Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
File:                     1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft (raw, json)
Hash identifier:          uZNuQDYMljZ8XNfSfkZ32HicJZ08B74PHX0TxQgBOlQ=
Subject key identifier:   AB:29:9F:DC:1F:15:0F:76:0C:09:C6:DB:D8:E8:81:9E:80:10:51:BD
Authority key identifier: FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC
Certificate issuer:       /CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
Certificate serial:       019FA9E286EF74017C94DAE0990AACA72E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
Manifest number:          0748
Signing time:             Tue 28 Jul 2026 18:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:22 +0000
Files and hashes:         1: 1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl (hash: dzkAlfVAir600fCezj4VwURLoIOg/3yT08ysBP0nb3w=)
                          2: rDbD36OC2clR1VcH9ybYG4X8bCg.roa (hash: KScj6dQC600LiAKS+yk/LqkmCh6S5faudW7dbCKNdtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:86:ef:74:01:7c:94:da:e0:99:0a:ac:a7:2e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6a5c7eebb8d588f2ff22c775c1c1a144c22dbc
        Validity
            Not Before: Jul 28 18:00:22 2026 GMT
            Not After : Jul 29 18:00:22 2026 GMT
        Subject: CN=ab299fdc1f150f760c09c6dbd8e8819e801051bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:43:47:ac:1d:0e:bd:fa:4d:89:c8:22:31:c3:
                    82:0b:bd:b8:db:3d:98:d5:d3:c2:cd:cb:d0:41:5f:
                    5d:b6:33:5d:37:30:1c:85:d2:0c:ad:5f:a0:f2:81:
                    bf:ed:cc:51:ba:a3:6e:f1:41:05:57:0d:65:06:11:
                    50:c5:b7:6a:dc:c4:0b:4b:02:56:a0:3c:83:16:00:
                    7f:05:ec:6b:d5:2e:49:53:8d:de:34:d7:df:24:35:
                    47:e7:36:4c:18:c9:a4:d6:85:3b:c7:4d:95:20:74:
                    e0:f5:b6:47:18:8e:10:8f:ae:aa:be:13:84:e1:c9:
                    bc:1a:cf:8f:c1:51:8d:c0:fb:a9:fa:61:ee:fd:6d:
                    c6:b3:c5:38:a6:f3:1e:8b:39:ba:24:a4:98:01:78:
                    80:7b:7f:a2:82:83:57:72:02:48:1c:26:63:9e:86:
                    59:71:3d:28:ac:54:b5:82:73:7b:1a:f6:c9:01:3e:
                    14:45:ce:c0:19:d4:cd:e5:33:1b:8c:2d:c8:48:93:
                    0b:d0:3e:4d:0e:bc:fc:85:a8:47:00:c4:f5:db:26:
                    8a:7e:5f:2e:8f:be:8e:1b:95:0f:b6:0b:68:0d:f0:
                    47:e4:15:65:94:e2:20:81:16:a0:49:17:56:e9:22:
                    37:df:ad:6c:a2:2f:b9:a2:1e:e6:9e:6b:f0:94:ad:
                    e5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:29:9F:DC:1F:15:0F:76:0C:09:C6:DB:D8:E8:81:9E:80:10:51:BD
            X509v3 Authority Key Identifier:
                keyid:FB:6A:5C:7E:EB:B8:D5:88:F2:FF:22:C7:75:C1:C1:A1:44:C2:2D:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/536f0b-9f79-4d56-af8e-944cd92c0c0f/1/1-2pcfuu41Yjy_yLHdcHBoUTCLbw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:aa:74:cd:94:0a:c5:ae:73:62:d5:77:f0:5f:0e:2a:a2:22:
         d7:68:47:89:b1:d9:58:11:fa:11:d7:f3:24:5c:9a:57:db:41:
         36:4d:56:bd:9d:f9:d4:6e:b9:35:1e:4b:36:f8:93:c5:67:97:
         82:42:ab:ec:96:88:48:ec:82:1e:d6:22:fe:81:7c:d3:8f:bf:
         55:14:0c:86:d4:6a:8a:2c:fb:02:3c:70:75:53:f0:80:de:ac:
         ce:ee:eb:15:ce:0c:48:75:61:4e:7f:29:3d:dc:55:dc:19:b5:
         1c:3f:59:f2:79:21:81:c2:01:44:ac:85:ae:4c:3f:4f:68:10:
         5e:09:b2:84:13:1f:12:1e:e5:b4:9b:27:cd:a1:aa:de:26:c7:
         84:8e:d4:2f:99:24:04:3f:e3:73:a8:b4:de:d8:64:f3:ef:c5:
         93:0c:00:95:aa:10:4a:f6:65:9d:17:cf:65:43:70:80:05:e7:
         62:1b:0c:ff:de:2c:b6:43:10:e4:4c:88:3f:21:fd:14:e3:60:
         00:37:67:59:da:da:a4:50:da:ed:53:11:56:20:12:3b:b3:c8:
         21:49:22:4c:7c:07:83:58:4b:fd:06:a6:f2:5e:e3:98:7c:86:
         14:7d:48:f2:83:1f:a9:cf:da:01:52:40:33:7b:5c:57:90:8b:
         71:a5:49:0f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+p4obvdAF8lNrgmQqspy4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNmE1YzdlZWJiOGQ1ODhmMmZmMjJjNzc1YzFjMWExNDRj
MjJkYmMwHhcNMjYwNzI4MTgwMDIyWhcNMjYwNzI5MTgwMDIyWjAzMTEwLwYDVQQD
EyhhYjI5OWZkYzFmMTUwZjc2MGMwOWM2ZGJkOGU4ODE5ZTgwMTA1MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikNHrB0OvfpNicgiMcOCC7242z2Y
1dPCzcvQQV9dtjNdNzAchdIMrV+g8oG/7cxRuqNu8UEFVw1lBhFQxbdq3MQLSwJW
oDyDFgB/Bexr1S5JU43eNNffJDVH5zZMGMmk1oU7x02VIHTg9bZHGI4Qj66qvhOE
4cm8Gs+PwVGNwPup+mHu/W3Gs8U4pvMeizm6JKSYAXiAe3+igoNXcgJIHCZjnoZZ
cT0orFS1gnN7GvbJAT4URc7AGdTN5TMbjC3ISJML0D5NDrz8hahHAMT12yaKfl8u
j76OG5UPtgtoDfBH5BVllOIggRagSRdW6SI3361soi+5oh7mnmvwlK3l1QIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKspn9wfFQ92DAnG29jogZ6AEFG9MB8GA1UdIwQY
MBaAFPtqXH7ruNWI8v8ix3XBwaFEwi28MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0ycGNmdXU0MVlqeV95TEhkY0hCb1VUQ0xidy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDUvNTM2ZjBiLTlmNzktNGQ1Ni1hZjhl
LTk0NGNkOTJjMGMwZi8xLzEtMnBjZnV1NDFZanlfeUxIZGNIQm9VVENMYncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q1LzUzNmYwYi05Zjc5LTRkNTYtYWY4ZS05NDRjZDkyYzBj
MGYvMS8xLTJwY2Z1dTQxWWp5X3lMSGRjSEJvVVRDTGJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwKp0
zZQKxa5zYtV38F8OKqIi12hHibHZWBH6EdfzJFyaV9tBNk1WvZ351G65NR5LNviT
xWeXgkKr7JaISOyCHtYi/oF804+/VRQMhtRqiiz7AjxwdVPwgN6szu7rFc4MSHVh
Tn8pPdxV3Bm1HD9Z8nkhgcIBRKyFrkw/T2gQXgmyhBMfEh7ltJsnzaGq3ibHhI7U
L5kkBD/jc6i03thk8+/FkwwAlaoQSvZlnRfPZUNwgAXnYhsM/94stkMQ5EyIPyH9
FONgADdnWdrapFDa7VMRViASO7PIIUkiTHwHg1hL/Qam8l7jmHyGFH1I8oMfqc/a
AVJAM3tcV5CLcaVJDw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:50:16 2026 by rpki-client