Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
File:                     QfpvoAiYrTXuZ_taWhkQXbbB0es.mft (raw, json)
Hash identifier:          eH59VehOsVKoZeehWumpinaJHDPOZoRCsMiAKYssyik=
Subject key identifier:   AD:05:99:51:54:7A:71:B0:88:4B:AB:22:28:35:AF:8A:9C:F4:74:6B
Authority key identifier: 41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB
Certificate issuer:       /CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
Certificate serial:       019FA82C1A08AA5D83DB368893ADD53882DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
Manifest number:          01BF
Signing time:             Tue 28 Jul 2026 10:01:30 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:30 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:30 +0000
Files and hashes:         1: QfpvoAiYrTXuZ_taWhkQXbbB0es.crl (hash: oLCyN3c9u+0FN/ju5O74Bt2P+IuU7NJoIT6nxasANZ0=)
                          2: tUgLrvuas3A8ffagzPey3XzQQXM.roa (hash: nldIcz0O0+/Bm3m2OMxGodFkGt2Ggg8SRrnW6hRBtug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2c:1a:08:aa:5d:83:db:36:88:93:ad:d5:38:82:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41fa6fa00898ad35ee67fb5a5a19105db6c1d1eb
        Validity
            Not Before: Jul 28 10:01:30 2026 GMT
            Not After : Jul 29 10:01:30 2026 GMT
        Subject: CN=ad059951547a71b0884bab222835af8a9cf4746b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:8d:b2:90:c1:11:b2:05:cd:81:4c:95:a1:
                    33:f1:ef:0c:5a:16:85:ae:f4:0e:d0:27:8b:dd:ef:
                    ee:d3:19:c5:b5:a3:5c:79:c9:ed:30:28:ba:6b:a5:
                    0e:3c:10:35:f5:04:3b:73:20:33:13:48:6f:7b:32:
                    86:8b:c2:fb:84:9c:7b:52:fb:71:db:6a:76:74:02:
                    6a:0c:46:f9:5b:99:d1:3d:13:ab:45:7c:d8:07:5c:
                    12:32:14:ba:66:a0:d8:b2:0d:10:eb:2d:6a:a0:db:
                    61:a6:40:fe:b9:7f:a4:72:1f:b7:07:04:37:93:78:
                    04:79:87:39:54:e7:23:fb:b6:be:d0:38:e1:55:94:
                    5f:ee:e6:45:d3:1c:f0:bf:ef:d6:ae:b3:fa:99:72:
                    ff:9d:79:c6:15:27:22:e0:2d:6e:da:1b:dc:5f:9b:
                    23:8f:63:e7:d4:d0:69:14:d5:3f:ec:1e:f8:83:4e:
                    b9:e2:a3:19:ba:ef:21:4a:b9:c2:bc:2a:36:73:8d:
                    b6:6b:02:bb:04:5c:91:b2:9d:f2:49:80:1b:be:3e:
                    c5:c3:4b:c4:ec:09:97:f7:9c:03:e4:fa:17:12:f1:
                    25:1c:20:94:60:1f:3c:6e:5f:64:b3:07:ed:f7:7e:
                    fc:9d:5d:b0:4e:6a:e8:dd:65:bd:b5:23:1a:2c:e9:
                    5c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:05:99:51:54:7A:71:B0:88:4B:AB:22:28:35:AF:8A:9C:F4:74:6B
            X509v3 Authority Key Identifier:
                keyid:41:FA:6F:A0:08:98:AD:35:EE:67:FB:5A:5A:19:10:5D:B6:C1:D1:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QfpvoAiYrTXuZ_taWhkQXbbB0es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ce8943-0ea4-46a3-95fc-ad7a02f1946a/1/QfpvoAiYrTXuZ_taWhkQXbbB0es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:ce:11:56:cc:e7:b0:75:fc:27:0d:05:81:2a:f3:bf:b9:
         a3:33:59:6b:24:0b:3c:75:2c:d0:ce:2d:82:55:39:6a:2b:e9:
         00:df:02:ab:e3:db:a2:cd:e1:bf:be:d0:4f:31:18:50:6d:29:
         67:ab:6a:24:b9:c8:63:7f:55:35:de:cc:c6:76:42:8c:fe:ec:
         92:51:81:75:09:7e:0b:dc:61:15:07:e0:4f:77:6e:c5:a9:c0:
         34:97:f9:64:d0:af:be:09:9f:ee:40:ff:2a:32:d5:a2:47:95:
         82:df:c4:72:16:6f:d8:3c:fb:c9:e0:0b:a1:ba:c8:d1:bb:4f:
         08:97:9e:ce:bf:61:c7:59:88:30:04:c3:1e:4c:7d:c8:72:e5:
         ca:eb:37:6a:de:8e:bd:00:49:2c:c6:81:04:f6:d8:e9:67:11:
         46:73:ca:fc:70:96:85:a8:71:48:8a:62:8a:32:d6:51:c3:29:
         8c:3b:e5:8b:40:e3:74:01:b8:c5:5f:c7:71:ac:94:d3:3f:ab:
         84:bf:94:6d:71:21:71:35:9c:11:28:3b:c1:3c:ea:21:d9:b7:
         24:ce:15:2d:5d:80:ee:8c:b9:79:8a:7e:1e:5b:28:8d:83:61:
         43:a2:64:45:e9:00:ec:97:0b:32:2d:2f:1a:4e:2f:c6:15:2a:
         ea:37:7f:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oLBoIql2D2zaIk63VOILbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxZmE2ZmEwMDg5OGFkMzVlZTY3ZmI1YTVhMTkxMDVkYjZj
MWQxZWIwHhcNMjYwNzI4MTAwMTMwWhcNMjYwNzI5MTAwMTMwWjAzMTEwLwYDVQQD
EyhhZDA1OTk1MTU0N2E3MWIwODg0YmFiMjIyODM1YWY4YTljZjQ3NDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgCNspDBEbIFzYFMlaEz8e8MWhaF
rvQO0CeL3e/u0xnFtaNcecntMCi6a6UOPBA19QQ7cyAzE0hvezKGi8L7hJx7Uvtx
22p2dAJqDEb5W5nRPROrRXzYB1wSMhS6ZqDYsg0Q6y1qoNthpkD+uX+kch+3BwQ3
k3gEeYc5VOcj+7a+0DjhVZRf7uZF0xzwv+/WrrP6mXL/nXnGFSci4C1u2hvcX5sj
j2Pn1NBpFNU/7B74g0654qMZuu8hSrnCvCo2c422awK7BFyRsp3ySYAbvj7Fw0vE
7AmX95wD5PoXEvElHCCUYB88bl9kswft9378nV2wTmro3WW9tSMaLOlc7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0FmVFUenGwiEurIig1r4qc9HRrMB8GA1UdIwQY
MBaAFEH6b6AImK017mf7WloZEF22wdHrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jZTg5NDMtMGVhNC00NmEzLTk1ZmMt
YWQ3YTAyZjE5NDZhLzEvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jZTg5NDMtMGVhNC00NmEzLTk1ZmMtYWQ3YTAyZjE5NDZh
LzEvUWZwdm9BaVlyVFh1Wl90YVdoa1FYYmJCMGVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATP7OEVbM
57B1/CcNBYEq87+5ozNZayQLPHUs0M4tglU5aivpAN8Cq+Pbos3hv77QTzEYUG0p
Z6tqJLnIY39VNd7MxnZCjP7sklGBdQl+C9xhFQfgT3duxanANJf5ZNCvvgmf7kD/
KjLVokeVgt/EchZv2Dz7yeALobrI0btPCJeezr9hx1mIMATDHkx9yHLlyus3at6O
vQBJLMaBBPbY6WcRRnPK/HCWhahxSIpiijLWUcMpjDvli0DjdAG4xV/HcayU0z+r
hL+UbXEhcTWcESg7wTzqIdm3JM4VLV2A7oy5eYp+HlsojYNhQ6JkRekA7JcLMi0v
Gk4vxhUq6jd/7Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:51:46 2026 by rpki-client