Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          DckNymQU3NLybEcUKQtUDnJVzXWQcJYXku/TYO+0fa4=
Subject key identifier:   9B:78:91:4F:D5:91:13:1C:4A:B9:C1:7B:6E:D2:26:DD:31:E6:04:0E
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019FA9AC036916E6A969E625A98AB4951937
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          1AB8
Signing time:             Tue 28 Jul 2026 17:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 17:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 17:00:50 +0000
Files and hashes:         1: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: dstrsxB4xGPVI2iHTzQa4Oy6oN86RQc5xssNQPqmvW4=)
                          2: 9_qzaYR-EszIpBxI4ownqBBUFGw.roa (hash: VhzjhZWKdSpMHocreuG2Si0iTaWmN7K1sjii56hPLwc=)
                          3: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (hash: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s=)
                          4: QOp6ldZ4aq2zfMPYvuOeV0oKmeY.roa (hash: 8YOvlrB9urinWAqeR4fd1zgfcxdDnYVPoOrAJi9cHqo=)
                          5: fArGG5h3XzKLS_oJOJoEXulgjHY.roa (hash: rc/JLtUSYcoCTMCyXw3gO5TZj5+PgYpz/cLtgaciNiM=)
                          6: m24O6Wpo34YVFTi5GGLw487-z5U.roa (hash: 8LP656VRzP22y/4rrgOPp8IsbB22qkGycpmzkEoh59Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:03:69:16:e6:a9:69:e6:25:a9:8a:b4:95:19:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Jul 28 17:00:50 2026 GMT
            Not After : Jul 29 17:00:50 2026 GMT
        Subject: CN=9b78914fd591131c4ab9c17b6ed226dd31e6040e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:7e:66:4c:8b:40:33:86:21:18:04:8f:a5:38:
                    a9:a6:8a:a6:e5:a5:9a:e8:4e:1a:fa:d6:ee:20:92:
                    fb:0e:df:88:54:40:c3:ea:99:2d:67:12:ff:7e:d3:
                    50:45:74:50:ae:b1:1e:3f:3f:37:1f:e8:f5:c8:63:
                    33:b1:de:0d:b5:07:d1:67:62:ee:66:da:b0:b6:0a:
                    33:0f:25:fb:17:06:45:75:c8:83:9a:28:b3:fb:de:
                    28:d3:17:56:51:9c:8e:42:04:e1:60:b0:83:58:8a:
                    c9:44:35:b3:1c:60:ce:7b:3b:16:1f:59:03:48:38:
                    2d:7b:4b:6d:ff:0b:51:b6:dd:cd:3a:d0:34:9e:49:
                    1e:ed:70:c4:09:56:a4:cd:70:80:7a:ac:b0:d9:db:
                    9b:41:af:15:56:3f:61:e6:34:68:1b:ef:f6:29:da:
                    d0:cd:50:10:e3:b0:ca:f4:34:33:b7:4d:13:69:0f:
                    db:77:4c:18:2c:7e:dc:53:cd:ac:40:5d:9c:96:f7:
                    ee:7c:60:ee:cb:ba:f6:49:25:21:ba:25:01:d0:fd:
                    25:1a:84:96:9d:b3:99:a2:47:b2:46:71:37:a4:b7:
                    43:bc:48:98:22:1a:4c:5c:9c:e4:36:e6:95:4d:a7:
                    ed:12:f9:e2:8a:fd:c7:2a:05:49:c2:31:84:7e:5c:
                    dd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:78:91:4F:D5:91:13:1C:4A:B9:C1:7B:6E:D2:26:DD:31:E6:04:0E
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:08:84:d1:5c:21:87:f6:35:50:f8:3d:c0:1e:a3:fa:46:8a:
         c5:42:59:46:67:94:07:d9:b7:ff:2c:c0:e6:18:02:37:62:4b:
         bc:af:78:0c:c7:6f:75:58:79:72:0d:9c:fa:a9:8e:e0:4c:99:
         ab:3e:f3:20:2d:cb:7b:01:c7:c5:cc:b6:9b:18:c6:98:55:9b:
         98:1c:78:43:6e:3f:b0:e1:5c:07:37:fd:8c:bd:eb:07:70:57:
         3f:4f:0d:b8:5f:13:7c:b1:5c:da:c2:1a:f2:fa:21:d2:52:6c:
         e2:bb:ac:0e:38:f8:0f:32:fe:54:93:9f:89:3f:29:51:ff:1c:
         1f:84:d1:f7:d0:a9:54:b9:90:59:6c:60:b1:f5:cf:1e:79:2b:
         c8:6a:9a:f8:86:d6:5a:a8:14:1f:11:90:96:fc:6a:fb:63:ec:
         b8:9e:f6:72:73:6d:f7:7e:33:6e:6a:99:04:08:0e:be:36:d2:
         85:aa:20:f0:44:99:06:78:ae:af:f1:f9:10:3e:92:8f:e0:8e:
         ec:5a:19:dc:f8:7b:81:93:3f:7b:74:77:c1:7c:f0:df:82:5b:
         d1:20:86:38:a4:88:27:af:5a:23:c7:57:1a:96:26:6a:f8:46:
         6a:72:1e:0a:f2:eb:c5:6d:94:22:01:51:ee:86:18:5d:87:e8:
         a6:e5:48:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+prANpFuapaeYlqYq0lRk3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGJhODgyNGM1YzhkMjA3MzI2YTRhM2FiODkzZWJiOGY1
MDk2YWQwHhcNMjYwNzI4MTcwMDUwWhcNMjYwNzI5MTcwMDUwWjAzMTEwLwYDVQQD
Eyg5Yjc4OTE0ZmQ1OTExMzFjNGFiOWMxN2I2ZWQyMjZkZDMxZTYwNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkX5mTItAM4YhGASPpTippoqm5aWa
6E4a+tbuIJL7Dt+IVEDD6pktZxL/ftNQRXRQrrEePz83H+j1yGMzsd4NtQfRZ2Lu
ZtqwtgozDyX7FwZFdciDmiiz+94o0xdWUZyOQgThYLCDWIrJRDWzHGDOezsWH1kD
SDgte0tt/wtRtt3NOtA0nkke7XDECVakzXCAeqyw2dubQa8VVj9h5jRoG+/2KdrQ
zVAQ47DK9DQzt00TaQ/bd0wYLH7cU82sQF2clvfufGDuy7r2SSUhuiUB0P0lGoSW
nbOZokeyRnE3pLdDvEiYIhpMXJzkNuaVTaftEvniiv3HKgVJwjGEflzdQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJt4kU/VkRMcSrnBe27SJt0x5gQOMB8GA1UdIwQY
MBaAFO6LqIJMXI0gcyako6uJPruPUJatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQt
ZWVjZDI4ZTI4ZTM1LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQtZWVjZDI4ZTI4ZTM1
LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQgiE0Vwh
h/Y1UPg9wB6j+kaKxUJZRmeUB9m3/yzA5hgCN2JLvK94DMdvdVh5cg2c+qmO4EyZ
qz7zIC3LewHHxcy2mxjGmFWbmBx4Q24/sOFcBzf9jL3rB3BXP08NuF8TfLFc2sIa
8voh0lJs4rusDjj4DzL+VJOfiT8pUf8cH4TR99CpVLmQWWxgsfXPHnkryGqa+IbW
WqgUHxGQlvxq+2PsuJ72cnNt934zbmqZBAgOvjbShaog8ESZBniur/H5ED6Sj+CO
7FoZ3Ph7gZM/e3R3wXzw34Jb0SCGOKSIJ69aI8dXGpYmavhGanIeCvLrxW2UIgFR
7oYYXYfopuVIoQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:25 2026 by rpki-client