Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
File:                     D1pCPdyX3TDeyLhnPCSWjic3JnY.mft (raw, json)
Hash identifier:          mo6MmEXSJEpjyO5XwTZ1ZDRhR1XI84EFznKN4ycOgT0=
Subject key identifier:   CC:89:9C:0E:35:94:19:F2:6C:40:50:01:05:A0:55:CC:A2:42:23:CF
Authority key identifier: 0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76
Certificate issuer:       /CN=0f5a423ddc97dd30dec8b8673c24968e27372676
Certificate serial:       019FA7868B22267CD0B884C1C9F4465F171F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
Manifest number:          0497
Signing time:             Tue 28 Jul 2026 07:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 07:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 07:00:40 +0000
Files and hashes:         1: D1pCPdyX3TDeyLhnPCSWjic3JnY.crl (hash: ayX9mKUIuDLR9Gdi5UONjz5jpzPNYnGGvnXTQYiolU8=)
                          2: qxsVFLWzutD4sIWMRN_71aQX3Gk.asa (hash: PzokN7IgeLCI/R1ls+fKOOoJuZd/ub5AjD723/KR19k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:86:8b:22:26:7c:d0:b8:84:c1:c9:f4:46:5f:17:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0f5a423ddc97dd30dec8b8673c24968e27372676
        Validity
            Not Before: Jul 28 07:00:40 2026 GMT
            Not After : Jul 29 07:00:40 2026 GMT
        Subject: CN=cc899c0e359419f26c40500105a055cca24223cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:52:4d:dd:58:82:16:cb:6b:35:67:5c:25:69:
                    66:4c:16:fe:21:c1:cf:06:c5:fc:44:e4:fe:05:2c:
                    70:0a:50:89:9e:f7:f4:d5:24:ee:04:93:7a:cc:09:
                    11:61:0d:0d:1a:68:d3:be:de:59:80:c1:fa:b1:bd:
                    09:d0:46:a0:90:c0:ae:35:b3:2c:2a:f5:43:22:31:
                    6d:b3:f3:90:2c:e2:75:4f:e3:8e:71:90:ae:9d:30:
                    db:0e:6f:10:c8:f7:56:fe:0a:78:48:5a:58:d3:5e:
                    6b:40:e3:15:67:25:6f:8a:7c:09:d7:6e:40:b5:fe:
                    1f:52:82:52:23:7e:4c:97:58:28:5e:fc:c2:a6:98:
                    de:5f:bc:26:3b:d9:98:22:7c:b3:02:be:26:53:ec:
                    67:8e:ce:32:8f:7b:1a:f0:72:1c:93:85:0d:95:b3:
                    7d:50:ca:72:0d:da:5a:44:15:e1:59:81:4f:85:47:
                    20:7e:48:17:34:4f:01:7f:5e:ab:4c:80:8c:d1:fa:
                    9c:42:98:97:ac:78:aa:bc:14:38:ef:83:2e:0d:a6:
                    2f:18:5e:4e:a7:42:82:87:80:91:a4:f2:fb:92:27:
                    5d:52:21:50:ab:5a:b2:1e:c2:d7:d0:8c:df:af:4b:
                    2d:28:72:ce:d6:1c:3d:77:0e:41:d9:08:e7:21:6d:
                    85:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:89:9C:0E:35:94:19:F2:6C:40:50:01:05:A0:55:CC:A2:42:23:CF
            X509v3 Authority Key Identifier:
                keyid:0F:5A:42:3D:DC:97:DD:30:DE:C8:B8:67:3C:24:96:8E:27:37:26:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D1pCPdyX3TDeyLhnPCSWjic3JnY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/37cd50-5769-4cdd-95ea-cf89be5a5fea/1/D1pCPdyX3TDeyLhnPCSWjic3JnY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:8f:d1:02:17:f9:0e:ba:a1:cb:21:bb:cd:b8:82:87:8a:b9:
         3b:06:6f:b2:74:39:71:29:1d:96:cc:fe:76:1e:46:8f:d4:19:
         c8:58:e4:fd:de:49:78:4f:25:fb:bd:d4:66:88:fc:44:7e:2b:
         2a:f4:28:be:13:8a:8d:a2:53:fd:70:55:9f:80:83:e0:ee:07:
         fd:88:10:59:5a:80:e9:71:1a:5c:aa:b5:9b:e9:ab:09:0f:aa:
         a8:ca:f1:a8:60:fc:3c:a6:27:bb:35:80:d0:d9:d9:fd:2e:5e:
         be:dd:f1:db:a9:3f:69:1f:97:83:17:bc:c7:12:f4:b8:4e:95:
         71:ac:bc:f3:3a:2c:93:94:15:6c:3e:c9:94:ca:65:b9:14:e4:
         bd:d2:16:38:86:38:f3:45:ca:f8:14:3f:d9:84:22:1a:a8:60:
         ef:95:1e:04:d2:7e:bb:cc:2e:75:3a:b7:cf:72:a5:be:1f:7b:
         a0:c6:50:67:50:a7:bc:16:d4:20:6f:a6:81:62:5c:00:f7:23:
         ae:b9:02:ed:f9:39:e6:45:c0:d6:a4:73:b7:92:02:26:71:98:
         b9:de:4e:20:9f:98:d0:10:8e:5a:8b:05:66:ad:6e:bd:04:e6:
         d6:6d:7c:a2:a3:71:3d:0a:34:6c:60:54:d7:e1:64:ad:32:b9:
         b9:eb:1c:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nhosiJnzQuITByfRGXxcfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmNWE0MjNkZGM5N2RkMzBkZWM4Yjg2NzNjMjQ5NjhlMjcz
NzI2NzYwHhcNMjYwNzI4MDcwMDQwWhcNMjYwNzI5MDcwMDQwWjAzMTEwLwYDVQQD
EyhjYzg5OWMwZTM1OTQxOWYyNmM0MDUwMDEwNWEwNTVjY2EyNDIyM2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFJN3ViCFstrNWdcJWlmTBb+IcHP
BsX8ROT+BSxwClCJnvf01STuBJN6zAkRYQ0NGmjTvt5ZgMH6sb0J0EagkMCuNbMs
KvVDIjFts/OQLOJ1T+OOcZCunTDbDm8QyPdW/gp4SFpY015rQOMVZyVvinwJ125A
tf4fUoJSI35Ml1goXvzCppjeX7wmO9mYInyzAr4mU+xnjs4yj3sa8HIck4UNlbN9
UMpyDdpaRBXhWYFPhUcgfkgXNE8Bf16rTICM0fqcQpiXrHiqvBQ474MuDaYvGF5O
p0KCh4CRpPL7kiddUiFQq1qyHsLX0Izfr0stKHLO1hw9dw5B2QjnIW2FiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMyJnA41lBnybEBQAQWgVcyiQiPPMB8GA1UdIwQY
MBaAFA9aQj3cl90w3si4Zzwklo4nNyZ2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDFwQ1BkeVgzVERleUxoblBDU1dqaWMzSm5ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8zN2NkNTAtNTc2OS00Y2RkLTk1ZWEt
Y2Y4OWJlNWE1ZmVhLzEvRDFwQ1BkeVgzVERleUxoblBDU1dqaWMzSm5ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8zN2NkNTAtNTc2OS00Y2RkLTk1ZWEtY2Y4OWJlNWE1ZmVh
LzEvRDFwQ1BkeVgzVERleUxoblBDU1dqaWMzSm5ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoI/RAhf5
DrqhyyG7zbiCh4q5OwZvsnQ5cSkdlsz+dh5Gj9QZyFjk/d5JeE8l+73UZoj8RH4r
KvQovhOKjaJT/XBVn4CD4O4H/YgQWVqA6XEaXKq1m+mrCQ+qqMrxqGD8PKYnuzWA
0NnZ/S5evt3x26k/aR+Xgxe8xxL0uE6Vcay88zosk5QVbD7JlMpluRTkvdIWOIY4
80XK+BQ/2YQiGqhg75UeBNJ+u8wudTq3z3Klvh97oMZQZ1CnvBbUIG+mgWJcAPcj
rrkC7fk55kXA1qRzt5ICJnGYud5OIJ+Y0BCOWosFZq1uvQTm1m18oqNxPQo0bGBU
1+FkrTK5uescsw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 17:09:54 2026 by rpki-client