Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
File:                     9lWaWOLE8UoftjRDGQgK88xWRGs.mft (raw, json)
Hash identifier:          FhSKeosDl+6zhqAdGDO86YYmBfxFoo8BzyEJsyKTPoQ=
Subject key identifier:   BB:3D:8A:67:E3:82:2A:63:85:2D:5F:DC:C4:97:2D:1A:DD:7B:A2:E6
Authority key identifier: F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B
Certificate issuer:       /CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
Certificate serial:       019FABD10A343BC3DA04C916838641A182B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
Manifest number:          C3
Signing time:             Wed 29 Jul 2026 03:00:31 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:31 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:31 +0000
Files and hashes:         1: 9lWaWOLE8UoftjRDGQgK88xWRGs.crl (hash: 5lZHST9s3ECQLTfnl7uoXmQ0wI09q4pttj3Z2tr/lXQ=)
                          2: _j_QYhrm9EtHVz55rfuJrPeU9ac.roa (hash: NUaMPNcwY1qDOrksQXA+36Saq/+PThu5xZNDt3TsgDo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:0a:34:3b:c3:da:04:c9:16:83:86:41:a1:82:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6559a58e2c4f14a1fb6344319080af3cc56446b
        Validity
            Not Before: Jul 29 03:00:31 2026 GMT
            Not After : Jul 30 03:00:31 2026 GMT
        Subject: CN=bb3d8a67e3822a63852d5fdcc4972d1add7ba2e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:99:fb:6a:a5:7e:3c:aa:24:64:4d:a7:c1:5d:
                    cb:4b:d1:77:6f:94:16:03:82:8e:ed:39:1c:f4:3e:
                    29:1a:1d:07:aa:17:32:44:80:42:0b:1c:df:49:82:
                    ed:4e:e0:a4:55:91:f5:0b:4d:0d:23:84:fe:5d:07:
                    48:8c:e4:a9:4a:71:f9:da:32:8a:d2:08:59:38:de:
                    6b:63:1e:d9:06:e3:7c:3d:75:0d:b7:13:01:3d:fd:
                    52:6f:94:f8:9d:e4:e4:6e:4b:94:d5:a7:39:b7:bb:
                    f5:a3:17:93:b9:7c:69:bc:98:e7:4f:f6:c4:5a:df:
                    8c:3d:6e:45:f2:fb:e6:f6:d9:0d:1a:dc:9d:ba:4d:
                    1e:77:5d:e9:66:f3:cf:27:ee:96:e6:65:95:20:41:
                    31:c2:25:29:ae:09:d3:d4:d6:16:72:e5:2d:29:1f:
                    c9:da:9c:db:5a:67:49:c5:fa:2c:d5:bb:de:3f:cf:
                    7c:63:67:7d:bb:8e:2b:16:e9:1d:36:e2:33:3d:18:
                    cb:a9:f1:04:51:ad:e3:3a:52:f8:bf:a5:2b:bb:70:
                    4d:bc:3e:cd:78:78:41:c1:cb:b5:5d:b3:5c:e8:97:
                    20:be:e2:e8:57:57:a2:a1:15:ca:46:cb:42:10:25:
                    a1:78:dc:2e:e3:02:50:92:cb:6a:3e:ed:85:ec:6e:
                    0b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:3D:8A:67:E3:82:2A:63:85:2D:5F:DC:C4:97:2D:1A:DD:7B:A2:E6
            X509v3 Authority Key Identifier:
                keyid:F6:55:9A:58:E2:C4:F1:4A:1F:B6:34:43:19:08:0A:F3:CC:56:44:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9lWaWOLE8UoftjRDGQgK88xWRGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/77d760-d301-4020-a286-856cbf94edff/1/9lWaWOLE8UoftjRDGQgK88xWRGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:3f:68:6c:b3:bc:d9:e7:84:1d:cf:c8:79:25:39:f5:49:
         b1:3e:1f:63:cb:ae:51:2b:0a:89:19:d0:aa:c7:d0:6f:cd:ad:
         85:d5:22:a8:d4:dc:06:49:43:65:9a:79:b5:af:4d:46:39:6a:
         90:f8:99:10:14:fb:be:75:a0:78:04:3a:48:58:8a:c5:dc:26:
         6d:30:34:66:01:f3:43:09:6d:25:eb:1c:da:88:87:72:cb:95:
         10:7a:f9:3e:34:48:74:c0:f0:76:c4:cc:9e:33:d8:79:43:f4:
         0e:aa:6b:ce:43:88:60:94:5a:22:0e:de:43:82:2b:66:9e:ca:
         71:43:67:44:ef:cb:ed:24:81:b8:36:60:4a:72:2e:af:bc:32:
         b5:22:93:0b:4d:f8:47:13:44:46:2c:16:85:59:43:53:7a:34:
         a8:62:0c:ec:21:17:91:5a:b9:b4:7b:53:3c:1a:d1:ca:23:d0:
         6f:05:26:c7:80:73:ea:d3:6d:52:4c:4f:a9:22:e0:be:af:37:
         ab:27:d1:10:f3:8b:44:ba:9c:5d:fa:94:30:8b:fc:b2:5f:41:
         eb:4b:3e:bc:0e:43:e2:7a:fd:21:f0:54:d6:d2:7f:d5:1d:28:
         12:96:a8:8b:db:cc:dd:1f:93:20:a7:d3:15:92:78:ff:bb:b3:
         d9:53:10:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0Qo0O8PaBMkWg4ZBoYK2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NTU5YTU4ZTJjNGYxNGExZmI2MzQ0MzE5MDgwYWYzY2M1
NjQ0NmIwHhcNMjYwNzI5MDMwMDMxWhcNMjYwNzMwMDMwMDMxWjAzMTEwLwYDVQQD
EyhiYjNkOGE2N2UzODIyYTYzODUyZDVmZGNjNDk3MmQxYWRkN2JhMmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJn7aqV+PKokZE2nwV3LS9F3b5QW
A4KO7Tkc9D4pGh0HqhcyRIBCCxzfSYLtTuCkVZH1C00NI4T+XQdIjOSpSnH52jKK
0ghZON5rYx7ZBuN8PXUNtxMBPf1Sb5T4neTkbkuU1ac5t7v1oxeTuXxpvJjnT/bE
Wt+MPW5F8vvm9tkNGtyduk0ed13pZvPPJ+6W5mWVIEExwiUprgnT1NYWcuUtKR/J
2pzbWmdJxfos1bveP898Y2d9u44rFukdNuIzPRjLqfEEUa3jOlL4v6Uru3BNvD7N
eHhBwcu1XbNc6JcgvuLoV1eioRXKRstCECWheNwu4wJQkstqPu2F7G4LuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLs9imfjgipjhS1f3MSXLRrde6LmMB8GA1UdIwQY
MBaAFPZVmljixPFKH7Y0QxkICvPMVkRrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWxXYVdPTEU4VW9mdGpSREdRZ0s4OHhXUkdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC83N2Q3NjAtZDMwMS00MDIwLWEyODYt
ODU2Y2JmOTRlZGZmLzEvOWxXYVdPTEU4VW9mdGpSREdRZ0s4OHhXUkdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC83N2Q3NjAtZDMwMS00MDIwLWEyODYtODU2Y2JmOTRlZGZm
LzEvOWxXYVdPTEU4VW9mdGpSREdRZ0s4OHhXUkdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+w/aGyz
vNnnhB3PyHklOfVJsT4fY8uuUSsKiRnQqsfQb82thdUiqNTcBklDZZp5ta9NRjlq
kPiZEBT7vnWgeAQ6SFiKxdwmbTA0ZgHzQwltJesc2oiHcsuVEHr5PjRIdMDwdsTM
njPYeUP0DqprzkOIYJRaIg7eQ4IrZp7KcUNnRO/L7SSBuDZgSnIur7wytSKTC034
RxNERiwWhVlDU3o0qGIM7CEXkVq5tHtTPBrRyiPQbwUmx4Bz6tNtUkxPqSLgvq83
qyfREPOLRLqcXfqUMIv8sl9B60s+vA5D4nr9IfBU1tJ/1R0oEpaoi9vM3R+TIKfT
FZJ4/7uz2VMQKQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:37 2026 by rpki-client