Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
File:                     Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft (raw, json)
Hash identifier:          0jTZa1UfzIWsiH95dhOXs7Kc+aXbvBHf9n8VjcnslwA=
Subject key identifier:   17:A7:90:03:E2:7B:EE:93:B0:E9:91:3E:04:C0:84:6D:34:B9:1E:59
Authority key identifier: 4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E
Certificate issuer:       /CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
Certificate serial:       019FACAD42D0EE9EFA03E0C52A7BCF6FF6FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
Manifest number:          156E
Signing time:             Wed 29 Jul 2026 07:01:03 +0000
Manifest this update:     Wed 29 Jul 2026 07:01:03 +0000
Manifest next update:     Thu 30 Jul 2026 07:01:03 +0000
Files and hashes:         1: 24FTYWICcL1IJMQzkDfWg_xAqy0.roa (hash: wR9QeEuSdjQ+0/1YXf2bsDaKWqR9jJk06EOJ2Q73fWE=)
                          2: DuCPfh0BtVEkEb46CmQmkJTEoiA.roa (hash: 4H+ADRlPO/G+o1dwkSRBoJP9og9DDlqIZuQkG2ZaHhA=)
                          3: Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl (hash: KqMA5BNtSqzBI8TE+ARrcx8wuN4pQHYLt1aLKTkcXWE=)
                          4: wqS_wfIdBlK7kC9o4zizHf0FBlk.roa (hash: Dvd4isDlS6MYBBiZdCyk9gJMQ1pHNGRCGxx3yyLp9qE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:ad:42:d0:ee:9e:fa:03:e0:c5:2a:7b:cf:6f:f6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a7f4f8ac8ca7343ed1b4ff12ce276318b69d10e
        Validity
            Not Before: Jul 29 07:01:03 2026 GMT
            Not After : Jul 30 07:01:03 2026 GMT
        Subject: CN=17a79003e27bee93b0e9913e04c0846d34b91e59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:92:69:7a:80:8e:0a:b2:71:b4:ab:0e:a5:08:
                    df:21:24:8f:41:3b:7c:98:14:fe:47:03:d9:35:83:
                    29:6a:2c:5c:eb:8c:0b:1f:fa:76:e8:b5:bc:2b:31:
                    e9:02:30:6a:9b:ea:c4:90:f2:44:2b:2b:1e:0c:a7:
                    96:68:63:96:da:9a:01:06:01:df:e6:55:fa:1f:10:
                    fc:c6:2b:4b:c6:6d:b2:fb:71:ac:4b:ba:8d:14:62:
                    f5:04:b9:dd:f7:65:15:a3:47:87:f6:21:83:9f:bb:
                    6e:08:ed:45:17:37:32:e9:8d:e8:d5:fa:a3:81:4d:
                    fc:f3:82:8c:44:32:ec:b8:aa:15:6a:20:01:02:40:
                    ff:f6:30:8b:a9:54:60:19:94:c7:21:43:a9:50:4e:
                    57:f1:72:25:71:61:1c:b0:81:1c:ae:54:73:9d:b1:
                    53:5e:37:04:2f:a5:02:3d:77:bc:68:93:30:9f:22:
                    b8:07:a2:99:5c:0e:91:a7:51:75:4c:89:9e:07:f5:
                    89:94:2d:d1:06:3b:cf:8e:40:63:64:2f:01:65:53:
                    e3:61:f3:1e:20:3b:89:c4:35:76:9b:8a:65:77:ee:
                    fc:6f:1e:9e:ed:0e:e5:26:fb:5f:89:f3:23:91:aa:
                    7a:e2:62:1a:3a:ed:87:cc:90:31:36:dc:28:61:c7:
                    46:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:A7:90:03:E2:7B:EE:93:B0:E9:91:3E:04:C0:84:6D:34:B9:1E:59
            X509v3 Authority Key Identifier:
                keyid:4A:7F:4F:8A:C8:CA:73:43:ED:1B:4F:F1:2C:E2:76:31:8B:69:D1:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/0e6962-96b7-4fb8-a839-9ec7add0eb68/1/Sn9PisjKc0PtG0_xLOJ2MYtp0Q4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:a0:15:2f:3f:67:e6:8f:7c:82:14:72:12:d4:e9:41:ba:91:
         ae:8a:d0:e4:f2:19:ba:43:fb:3d:1d:ed:c7:3b:1c:76:64:a8:
         0b:ae:88:9b:99:58:57:4a:49:28:e9:f2:3e:10:56:07:09:f1:
         6c:18:b3:dc:22:3f:9b:ed:1b:de:0f:4e:b4:b4:89:49:fc:1d:
         06:30:33:c8:09:b9:ef:fc:59:76:2e:6a:d0:4d:bc:7e:22:25:
         0f:29:33:60:99:b5:f0:9d:2c:cc:c4:ba:50:18:8d:cd:5a:7f:
         8e:8e:31:8a:33:f4:d3:a9:9e:fe:06:42:ad:93:c9:9d:95:f0:
         1a:44:36:77:1e:19:b5:7a:bb:30:e0:bb:83:98:0e:10:fa:93:
         5b:86:8e:15:aa:06:0c:9b:85:3a:27:0f:c1:7a:fb:d8:90:03:
         ad:6b:0d:a7:c1:81:c1:77:18:b8:fc:37:d5:9a:2e:59:84:1e:
         f1:ef:15:01:9f:60:4f:1f:57:69:dd:76:a0:da:04:ed:0c:cd:
         ae:bf:7f:36:30:b7:a8:e3:fa:7c:88:1e:8e:5f:18:b4:5c:1b:
         a9:96:60:11:9c:d9:74:ad:a6:d8:f7:95:d4:6a:b1:e8:67:4e:
         10:a2:e3:ba:70:92:30:09:ef:67:66:df:06:4f:3e:2a:ab:6a:
         b4:87:8f:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srULQ7p76A+DFKnvPb/b/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhN2Y0ZjhhYzhjYTczNDNlZDFiNGZmMTJjZTI3NjMxOGI2
OWQxMGUwHhcNMjYwNzI5MDcwMTAzWhcNMjYwNzMwMDcwMTAzWjAzMTEwLwYDVQQD
EygxN2E3OTAwM2UyN2JlZTkzYjBlOTkxM2UwNGMwODQ2ZDM0YjkxZTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5JpeoCOCrJxtKsOpQjfISSPQTt8
mBT+RwPZNYMpaixc64wLH/p26LW8KzHpAjBqm+rEkPJEKyseDKeWaGOW2poBBgHf
5lX6HxD8xitLxm2y+3GsS7qNFGL1BLnd92UVo0eH9iGDn7tuCO1FFzcy6Y3o1fqj
gU3884KMRDLsuKoVaiABAkD/9jCLqVRgGZTHIUOpUE5X8XIlcWEcsIEcrlRznbFT
XjcEL6UCPXe8aJMwnyK4B6KZXA6Rp1F1TImeB/WJlC3RBjvPjkBjZC8BZVPjYfMe
IDuJxDV2m4pld+78bx6e7Q7lJvtfifMjkap64mIaOu2HzJAxNtwoYcdGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBenkAPie+6TsOmRPgTAhG00uR5ZMB8GA1UdIwQY
MBaAFEp/T4rIynND7RtP8SzidjGLadEOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4Mzkt
OWVjN2FkZDBlYjY4LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8wZTY5NjItOTZiNy00ZmI4LWE4MzktOWVjN2FkZDBlYjY4
LzEvU245UGlzaktjMFB0RzBfeExPSjJNWXRwMFE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA6KAVLz9n
5o98ghRyEtTpQbqRrorQ5PIZukP7PR3txzscdmSoC66Im5lYV0pJKOnyPhBWBwnx
bBiz3CI/m+0b3g9OtLSJSfwdBjAzyAm57/xZdi5q0E28fiIlDykzYJm18J0szMS6
UBiNzVp/jo4xijP006me/gZCrZPJnZXwGkQ2dx4ZtXq7MOC7g5gOEPqTW4aOFaoG
DJuFOicPwXr72JADrWsNp8GBwXcYuPw31ZouWYQe8e8VAZ9gTx9Xad12oNoE7QzN
rr9/NjC3qOP6fIgejl8YtFwbqZZgEZzZdK2m2PeV1Gqx6GdOEKLjunCSMAnvZ2bf
Bk8+KqtqtIePaw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:06:10 2026 by rpki-client