Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
File:                     mlEGkoBNYAeMHQFcAHdPONvAfr0.mft (raw, json)
Hash identifier:          MXeBYLGjnG5SIx+PEAQWn9mZSz7jxbaTQ2XKAJnfMLY=
Subject key identifier:   F3:A0:29:A8:E5:E0:06:05:C0:A4:F5:A5:12:3F:73:9F:D8:41:C1:A5
Authority key identifier: 9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD
Certificate issuer:       /CN=9a510692804d60078c1d015c00774f38dbc07ebd
Certificate serial:       019FA86206386C865B7E918AF62011B55B2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
Manifest number:          B7
Signing time:             Tue 28 Jul 2026 11:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:24 +0000
Files and hashes:         1: 3A8QZAqWsdxrPNNzp5C7TFk45SU.asa (hash: bhh2UJAu+X5vBhmW+P6+ozbP7AE7FWcC+x2YnaL5tFQ=)
                          2: mlEGkoBNYAeMHQFcAHdPONvAfr0.crl (hash: vqtCgiYF4EAd28IO7/icViAjmUpBh9np4kgd/8jprRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:62:06:38:6c:86:5b:7e:91:8a:f6:20:11:b5:5b:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a510692804d60078c1d015c00774f38dbc07ebd
        Validity
            Not Before: Jul 28 11:00:24 2026 GMT
            Not After : Jul 29 11:00:24 2026 GMT
        Subject: CN=f3a029a8e5e00605c0a4f5a5123f739fd841c1a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a0:d8:9f:00:3a:b0:6d:6a:af:26:37:64:73:
                    e3:3c:fd:54:db:f1:b6:a8:0d:b3:27:39:42:da:36:
                    0a:48:50:98:f5:45:ba:df:53:10:ea:bd:11:76:f9:
                    34:88:55:00:63:34:66:da:47:87:26:0d:b4:a9:2a:
                    cf:04:f4:2b:c9:68:72:96:49:1b:b1:69:e1:78:88:
                    24:4e:93:5d:9d:83:d1:d4:f3:32:cb:25:39:d1:36:
                    46:55:de:80:5e:e3:4e:27:63:d0:63:30:ee:ae:25:
                    8e:40:1e:05:d0:88:cc:46:36:ce:23:3a:66:3e:be:
                    48:61:f3:5b:c9:5f:ba:55:c4:8e:df:7d:8f:d4:07:
                    05:22:e6:03:51:e0:7c:86:c8:8f:c9:76:4c:db:ab:
                    12:e4:01:f0:d6:ce:7c:fd:7c:f3:1d:70:18:30:9b:
                    a1:e4:9d:76:49:a6:61:7b:1b:80:ed:cb:32:b8:6a:
                    52:57:55:d5:f2:d0:04:87:c2:47:37:03:41:47:dd:
                    d7:4f:7d:fa:e1:60:dd:ed:fe:79:1d:cb:0e:b8:53:
                    d4:14:2f:27:a7:28:ae:5a:4a:fd:78:0b:39:27:5c:
                    82:85:7a:b5:39:d8:e5:be:6c:36:17:f8:c5:98:9a:
                    fa:11:6b:fa:67:ba:40:7b:88:e2:8a:17:eb:98:80:
                    fc:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A0:29:A8:E5:E0:06:05:C0:A4:F5:A5:12:3F:73:9F:D8:41:C1:A5
            X509v3 Authority Key Identifier:
                keyid:9A:51:06:92:80:4D:60:07:8C:1D:01:5C:00:77:4F:38:DB:C0:7E:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mlEGkoBNYAeMHQFcAHdPONvAfr0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/6da603-1d8d-4eb2-8042-dc38deee1bc0/1/mlEGkoBNYAeMHQFcAHdPONvAfr0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cc:d9:60:d8:c6:d9:99:36:ca:fa:db:7c:d0:c4:a7:68:61:ed:
         59:4f:fe:63:97:c5:f4:c8:d8:d4:62:af:e0:09:d8:d4:f4:f5:
         88:3b:35:26:29:9c:3e:aa:d7:06:b6:58:d1:d2:2c:50:2b:ca:
         48:93:d3:0f:b8:71:f1:9f:bd:b2:fa:bb:86:51:14:82:c1:4f:
         6f:31:07:27:7f:ee:9a:9f:75:12:bc:c0:b3:1b:b3:72:b7:8f:
         3a:0c:c0:3b:fa:8a:e4:94:7c:b8:6b:c8:ce:db:ce:2f:cc:17:
         c1:da:42:55:9b:e7:c4:dc:d3:f2:16:ae:8f:10:17:fe:35:74:
         13:d2:c2:e2:b1:67:0d:74:83:fc:59:be:c6:b4:71:77:fe:b8:
         e8:0c:70:39:5f:b9:a6:3b:53:bd:5b:84:07:d8:da:c6:dc:62:
         f3:ba:9c:25:b3:85:27:bc:e3:3a:31:77:82:96:a5:40:ca:5e:
         e9:c8:b8:ef:45:b7:e7:bc:87:2c:ec:ee:98:53:58:53:2f:3b:
         d1:2a:db:3f:08:7a:57:16:84:7a:b6:46:ce:d7:78:c9:4e:7b:
         c6:dd:39:63:4a:d6:7a:73:ad:f0:8a:8f:c3:5f:b3:bb:c1:bd:
         48:80:17:d4:63:05:ea:a8:9e:1a:cd:21:d6:90:7e:d6:b2:21:
         3a:e2:8e:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYgY4bIZbfpGK9iARtVsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhNTEwNjkyODA0ZDYwMDc4YzFkMDE1YzAwNzc0ZjM4ZGJj
MDdlYmQwHhcNMjYwNzI4MTEwMDI0WhcNMjYwNzI5MTEwMDI0WjAzMTEwLwYDVQQD
EyhmM2EwMjlhOGU1ZTAwNjA1YzBhNGY1YTUxMjNmNzM5ZmQ4NDFjMWE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKDYnwA6sG1qryY3ZHPjPP1U2/G2
qA2zJzlC2jYKSFCY9UW631MQ6r0Rdvk0iFUAYzRm2keHJg20qSrPBPQryWhylkkb
sWnheIgkTpNdnYPR1PMyyyU50TZGVd6AXuNOJ2PQYzDuriWOQB4F0IjMRjbOIzpm
Pr5IYfNbyV+6VcSO332P1AcFIuYDUeB8hsiPyXZM26sS5AHw1s58/XzzHXAYMJuh
5J12SaZhexuA7csyuGpSV1XV8tAEh8JHNwNBR93XT3364WDd7f55HcsOuFPUFC8n
pyiuWkr9eAs5J1yChXq1Odjlvmw2F/jFmJr6EWv6Z7pAe4jiihfrmID8FQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOgKajl4AYFwKT1pRI/c5/YQcGlMB8GA1UdIwQY
MBaAFJpRBpKATWAHjB0BXAB3TzjbwH69MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWxFR2tvQk5ZQWVNSFFGY0FIZFBPTnZBZnIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy82ZGE2MDMtMWQ4ZC00ZWIyLTgwNDIt
ZGMzOGRlZWUxYmMwLzEvbWxFR2tvQk5ZQWVNSFFGY0FIZFBPTnZBZnIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy82ZGE2MDMtMWQ4ZC00ZWIyLTgwNDItZGMzOGRlZWUxYmMw
LzEvbWxFR2tvQk5ZQWVNSFFGY0FIZFBPTnZBZnIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzNlg2MbZ
mTbK+tt80MSnaGHtWU/+Y5fF9MjY1GKv4AnY1PT1iDs1JimcPqrXBrZY0dIsUCvK
SJPTD7hx8Z+9svq7hlEUgsFPbzEHJ3/ump91ErzAsxuzcrePOgzAO/qK5JR8uGvI
ztvOL8wXwdpCVZvnxNzT8haujxAX/jV0E9LC4rFnDXSD/Fm+xrRxd/646AxwOV+5
pjtTvVuEB9jaxtxi87qcJbOFJ7zjOjF3gpalQMpe6ci470W357yHLOzumFNYUy87
0SrbPwh6VxaEerZGztd4yU57xt05Y0rWenOt8IqPw1+zu8G9SIAX1GMF6qieGs0h
1pB+1rIhOuKO7w==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:32 2026 by rpki-client