Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
File:                     ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft (raw, json)
Hash identifier:          lPiOC7JDLfg9yY4dBMP5xeQ1JgyrAtOVDnx3PctgHJc=
Subject key identifier:   DF:02:14:05:3F:87:43:7D:62:DE:42:09:10:F8:AA:79:0B:DC:E2:5C
Authority key identifier: 8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3
Certificate issuer:       /CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
Certificate serial:       019FACAC8B4C677D2790E3D5998C63A17D8D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
Manifest number:          0924
Signing time:             Wed 29 Jul 2026 07:00:16 +0000
Manifest this update:     Wed 29 Jul 2026 07:00:16 +0000
Manifest next update:     Thu 30 Jul 2026 07:00:16 +0000
Files and hashes:         1: ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl (hash: wY0avwu3+PPqv1OhZ07pQoqueM+m5Yq8a4vag2vhMFY=)
                          2: pld-KrrSH2O3PZyUQtP_Kuvp-2s.roa (hash: JZBBxha8VilEBln8tqWZaEhgr9V20qoqkX6/Lbo7/s8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 07:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ac:8b:4c:67:7d:27:90:e3:d5:99:8c:63:a1:7d:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b1edf526b1ca5ff0e682ff48aece121d27bc0c3
        Validity
            Not Before: Jul 29 07:00:16 2026 GMT
            Not After : Jul 30 07:00:16 2026 GMT
        Subject: CN=df0214053f87437d62de420910f8aa790bdce25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5f:d6:d1:14:f5:d5:92:6e:19:a2:2e:2f:d2:
                    71:86:b3:ec:bb:e9:a3:3e:57:20:47:19:dd:0a:c2:
                    c9:bf:ab:64:2d:a5:ef:c3:c3:90:06:20:8e:47:65:
                    91:77:a5:e8:13:dd:c3:2f:aa:34:6b:19:7c:de:65:
                    23:b2:49:1f:35:a5:25:1a:e8:07:71:5e:65:85:3d:
                    73:a0:17:72:09:bf:82:52:d4:5f:f1:66:9b:c5:d4:
                    cd:3b:13:6d:7c:bf:0d:02:b0:db:f9:63:ac:ae:ee:
                    d8:b6:26:57:6e:46:e7:46:38:b2:af:38:c9:71:14:
                    27:e5:f7:c0:df:b5:1e:52:93:c2:67:68:c8:77:99:
                    72:bc:ef:7b:38:31:e0:e8:25:66:28:ab:2f:e0:a8:
                    59:b2:c5:b3:58:c8:a4:3d:19:02:a0:a3:44:91:ca:
                    5d:8b:ac:8b:7f:f9:57:6f:0f:43:ac:84:f0:10:ec:
                    1c:e6:d4:dd:43:e0:2f:00:9b:57:4a:6f:92:32:56:
                    17:73:51:72:5c:b5:14:74:10:cf:51:2a:b6:08:2a:
                    5f:57:c8:ba:96:b2:92:63:88:6b:00:36:27:41:de:
                    10:58:12:42:b7:53:39:3f:9c:35:d4:92:d9:41:b6:
                    af:f0:07:64:24:61:ba:c9:21:ac:8e:91:0f:67:f5:
                    28:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:02:14:05:3F:87:43:7D:62:DE:42:09:10:F8:AA:79:0B:DC:E2:5C
            X509v3 Authority Key Identifier:
                keyid:8B:1E:DF:52:6B:1C:A5:FF:0E:68:2F:F4:8A:EC:E1:21:D2:7B:C0:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ix7fUmscpf8OaC_0iuzhIdJ7wMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb5abb-b3f7-4d40-ad36-251168edd3e4/1/ix7fUmscpf8OaC_0iuzhIdJ7wMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:6d:87:1a:23:15:14:37:54:2c:84:c3:89:1d:1f:20:bb:b7:
         02:6a:73:b9:b3:ca:bc:a2:40:67:80:70:b9:44:54:1d:61:00:
         e5:e3:d1:c8:38:92:bf:3d:72:2c:4d:4b:4d:0e:d6:58:e8:92:
         af:56:8b:67:5d:bb:af:54:9e:61:0f:5c:0d:fa:c2:ad:86:16:
         25:bc:cd:1f:09:9c:8b:6b:f3:f6:96:91:93:10:d5:be:1e:a4:
         44:0c:54:2b:21:77:69:62:94:2c:9f:48:ad:77:49:0e:ea:62:
         05:a9:78:95:aa:4f:a6:e5:e7:2c:f5:94:c9:0c:ae:e0:9f:15:
         af:e6:21:70:a6:c7:22:0a:3f:a7:88:cf:74:5f:3f:6b:cc:c1:
         d2:2e:98:ba:80:f5:72:b3:93:dc:3f:60:4e:5b:2c:89:a6:b2:
         a5:11:9e:3e:09:be:c1:63:84:65:8f:38:40:f9:9b:0e:cb:9c:
         71:76:3b:11:71:02:92:27:b7:aa:9e:94:fe:53:cc:8a:1d:0e:
         2a:9d:21:12:51:dc:55:86:43:a0:7a:da:7f:c1:a7:a1:55:75:
         47:9e:c8:82:0f:d6:c2:e1:95:14:c0:e3:12:13:09:5a:79:89:
         eb:5e:03:1e:aa:70:25:e9:54:f7:77:1e:41:0d:29:c8:69:3e:
         aa:dc:ec:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srItMZ30nkOPVmYxjoX2NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMWVkZjUyNmIxY2E1ZmYwZTY4MmZmNDhhZWNlMTIxZDI3
YmMwYzMwHhcNMjYwNzI5MDcwMDE2WhcNMjYwNzMwMDcwMDE2WjAzMTEwLwYDVQQD
EyhkZjAyMTQwNTNmODc0MzdkNjJkZTQyMDkxMGY4YWE3OTBiZGNlMjVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV/W0RT11ZJuGaIuL9JxhrPsu+mj
PlcgRxndCsLJv6tkLaXvw8OQBiCOR2WRd6XoE93DL6o0axl83mUjskkfNaUlGugH
cV5lhT1zoBdyCb+CUtRf8WabxdTNOxNtfL8NArDb+WOsru7YtiZXbkbnRjiyrzjJ
cRQn5ffA37UeUpPCZ2jId5lyvO97ODHg6CVmKKsv4KhZssWzWMikPRkCoKNEkcpd
i6yLf/lXbw9DrITwEOwc5tTdQ+AvAJtXSm+SMlYXc1FyXLUUdBDPUSq2CCpfV8i6
lrKSY4hrADYnQd4QWBJCt1M5P5w11JLZQbav8AdkJGG6ySGsjpEPZ/UoZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN8CFAU/h0N9Yt5CCRD4qnkL3OJcMB8GA1UdIwQY
MBaAFIse31JrHKX/Dmgv9Irs4SHSe8DDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYt
MjUxMTY4ZWRkM2U0LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS9jYjVhYmItYjNmNy00ZDQwLWFkMzYtMjUxMTY4ZWRkM2U0
LzEvaXg3ZlVtc2NwZjhPYUNfMGl1emhJZEo3d01NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi22HGiMV
FDdULITDiR0fILu3AmpzubPKvKJAZ4BwuURUHWEA5ePRyDiSvz1yLE1LTQ7WWOiS
r1aLZ127r1SeYQ9cDfrCrYYWJbzNHwmci2vz9paRkxDVvh6kRAxUKyF3aWKULJ9I
rXdJDupiBal4lapPpuXnLPWUyQyu4J8Vr+YhcKbHIgo/p4jPdF8/a8zB0i6YuoD1
crOT3D9gTlssiaaypRGePgm+wWOEZY84QPmbDsuccXY7EXECkie3qp6U/lPMih0O
Kp0hElHcVYZDoHraf8GnoVV1R57Igg/WwuGVFMDjEhMJWnmJ614DHqpwJelU93ce
QQ0pyGk+qtzsnQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:07 2026 by rpki-client