6e:b5:b4:e1:89:88:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e209bd74adbd349d012af0aa630d1fe8669c72f
        Validity
            Not Before: Jul 29 02:00:21 2026 GMT
            Not After : Jul 30 02:00:21 2026 GMT
        Subject: CN=04da1a1c1112d2529b135066123946dd64b77aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:2f:40:7d:2f:d2:7f:8e:14:95:b4:48:89:
                    54:79:18:23:9d:bd:71:e8:5f:dc:e2:ff:c1:e2:0e:
                    cb:d5:09:4f:ff:b7:ea:da:6c:f7:d2:22:55:73:c7:
                    86:52:29:f8:72:f7:c1:31:b5:8e:97:b6:6f:cb:59:
                    b5:96:b0:e5:b2:5f:9a:d8:81:60:88:58:29:21:e9:
                    17:94:65:62:28:1b:c6:7e:a7:16:43:b7:fa:0d:a4:
                    fa:9b:23:29:a5:1c:b2:a7:08:82:cf:02:60:cd:69:
                    14:1e:da:00:75:fc:fc:30:eb:73:ca:04:39:58:e3:
                    1e:b5:f3:dc:cb:a5:1b:d0:f2:cb:a2:5c:16:96:3f:
                    eb:d1:95:35:a7:fb:4c:01:df:29:e5:8d:25:d0:e2:
                    4f:71:d1:32:6e:44:36:6e:31:ba:20:c8:98:93:b6:
                    a6:7d:3c:b9:14:3c:de:fb:d9:5b:8b:a2:22:83:ce:
                    c7:63:22:2b:d4:c8:2e:af:b5:a5:3b:87:1b:1b:5a:
                    1b:1a:3c:6f:f5:08:81:41:30:7f:fe:84:0a:65:65:
                    44:8b:65:17:e0:8f:dc:16:17:8e:63:72:78:87:06:
                    62:9a:0b:23:29:d8:c5:c9:66:be:b0:2f:8c:be:1a:
                    1d:3b:85:c7:78:81:fc:72:dc:32:18:93:3a:cc:cf:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DA:1A:1C:11:12:D2:52:9B:13:50:66:12:39:46:DD:64:B7:7A:AD
            X509v3 Authority Key Identifier:
                keyid:6E:20:9B:D7:4A:DB:D3:49:D0:12:AF:0A:A6:30:D1:FE:86:69:C7:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/biCb10rb00nQEq8KpjDR_oZpxy8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/728797-df99-49be-b6f6-19a42b895183/1/biCb10rb00nQEq8KpjDR_oZpxy8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:86:de:46:66:20:e4:2a:46:6d:bd:31:e6:45:a2:4c:86:3d:
         01:09:f3:42:9c:b2:58:82:71:d0:36:03:a8:f2:84:a4:c1:dd:
         d6:00:64:da:9c:bc:2f:fc:bd:02:47:19:8a:c5:d1:c2:88:6e:
         77:7c:6e:6f:e5:3a:5a:0f:8d:7d:9a:36:71:84:08:10:f3:53:
         de:10:9b:20:6d:fb:6b:35:86:0e:84:be:b9:90:4b:b0:62:90:
         f3:fa:fc:de:07:dc:94:ad:91:41:4e:0b:7f:32:ea:3e:d9:9d:
         3e:0a:c6:08:1e:20:2a:47:28:c4:19:b3:ae:12:92:b6:81:7d:
         32:50:6d:70:6a:80:bb:b2:d7:b1:95:62:12:4b:c2:b1:81:a3:
         5f:52:16:a1:7f:d1:5d:ee:6a:05:d4:fc:ff:e1:a5:f6:ae:ae:
         cb:50:fe:0f:74:aa:53:c5:47:ab:76:2a:2e:70:39:63:0e:6d:
         b2:44:3a:7f:d0:f9:fa:b8:59:1d:39:53:85:5d:62:92:df:07:
         35:82:5c:bf:4a:dc:f0:68:19:fc:e7:8c:91:99:69:b9:d7:bf:
         ff:8e:10:b2:7f:d3:12:0d:b5:51:14:ed:f9:f5:91:e4:3b:b2:
         1a:d7:84:57:17:24:16:f4:26:f4:4d:0d:e5:fb:fb:30:eb:ee:
         04:2e:c1:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rmfOqqsc4A7dutbThiYjNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlMjA5YmQ3NGFkYmQzNDlkMDEyYWYwYWE2MzBkMWZlODY2
OWM3MmYwHhcNMjYwNzI5MDIwMDIxWhcNMjYwNzMwMDIwMDIxWjAzMTEwLwYDVQQD
EygwNGRhMWExYzExMTJkMjUyOWIxMzUwNjYxMjM5NDZkZDY0Yjc3YWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxPgvQH0v0n+OFJW0SIlUeRgjnb1x
6F/c4v/B4g7L1QlP/7fq2mz30iJVc8eGUin4cvfBMbWOl7Zvy1m1lrDlsl+a2IFg
iFgpIekXlGViKBvGfqcWQ7f6DaT6myMppRyypwiCzwJgzWkUHtoAdfz8MOtzygQ5
WOMetfPcy6Ub0PLLolwWlj/r0ZU1p/tMAd8p5Y0l0OJPcdEybkQ2bjG6IMiYk7am
fTy5FDze+9lbi6Iig87HYyIr1Mgur7WlO4cbG1obGjxv9QiBQTB//oQKZWVEi2UX
4I/cFheOY3J4hwZimgsjKdjFyWa+sC+MvhodO4XHeIH8ctwyGJM6zM8mqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATaGhwREtJSmxNQZhI5Rt1kt3qtMB8GA1UdIwQY
MBaAFG4gm9dK29NJ0BKvCqYw0f6GaccvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83Mjg3OTctZGY5OS00OWJlLWI2ZjYt
MTlhNDJiODk1MTgzLzEvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83Mjg3OTctZGY5OS00OWJlLWI2ZjYtMTlhNDJiODk1MTgz
LzEvYmlDYjEwcmIwMG5RRXE4S3BqRFJfb1pweHk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoYbeRmYg
5CpGbb0x5kWiTIY9AQnzQpyyWIJx0DYDqPKEpMHd1gBk2py8L/y9AkcZisXRwohu
d3xub+U6Wg+NfZo2cYQIEPNT3hCbIG37azWGDoS+uZBLsGKQ8/r83gfclK2RQU4L
fzLqPtmdPgrGCB4gKkcoxBmzrhKStoF9MlBtcGqAu7LXsZViEkvCsYGjX1IWoX/R
Xe5qBdT8/+Gl9q6uy1D+D3SqU8VHq3YqLnA5Yw5tskQ6f9D5+rhZHTlThV1ikt8H
NYJcv0rc8GgZ/OeMkZlpude//44Qsn/TEg21URTt+fWR5DuyGteEVxckFvQm9E0N
5fv7MOvuBC7B7g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 05:20:55 2026 by rpki-client