Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
File:                     7UV_lpwP7DW5JtD3KkfdRLizAPU.mft (raw, json)
Hash identifier:          jvefSSy5VS0w1gS0SQRQGf4Y/bbYd6W4pnnDLXZwvQA=
Subject key identifier:   44:57:F7:65:9D:78:44:5B:74:21:82:36:E2:30:C3:5E:B8:F3:1A:DA
Authority key identifier: ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5
Certificate issuer:       /CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
Certificate serial:       019FAA1A65057B698FBF04535E091611E8AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
Manifest number:          19D7
Signing time:             Tue 28 Jul 2026 19:01:24 +0000
Manifest this update:     Tue 28 Jul 2026 19:01:24 +0000
Manifest next update:     Wed 29 Jul 2026 19:01:24 +0000
Files and hashes:         1: 7UV_lpwP7DW5JtD3KkfdRLizAPU.crl (hash: o3ArHgr8F6VupcTbSRjTr6Qfag0Lq/qbdkhAxdYNm5s=)
                          2: kp3XcltFj2ImgK1gmThwB5Z5ALI.roa (hash: iZZ4tNwYuV01qlmFMVC72STH5TgwevyCIeA37xL2VKo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:1a:65:05:7b:69:8f:bf:04:53:5e:09:16:11:e8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed457f969c0fec35b926d0f72a47dd44b8b300f5
        Validity
            Not Before: Jul 28 19:01:24 2026 GMT
            Not After : Jul 29 19:01:24 2026 GMT
        Subject: CN=4457f7659d78445b74218236e230c35eb8f31ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:54:cc:42:91:b7:ea:62:ff:65:ad:53:5b:24:
                    03:eb:82:18:8f:29:d6:5f:32:5d:6c:dc:2b:36:5e:
                    c2:f1:c7:95:61:7c:be:25:c6:10:56:7d:3a:4a:cd:
                    5b:8b:e0:0b:10:6a:33:f1:3e:49:68:1a:9a:16:4c:
                    38:a8:98:4a:18:f1:52:76:6c:c7:4f:2a:84:cc:0d:
                    9e:02:92:08:bc:29:95:56:fa:1b:c2:2b:5d:40:90:
                    ad:32:0f:01:7a:0d:fd:91:5d:98:f2:c5:aa:84:44:
                    bd:46:9f:52:0d:e1:92:a7:e0:d5:bd:8d:77:4f:26:
                    a6:35:e5:16:50:70:f9:73:01:55:a6:22:c1:d1:f0:
                    31:f0:14:c9:94:a9:3e:18:6f:00:0b:3a:84:94:ce:
                    b6:35:88:ad:4c:e7:37:2c:ce:06:73:75:75:26:3e:
                    03:cd:69:30:a4:54:38:07:fa:e0:53:4a:44:00:70:
                    7a:fe:3d:2d:08:1c:0f:f1:fd:86:d8:c4:86:25:40:
                    15:99:d4:9b:80:29:3e:ec:a3:6f:de:d0:3f:6a:5c:
                    42:78:7d:4c:98:27:3c:27:4e:09:35:bc:a0:a5:46:
                    13:21:f4:3b:41:e7:30:ce:72:75:07:eb:bf:db:16:
                    20:c2:5f:c7:04:7a:e3:ca:61:1c:dd:f6:b1:3f:b3:
                    3d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:57:F7:65:9D:78:44:5B:74:21:82:36:E2:30:C3:5E:B8:F3:1A:DA
            X509v3 Authority Key Identifier:
                keyid:ED:45:7F:96:9C:0F:EC:35:B9:26:D0:F7:2A:47:DD:44:B8:B3:00:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7UV_lpwP7DW5JtD3KkfdRLizAPU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9268bf-25e9-4c38-baf7-e47ebee2c020/1/7UV_lpwP7DW5JtD3KkfdRLizAPU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:87:51:27:64:f4:8a:96:15:12:c0:e2:15:ab:38:e0:98:92:
         78:c3:f6:58:4e:0c:75:1b:e4:0a:04:b8:a6:96:fd:6c:88:b9:
         34:7f:db:06:5c:93:20:82:d7:39:c0:f6:a2:e7:a1:0b:5a:de:
         b3:c7:15:04:d7:d6:66:a8:62:f1:fe:ba:be:5b:f6:e7:7d:f0:
         03:31:dd:6b:8d:85:5c:0a:c5:b2:43:23:4d:0c:ab:a0:c8:cc:
         60:54:99:8f:3a:88:3a:62:32:f4:3d:c5:0f:dd:12:fa:61:d3:
         a2:92:26:36:39:57:55:b7:4d:93:7d:f3:1a:cb:89:2a:2e:4b:
         2a:22:ad:2c:11:52:f0:99:59:60:ce:d5:ec:32:e4:86:be:9a:
         36:f7:bf:93:e8:25:56:7d:71:9a:a4:5a:bf:f4:6a:5e:dc:b9:
         d2:ce:aa:be:36:c7:84:14:b8:e1:46:d6:b7:e6:47:1d:f6:09:
         fa:fb:2e:ac:bb:7c:b6:02:f9:5c:88:43:9f:25:75:49:0d:cc:
         e5:06:9c:d1:96:26:2e:b7:79:51:99:59:6f:96:92:09:1e:c4:
         4c:1b:d5:02:b7:35:e2:77:05:42:97:b9:af:e4:d7:dd:3d:f5:
         8f:3e:dd:44:cb:e5:f1:13:5d:24:49:72:69:22:34:b3:02:89:
         ae:aa:37:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qGmUFe2mPvwRTXgkWEeiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkNDU3Zjk2OWMwZmVjMzViOTI2ZDBmNzJhNDdkZDQ0Yjhi
MzAwZjUwHhcNMjYwNzI4MTkwMTI0WhcNMjYwNzI5MTkwMTI0WjAzMTEwLwYDVQQD
Eyg0NDU3Zjc2NTlkNzg0NDViNzQyMTgyMzZlMjMwYzM1ZWI4ZjMxYWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVTMQpG36mL/Za1TWyQD64IYjynW
XzJdbNwrNl7C8ceVYXy+JcYQVn06Ss1bi+ALEGoz8T5JaBqaFkw4qJhKGPFSdmzH
TyqEzA2eApIIvCmVVvobwitdQJCtMg8Beg39kV2Y8sWqhES9Rp9SDeGSp+DVvY13
TyamNeUWUHD5cwFVpiLB0fAx8BTJlKk+GG8ACzqElM62NYitTOc3LM4Gc3V1Jj4D
zWkwpFQ4B/rgU0pEAHB6/j0tCBwP8f2G2MSGJUAVmdSbgCk+7KNv3tA/alxCeH1M
mCc8J04JNbygpUYTIfQ7QecwznJ1B+u/2xYgwl/HBHrjymEc3faxP7M9CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFERX92WdeERbdCGCNuIww1648xraMB8GA1UdIwQY
MBaAFO1Ff5acD+w1uSbQ9ypH3US4swD1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS85MjY4YmYtMjVlOS00YzM4LWJhZjct
ZTQ3ZWJlZTJjMDIwLzEvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS85MjY4YmYtMjVlOS00YzM4LWJhZjctZTQ3ZWJlZTJjMDIw
LzEvN1VWX2xwd1A3RFc1SnREM0trZmRSTGl6QVBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYdRJ2T0
ipYVEsDiFas44JiSeMP2WE4MdRvkCgS4ppb9bIi5NH/bBlyTIILXOcD2ouehC1re
s8cVBNfWZqhi8f66vlv2533wAzHda42FXArFskMjTQyroMjMYFSZjzqIOmIy9D3F
D90S+mHTopImNjlXVbdNk33zGsuJKi5LKiKtLBFS8JlZYM7V7DLkhr6aNve/k+gl
Vn1xmqRav/RqXty50s6qvjbHhBS44UbWt+ZHHfYJ+vsurLt8tgL5XIhDnyV1SQ3M
5Qac0ZYmLrd5UZlZb5aSCR7ETBvVArc14ncFQpe5r+TX3T31jz7dRMvl8RNdJEly
aSI0swKJrqo3xg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:42:18 2026 by rpki-client