Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          NMlDOlPety1fQdv9s4Sjjt4ovKPakNnF/fW4OLXhGqE=
Subject key identifier:   62:33:BA:76:40:82:67:32:1D:FE:86:49:26:60:43:6C:25:35:14:F1
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       019FA906E4D0E41271B920072C4A9BBE9F19
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          1440
Signing time:             Tue 28 Jul 2026 14:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:28 +0000
Files and hashes:         1: 1PeK2rVaekZNVC3o3pyzwNQgzhE.roa (hash: bT8T+lq1jJgvGdCk3qnNPwcbcmXO99rl74JJHuWU1R4=)
                          2: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: ++g7ck0dcS572LLe7fgrN9aG8m21d0CDr+8zZH03NtQ=)
                          3: FUAG3jq8oW-DG-4OVip2j9_K6zM.roa (hash: X1mjWztgnVQSSGLyPzOsDPZqwti1AiSyexfKdPbUPdM=)
                          4: U0tl-UVjdgoquFk_RP8dvu9_bzA.roa (hash: fvBK5Ool8MKV1KD0bY966e8iK9zhJNvA5b6LpcKGcn8=)
                          5: WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa (hash: ToxcyUtODIjk+vfIoE2fDiyxO6Xp7CGXZG+vHQsn3hA=)
                          6: hjDAxUotD7fBXSYLVmy70jVRseo.roa (hash: 0sYxaaTFlbtM3B7RBSkgjokJqeCyvabh5MHOIU6LNCU=)
                          7: i8DSsz1zrzQenpw3T2bP8cFRsq8.roa (hash: oEuQy5j/C31ArjuLYoalrrQGCWj0f7zf2ngtaCvBjYo=)
                          8: zMUHewOkNECVYz7ml1umISWZOVE.roa (hash: G455vMmTjZpLOZTw+9pAQhVOSHGfalAl4TZYjQHUmAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:e4:d0:e4:12:71:b9:20:07:2c:4a:9b:be:9f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Jul 28 14:00:28 2026 GMT
            Not After : Jul 29 14:00:28 2026 GMT
        Subject: CN=6233ba76408267321dfe86492660436c253514f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:06:ce:7c:ef:2e:bc:54:9f:27:84:4a:5d:bd:
                    64:33:81:d1:59:67:9f:82:cc:3a:c5:a6:6c:72:af:
                    93:05:38:b0:4f:1e:5e:3a:c2:7f:1e:79:d4:66:ec:
                    ab:f1:ac:99:a9:2d:5e:54:20:32:48:62:98:3a:fe:
                    e5:1b:c3:4a:7b:5e:5e:b4:eb:d9:88:3a:0f:01:31:
                    fb:41:22:db:24:f7:34:d1:5a:16:92:c0:5d:b3:3b:
                    c7:5b:ac:b6:12:64:a1:6a:be:4d:2e:08:5b:af:ca:
                    95:46:b9:27:3e:c6:18:95:a7:f8:09:d7:44:42:61:
                    41:26:6c:f6:0d:1e:76:ee:b9:95:9c:84:47:cd:97:
                    17:29:4b:da:10:4f:60:04:89:4b:cc:26:f2:57:9e:
                    59:8a:62:dc:0a:d6:d4:ed:3d:08:74:95:06:c4:0a:
                    ef:99:33:28:d7:87:6f:cc:26:0e:63:88:28:2a:d5:
                    95:50:e3:59:78:7d:75:af:e9:3b:76:81:dc:00:a0:
                    98:78:cc:41:f7:da:ff:59:49:49:e4:8e:d3:b4:c2:
                    b2:5a:9b:ae:3f:20:ae:11:64:29:50:d8:45:f9:56:
                    c5:86:c8:f7:77:29:25:29:51:32:1a:26:75:6e:a4:
                    80:55:45:11:76:cb:9c:51:6a:e7:f0:9b:7c:78:e5:
                    72:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:33:BA:76:40:82:67:32:1D:FE:86:49:26:60:43:6C:25:35:14:F1
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:4a:90:c4:0b:d2:19:14:10:83:43:d7:b6:23:b1:1f:79:5c:
         27:15:d2:c6:04:37:a0:50:97:c8:50:1a:a7:9b:cd:10:8f:58:
         9a:f0:30:e0:a9:a9:2e:38:57:3f:fb:e9:d6:7c:68:2e:e1:17:
         03:4d:24:0c:82:3f:b8:52:e6:e8:83:66:46:32:77:33:1c:81:
         40:70:25:9a:d9:a7:ae:e3:d1:31:98:af:28:3b:a7:8a:da:db:
         e1:aa:e3:b8:07:7a:bf:bb:fb:5d:be:42:7c:ec:22:46:7d:3c:
         2c:da:32:b6:08:53:02:79:41:04:13:98:71:02:22:72:82:84:
         d9:91:be:a5:e8:98:b0:dc:f4:cb:16:8f:3b:ae:3c:a1:41:d4:
         23:48:31:01:db:81:3e:26:45:f6:2d:19:6f:66:56:3d:ec:c6:
         6d:c6:c7:0a:8b:87:fc:64:70:f2:5f:76:20:90:7c:af:74:f2:
         3c:fa:01:9b:e2:be:fa:34:e7:71:36:24:05:f6:2b:55:fd:53:
         21:4d:63:2d:12:49:fb:de:9d:32:4c:a8:63:39:16:a3:d1:98:
         94:98:6e:3d:83:cc:48:58:db:81:c2:d8:c6:e8:a0:c2:dd:a3:
         07:b6:ae:64:22:84:f1:6e:c9:3b:35:ca:54:2a:91:53:00:fd:
         f6:e2:c9:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBuTQ5BJxuSAHLEqbvp8ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjYwNzI4MTQwMDI4WhcNMjYwNzI5MTQwMDI4WjAzMTEwLwYDVQQD
Eyg2MjMzYmE3NjQwODI2NzMyMWRmZTg2NDkyNjYwNDM2YzI1MzUxNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgbOfO8uvFSfJ4RKXb1kM4HRWWef
gsw6xaZscq+TBTiwTx5eOsJ/HnnUZuyr8ayZqS1eVCAySGKYOv7lG8NKe15etOvZ
iDoPATH7QSLbJPc00VoWksBdszvHW6y2EmShar5NLghbr8qVRrknPsYYlaf4CddE
QmFBJmz2DR527rmVnIRHzZcXKUvaEE9gBIlLzCbyV55ZimLcCtbU7T0IdJUGxArv
mTMo14dvzCYOY4goKtWVUONZeH11r+k7doHcAKCYeMxB99r/WUlJ5I7TtMKyWpuu
PyCuEWQpUNhF+VbFhsj3dyklKVEyGiZ1bqSAVUURdsucUWrn8Jt8eOVyCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGIzunZAgmcyHf6GSSZgQ2wlNRTxMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe0qQxAvS
GRQQg0PXtiOxH3lcJxXSxgQ3oFCXyFAap5vNEI9YmvAw4KmpLjhXP/vp1nxoLuEX
A00kDII/uFLm6INmRjJ3MxyBQHAlmtmnruPRMZivKDunitrb4arjuAd6v7v7Xb5C
fOwiRn08LNoytghTAnlBBBOYcQIicoKE2ZG+peiYsNz0yxaPO648oUHUI0gxAduB
PiZF9i0Zb2ZWPezGbcbHCouH/GRw8l92IJB8r3TyPPoBm+K++jTncTYkBfYrVf1T
IU1jLRJJ+96dMkyoYzkWo9GYlJhuPYPMSFjbgcLYxuigwt2jB7auZCKE8W7JOzXK
VCqRUwD99uLJFg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:41 2026 by rpki-client