Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
File:                     p1f4f4bpOyXvTAQzZku-ctqY-_4.mft (raw, json)
Hash identifier:          Y5wNZXd1Vzj0DCu2HU3h8aEeA76L6UdJLyQmB0ZFQnQ=
Subject key identifier:   47:54:21:7A:98:17:B5:26:A8:82:54:D4:CF:E0:32:E1:3B:DD:5F:33
Authority key identifier: A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE
Certificate issuer:       /CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
Certificate serial:       019FAB2C67DA9AD9D6F3C7B98D31B6CD9619
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
Manifest number:          07EB
Signing time:             Wed 29 Jul 2026 00:00:41 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:41 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:41 +0000
Files and hashes:         1: SdRMQSisA3A52kvZfTcOqIZi7WM.roa (hash: FjVPIrI7M5sGkygChCHAIE+8f/f2VPSzrAXNL/N59yU=)
                          2: p1f4f4bpOyXvTAQzZku-ctqY-_4.crl (hash: EgyALWgxCiHD5zPZW8NEVXV1eIZK5n4c9ak1D/PI3mQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:67:da:9a:d9:d6:f3:c7:b9:8d:31:b6:cd:96:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a757f87f86e93b25ef4c0433664bbe72da98fbfe
        Validity
            Not Before: Jul 29 00:00:41 2026 GMT
            Not After : Jul 30 00:00:41 2026 GMT
        Subject: CN=4754217a9817b526a88254d4cfe032e13bdd5f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ee:81:56:8a:72:8b:32:48:8b:8c:76:70:58:
                    34:14:66:27:68:78:89:bf:c6:77:64:f3:c1:16:a1:
                    2b:b7:5a:b5:ac:ef:cf:86:1d:49:d1:2c:99:9b:78:
                    10:66:44:bf:ae:da:8b:70:ef:3c:58:1f:87:9c:86:
                    21:ec:c6:1b:3f:51:58:f8:52:a9:6d:3c:60:56:8d:
                    dd:82:ef:59:56:4c:bb:ba:65:d0:64:69:12:c8:b3:
                    18:cf:4d:79:5e:0a:d3:e0:35:d8:78:4d:f3:2e:44:
                    7b:45:af:90:8d:1f:fc:14:e0:f4:59:3d:75:fa:6c:
                    23:58:53:57:41:a0:ea:46:a8:dd:8f:ca:5d:6a:e0:
                    9c:f1:f2:9e:8a:c8:4f:fe:50:72:d2:5d:57:64:8a:
                    49:c1:1a:6e:ae:93:e4:e7:68:43:a3:9a:52:f3:35:
                    c7:8c:94:00:70:68:54:4e:50:00:e2:0f:7a:b5:37:
                    94:a0:e1:15:c5:df:c4:0e:6e:0c:7d:47:fd:b7:26:
                    5c:98:c9:56:47:d7:7e:34:2e:88:63:bd:14:44:99:
                    e5:f1:12:29:63:79:05:18:5c:93:f6:31:b3:59:79:
                    23:66:35:fa:71:f2:84:e6:b4:b2:17:f2:a2:e4:4e:
                    5c:cc:2a:01:90:c2:78:69:62:2f:d9:7b:09:b9:62:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:54:21:7A:98:17:B5:26:A8:82:54:D4:CF:E0:32:E1:3B:DD:5F:33
            X509v3 Authority Key Identifier:
                keyid:A7:57:F8:7F:86:E9:3B:25:EF:4C:04:33:66:4B:BE:72:DA:98:FB:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1f4f4bpOyXvTAQzZku-ctqY-_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/86e40c-1563-40ea-8f4e-a178332533e0/1/p1f4f4bpOyXvTAQzZku-ctqY-_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:6a:ae:df:bc:5a:19:29:73:e9:6a:53:b6:50:92:57:d2:a9:
         9e:63:ff:bb:38:ea:d2:9f:dc:c1:41:5b:a5:69:99:bc:79:4f:
         e0:ec:9b:b0:f2:55:dd:4c:e8:a8:34:95:fc:04:a9:7d:5b:34:
         87:ad:f3:71:f6:23:f6:49:ed:84:01:38:b1:6d:3a:14:fc:6c:
         37:19:4a:d0:8a:01:86:38:b3:e3:28:02:0f:de:4e:40:85:69:
         8d:72:c8:9c:09:ae:be:c0:47:da:3a:11:f2:30:82:34:56:0d:
         8a:d6:14:31:e1:69:58:77:fc:3e:6b:07:77:aa:02:78:cb:14:
         3c:b3:73:7f:94:54:dc:b2:97:1f:2a:8c:0f:45:4d:98:0d:b3:
         dc:ff:44:1d:39:7e:ed:e2:b9:89:31:b7:ed:97:ab:f8:68:18:
         f6:ed:81:8d:b9:7b:ae:56:82:27:d0:20:14:ad:f5:8d:5f:d8:
         0e:66:d2:2d:c2:4d:6e:d0:31:5a:ea:77:2f:f6:9c:9c:19:18:
         38:85:bd:95:a9:d6:01:d7:53:7a:95:dc:e4:0c:71:c5:57:f8:
         bc:50:9d:3c:f4:a3:61:6a:73:7f:ff:5f:b6:86:56:a2:8e:5a:
         30:8e:8a:a2:b4:6c:5a:99:a3:4d:8c:2d:90:04:95:b4:ef:02:
         46:5c:d2:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rLGfamtnW88e5jTG2zZYZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NTdmODdmODZlOTNiMjVlZjRjMDQzMzY2NGJiZTcyZGE5
OGZiZmUwHhcNMjYwNzI5MDAwMDQxWhcNMjYwNzMwMDAwMDQxWjAzMTEwLwYDVQQD
Eyg0NzU0MjE3YTk4MTdiNTI2YTg4MjU0ZDRjZmUwMzJlMTNiZGQ1ZjMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+6BVopyizJIi4x2cFg0FGYnaHiJ
v8Z3ZPPBFqErt1q1rO/Phh1J0SyZm3gQZkS/rtqLcO88WB+HnIYh7MYbP1FY+FKp
bTxgVo3dgu9ZVky7umXQZGkSyLMYz015XgrT4DXYeE3zLkR7Ra+QjR/8FOD0WT11
+mwjWFNXQaDqRqjdj8pdauCc8fKeishP/lBy0l1XZIpJwRpurpPk52hDo5pS8zXH
jJQAcGhUTlAA4g96tTeUoOEVxd/EDm4MfUf9tyZcmMlWR9d+NC6IY70URJnl8RIp
Y3kFGFyT9jGzWXkjZjX6cfKE5rSyF/Ki5E5czCoBkMJ4aWIv2XsJuWLptQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdUIXqYF7UmqIJU1M/gMuE73V8zMB8GA1UdIwQY
MBaAFKdX+H+G6Tsl70wEM2ZLvnLamPv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUt
YTE3ODMzMjUzM2UwLzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy84NmU0MGMtMTU2My00MGVhLThmNGUtYTE3ODMzMjUzM2Uw
LzEvcDFmNGY0YnBPeVh2VEFRelprdS1jdHFZLV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAemqu37xa
GSlz6WpTtlCSV9KpnmP/uzjq0p/cwUFbpWmZvHlP4OybsPJV3UzoqDSV/ASpfVs0
h63zcfYj9knthAE4sW06FPxsNxlK0IoBhjiz4ygCD95OQIVpjXLInAmuvsBH2joR
8jCCNFYNitYUMeFpWHf8PmsHd6oCeMsUPLNzf5RU3LKXHyqMD0VNmA2z3P9EHTl+
7eK5iTG37Zer+GgY9u2Bjbl7rlaCJ9AgFK31jV/YDmbSLcJNbtAxWup3L/acnBkY
OIW9lanWAddTepXc5AxxxVf4vFCdPPSjYWpzf/9ftoZWoo5aMI6KorRsWpmjTYwt
kASVtO8CRlzSQw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:16:47 2026 by rpki-client