Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
File:                     RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft (raw, json)
Hash identifier:          K8oDX5jpyc+C8QB1bXayUdIWoaMWLf84OU8V086l5y8=
Subject key identifier:   95:D0:B4:64:A2:EB:9C:A6:A5:D3:2F:39:5B:B3:DA:05:14:BB:96:FD
Authority key identifier: 46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76
Certificate issuer:       /CN=4603c656c197461a49caa1ffd720d18beeac8076
Certificate serial:       019FAB640AF6EF969B6E29F2D7C9EBF9BC8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
Manifest number:          079C
Signing time:             Wed 29 Jul 2026 01:01:28 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:28 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:28 +0000
Files and hashes:         1: Hrj27dyCNZvY-lKB2ef8Mo4G6tA.roa (hash: ywCaGFxrJHREbSiyJrKj2GAkS5PQJLvo8VTO1MR9hlc=)
                          2: RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl (hash: lvsJ714Tg/4HlibDuu7Dxlp4RKC5rNnGPRq9+aKTjOI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:64:0a:f6:ef:96:9b:6e:29:f2:d7:c9:eb:f9:bc:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4603c656c197461a49caa1ffd720d18beeac8076
        Validity
            Not Before: Jul 29 01:01:28 2026 GMT
            Not After : Jul 30 01:01:28 2026 GMT
        Subject: CN=95d0b464a2eb9ca6a5d32f395bb3da0514bb96fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c9:b0:17:38:7e:27:20:9a:ed:83:11:e1:0e:
                    55:be:ed:c6:0f:09:14:24:41:36:de:43:c7:fb:e8:
                    de:bc:08:87:82:aa:20:79:6c:62:e2:04:62:6a:0b:
                    b1:46:d3:b2:60:66:9e:39:c1:02:8a:27:ec:34:09:
                    13:97:a2:39:b5:23:48:2f:f5:42:ba:eb:0c:d6:a4:
                    86:41:2d:e1:89:23:ec:41:ac:65:14:cb:eb:44:93:
                    d9:1d:2f:68:99:2a:0c:dd:1a:95:e7:80:00:bb:b1:
                    46:c5:07:e2:53:d1:70:5c:8b:74:83:c0:89:dd:0d:
                    01:b9:e4:a4:ec:b0:58:e5:9c:23:8c:7b:54:83:84:
                    96:d3:34:f5:e4:fc:af:83:a3:95:1b:37:a2:b5:01:
                    e5:31:92:91:23:8f:8b:31:8b:48:89:29:74:5b:41:
                    25:d3:15:65:02:10:6b:35:5e:67:08:1f:b1:1c:6d:
                    ab:e0:c3:d6:00:71:7b:8b:a5:05:1e:b5:48:13:aa:
                    c6:93:92:1a:da:d3:03:26:0a:4c:35:6e:5b:6d:96:
                    bb:49:0d:82:51:11:07:e9:87:84:f0:9f:fc:8e:a0:
                    80:04:c8:40:a4:d6:45:12:39:ac:bb:d3:ad:09:f9:
                    f0:26:f7:d0:df:06:6a:00:fc:dd:f8:12:bc:b2:6c:
                    4a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:D0:B4:64:A2:EB:9C:A6:A5:D3:2F:39:5B:B3:DA:05:14:BB:96:FD
            X509v3 Authority Key Identifier:
                keyid:46:03:C6:56:C1:97:46:1A:49:CA:A1:FF:D7:20:D1:8B:EE:AC:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RgPGVsGXRhpJyqH_1yDRi-6sgHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/81ac71-0f2a-4861-959b-afa4fd3506d0/1/RgPGVsGXRhpJyqH_1yDRi-6sgHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:db:c0:1c:fd:13:a9:5c:9d:e8:8d:84:cc:6e:74:0b:21:da:
         12:13:90:52:72:4b:f1:4e:5c:cd:df:ad:b9:e6:ac:b4:48:50:
         40:08:7e:21:4e:f6:75:bd:2c:33:08:c5:54:d4:fa:af:80:04:
         41:88:a1:ab:cf:bf:76:68:b3:94:51:1d:e0:6f:89:67:d9:55:
         fd:3b:65:f6:f1:21:9d:6c:11:cf:81:35:d8:2d:37:bb:d3:db:
         7a:e5:b1:fc:8f:a8:c7:30:85:f6:05:2b:2e:d4:dd:ce:4b:bb:
         b4:af:97:d8:a8:9f:12:f4:6b:b7:6f:7e:77:41:3f:34:81:4b:
         9b:df:83:71:3c:39:b4:2b:a8:d8:fc:2e:b8:f2:2d:fc:3c:d6:
         c5:8a:44:6f:ae:94:ef:ff:0b:cd:6f:99:ba:f6:f8:20:6f:3d:
         63:d7:35:62:e4:f9:07:9f:78:d5:db:a7:b0:da:ed:02:a6:96:
         dd:9f:ba:6e:29:e0:7e:17:d2:c3:e9:6b:d2:e8:02:e7:d2:c1:
         61:ac:c0:47:23:50:69:2b:1b:4a:f9:6d:0a:21:04:37:c5:d3:
         cf:d2:d5:71:e1:29:85:d1:37:b0:a4:4c:5a:cd:56:28:33:4f:
         69:e0:a2:b3:61:fa:bb:7b:94:4a:1d:69:84:53:25:80:23:90:
         8d:ee:10:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rZAr275abbiny18nr+byOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MDNjNjU2YzE5NzQ2MWE0OWNhYTFmZmQ3MjBkMThiZWVh
YzgwNzYwHhcNMjYwNzI5MDEwMTI4WhcNMjYwNzMwMDEwMTI4WjAzMTEwLwYDVQQD
Eyg5NWQwYjQ2NGEyZWI5Y2E2YTVkMzJmMzk1YmIzZGEwNTE0YmI5NmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsmwFzh+JyCa7YMR4Q5Vvu3GDwkU
JEE23kPH++jevAiHgqogeWxi4gRiaguxRtOyYGaeOcECiifsNAkTl6I5tSNIL/VC
uusM1qSGQS3hiSPsQaxlFMvrRJPZHS9omSoM3RqV54AAu7FGxQfiU9FwXIt0g8CJ
3Q0BueSk7LBY5ZwjjHtUg4SW0zT15Pyvg6OVGzeitQHlMZKRI4+LMYtIiSl0W0El
0xVlAhBrNV5nCB+xHG2r4MPWAHF7i6UFHrVIE6rGk5Ia2tMDJgpMNW5bbZa7SQ2C
UREH6YeE8J/8jqCABMhApNZFEjmsu9OtCfnwJvfQ3wZqAPzd+BK8smxKzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXQtGSi65ympdMvOVuz2gUUu5b9MB8GA1UdIwQY
MBaAFEYDxlbBl0YaScqh/9cg0YvurIB2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWIt
YWZhNGZkMzUwNmQwLzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy84MWFjNzEtMGYyYS00ODYxLTk1OWItYWZhNGZkMzUwNmQw
LzEvUmdQR1ZzR1hSaHBKeXFIXzF5RFJpLTZzZ0hZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAtvAHP0T
qVyd6I2EzG50CyHaEhOQUnJL8U5czd+tueastEhQQAh+IU72db0sMwjFVNT6r4AE
QYihq8+/dmizlFEd4G+JZ9lV/Ttl9vEhnWwRz4E12C03u9PbeuWx/I+oxzCF9gUr
LtTdzku7tK+X2KifEvRrt29+d0E/NIFLm9+DcTw5tCuo2PwuuPIt/DzWxYpEb66U
7/8LzW+Zuvb4IG89Y9c1YuT5B5941dunsNrtAqaW3Z+6bingfhfSw+lr0ugC59LB
YazARyNQaSsbSvltCiEEN8XTz9LVceEphdE3sKRMWs1WKDNPaeCis2H6u3uUSh1p
hFMlgCOQje4Qvg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:17:14 2026 by rpki-client