Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
File:                     lDBvaK6kuuEk-shfLJqj9a6FARM.mft (raw, json)
Hash identifier:          SiUJWOpbGLa5nB4pTDiucnBt5+u9huCXl53E2TkuaSk=
Subject key identifier:   9E:4D:F5:6B:90:BF:C8:92:57:A4:12:02:9C:49:05:86:E3:A3:80:A5
Authority key identifier: 94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13
Certificate issuer:       /CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
Certificate serial:       019FA9ABEC5E4B660534BED425A250AFC186
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
Manifest number:          06EF
Signing time:             Tue 28 Jul 2026 17:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:44 +0000
Files and hashes:         1: 0S5WgWNA9Jpe-KcTd_sdYpyiaYo.roa (hash: c7DpYKj73JKX2DEHdN+T0nrc/rYvZLnTJkF6lYxE+e8=)
                          2: 32MPHrhab7tLeHA1QgnK1TjEYxU.roa (hash: JXdy+SGJGsVbR9WQI9uRSAp0xDEYoI/Mip8shHcZQPM=)
                          3: 49joF_4IAz2wl7KbPrKLoLa3pRQ.roa (hash: fdsATKk2aFvQW4eJks7KIlsXE+EQbgWm1W06MslxugE=)
                          4: lDBvaK6kuuEk-shfLJqj9a6FARM.crl (hash: fNKHnV6Kg0BWpdwfjDFMULfo2RMXm91uFPmoaNwJsVE=)
                          5: xb6xFdizKg83UpWTs6O9IzIE0x4.roa (hash: 9WlZEi/4plVHygYQD8tYe4ThNR/Fd3krNDoyWiRXrD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ab:ec:5e:4b:66:05:34:be:d4:25:a2:50:af:c1:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94306f68aea4bae124fac85f2c9aa3f5ae850113
        Validity
            Not Before: Jul 28 17:00:44 2026 GMT
            Not After : Jul 29 17:00:44 2026 GMT
        Subject: CN=9e4df56b90bfc89257a412029c490586e3a380a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7e:eb:a2:f2:a6:62:90:af:85:a8:57:7d:ab:
                    99:db:41:8d:79:98:03:0e:30:55:0b:c5:85:77:7c:
                    5f:f6:68:88:02:e2:d2:0f:4d:51:a0:eb:01:c1:cf:
                    ff:9c:c9:b3:ed:0b:7b:04:ad:f2:a7:80:77:4c:0f:
                    a4:c4:a2:a5:1e:25:00:ea:81:58:cb:6d:6c:1b:28:
                    c9:16:c4:4f:c4:9e:dd:bc:c9:83:90:2a:5a:57:ba:
                    02:86:32:2c:1b:47:45:7d:82:3c:bb:34:ee:21:e6:
                    72:c5:f7:f2:b6:7a:9f:19:c4:e3:97:58:18:8e:d7:
                    be:d0:f5:ff:2f:23:4f:9a:fa:72:03:7a:63:d1:b7:
                    e2:cf:b2:54:46:57:bb:76:66:61:92:b7:b2:4c:1b:
                    22:37:c1:d4:a6:e9:b0:49:31:1b:50:84:dd:18:35:
                    86:89:41:33:d7:75:11:ca:21:e2:e0:32:0f:b7:3d:
                    53:55:fb:24:4b:2c:15:19:41:ad:aa:ef:2a:c2:07:
                    3c:4f:22:8b:99:67:af:19:a2:00:73:ff:25:3e:2f:
                    47:a7:a5:1a:32:1b:a4:28:d0:cb:b5:aa:d4:06:09:
                    f5:fd:a3:94:54:ac:61:2f:98:df:8f:87:d3:e5:f5:
                    a8:6f:74:8d:3a:2d:cf:a5:c5:91:8d:36:57:5d:69:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:4D:F5:6B:90:BF:C8:92:57:A4:12:02:9C:49:05:86:E3:A3:80:A5
            X509v3 Authority Key Identifier:
                keyid:94:30:6F:68:AE:A4:BA:E1:24:FA:C8:5F:2C:9A:A3:F5:AE:85:01:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lDBvaK6kuuEk-shfLJqj9a6FARM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/5fd88e-ffb6-4652-a990-3d8bc89b4427/1/lDBvaK6kuuEk-shfLJqj9a6FARM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:3d:cc:38:fe:e4:18:51:52:0d:fb:4f:df:e2:51:cf:fe:ed:
         ca:22:76:d9:b9:7a:ea:7b:fd:7f:19:bd:64:bc:24:d8:cd:52:
         30:99:64:20:97:c5:08:5f:e2:74:11:c5:6c:a7:08:8d:d2:bd:
         20:3a:2e:37:19:1a:d1:8e:5f:de:00:1d:91:4f:cd:2d:a3:e4:
         92:4f:61:e0:12:80:ae:7c:08:5a:8d:38:5b:78:fc:62:95:25:
         31:bb:60:c3:dc:35:98:a0:b1:ec:34:03:05:19:5d:89:f4:41:
         2c:b9:f5:cd:2d:ec:f1:39:32:dc:83:b8:b1:9e:d4:f3:26:98:
         19:ab:bd:1e:19:d4:39:4e:76:77:66:76:68:12:4a:19:89:9b:
         3d:9a:5e:df:39:c8:2d:a7:01:c9:46:58:73:27:a2:bf:56:fe:
         e1:98:9a:04:e1:6d:cf:d1:f2:3e:f2:5f:a1:49:e2:4f:c5:2e:
         21:d0:5f:7a:bb:06:3e:ab:db:c6:0f:4b:7d:af:72:bf:db:f4:
         5c:01:b6:b1:08:ec:fe:74:7b:e9:2f:48:18:80:85:01:d8:57:
         1d:af:3c:ce:c3:a2:0b:d6:23:59:6c:71:f0:f2:8a:56:bf:53:
         93:a8:c6:59:38:be:b8:ee:be:aa:dc:a9:6e:34:72:e1:56:26:
         b8:48:8f:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pq+xeS2YFNL7UJaJQr8GGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MzA2ZjY4YWVhNGJhZTEyNGZhYzg1ZjJjOWFhM2Y1YWU4
NTAxMTMwHhcNMjYwNzI4MTcwMDQ0WhcNMjYwNzI5MTcwMDQ0WjAzMTEwLwYDVQQD
Eyg5ZTRkZjU2YjkwYmZjODkyNTdhNDEyMDI5YzQ5MDU4NmUzYTM4MGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzH7rovKmYpCvhahXfauZ20GNeZgD
DjBVC8WFd3xf9miIAuLSD01RoOsBwc//nMmz7Qt7BK3yp4B3TA+kxKKlHiUA6oFY
y21sGyjJFsRPxJ7dvMmDkCpaV7oChjIsG0dFfYI8uzTuIeZyxffytnqfGcTjl1gY
jte+0PX/LyNPmvpyA3pj0bfiz7JURle7dmZhkreyTBsiN8HUpumwSTEbUITdGDWG
iUEz13URyiHi4DIPtz1TVfskSywVGUGtqu8qwgc8TyKLmWevGaIAc/8lPi9Hp6Ua
MhukKNDLtarUBgn1/aOUVKxhL5jfj4fT5fWob3SNOi3PpcWRjTZXXWl33wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ5N9WuQv8iSV6QSApxJBYbjo4ClMB8GA1UdIwQY
MBaAFJQwb2iupLrhJPrIXyyao/WuhQETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAt
M2Q4YmM4OWI0NDI3LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC81ZmQ4OGUtZmZiNi00NjUyLWE5OTAtM2Q4YmM4OWI0NDI3
LzEvbERCdmFLNmt1dUVrLXNoZkxKcWo5YTZGQVJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD3MOP7k
GFFSDftP3+JRz/7tyiJ22bl66nv9fxm9ZLwk2M1SMJlkIJfFCF/idBHFbKcIjdK9
IDouNxka0Y5f3gAdkU/NLaPkkk9h4BKArnwIWo04W3j8YpUlMbtgw9w1mKCx7DQD
BRldifRBLLn1zS3s8Tky3IO4sZ7U8yaYGau9HhnUOU52d2Z2aBJKGYmbPZpe3znI
LacByUZYcyeiv1b+4ZiaBOFtz9HyPvJfoUniT8UuIdBfersGPqvbxg9Lfa9yv9v0
XAG2sQjs/nR76S9IGICFAdhXHa88zsOiC9YjWWxx8PKKVr9Tk6jGWTi+uO6+qtyp
bjRy4VYmuEiPTQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:22 2026 by rpki-client