Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
File:                     7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft (raw, json)
Hash identifier:          GR3A/iDF1DtyABiBkG/wqTmfXjyJEr/JpbhNZ3eh4m4=
Subject key identifier:   2F:6F:37:A1:A6:C2:4F:D3:9B:A1:F5:5B:BA:97:56:DD:06:BF:2A:2E
Authority key identifier: ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05
Certificate issuer:       /CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
Certificate serial:       019FAB632A9D0D0AC5B1A925A6D7D862F42F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
Manifest number:          02F3
Signing time:             Wed 29 Jul 2026 01:00:30 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:30 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:30 +0000
Files and hashes:         1: 7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl (hash: +1WE/SgXMQiB/IQ8/InxRiNOEjodyVewZoXf1IBKzZg=)
                          2: TalCKAxab_gMMHeJvcq48KPYlOs.roa (hash: yPK8jifbQaBLYT5U8Ae5k9YG7IJ/bOiLPK0w75h7kpk=)
                          3: mglUegYtWaUyDz_-mcfoeZK3iuc.roa (hash: 35GBN0aP6FdxTviok26NqcLKHwN12VPItzfJaY9sv8A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:2a:9d:0d:0a:c5:b1:a9:25:a6:d7:d8:62:f4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed1cf1dc514e7f38a2387d82bdbbef2fb46c1305
        Validity
            Not Before: Jul 29 01:00:30 2026 GMT
            Not After : Jul 30 01:00:30 2026 GMT
        Subject: CN=2f6f37a1a6c24fd39ba1f55bba9756dd06bf2a2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:08:ce:d0:8b:aa:48:d9:50:5b:70:a5:f8:5a:
                    4a:d3:15:cb:6a:aa:55:7c:4d:bd:1d:af:fe:ee:88:
                    3b:1e:93:ae:43:b3:35:4b:eb:34:5e:c0:f4:e5:99:
                    bf:61:e8:fc:ec:51:e9:fb:5f:4c:12:e3:2f:70:01:
                    39:ba:8a:e8:12:a3:cd:d3:cb:6a:47:9a:d0:18:d7:
                    aa:8c:65:18:23:23:9f:3c:06:11:f3:9d:71:0e:dd:
                    d4:40:31:40:b6:24:89:c1:50:9d:39:ac:d7:3c:4f:
                    f6:94:d7:21:fc:55:2a:5f:0b:ec:51:df:97:c7:9c:
                    46:2a:ba:1d:bd:8f:c4:f5:46:40:1a:9b:15:b8:01:
                    17:10:d0:ff:45:24:7d:bd:b9:ea:25:7a:5e:54:d9:
                    2f:85:78:0f:a4:3d:ab:b6:7e:9f:4b:2a:1f:5d:8e:
                    e8:35:ec:3f:73:57:e0:cd:34:2b:0f:61:26:66:4d:
                    b3:fa:0b:be:c2:7a:82:f8:46:76:6b:30:b3:d8:8f:
                    35:76:f7:28:ad:36:19:1d:47:08:bc:7a:c4:00:ec:
                    84:07:a5:ab:fb:c7:e4:40:38:58:69:4e:25:25:81:
                    88:3d:a5:f3:13:30:31:84:c8:1a:88:6b:1c:78:fb:
                    1a:a3:66:f5:66:59:42:c4:93:5a:95:22:2b:6e:79:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:6F:37:A1:A6:C2:4F:D3:9B:A1:F5:5B:BA:97:56:DD:06:BF:2A:2E
            X509v3 Authority Key Identifier:
                keyid:ED:1C:F1:DC:51:4E:7F:38:A2:38:7D:82:BD:BB:EF:2F:B4:6C:13:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Rzx3FFOfziiOH2CvbvvL7RsEwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/9b928f-cc52-4121-b492-e6f9e4168bd2/1/7Rzx3FFOfziiOH2CvbvvL7RsEwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:d2:a7:01:9f:52:4a:48:b7:ca:f9:a7:dc:ff:c2:ba:6e:68:
         4c:51:ae:cb:35:18:0c:a5:d3:b6:d9:a9:78:2b:08:52:d2:01:
         3c:6a:3f:ba:4f:90:71:33:23:5f:83:3f:7d:6e:8d:5d:52:87:
         9a:8c:0d:08:b7:ec:8d:80:c1:ca:ff:af:17:d5:3f:dd:96:bd:
         cc:6a:0d:9c:2e:a5:9b:37:2a:e8:0f:b2:18:98:13:c4:38:7d:
         26:15:ce:ff:0e:49:ea:fe:68:ee:16:da:d3:b7:b3:54:5d:20:
         25:e4:a6:50:e3:59:d3:33:e5:a5:cc:3e:4e:58:72:e2:04:dd:
         81:48:c4:52:52:e5:74:81:21:d1:7c:08:35:07:16:d8:91:17:
         b5:cf:54:89:b1:66:62:21:58:89:a6:ea:9c:1f:79:e6:6d:df:
         00:a8:b7:2b:19:29:67:de:41:5f:5d:86:38:55:0b:8a:26:ab:
         de:ba:bd:9f:c4:82:f2:5f:f1:3a:c0:9d:4a:76:3b:7c:51:89:
         3e:87:fd:fb:ea:9f:d2:fa:4b:18:6e:5e:20:82:fc:e6:3b:8f:
         17:0e:48:14:83:0f:28:33:87:f2:05:66:2e:89:d2:2d:59:90:
         b8:88:52:14:51:6b:03:18:99:49:9b:e7:5f:34:e4:86:8c:be:
         81:f9:11:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rYyqdDQrFsaklptfYYvQvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkMWNmMWRjNTE0ZTdmMzhhMjM4N2Q4MmJkYmJlZjJmYjQ2
YzEzMDUwHhcNMjYwNzI5MDEwMDMwWhcNMjYwNzMwMDEwMDMwWjAzMTEwLwYDVQQD
EygyZjZmMzdhMWE2YzI0ZmQzOWJhMWY1NWJiYTk3NTZkZDA2YmYyYTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wjO0IuqSNlQW3Cl+FpK0xXLaqpV
fE29Ha/+7og7HpOuQ7M1S+s0XsD05Zm/Yej87FHp+19MEuMvcAE5uoroEqPN08tq
R5rQGNeqjGUYIyOfPAYR851xDt3UQDFAtiSJwVCdOazXPE/2lNch/FUqXwvsUd+X
x5xGKrodvY/E9UZAGpsVuAEXEND/RSR9vbnqJXpeVNkvhXgPpD2rtn6fSyofXY7o
New/c1fgzTQrD2EmZk2z+gu+wnqC+EZ2azCz2I81dvcorTYZHUcIvHrEAOyEB6Wr
+8fkQDhYaU4lJYGIPaXzEzAxhMgaiGscePsao2b1ZllCxJNalSIrbnncjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9vN6Gmwk/Tm6H1W7qXVt0GvyouMB8GA1UdIwQY
MBaAFO0c8dxRTn84ojh9gr277y+0bBMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1J6eDNGRk9memlpT0gyQ3ZidnZMN1JzRXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS85YjkyOGYtY2M1Mi00MTIxLWI0OTIt
ZTZmOWU0MTY4YmQyLzEvN1J6eDNGRk9memlpT0gyQ3ZidnZMN1JzRXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS85YjkyOGYtY2M1Mi00MTIxLWI0OTItZTZmOWU0MTY4YmQy
LzEvN1J6eDNGRk9memlpT0gyQ3ZidnZMN1JzRXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo9KnAZ9S
Ski3yvmn3P/Cum5oTFGuyzUYDKXTttmpeCsIUtIBPGo/uk+QcTMjX4M/fW6NXVKH
mowNCLfsjYDByv+vF9U/3Za9zGoNnC6lmzcq6A+yGJgTxDh9JhXO/w5J6v5o7hba
07ezVF0gJeSmUONZ0zPlpcw+Tlhy4gTdgUjEUlLldIEh0XwINQcW2JEXtc9UibFm
YiFYiabqnB955m3fAKi3KxkpZ95BX12GOFULiiar3rq9n8SC8l/xOsCdSnY7fFGJ
Pof9++qf0vpLGG5eIIL85juPFw5IFIMPKDOH8gVmLonSLVmQuIhSFFFrAxiZSZvn
XzTkhoy+gfkRjw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:49:13 2026 by rpki-client