Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
File:                     hEWCynBHF-sMlL5NiUE_S8LYuOU.mft (raw, json)
Hash identifier:          wio9x8YIbUP17abv4kMsF1uSxOXxefF+LQPQQvS+nFk=
Subject key identifier:   8C:74:8F:01:80:2A:40:A3:D8:8E:42:3B:FE:40:5C:1F:96:1C:B0:2E
Authority key identifier: 84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5
Certificate issuer:       /CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
Certificate serial:       019FAC08414162DB23FA059C262389BA588A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
Manifest number:          0D18
Signing time:             Wed 29 Jul 2026 04:00:49 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:49 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:49 +0000
Files and hashes:         1: 0Lowu7hxVeuqlAiVWg9uh-_oyWw.roa (hash: 83FXzGC9XwUj1X8htPlTdsZg8/wSnvklV0n8qfw7AtY=)
                          2: Y8T6MQ3N6EL6A9u7REeJi88lYjc.roa (hash: yyEUvZCmaFWTlHBddTvd35XB4O+cqU+todAuZd+/9Mk=)
                          3: hEWCynBHF-sMlL5NiUE_S8LYuOU.crl (hash: DssQjEPH4WYK7FhKj3Au+MTh6YmuZbFXWPFy+KB+4h4=)
                          4: nv7YrBBjEqeVW-pRBpmKMzYYjNU.roa (hash: kYPGaco3pxLDHifaSJV9n0xVBsh+iPQ3pvB3Ce36XNM=)
                          5: owHwLyctP8Oxzql0_PgsjnKWR1Q.roa (hash: okd6ixQMASQtM3vodku2s12MniqN1mXlVsNaWbdKM5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:41:41:62:db:23:fa:05:9c:26:23:89:ba:58:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=844582ca704717eb0c94be4d89413f4bc2d8b8e5
        Validity
            Not Before: Jul 29 04:00:49 2026 GMT
            Not After : Jul 30 04:00:49 2026 GMT
        Subject: CN=8c748f01802a40a3d88e423bfe405c1f961cb02e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:4b:ae:50:23:fc:9e:bb:c5:5a:a2:6a:7b:
                    14:c9:da:b0:5e:d3:48:02:cf:57:ff:e8:e8:9c:50:
                    78:4e:10:ff:a6:4e:d6:80:0a:67:26:06:d5:13:26:
                    f0:d7:4f:ec:40:c5:fa:d2:db:58:4e:51:7f:a6:62:
                    e2:e7:20:bc:bd:be:29:23:10:44:56:05:77:15:5a:
                    73:e7:36:b0:3f:1d:1b:b6:ff:96:7d:92:e8:42:79:
                    03:d0:fc:b3:25:0b:09:a3:a3:8b:0e:0f:9c:72:29:
                    29:d8:73:6d:6e:f4:78:04:f9:1e:cf:8e:e0:12:60:
                    3e:12:52:9e:60:0d:55:ff:00:73:b8:7c:8c:ce:75:
                    cf:8d:48:9a:b7:70:2a:19:89:a7:8f:57:1b:6b:eb:
                    50:3c:34:e2:81:87:34:a0:31:6b:0e:01:aa:80:40:
                    0a:3d:39:a7:66:90:4b:45:93:aa:0a:21:be:7d:3a:
                    15:0d:d6:01:f1:69:23:1b:89:ae:a0:ef:c4:de:5a:
                    cc:a3:11:3c:62:d4:ac:3c:b1:65:9c:11:e7:9b:96:
                    69:8d:78:d0:cf:86:86:16:e3:d7:73:e9:ce:6e:a0:
                    86:b1:16:28:6c:a6:8e:42:ec:c2:fe:25:fe:f7:9b:
                    c6:7e:ca:31:f9:a6:d8:7f:ac:c2:05:81:b2:07:5f:
                    78:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:74:8F:01:80:2A:40:A3:D8:8E:42:3B:FE:40:5C:1F:96:1C:B0:2E
            X509v3 Authority Key Identifier:
                keyid:84:45:82:CA:70:47:17:EB:0C:94:BE:4D:89:41:3F:4B:C2:D8:B8:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEWCynBHF-sMlL5NiUE_S8LYuOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/735e42-c608-46b6-8f70-f23f66f8d242/1/hEWCynBHF-sMlL5NiUE_S8LYuOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:24:3b:92:63:5c:c2:ce:d5:27:ee:07:ec:40:9f:d0:af:e6:
         b4:b9:3f:3d:bd:fd:ad:ac:bc:07:fe:64:71:3f:49:6e:56:0d:
         7a:6e:d7:f8:1d:22:9d:e9:e0:87:3e:0a:89:26:f3:10:c4:77:
         d2:86:f2:73:7a:11:31:ac:05:52:16:0f:34:3e:87:c3:f1:31:
         8d:2e:86:c4:94:1f:22:52:6e:3c:95:11:83:68:9e:84:eb:39:
         c0:d5:cb:6f:af:9c:67:10:3b:58:12:23:37:22:00:fc:8b:45:
         b9:cb:b2:e0:6d:e2:54:8b:3b:68:d1:26:10:47:ec:61:cb:2f:
         ea:ea:31:36:35:1b:c5:ba:24:4a:a7:98:d1:c8:0c:53:d7:94:
         60:6d:cf:d9:9b:a3:6d:dc:16:94:f7:06:a5:51:a6:6d:ad:56:
         6b:d8:e9:8a:d0:52:8a:49:ee:46:6e:1f:dd:50:9f:d3:fa:e2:
         61:d4:47:15:c7:fd:30:49:95:e8:2e:79:8a:2f:e0:bb:d1:3a:
         22:49:cd:93:64:7a:ad:07:21:aa:a8:35:c9:cb:39:9f:2b:0b:
         e5:65:14:da:fc:56:59:ab:39:99:38:5d:41:41:7f:a3:e3:1b:
         c5:e6:32:93:40:44:39:ce:40:bd:10:4b:13:76:49:70:61:dd:
         11:45:44:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCEFBYtsj+gWcJiOJuliKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NDU4MmNhNzA0NzE3ZWIwYzk0YmU0ZDg5NDEzZjRiYzJk
OGI4ZTUwHhcNMjYwNzI5MDQwMDQ5WhcNMjYwNzMwMDQwMDQ5WjAzMTEwLwYDVQQD
Eyg4Yzc0OGYwMTgwMmE0MGEzZDg4ZTQyM2JmZTQwNWMxZjk2MWNiMDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdJLrlAj/J67xVqiansUydqwXtNI
As9X/+jonFB4ThD/pk7WgApnJgbVEybw10/sQMX60ttYTlF/pmLi5yC8vb4pIxBE
VgV3FVpz5zawPx0btv+WfZLoQnkD0PyzJQsJo6OLDg+ccikp2HNtbvR4BPkez47g
EmA+ElKeYA1V/wBzuHyMznXPjUiat3AqGYmnj1cba+tQPDTigYc0oDFrDgGqgEAK
PTmnZpBLRZOqCiG+fToVDdYB8WkjG4muoO/E3lrMoxE8YtSsPLFlnBHnm5ZpjXjQ
z4aGFuPXc+nObqCGsRYobKaOQuzC/iX+95vGfsox+abYf6zCBYGyB194QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIx0jwGAKkCj2I5CO/5AXB+WHLAuMB8GA1UdIwQY
MBaAFIRFgspwRxfrDJS+TYlBP0vC2LjlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAt
ZjIzZjY2ZjhkMjQyLzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC83MzVlNDItYzYwOC00NmI2LThmNzAtZjIzZjY2ZjhkMjQy
LzEvaEVXQ3luQkhGLXNNbEw1TmlVRV9TOExZdU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCQ7kmNc
ws7VJ+4H7ECf0K/mtLk/Pb39ray8B/5kcT9JblYNem7X+B0inenghz4KiSbzEMR3
0obyc3oRMawFUhYPND6Hw/ExjS6GxJQfIlJuPJURg2iehOs5wNXLb6+cZxA7WBIj
NyIA/ItFucuy4G3iVIs7aNEmEEfsYcsv6uoxNjUbxbokSqeY0cgMU9eUYG3P2Zuj
bdwWlPcGpVGmba1Wa9jpitBSiknuRm4f3VCf0/riYdRHFcf9MEmV6C55ii/gu9E6
IknNk2R6rQchqqg1ycs5nysL5WUU2vxWWas5mThdQUF/o+MbxeYyk0BEOc5AvRBL
E3ZJcGHdEUVEXQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:29:47 2026 by rpki-client