Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File:                     B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier:          jILw7md3/nVneJ1DymubJUrmsKmZEwl+Xa7xjfdZD7Q=
Subject key identifier:   6E:A9:6D:13:8B:01:FB:EE:FF:7D:9E:81:F7:B6:1C:03:86:A3:B2:88
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer:       /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial:       019FA97545671BAE799EB8753A6378292796
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number:          1543
Signing time:             Tue 28 Jul 2026 16:01:02 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:02 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:02 +0000
Files and hashes:         1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: IJuixpOgVvmmqN50T1FXv83ZkMFmC4h3YgP74XFvAlI=)
                          2: aj-7Q6-jz1X5ml3Zo_ezji9nyp0.roa (hash: ctiS31QHzRCLWu4eXUhOOHg5pxlmeJ2+c2/2FvVGuLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:45:67:1b:ae:79:9e:b8:75:3a:63:78:29:27:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
        Validity
            Not Before: Jul 28 16:01:02 2026 GMT
            Not After : Jul 29 16:01:02 2026 GMT
        Subject: CN=6ea96d138b01fbeeff7d9e81f7b61c0386a3b288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5f:cc:ce:5d:e8:20:d0:b6:96:95:1c:d3:51:
                    12:d5:3d:99:ce:4b:ef:78:9c:03:7c:de:7f:f7:8c:
                    06:a6:f1:95:7a:9a:6f:0d:ab:94:7e:60:42:02:d5:
                    e2:9c:8c:98:6c:fd:94:a3:bc:21:eb:db:2b:4c:3f:
                    6b:54:ca:64:1a:cd:97:cc:be:3b:46:e6:e7:dc:00:
                    0e:23:90:11:d4:b9:61:ef:1a:a1:32:ce:e5:0a:ae:
                    a0:68:07:1b:19:a7:83:72:5c:1c:e7:03:df:9b:a0:
                    41:96:16:da:04:43:36:4d:38:4e:44:1c:23:68:4e:
                    a5:fd:b1:ad:30:b9:dc:fe:d9:03:29:26:db:72:62:
                    8a:a9:d3:a8:61:d2:84:be:72:5c:5e:24:2f:7e:d1:
                    fa:6d:35:c8:a4:0f:46:79:25:b8:44:08:5e:74:4d:
                    05:f4:a2:74:74:84:c8:08:46:d7:7e:a7:fd:a1:f2:
                    5d:f6:16:c8:9a:c7:18:b0:53:b0:fd:f0:3b:8e:03:
                    6c:06:7a:29:8c:7b:15:9b:52:75:04:b9:75:93:c1:
                    35:57:0f:c2:45:66:e5:05:58:fa:44:76:19:9e:30:
                    aa:85:a1:98:dd:69:39:3f:12:27:2d:fd:62:0f:c8:
                    88:ec:58:82:85:f4:72:e7:70:d8:78:7a:6c:f7:cc:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A9:6D:13:8B:01:FB:EE:FF:7D:9E:81:F7:B6:1C:03:86:A3:B2:88
            X509v3 Authority Key Identifier:
                keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:87:8e:07:2f:90:f6:4c:3e:1c:25:9c:43:a5:01:ea:48:b0:
         b8:2b:2f:0c:6b:e2:38:bb:09:4d:a2:a8:f4:05:7a:db:db:15:
         bf:cf:d9:32:f5:83:6d:51:71:ba:33:16:43:8a:b2:0e:49:03:
         e9:8c:b4:c7:68:2a:1a:29:b8:be:ca:fa:82:ea:30:d9:30:97:
         be:a2:38:35:35:08:49:6c:06:37:98:0f:77:c3:a7:7f:b2:7c:
         c3:a4:d1:70:0b:83:89:63:d6:0b:99:4c:50:36:1e:25:0b:3e:
         4d:ea:77:9b:83:38:71:ef:e9:55:dd:d2:f4:cb:86:48:a6:a1:
         db:82:24:43:ee:1e:cb:9d:55:1d:fd:1e:5f:94:09:92:04:87:
         3b:8d:1e:ac:d8:ef:08:e2:7c:1b:25:9c:da:c0:b5:a9:8d:dc:
         28:4a:5d:d4:2c:73:cd:98:54:10:19:c5:fa:73:0f:4c:d8:c5:
         7f:57:41:dd:5c:21:ad:79:38:52:8d:c9:9f:23:76:9b:20:a7:
         ee:03:d4:6b:c9:16:89:4c:71:a1:77:58:a6:6f:80:d7:e0:09:
         a9:f3:ab:de:47:eb:fc:12:2a:d3:7f:44:a8:aa:32:50:0d:5a:
         59:dc:d1:bf:01:19:45:6d:c5:ea:0b:c2:5f:1e:50:4d:ee:fa:
         6a:ca:52:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdUVnG655nrh1OmN4KSeWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3OGVkMWEwMTUzNzYyYTkyMmU1NWUwZjk0OGNkMWE1NDEx
YzdhODkwHhcNMjYwNzI4MTYwMTAyWhcNMjYwNzI5MTYwMTAyWjAzMTEwLwYDVQQD
Eyg2ZWE5NmQxMzhiMDFmYmVlZmY3ZDllODFmN2I2MWMwMzg2YTNiMjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsV/Mzl3oINC2lpUc01ES1T2Zzkvv
eJwDfN5/94wGpvGVeppvDauUfmBCAtXinIyYbP2Uo7wh69srTD9rVMpkGs2XzL47
Rubn3AAOI5AR1Llh7xqhMs7lCq6gaAcbGaeDclwc5wPfm6BBlhbaBEM2TThORBwj
aE6l/bGtMLnc/tkDKSbbcmKKqdOoYdKEvnJcXiQvftH6bTXIpA9GeSW4RAhedE0F
9KJ0dITICEbXfqf9ofJd9hbImscYsFOw/fA7jgNsBnopjHsVm1J1BLl1k8E1Vw/C
RWblBVj6RHYZnjCqhaGY3Wk5PxInLf1iD8iI7FiChfRy53DYeHps98zQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6pbROLAfvu/32egfe2HAOGo7KIMB8GA1UdIwQY
MBaAFAeO0aAVN2KpIuVeD5SM0aVBHHqJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2Mjgt
YjYyZGI3NzJiYmZhLzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy85MmQzM2MtOGE2OS00ZGIzLWI2MjgtYjYyZGI3NzJiYmZh
LzEvQjQ3Um9CVTNZcWtpNVY0UGxJelJwVUVjZW9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4eOBy+Q
9kw+HCWcQ6UB6kiwuCsvDGviOLsJTaKo9AV629sVv8/ZMvWDbVFxujMWQ4qyDkkD
6Yy0x2gqGim4vsr6guow2TCXvqI4NTUISWwGN5gPd8Onf7J8w6TRcAuDiWPWC5lM
UDYeJQs+Tep3m4M4ce/pVd3S9MuGSKah24IkQ+4ey51VHf0eX5QJkgSHO40erNjv
COJ8GyWc2sC1qY3cKEpd1CxzzZhUEBnF+nMPTNjFf1dB3VwhrXk4Uo3JnyN2myCn
7gPUa8kWiUxxoXdYpm+A1+AJqfOr3kfr/BIq039EqKoyUA1aWdzRvwEZRW3F6gvC
Xx5QTe76aspSzw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:25:35 2026 by rpki-client