Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
File:                     au27xW2vhfo_OHxgUtxy1dchO_c.mft (raw, json)
Hash identifier:          dPRin2v9KcOY1neyBdBxJ5eS1zq63NKKF9UO3heXyK8=
Subject key identifier:   03:57:D7:DF:94:8C:64:18:53:2F:C3:8B:1D:13:A5:FB:81:16:77:1B
Authority key identifier: 6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7
Certificate issuer:       /CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
Certificate serial:       019FAAF54A2B56F13ABC13FBDCB3C7985AAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
Manifest number:          044E
Signing time:             Tue 28 Jul 2026 23:00:29 +0000
Manifest this update:     Tue 28 Jul 2026 23:00:29 +0000
Manifest next update:     Wed 29 Jul 2026 23:00:29 +0000
Files and hashes:         1: Vd4ynB66sCEtEXPuV_O3x4PgW4A.roa (hash: 4UTBj4Zh6vSwwX6L/YeCbJsNnwD0s0UfjFqN/ZdD3NU=)
                          2: au27xW2vhfo_OHxgUtxy1dchO_c.crl (hash: qGSbZkJzvoi1JgVK0A0+v2y/b8VyYg9awv+Yff6SGmk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:4a:2b:56:f1:3a:bc:13:fb:dc:b3:c7:98:5a:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6aedbbc56daf85fa3f387c6052dc72d5d7213bf7
        Validity
            Not Before: Jul 28 23:00:29 2026 GMT
            Not After : Jul 29 23:00:29 2026 GMT
        Subject: CN=0357d7df948c6418532fc38b1d13a5fb8116771b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5c:0d:74:a1:41:cb:8d:6f:c1:93:c3:6c:e4:
                    fa:15:77:03:9c:f7:81:93:0b:03:28:39:2f:07:73:
                    7e:28:ea:6e:00:7f:72:77:95:77:a3:d3:0c:53:4c:
                    eb:68:19:da:98:40:f7:62:1f:60:3b:c1:e1:7c:28:
                    6d:f0:35:4d:67:5d:88:1d:0b:ec:b1:89:e7:87:a9:
                    31:40:51:ed:60:30:f1:a6:c5:54:58:a5:f8:36:f6:
                    95:aa:87:9a:b3:e9:e1:d5:80:3b:e1:99:f9:9b:0e:
                    8a:55:5d:f0:84:a7:24:21:25:d0:02:b2:9c:21:10:
                    76:62:24:36:fe:b2:16:ac:34:25:52:83:5a:24:0f:
                    ad:61:a1:ba:20:aa:08:b1:2c:dd:29:6d:41:73:7d:
                    a7:4a:04:5b:46:8a:cf:de:d4:5a:b4:02:85:0e:34:
                    c8:3d:3d:16:33:a9:6f:7f:43:3c:a1:81:6e:4c:26:
                    6c:20:6b:fe:dd:95:29:eb:d3:0d:03:8d:38:98:73:
                    76:bb:ac:58:18:75:dc:87:96:ae:36:5b:53:cb:86:
                    14:2e:dd:8a:2c:30:cb:bd:a8:13:fd:11:db:d5:e8:
                    3b:04:40:08:e6:1f:84:06:fa:06:85:44:76:e5:18:
                    e1:82:16:59:60:cf:3a:dd:f0:90:c4:c5:b4:93:7c:
                    e2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:57:D7:DF:94:8C:64:18:53:2F:C3:8B:1D:13:A5:FB:81:16:77:1B
            X509v3 Authority Key Identifier:
                keyid:6A:ED:BB:C5:6D:AF:85:FA:3F:38:7C:60:52:DC:72:D5:D7:21:3B:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/au27xW2vhfo_OHxgUtxy1dchO_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/34b791-ffd5-49f0-8718-49b75c18349a/1/au27xW2vhfo_OHxgUtxy1dchO_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:09:00:a8:85:dd:08:86:22:5e:70:62:1e:70:4d:de:ab:86:
         e4:94:9a:f6:23:0c:56:74:69:e1:29:a8:0e:a0:f1:c9:79:ec:
         1d:d1:e2:7f:a9:0b:6d:1b:22:9f:41:2c:d6:f1:77:09:ba:c6:
         0f:f2:a7:17:fc:e6:e5:9f:da:c4:bd:ec:99:c0:5e:fe:2f:94:
         e6:49:5b:b3:95:f8:92:c3:9d:4e:6f:84:b1:fe:ff:6c:35:f1:
         db:8a:19:e4:c4:84:ad:16:3a:a8:1d:29:82:2b:a4:d3:04:f1:
         f3:56:cd:0c:68:69:b3:47:1b:ab:ff:50:8c:c2:3a:ff:d7:98:
         e7:ff:cf:8c:e5:93:28:3d:22:af:52:c4:fe:4e:8e:5f:82:b6:
         26:1e:9d:fe:a4:ae:f1:c9:b4:2c:35:de:fd:55:21:40:61:0a:
         51:b9:92:73:2e:cb:ba:52:a4:3a:d7:97:1d:34:55:b1:88:5a:
         7e:04:47:7c:bc:f8:49:ce:27:9c:2b:43:60:91:ac:4d:d3:1d:
         44:a1:c8:03:6a:5b:39:d2:6e:3f:03:90:29:55:94:12:49:49:
         82:da:cd:73:a1:1f:0c:d5:59:7b:f4:07:02:fb:4b:d4:d3:9b:
         eb:f2:1c:3e:51:77:36:bb:88:67:e0:92:a1:e5:6c:3a:c0:99:
         90:e9:e3:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9UorVvE6vBP73LPHmFqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhZWRiYmM1NmRhZjg1ZmEzZjM4N2M2MDUyZGM3MmQ1ZDcy
MTNiZjcwHhcNMjYwNzI4MjMwMDI5WhcNMjYwNzI5MjMwMDI5WjAzMTEwLwYDVQQD
EygwMzU3ZDdkZjk0OGM2NDE4NTMyZmMzOGIxZDEzYTVmYjgxMTY3NzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVwNdKFBy41vwZPDbOT6FXcDnPeB
kwsDKDkvB3N+KOpuAH9yd5V3o9MMU0zraBnamED3Yh9gO8HhfCht8DVNZ12IHQvs
sYnnh6kxQFHtYDDxpsVUWKX4NvaVqoeas+nh1YA74Zn5mw6KVV3whKckISXQArKc
IRB2YiQ2/rIWrDQlUoNaJA+tYaG6IKoIsSzdKW1Bc32nSgRbRorP3tRatAKFDjTI
PT0WM6lvf0M8oYFuTCZsIGv+3ZUp69MNA404mHN2u6xYGHXch5auNltTy4YULt2K
LDDLvagT/RHb1eg7BEAI5h+EBvoGhUR25RjhghZZYM863fCQxMW0k3zi9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANX19+UjGQYUy/Dix0TpfuBFncbMB8GA1UdIwQY
MBaAFGrtu8Vtr4X6Pzh8YFLcctXXITv3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8zNGI3OTEtZmZkNS00OWYwLTg3MTgt
NDliNzVjMTgzNDlhLzEvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8zNGI3OTEtZmZkNS00OWYwLTg3MTgtNDliNzVjMTgzNDlh
LzEvYXUyN3hXMnZoZm9fT0h4Z1V0eHkxZGNoT19jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuQkAqIXd
CIYiXnBiHnBN3quG5JSa9iMMVnRp4SmoDqDxyXnsHdHif6kLbRsin0Es1vF3CbrG
D/KnF/zm5Z/axL3smcBe/i+U5klbs5X4ksOdTm+Esf7/bDXx24oZ5MSErRY6qB0p
giuk0wTx81bNDGhps0cbq/9QjMI6/9eY5//PjOWTKD0ir1LE/k6OX4K2Jh6d/qSu
8cm0LDXe/VUhQGEKUbmScy7LulKkOteXHTRVsYhafgRHfLz4Sc4nnCtDYJGsTdMd
RKHIA2pbOdJuPwOQKVWUEklJgtrNc6EfDNVZe/QHAvtL1NOb6/IcPlF3NruIZ+CS
oeVsOsCZkOnjJQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:30:02 2026 by rpki-client