Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
File:                     0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft (raw, json)
Hash identifier:          zpQaCbdIfGHbr4EeFGIR4LpWqFowYDHfLipuHoEUm84=
Subject key identifier:   31:97:A1:D5:E2:99:DE:5D:9E:66:8A:58:F1:E4:1E:F7:13:C1:7F:C3
Authority key identifier: D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8
Certificate issuer:       /CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
Certificate serial:       019FA7BD8D121871A3219543C075319899EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
Manifest number:          10E5
Signing time:             Tue 28 Jul 2026 08:00:45 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:45 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:45 +0000
Files and hashes:         1: 0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl (hash: lwfYD0+8vRMq7z8r6d1vAV9B05yt/mc8HiOSiXZhhdg=)
                          2: bEcb6mJG7iCjlx3MBYnus4nMrP8.asa (hash: YUZIJf3sKNZrkiUCtSJPScroHKhNFxjZxkZytz7Yd84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:8d:12:18:71:a3:21:95:43:c0:75:31:98:99:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d286c339aac88ddf33430e46bc9f5e07efcdaea8
        Validity
            Not Before: Jul 28 08:00:45 2026 GMT
            Not After : Jul 29 08:00:45 2026 GMT
        Subject: CN=3197a1d5e299de5d9e668a58f1e41ef713c17fc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:66:a3:b0:9d:42:45:bf:23:15:2d:96:fb:67:
                    1b:08:13:ee:e1:0b:cc:88:31:06:55:a1:26:b3:26:
                    57:88:24:3d:70:6c:f9:34:1d:f0:32:da:b0:2a:b5:
                    eb:da:11:d8:56:9f:23:cf:5c:62:2f:1d:70:b1:8c:
                    c2:e2:c0:48:eb:46:2d:92:37:aa:71:c4:71:41:db:
                    e3:2e:42:99:d9:51:69:f6:cb:b9:62:5a:56:73:01:
                    0d:a7:fc:67:e0:b9:66:9c:99:7e:c5:f1:b3:86:7a:
                    96:6b:93:79:af:24:41:b2:2e:fe:52:72:b5:37:19:
                    1c:80:da:8d:f7:a7:45:04:58:d0:45:c4:2d:b9:50:
                    b6:ee:97:37:11:9a:f6:0d:a9:05:bc:c7:45:93:a6:
                    6c:4f:5a:1d:db:0f:13:10:72:b4:05:9b:69:b3:71:
                    6e:e6:52:b3:f1:41:de:be:64:83:0a:40:69:63:f0:
                    c0:2c:3c:68:1a:b1:cb:3e:28:cc:ea:7e:72:e3:34:
                    1b:4b:3c:15:09:78:e8:54:b2:40:9b:55:91:d7:37:
                    d4:61:31:a3:10:a2:9b:f7:11:d6:2f:7f:67:a8:08:
                    27:8e:31:70:da:56:2d:8c:3d:5c:a1:1a:7d:d9:84:
                    b2:a7:f5:68:fe:7a:95:b4:7d:66:24:7e:98:46:99:
                    a3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:97:A1:D5:E2:99:DE:5D:9E:66:8A:58:F1:E4:1E:F7:13:C1:7F:C3
            X509v3 Authority Key Identifier:
                keyid:D2:86:C3:39:AA:C8:8D:DF:33:43:0E:46:BC:9F:5E:07:EF:CD:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0obDOarIjd8zQw5GvJ9eB-_Nrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/c166f8-633c-4b3b-9c70-4a65ae25c7db/1/0obDOarIjd8zQw5GvJ9eB-_Nrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:e2:5a:20:bb:19:99:11:8d:05:8c:d3:ec:46:33:a9:01:1b:
         5e:fd:2e:44:2f:ee:69:1f:0f:a7:78:40:d8:c7:e5:16:03:6b:
         2e:b0:ff:49:96:cc:91:df:bc:cd:11:96:7c:e9:92:29:24:00:
         0b:28:92:25:be:fa:c3:c2:ed:33:17:0b:f5:ac:22:ab:30:88:
         b1:50:8a:18:82:44:6c:87:81:75:10:bf:b9:2a:b8:c8:56:81:
         64:4a:0d:40:af:e9:a4:d7:ed:ac:57:59:99:60:ff:e1:8a:a6:
         3a:07:ff:98:7c:77:32:4c:b5:93:04:b8:29:14:85:7d:cd:98:
         1d:8a:7c:3c:79:20:75:06:f7:b1:74:4b:bd:09:e5:bb:bc:d6:
         d8:ae:33:cc:a7:64:30:85:05:e9:22:3f:6f:91:7d:d8:64:02:
         f9:8a:27:81:60:89:65:4b:f5:82:1b:6c:c4:e1:8b:28:cf:75:
         0b:8b:11:f1:1a:df:e8:86:86:f9:99:48:81:98:cf:36:44:8b:
         c0:b7:d4:b0:13:e9:19:8b:58:cb:87:1e:d4:51:50:27:23:0f:
         9e:49:b1:c8:e4:57:ce:98:99:c4:d4:e5:e7:41:4f:35:39:87:
         18:8e:cc:82:67:df:8e:a8:5c:34:a1:79:1e:d5:30:32:36:47:
         38:e0:50:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+nvY0SGHGjIZVDwHUxmJnuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyODZjMzM5YWFjODhkZGYzMzQzMGU0NmJjOWY1ZTA3ZWZj
ZGFlYTgwHhcNMjYwNzI4MDgwMDQ1WhcNMjYwNzI5MDgwMDQ1WjAzMTEwLwYDVQQD
EygzMTk3YTFkNWUyOTlkZTVkOWU2NjhhNThmMWU0MWVmNzEzYzE3ZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1majsJ1CRb8jFS2W+2cbCBPu4QvM
iDEGVaEmsyZXiCQ9cGz5NB3wMtqwKrXr2hHYVp8jz1xiLx1wsYzC4sBI60Ytkjeq
ccRxQdvjLkKZ2VFp9su5YlpWcwENp/xn4LlmnJl+xfGzhnqWa5N5ryRBsi7+UnK1
NxkcgNqN96dFBFjQRcQtuVC27pc3EZr2DakFvMdFk6ZsT1od2w8TEHK0BZtps3Fu
5lKz8UHevmSDCkBpY/DALDxoGrHLPijM6n5y4zQbSzwVCXjoVLJAm1WR1zfUYTGj
EKKb9xHWL39nqAgnjjFw2lYtjD1coRp92YSyp/Vo/nqVtH1mJH6YRpmjbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDGXodXimd5dnmaKWPHkHvcTwX/DMB8GA1UdIwQY
MBaAFNKGwzmqyI3fM0MORryfXgfvza6oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9iRE9hcklqZDh6UXc1R3ZKOWVCLV9OcnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9jMTY2ZjgtNjMzYy00YjNiLTljNzAt
NGE2NWFlMjVjN2RiLzEvMG9iRE9hcklqZDh6UXc1R3ZKOWVCLV9OcnFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9jMTY2ZjgtNjMzYy00YjNiLTljNzAtNGE2NWFlMjVjN2Ri
LzEvMG9iRE9hcklqZDh6UXc1R3ZKOWVCLV9OcnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe+JaILsZ
mRGNBYzT7EYzqQEbXv0uRC/uaR8Pp3hA2MflFgNrLrD/SZbMkd+8zRGWfOmSKSQA
CyiSJb76w8LtMxcL9awiqzCIsVCKGIJEbIeBdRC/uSq4yFaBZEoNQK/ppNftrFdZ
mWD/4YqmOgf/mHx3Mky1kwS4KRSFfc2YHYp8PHkgdQb3sXRLvQnlu7zW2K4zzKdk
MIUF6SI/b5F92GQC+YongWCJZUv1ghtsxOGLKM91C4sR8Rrf6IaG+ZlIgZjPNkSL
wLfUsBPpGYtYy4ce1FFQJyMPnkmxyORXzpiZxNTl50FPNTmHGI7MgmffjqhcNKF5
HtUwMjZHOOBQqg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 13:39:32 2026 by rpki-client