Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
File:                     d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft (raw, json)
Hash identifier:          P8ViHw0HaPZ138uJWnlnKrtOylgL+db4olay7e1V1WY=
Subject key identifier:   EE:93:03:23:91:78:6E:7C:F7:D7:DE:D7:17:88:F7:79:8E:AC:FF:18
Authority key identifier: 77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B
Certificate issuer:       /CN=77eda8f726a69b504de994943b0a5f2308c2a96b
Certificate serial:       019FAA1A4B2938FD45FD40DB21CACA9DA4E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
Manifest number:          11B0
Signing time:             Tue 28 Jul 2026 19:01:17 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:17 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:17 +0000
Files and hashes:         1: 0gkjksOno670ocIFMbRjSDKIvKQ.roa (hash: 7fdQyOsucl3w/CcG9UB31TgK1ZGG4pW/88lMHFnh6NI=)
                          2: 91KPHlggwTaeQm7B9Z-AqzP9EBQ.roa (hash: IkXK2vJL4pQnTxIekZE8OSCq0z8UL2BTuoyyjhTkN4c=)
                          3: QcWwPEpe-P-scFp6iy4Zd8jPfjk.roa (hash: n7+TsjKCJzLkUr9shTyI7r/icRNSvOD74GCCpk5ZSUI=)
                          4: SOoKX4cNuYJIPao636suM6QbecU.roa (hash: AmP+tcOlMZhqBPlPO/PnVy1DrGZoadzcvOYUXfRfWD8=)
                          5: Tz7z7nnpOo-_7_49pU8TRQgx4D4.roa (hash: fX3u4dH9kXlBUEKXajJ7/RMZrYzYaBeRsNw5GTo8Vhs=)
                          6: d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl (hash: k2uoXmrfeGBJDkDfPF/jC1zRU/R+ScjtVQFfM3h1Fjw=)
                          7: qBcLlywaD6m7lZXiWermZkxeWVc.roa (hash: auQTPfDUcRzWJ8RTz3z6nOVCI/Q9IjlAOX2YpbeFNMA=)
                          8: ve-jf9EP-jZkCjaun2Gx06psfDo.roa (hash: 5muddW+OaJvatwuoYErV6aaVeMSYh2Ga8iL+J5a6G3k=)
                          9: xdAaexAUdUDttJM21F7tUlAz2vs.roa (hash: VedRkQ44jOEPcPIUd0dHiyi/hpTJ8KF1xUzmzLpT6Aw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:4b:29:38:fd:45:fd:40:db:21:ca:ca:9d:a4:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77eda8f726a69b504de994943b0a5f2308c2a96b
        Validity
            Not Before: Jul 28 19:01:17 2026 GMT
            Not After : Jul 29 19:01:17 2026 GMT
        Subject: CN=ee93032391786e7cf7d7ded71788f7798eacff18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a2:e0:be:99:ef:c1:18:be:b3:4f:e6:ff:7f:
                    39:ca:34:2c:8a:4e:7a:7d:65:b1:18:86:45:d0:7f:
                    05:57:a3:5d:ce:10:25:6a:b2:d2:eb:37:a5:22:85:
                    dd:4b:7e:79:a7:be:41:11:be:77:d3:cb:ce:49:56:
                    4b:6b:50:45:ca:8d:f8:1f:31:95:bc:b0:14:04:09:
                    ea:98:a1:71:19:ff:4e:57:00:a0:75:3d:99:a6:a8:
                    d8:5e:2c:1b:a7:9b:d5:38:0a:d8:8c:72:03:f5:b2:
                    70:aa:6b:6f:d3:df:20:c8:ef:65:e9:e5:6c:b2:ce:
                    86:b7:15:b5:97:c5:c3:83:e8:b7:0c:39:92:d4:76:
                    ae:d1:d7:9c:c3:5d:3d:94:2c:8d:23:9c:13:90:66:
                    2b:b4:09:30:41:5c:09:c1:d7:11:1f:95:b3:b6:37:
                    d1:f9:e8:9f:4a:ba:8e:31:38:ec:75:5c:e8:32:2e:
                    88:ed:6c:05:8f:34:59:9e:ee:ed:9a:e2:64:ed:7d:
                    e9:13:52:df:0c:0b:4d:47:ff:97:b6:6f:ae:22:db:
                    19:b5:8b:71:9f:0a:dd:66:4e:e2:e6:b9:e6:21:cc:
                    f5:25:e2:92:71:55:21:e3:c3:3f:13:64:ad:bf:57:
                    e2:ac:5f:2c:5a:1a:52:1c:3f:4c:94:f2:95:49:6b:
                    d8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:93:03:23:91:78:6E:7C:F7:D7:DE:D7:17:88:F7:79:8E:AC:FF:18
            X509v3 Authority Key Identifier:
                keyid:77:ED:A8:F7:26:A6:9B:50:4D:E9:94:94:3B:0A:5F:23:08:C2:A9:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d-2o9yamm1BN6ZSUOwpfIwjCqWs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/7276f3-c88e-4819-9e59-6084cfc6e4c4/1/d-2o9yamm1BN6ZSUOwpfIwjCqWs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:22:0a:e8:3a:ca:ec:db:38:e8:08:59:80:1f:8b:bf:59:43:
         85:f5:f1:76:a3:3e:8c:79:2e:19:0b:ae:bb:8e:be:26:02:fd:
         25:98:a2:0d:a7:10:ce:fe:da:1f:c8:d6:97:7f:35:a2:72:fd:
         41:3f:3a:a0:61:7c:0c:d3:2b:af:37:29:a4:93:9d:b4:51:fc:
         a7:9b:dc:ce:45:00:ff:23:7e:9b:08:f5:cb:3e:b7:e7:97:ba:
         72:7c:9f:07:ab:66:13:27:c0:e5:6f:19:41:e7:43:de:f9:b9:
         ca:e4:2f:75:6a:d4:02:f5:9c:4d:60:06:0d:40:33:ca:91:53:
         a3:ab:d1:88:60:66:39:86:6f:7b:fb:e5:f0:4a:a4:07:a8:a3:
         a8:de:0a:2f:95:32:03:e6:d0:a2:53:12:a3:c5:5f:9b:7c:19:
         2f:e7:ff:d8:07:4f:cd:4a:22:4c:61:0b:96:7e:68:2c:0d:93:
         ff:4f:10:00:36:54:81:d5:bb:3a:0f:09:f0:7f:9d:df:e7:45:
         ad:29:ba:4c:1e:02:cd:f8:55:bb:e4:67:14:d5:e6:3b:60:fa:
         12:96:5d:ca:d1:19:12:6a:17:35:72:40:c9:39:78:ee:74:25:
         56:b6:f6:ef:44:40:29:57:bb:63:fa:4e:ca:be:b0:aa:bc:92:
         c6:2a:7c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGkspOP1F/UDbIcrKnaTmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZWRhOGY3MjZhNjliNTA0ZGU5OTQ5NDNiMGE1ZjIzMDhj
MmE5NmIwHhcNMjYwNzI4MTkwMTE3WhcNMjYwNzI5MTkwMTE3WjAzMTEwLwYDVQQD
EyhlZTkzMDMyMzkxNzg2ZTdjZjdkN2RlZDcxNzg4Zjc3OThlYWNmZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaLgvpnvwRi+s0/m/385yjQsik56
fWWxGIZF0H8FV6NdzhAlarLS6zelIoXdS355p75BEb5308vOSVZLa1BFyo34HzGV
vLAUBAnqmKFxGf9OVwCgdT2ZpqjYXiwbp5vVOArYjHID9bJwqmtv098gyO9l6eVs
ss6GtxW1l8XDg+i3DDmS1Hau0decw109lCyNI5wTkGYrtAkwQVwJwdcRH5WztjfR
+eifSrqOMTjsdVzoMi6I7WwFjzRZnu7tmuJk7X3pE1LfDAtNR/+Xtm+uItsZtYtx
nwrdZk7i5rnmIcz1JeKScVUh48M/E2Stv1firF8sWhpSHD9MlPKVSWvYlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO6TAyOReG5899fe1xeI93mOrP8YMB8GA1UdIwQY
MBaAFHftqPcmpptQTemUlDsKXyMIwqlrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTkt
NjA4NGNmYzZlNGM0LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi83Mjc2ZjMtYzg4ZS00ODE5LTllNTktNjA4NGNmYzZlNGM0
LzEvZC0ybzl5YW1tMUJONlpTVU93cGZJd2pDcVdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiIK6DrK
7Ns46AhZgB+Lv1lDhfXxdqM+jHkuGQuuu46+JgL9JZiiDacQzv7aH8jWl381onL9
QT86oGF8DNMrrzcppJOdtFH8p5vczkUA/yN+mwj1yz6355e6cnyfB6tmEyfA5W8Z
QedD3vm5yuQvdWrUAvWcTWAGDUAzypFTo6vRiGBmOYZve/vl8EqkB6ijqN4KL5Uy
A+bQolMSo8Vfm3wZL+f/2AdPzUoiTGELln5oLA2T/08QADZUgdW7Og8J8H+d3+dF
rSm6TB4CzfhVu+RnFNXmO2D6EpZdytEZEmoXNXJAyTl47nQlVrb270RAKVe7Y/pO
yr6wqrySxip8wA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 00:12:33 2026 by rpki-client