Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
File:                     FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft (raw, json)
Hash identifier:          tXGvCn280ba9+yyyMFL/Fgaky1z3TXSFdHx/wJUORCM=
Subject key identifier:   3F:BF:76:EB:9F:26:3B:39:B8:0B:FB:56:44:E5:3C:A4:27:2D:E4:5C
Authority key identifier: 16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C
Certificate issuer:       /CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
Certificate serial:       019FAC75B809213AD37DF186FB0D706FD557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
Manifest number:          0CF5
Signing time:             Wed 29 Jul 2026 06:00:23 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:23 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:23 +0000
Files and hashes:         1: FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl (hash: W7U7nGgmqEjzJ6R0VcibzQKJygDxNfBuOp+gB5/uo78=)
                          2: nZ2dtzLbRNK4kvMX3dm8jkXAeCw.roa (hash: o/RSJuyZGLHYsPriUa/ugWwYnH5mecTKfBjhXcICjvA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:b8:09:21:3a:d3:7d:f1:86:fb:0d:70:6f:d5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16d31b2d899d6eb2bcb7a4d78cc3100dce30c90c
        Validity
            Not Before: Jul 29 06:00:23 2026 GMT
            Not After : Jul 30 06:00:23 2026 GMT
        Subject: CN=3fbf76eb9f263b39b80bfb5644e53ca4272de45c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:5c:59:00:a7:cf:d3:ef:c9:3e:e6:9d:f0:
                    0d:05:98:fb:88:00:87:bc:55:dd:8a:27:94:f3:1e:
                    a6:0c:81:23:cf:e0:d2:6f:93:53:c7:f7:58:f0:ba:
                    f6:43:4a:60:d5:e6:de:af:79:76:30:80:f4:91:9f:
                    db:cd:42:00:06:39:04:4f:60:3c:f2:51:66:2d:16:
                    3d:ee:dc:6a:a1:3d:79:8f:8c:95:b0:50:f5:02:c8:
                    e0:d4:5f:a7:dd:00:f7:83:6c:6f:00:0a:09:7e:47:
                    01:16:f8:33:0a:fa:f5:57:e9:ec:1f:c9:04:7e:70:
                    dd:da:9a:d8:10:70:ae:b0:af:c6:c9:d2:62:d2:23:
                    12:ce:9f:29:ff:fa:00:05:73:de:64:75:9c:bd:39:
                    8c:9f:d2:f4:94:18:7f:c7:1d:96:6e:1d:d7:33:72:
                    79:99:a0:4c:b6:c6:83:42:cb:11:b9:ce:1e:5c:d5:
                    fa:6b:b7:be:9b:12:c6:4a:88:37:8c:1c:62:f0:94:
                    a2:42:c6:e2:a1:08:f3:8f:49:54:10:4b:cf:d1:ff:
                    b2:57:e5:07:37:9e:d4:1b:5b:ea:45:eb:8e:f7:cc:
                    b6:36:03:eb:cc:e2:eb:f4:82:5c:5f:29:0f:18:45:
                    56:85:86:94:36:b6:55:34:09:8b:7f:eb:8c:f1:14:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:BF:76:EB:9F:26:3B:39:B8:0B:FB:56:44:E5:3C:A4:27:2D:E4:5C
            X509v3 Authority Key Identifier:
                keyid:16:D3:1B:2D:89:9D:6E:B2:BC:B7:A4:D7:8C:C3:10:0D:CE:30:C9:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FtMbLYmdbrK8t6TXjMMQDc4wyQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/7c3a18-0ec9-4157-bf5a-5207f664df21/1/FtMbLYmdbrK8t6TXjMMQDc4wyQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:b0:57:5f:e4:7f:4a:d0:e5:97:f2:b5:ad:01:60:59:b0:b9:
         21:1a:ae:c4:27:6d:6e:3c:ff:d0:46:a2:3b:6a:69:92:84:43:
         5b:07:11:2b:2e:03:cf:69:45:20:10:c4:60:2a:9c:1d:80:bb:
         4a:7e:94:f3:70:74:90:19:1f:63:aa:35:43:ab:69:25:26:6d:
         53:ef:80:50:46:e0:1f:ad:63:92:fd:09:7a:46:4d:0a:1e:ab:
         72:e1:f0:87:b3:55:53:81:59:f3:bc:05:bd:4b:4b:ce:b5:70:
         aa:2a:8a:0b:88:1e:a0:e4:81:77:d8:c4:2d:bd:3d:a1:d1:77:
         ab:5f:f8:61:23:a0:e9:4d:12:8c:9c:aa:13:e6:d6:98:e4:73:
         16:65:d7:71:c3:9f:db:af:dd:a6:77:85:7c:eb:d2:73:ea:71:
         8d:e7:6c:01:3c:f1:c4:d9:15:cf:f4:7f:60:e0:2c:0c:46:d1:
         24:c4:34:a5:b9:d6:e6:fc:6a:1b:49:17:1d:9a:6c:e6:2d:ed:
         45:8b:08:35:f5:ab:b1:28:44:5d:6d:91:77:f2:61:f8:23:9e:
         fd:09:ff:4e:e7:cb:21:87:e0:49:c9:32:fa:57:c9:b8:f1:9c:
         62:4a:12:df:fa:45:11:41:06:d2:21:74:65:b7:19:2e:68:27:
         d6:f2:d0:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdbgJITrTffGG+w1wb9VXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2ZDMxYjJkODk5ZDZlYjJiY2I3YTRkNzhjYzMxMDBkY2Uz
MGM5MGMwHhcNMjYwNzI5MDYwMDIzWhcNMjYwNzMwMDYwMDIzWjAzMTEwLwYDVQQD
EygzZmJmNzZlYjlmMjYzYjM5YjgwYmZiNTY0NGU1M2NhNDI3MmRlNDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QFcWQCnz9PvyT7mnfANBZj7iACH
vFXdiieU8x6mDIEjz+DSb5NTx/dY8Lr2Q0pg1eber3l2MID0kZ/bzUIABjkET2A8
8lFmLRY97txqoT15j4yVsFD1Asjg1F+n3QD3g2xvAAoJfkcBFvgzCvr1V+nsH8kE
fnDd2prYEHCusK/GydJi0iMSzp8p//oABXPeZHWcvTmMn9L0lBh/xx2Wbh3XM3J5
maBMtsaDQssRuc4eXNX6a7e+mxLGSog3jBxi8JSiQsbioQjzj0lUEEvP0f+yV+UH
N57UG1vqReuO98y2NgPrzOLr9IJcXykPGEVWhYaUNrZVNAmLf+uM8RSR3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD+/duufJjs5uAv7VkTlPKQnLeRcMB8GA1UdIwQY
MBaAFBbTGy2JnW6yvLek14zDEA3OMMkMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEt
NTIwN2Y2NjRkZjIxLzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS83YzNhMTgtMGVjOS00MTU3LWJmNWEtNTIwN2Y2NjRkZjIx
LzEvRnRNYkxZbWRicks4dDZUWGpNTVFEYzR3eVF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm7BXX+R/
StDll/K1rQFgWbC5IRquxCdtbjz/0EaiO2ppkoRDWwcRKy4Dz2lFIBDEYCqcHYC7
Sn6U83B0kBkfY6o1Q6tpJSZtU++AUEbgH61jkv0JekZNCh6rcuHwh7NVU4FZ87wF
vUtLzrVwqiqKC4geoOSBd9jELb09odF3q1/4YSOg6U0SjJyqE+bWmORzFmXXccOf
26/dpneFfOvSc+pxjedsATzxxNkVz/R/YOAsDEbRJMQ0pbnW5vxqG0kXHZps5i3t
RYsINfWrsShEXW2Rd/Jh+COe/Qn/TufLIYfgScky+lfJuPGcYkoS3/pFEUEG0iF0
ZbcZLmgn1vLQQg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:37 2026 by rpki-client