Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
File:                     f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft (raw, json)
Hash identifier:          mTkNVuLx22L29UEgDeIE2t+J8ZsryTmfk3gR3xD34Zw=
Subject key identifier:   03:38:5D:70:42:23:42:E3:CE:9A:DC:5F:80:EA:49:51:BD:2D:F0:8C
Authority key identifier: 7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF
Certificate issuer:       /CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
Certificate serial:       019FAC769880A94763C42203ABA3B27526A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
Manifest number:          0174
Signing time:             Wed 29 Jul 2026 06:01:21 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:21 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:21 +0000
Files and hashes:         1: NwGyrarXznEP79mpSfk4-aoAcss.roa (hash: kWL+oTlCQ4M6RuD7dSjXf+gw9XkHswGxJGJoJ/U5AMw=)
                          2: f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl (hash: 7NpBHbKsruGhi9UGgk317KXMcYRBxb5UN/1dN+vlgms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:98:80:a9:47:63:c4:22:03:ab:a3:b2:75:26:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ffb1c819f5c6eb739d694559b331e6f4b3f2acf
        Validity
            Not Before: Jul 29 06:01:21 2026 GMT
            Not After : Jul 30 06:01:21 2026 GMT
        Subject: CN=03385d70422342e3ce9adc5f80ea4951bd2df08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ab:db:67:5a:8c:95:ce:ad:2d:29:25:a2:52:
                    93:c6:aa:37:bb:ad:9b:e6:fc:7d:c4:a9:4e:04:d1:
                    c3:07:8e:9a:a9:3f:18:43:6d:ac:d3:01:f5:df:2b:
                    bd:8b:f1:0d:52:de:69:7e:3a:dd:45:56:73:9a:71:
                    ae:cd:31:33:e3:b1:37:df:04:c3:e9:89:40:14:39:
                    49:c5:1c:66:85:48:91:bf:51:66:5c:c2:d5:d8:32:
                    d5:9c:40:d6:82:8f:d2:60:f9:59:1b:ce:64:4b:ca:
                    1a:6a:27:20:70:37:c9:cb:c9:3a:bd:3e:7f:5a:1e:
                    64:e6:4b:1d:d9:04:8c:0a:22:7e:ed:5d:21:7f:0d:
                    2b:4d:1c:4e:09:da:04:e1:87:32:72:31:a7:46:8c:
                    62:57:45:1e:4b:6b:73:e7:c7:95:f2:58:ee:c6:1f:
                    35:c9:cf:06:34:76:a6:74:57:d0:71:66:5e:82:fe:
                    ac:ee:19:7d:92:d9:e9:2b:cb:01:bd:76:8a:6b:f6:
                    30:12:58:bb:92:01:91:14:1f:88:34:2b:e1:ed:e8:
                    05:1d:b2:ec:e7:98:e1:39:24:8a:69:d2:c4:0c:38:
                    19:d0:e9:54:d6:0b:30:c3:38:73:11:ef:70:e8:a2:
                    f4:53:4d:3f:54:23:4f:c2:f4:e4:77:f5:bb:aa:1e:
                    8b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:38:5D:70:42:23:42:E3:CE:9A:DC:5F:80:EA:49:51:BD:2D:F0:8C
            X509v3 Authority Key Identifier:
                keyid:7F:FB:1C:81:9F:5C:6E:B7:39:D6:94:55:9B:33:1E:6F:4B:3F:2A:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_scgZ9cbrc51pRVmzMeb0s_Ks8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/2cb840-e50d-4aaf-87d5-f8257d673f97/1/f_scgZ9cbrc51pRVmzMeb0s_Ks8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:97:3c:07:d2:1d:22:26:d1:5a:24:c9:4f:92:3c:22:75:8a:
         f3:1f:c0:aa:5a:13:19:06:4b:80:9c:5b:8b:77:13:36:31:10:
         7e:93:6f:85:14:9d:88:4b:b3:37:af:56:16:a5:37:20:e8:74:
         5c:eb:ca:a6:1c:06:ea:ea:6b:65:51:2f:46:4d:6c:15:83:10:
         e3:b6:e3:6f:12:5f:1c:d2:10:4e:20:03:31:9b:b3:37:a2:12:
         43:bb:f8:e0:ee:7c:0d:6a:6d:a3:39:b4:cf:12:b3:17:f6:2b:
         ec:76:28:8d:ff:15:67:82:6e:0f:9b:92:77:ec:cd:47:47:d5:
         8e:cb:3b:0a:6b:58:be:47:a3:bf:ed:14:64:ca:5c:a8:10:00:
         d4:37:0f:ed:6c:d1:ff:67:f9:b3:9f:31:c2:d4:74:83:94:93:
         ef:a8:0f:73:fb:30:57:1f:00:cf:96:1b:d8:30:74:c4:bd:04:
         49:de:92:1d:c7:d0:26:bf:25:84:7d:d2:42:0a:70:16:b1:0a:
         b7:54:d6:8d:bc:cb:2e:fb:07:ce:19:47:04:cd:2f:17:c1:de:
         23:c2:74:35:13:5b:83:34:e1:36:32:07:f5:f5:04:f4:0e:a7:
         a7:29:c4:c7:37:39:ec:be:70:87:5b:e2:08:8b:2f:d9:5a:9e:
         5a:cb:c5:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdpiAqUdjxCIDq6OydSakMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmZmIxYzgxOWY1YzZlYjczOWQ2OTQ1NTliMzMxZTZmNGIz
ZjJhY2YwHhcNMjYwNzI5MDYwMTIxWhcNMjYwNzMwMDYwMTIxWjAzMTEwLwYDVQQD
EygwMzM4NWQ3MDQyMjM0MmUzY2U5YWRjNWY4MGVhNDk1MWJkMmRmMDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtavbZ1qMlc6tLSklolKTxqo3u62b
5vx9xKlOBNHDB46aqT8YQ22s0wH13yu9i/ENUt5pfjrdRVZzmnGuzTEz47E33wTD
6YlAFDlJxRxmhUiRv1FmXMLV2DLVnEDWgo/SYPlZG85kS8oaaicgcDfJy8k6vT5/
Wh5k5ksd2QSMCiJ+7V0hfw0rTRxOCdoE4YcycjGnRoxiV0UeS2tz58eV8ljuxh81
yc8GNHamdFfQcWZegv6s7hl9ktnpK8sBvXaKa/YwEli7kgGRFB+INCvh7egFHbLs
55jhOSSKadLEDDgZ0OlU1gswwzhzEe9w6KL0U00/VCNPwvTkd/W7qh6L4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAM4XXBCI0LjzprcX4DqSVG9LfCMMB8GA1UdIwQY
MBaAFH/7HIGfXG63OdaUVZszHm9LPyrPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZl9zY2daOWNicmM1MXBSVm16TWViMHNfS3M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yY2I4NDAtZTUwZC00YWFmLTg3ZDUt
ZjgyNTdkNjczZjk3LzEvZl9zY2daOWNicmM1MXBSVm16TWViMHNfS3M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC8yY2I4NDAtZTUwZC00YWFmLTg3ZDUtZjgyNTdkNjczZjk3
LzEvZl9zY2daOWNicmM1MXBSVm16TWViMHNfS3M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnpc8B9Id
IibRWiTJT5I8InWK8x/AqloTGQZLgJxbi3cTNjEQfpNvhRSdiEuzN69WFqU3IOh0
XOvKphwG6uprZVEvRk1sFYMQ47bjbxJfHNIQTiADMZuzN6ISQ7v44O58DWptozm0
zxKzF/Yr7HYojf8VZ4JuD5uSd+zNR0fVjss7CmtYvkejv+0UZMpcqBAA1DcP7WzR
/2f5s58xwtR0g5ST76gPc/swVx8Az5Yb2DB0xL0ESd6SHcfQJr8lhH3SQgpwFrEK
t1TWjbzLLvsHzhlHBM0vF8HeI8J0NRNbgzThNjIH9fUE9A6npynExzc57L5wh1vi
CIsv2VqeWsvFjA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:38:51 2026 by rpki-client