Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
File:                     F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft (raw, json)
Hash identifier:          p37ji7YbHazpLPiX+8FPzmA5t/BE9M2nf+Y6qQuDS60=
Subject key identifier:   22:F0:2D:47:B8:5A:06:C1:35:76:56:98:61:E4:70:26:03:69:FA:54
Authority key identifier: 17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A
Certificate issuer:       /CN=17972d43835cd6a66e54e5a5856ce57de282d43a
Certificate serial:       019FA7504846CA5DE9A44EBD7D26E5E681F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
Manifest number:          10CC
Signing time:             Tue 28 Jul 2026 06:01:24 +0000
Manifest this update:     Tue 28 Jul 2026 06:01:24 +0000
Manifest next update:     Wed 29 Jul 2026 06:01:24 +0000
Files and hashes:         1: F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl (hash: 9WvYvmTuVYWPRllroucnO5ILFEQGv5gODD3xCPb46Nk=)
                          2: zzFYra5xZw5Yy-fz5dClERnnWlg.roa (hash: Wpga3aZynT3QdMPkk/GpaE5YFxq1IKAu5eZho4xu1iU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:50:48:46:ca:5d:e9:a4:4e:bd:7d:26:e5:e6:81:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17972d43835cd6a66e54e5a5856ce57de282d43a
        Validity
            Not Before: Jul 28 06:01:24 2026 GMT
            Not After : Jul 29 06:01:24 2026 GMT
        Subject: CN=22f02d47b85a06c13576569861e470260369fa54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a1:ca:8b:78:68:86:53:32:e4:1c:e5:88:b3:
                    d8:57:02:82:63:b0:c4:92:1a:28:19:cb:9a:f5:fd:
                    52:74:4a:3d:35:b7:cf:91:d2:4a:2f:26:2a:33:bb:
                    62:bb:2e:1f:3d:01:92:8c:3b:7d:df:df:cb:51:92:
                    79:68:3d:3b:69:f1:a9:4d:75:b9:23:84:c1:79:62:
                    f2:83:2c:f1:8e:6c:c8:53:8c:a3:ef:7f:d8:f8:6d:
                    00:b1:6f:a9:8f:bc:62:e2:be:db:6b:ed:e9:60:d6:
                    a7:73:0f:83:c7:96:d0:7e:f6:93:83:ae:31:25:75:
                    5b:76:fd:58:03:76:02:39:fd:47:63:10:6e:63:ee:
                    63:b5:26:8a:4f:dd:6a:76:54:8e:34:8a:d2:af:a6:
                    95:d6:3f:fb:71:28:af:85:89:df:93:c3:dd:7c:93:
                    5c:f4:99:dc:17:aa:46:34:22:88:6f:4f:9f:f0:27:
                    ed:7a:5f:de:3d:8e:64:05:7e:b8:4c:03:cb:87:f5:
                    d1:0d:4d:b7:e0:62:fc:d8:73:50:1e:9e:30:db:18:
                    3b:44:e3:24:0b:61:0d:e2:30:c2:f6:9e:e2:92:3a:
                    6f:bd:1e:82:2f:d4:ae:34:d4:61:a1:c7:70:7b:8d:
                    19:88:e4:d9:4f:51:e0:7b:0b:e3:4b:27:8a:f0:4b:
                    a9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F0:2D:47:B8:5A:06:C1:35:76:56:98:61:E4:70:26:03:69:FA:54
            X509v3 Authority Key Identifier:
                keyid:17:97:2D:43:83:5C:D6:A6:6E:54:E5:A5:85:6C:E5:7D:E2:82:D4:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e992c4-fea6-4e9e-a29b-9095ecc87878/1/F5ctQ4Nc1qZuVOWlhWzlfeKC1Do.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:9e:e3:7c:c1:db:ec:23:ea:6c:44:90:16:89:4d:bd:93:ab:
         ac:1f:1a:46:5d:f7:aa:ff:28:5e:8a:13:8e:fc:64:5c:89:1c:
         82:5b:72:ff:05:cb:06:c4:2a:2e:97:dd:98:28:9a:84:b5:aa:
         c8:c4:a1:4d:0b:36:f2:3b:d1:dc:d7:19:e8:12:d2:7d:00:a4:
         2b:93:0f:87:54:d7:4e:7f:30:97:cc:7d:39:ab:d4:03:34:8d:
         4c:a4:90:77:51:54:6e:87:10:7e:ea:af:cd:93:68:d9:37:7e:
         4e:e8:ec:40:0e:2c:47:51:1e:1e:47:cb:ff:5d:31:ff:7c:49:
         86:00:d4:3d:4c:88:ac:d0:ce:b0:79:af:66:9a:f6:f8:a3:96:
         27:28:78:ca:4c:56:3a:99:2b:cc:d6:bc:24:9a:0f:a1:84:57:
         e5:ee:ae:d2:41:ce:55:5d:11:b1:22:52:d4:17:ec:a4:0b:f1:
         06:5c:94:b2:0e:58:a0:c5:f6:0d:28:36:11:c6:2a:50:e5:84:
         f7:02:b3:68:3a:9e:81:54:73:4f:d0:7c:39:ed:c2:32:f1:0e:
         49:26:99:5f:b8:bc:6a:37:63:b6:16:6b:37:4f:f5:76:43:82:
         86:67:9e:50:31:08:be:63:a8:18:f7:b3:4c:d5:fe:30:d2:a7:
         37:38:49:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nUEhGyl3ppE69fSbl5oHxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3OTcyZDQzODM1Y2Q2YTY2ZTU0ZTVhNTg1NmNlNTdkZTI4
MmQ0M2EwHhcNMjYwNzI4MDYwMTI0WhcNMjYwNzI5MDYwMTI0WjAzMTEwLwYDVQQD
EygyMmYwMmQ0N2I4NWEwNmMxMzU3NjU2OTg2MWU0NzAyNjAzNjlmYTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6HKi3hohlMy5BzliLPYVwKCY7DE
khooGcua9f1SdEo9NbfPkdJKLyYqM7tiuy4fPQGSjDt939/LUZJ5aD07afGpTXW5
I4TBeWLygyzxjmzIU4yj73/Y+G0AsW+pj7xi4r7ba+3pYNancw+Dx5bQfvaTg64x
JXVbdv1YA3YCOf1HYxBuY+5jtSaKT91qdlSONIrSr6aV1j/7cSivhYnfk8PdfJNc
9JncF6pGNCKIb0+f8Cftel/ePY5kBX64TAPLh/XRDU234GL82HNQHp4w2xg7ROMk
C2EN4jDC9p7ikjpvvR6CL9SuNNRhocdwe40ZiOTZT1HgewvjSyeK8EuptQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCLwLUe4WgbBNXZWmGHkcCYDafpUMB8GA1UdIwQY
MBaAFBeXLUODXNamblTlpYVs5X3igtQ6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWIt
OTA5NWVjYzg3ODc4LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS9lOTkyYzQtZmVhNi00ZTllLWEyOWItOTA5NWVjYzg3ODc4
LzEvRjVjdFE0TmMxcVp1Vk9XbGhXemxmZUtDMURvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMZ7jfMHb
7CPqbESQFolNvZOrrB8aRl33qv8oXooTjvxkXIkcglty/wXLBsQqLpfdmCiahLWq
yMShTQs28jvR3NcZ6BLSfQCkK5MPh1TXTn8wl8x9OavUAzSNTKSQd1FUbocQfuqv
zZNo2Td+TujsQA4sR1EeHkfL/10x/3xJhgDUPUyIrNDOsHmvZpr2+KOWJyh4ykxW
OpkrzNa8JJoPoYRX5e6u0kHOVV0RsSJS1BfspAvxBlyUsg5YoMX2DSg2EcYqUOWE
9wKzaDqegVRzT9B8Oe3CMvEOSSaZX7i8ajdjthZrN0/1dkOChmeeUDEIvmOoGPez
TNX+MNKnNzhJMw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:52:34 2026 by rpki-client