Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
File:                     0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft (raw, json)
Hash identifier:          daPV6rEYkre6Ky3fx70yao7Nf0RJVxB0cVCBCM5HLbQ=
Subject key identifier:   E5:37:58:10:17:90:53:9D:B3:17:6A:E9:07:A0:F0:C8:97:82:80:FD
Authority key identifier: D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05
Certificate issuer:       /CN=d098e907c63457e6ca6281dfe297d972bffda805
Certificate serial:       019FA93DFA7DE95E09E7B93D9FC636C9A0A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
Manifest number:          14FF
Signing time:             Tue 28 Jul 2026 15:00:38 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:38 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:38 +0000
Files and hashes:         1: 0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl (hash: 0NSxbO9l/IXQRgUWZMpvZHZ9o5P60dq+hjqIrn4KaRs=)
                          2: _vTGMoMd2OUixFc93cU4_AKUok0.roa (hash: 8AD33t0BoeAy789bxPf6MIdbPtyMKTJZlywsC+bTttg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 15:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:fa:7d:e9:5e:09:e7:b9:3d:9f:c6:36:c9:a0:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d098e907c63457e6ca6281dfe297d972bffda805
        Validity
            Not Before: Jul 28 15:00:38 2026 GMT
            Not After : Jul 29 15:00:38 2026 GMT
        Subject: CN=e53758101790539db3176ae907a0f0c8978280fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5e:2d:a0:a8:a3:31:ba:dc:cb:60:6b:9a:d5:
                    fe:94:12:63:d0:c0:dd:f8:f8:fa:64:1e:8b:49:ca:
                    70:5d:cc:f7:f2:6c:28:98:c5:70:c3:03:75:03:18:
                    4d:7a:84:13:c7:9f:81:ee:50:7c:9a:dc:82:39:28:
                    4f:85:6f:10:8b:5b:59:1e:3d:c1:be:33:47:f6:a5:
                    f4:ab:a8:b6:c5:5a:ed:c9:d3:00:09:93:c4:58:ab:
                    5e:51:7e:e1:89:92:6e:eb:69:36:05:f7:70:13:b9:
                    45:95:75:be:23:f8:d2:94:96:ad:f0:bd:53:44:39:
                    0e:13:56:a4:50:9c:10:dd:d6:aa:37:24:ff:81:47:
                    b0:d0:62:27:95:c9:ad:4d:01:e0:d9:d6:e2:a5:69:
                    11:1c:bf:40:36:8c:f1:d2:8a:3e:d7:ce:7e:28:a2:
                    b8:89:9b:bc:0c:4b:70:92:ff:84:2f:6a:79:ee:9d:
                    1a:dd:86:7b:ef:23:aa:04:f1:ec:7f:53:e7:ed:c4:
                    81:a8:d5:91:d9:2b:8a:31:2a:a3:76:60:d8:ea:1e:
                    47:7d:a5:02:91:89:99:0d:97:eb:a0:56:ca:00:1a:
                    93:f4:ef:98:79:34:33:15:55:8f:8c:00:ff:9d:6f:
                    ea:d0:49:0f:8d:a7:20:56:49:b3:a3:61:7e:f4:66:
                    08:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:37:58:10:17:90:53:9D:B3:17:6A:E9:07:A0:F0:C8:97:82:80:FD
            X509v3 Authority Key Identifier:
                keyid:D0:98:E9:07:C6:34:57:E6:CA:62:81:DF:E2:97:D9:72:BF:FD:A8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c63b6c-6aad-4a74-807c-10e13d43f0dd/1/0JjpB8Y0V-bKYoHf4pfZcr_9qAU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:81:ae:ce:35:0b:92:79:70:33:55:38:1b:0c:19:53:73:6e:
         d9:77:c2:a9:06:6f:04:4d:d9:57:b5:df:f7:39:2f:b8:f4:be:
         ea:4d:75:ec:f8:2b:4c:6c:00:9c:0a:73:4b:b4:7c:c6:85:af:
         97:df:c8:37:19:db:4d:97:5b:da:d6:d7:4d:16:af:23:f2:2a:
         a1:89:2c:d8:cc:be:de:34:ae:6b:80:d4:fc:82:9a:2c:63:33:
         31:1f:6b:c9:eb:d4:b3:7b:ea:0e:e8:81:5c:95:c0:04:d2:cd:
         f9:50:14:e2:f0:c4:65:77:c9:7f:1e:f6:6e:d3:fc:84:c8:0f:
         ba:57:08:b8:8d:0d:f7:42:0e:09:63:12:ae:85:30:b4:f0:ed:
         f1:d3:32:9e:10:11:84:4d:03:40:52:72:f0:bd:1b:ef:b1:74:
         66:fb:d4:85:a1:e2:f0:c5:93:3a:86:a6:3b:e7:ca:9c:43:94:
         65:f3:45:29:76:69:6a:71:e5:21:bb:ce:ca:a1:7b:f1:3d:12:
         8a:a0:b8:79:4c:3c:d6:26:00:ca:91:15:64:2f:ff:8a:9f:ce:
         9f:29:a8:58:52:cb:01:92:31:d4:44:4f:9d:dc:86:8a:e6:a9:
         94:43:0c:43:b3:c0:d1:93:53:d9:15:d5:ad:74:5f:ac:6f:64:
         f1:24:9a:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPfp96V4J57k9n8Y2yaCgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOThlOTA3YzYzNDU3ZTZjYTYyODFkZmUyOTdkOTcyYmZm
ZGE4MDUwHhcNMjYwNzI4MTUwMDM4WhcNMjYwNzI5MTUwMDM4WjAzMTEwLwYDVQQD
EyhlNTM3NTgxMDE3OTA1MzlkYjMxNzZhZTkwN2EwZjBjODk3ODI4MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt14toKijMbrcy2BrmtX+lBJj0MDd
+Pj6ZB6LScpwXcz38mwomMVwwwN1AxhNeoQTx5+B7lB8mtyCOShPhW8Qi1tZHj3B
vjNH9qX0q6i2xVrtydMACZPEWKteUX7hiZJu62k2BfdwE7lFlXW+I/jSlJat8L1T
RDkOE1akUJwQ3daqNyT/gUew0GInlcmtTQHg2dbipWkRHL9ANozx0oo+185+KKK4
iZu8DEtwkv+EL2p57p0a3YZ77yOqBPHsf1Pn7cSBqNWR2SuKMSqjdmDY6h5HfaUC
kYmZDZfroFbKABqT9O+YeTQzFVWPjAD/nW/q0EkPjacgVkmzo2F+9GYIMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOU3WBAXkFOdsxdq6Qeg8MiXgoD9MB8GA1UdIwQY
MBaAFNCY6QfGNFfmymKB3+KX2XK//agFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2Mt
MTBlMTNkNDNmMGRkLzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9jNjNiNmMtNmFhZC00YTc0LTgwN2MtMTBlMTNkNDNmMGRk
LzEvMEpqcEI4WTBWLWJLWW9IZjRwZlpjcl85cUFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaoGuzjUL
knlwM1U4GwwZU3Nu2XfCqQZvBE3ZV7Xf9zkvuPS+6k117PgrTGwAnApzS7R8xoWv
l9/INxnbTZdb2tbXTRavI/IqoYks2My+3jSua4DU/IKaLGMzMR9ryevUs3vqDuiB
XJXABNLN+VAU4vDEZXfJfx72btP8hMgPulcIuI0N90IOCWMSroUwtPDt8dMynhAR
hE0DQFJy8L0b77F0ZvvUhaHi8MWTOoamO+fKnEOUZfNFKXZpanHlIbvOyqF78T0S
iqC4eUw81iYAypEVZC//ip/OnymoWFLLAZIx1ERPndyGiuaplEMMQ7PA0ZNT2RXV
rXRfrG9k8SSaTw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:14:59 2026 by rpki-client