Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File:                     D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier:          1hKIpWUCgdSQDLfn4ksFO6Fy/bYBUOBhczyEjeXKRZs=
Subject key identifier:   09:0D:C6:6D:DB:C3:7A:5E:3D:A7:09:C9:E1:CB:45:79:02:9C:14:1A
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer:       /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial:       019FA89A3B327F5D3A6463BA53F414799D89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number:          18D2
Signing time:             Tue 28 Jul 2026 12:01:47 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:47 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:47 +0000
Files and hashes:         1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: kmLgGYAofTuzEkVi1WRP6OtCyWu2FpP0BdHYS/bpXnw=)
                          2: Sx_cRr1HK_9yxXnMP5L8UplPjnE.roa (hash: 8IHzguHfDhF9TOnq36/iF4YhTgkRtVGmhvaPUXHm58k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:3b:32:7f:5d:3a:64:63:ba:53:f4:14:79:9d:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
        Validity
            Not Before: Jul 28 12:01:47 2026 GMT
            Not After : Jul 29 12:01:47 2026 GMT
        Subject: CN=090dc66ddbc37a5e3da709c9e1cb4579029c141a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:99:54:1a:e2:e8:c7:3e:7a:fc:75:3c:fe:4d:
                    b1:e6:8a:01:5a:34:0a:17:14:bc:ac:20:f8:d1:e5:
                    79:2e:0a:17:75:e8:b0:e0:31:1c:59:dd:e6:d7:31:
                    8b:a9:50:0a:23:d7:33:36:9f:b6:c3:d2:72:cf:a7:
                    fa:3b:51:bd:67:42:ac:bb:60:c7:18:8e:b0:d4:3b:
                    ed:08:b3:8b:47:ee:27:3f:17:17:4a:26:9e:a6:bf:
                    f1:d6:48:ce:bf:26:99:1b:3f:09:53:75:03:c1:00:
                    9a:77:85:97:f3:3e:b8:08:4a:33:59:e4:a0:7b:f3:
                    e3:4c:2e:46:86:c2:a7:6f:32:ee:31:80:00:ce:49:
                    32:f5:6d:80:79:20:45:54:ca:1b:d2:3f:a7:0c:e5:
                    34:ab:d2:06:52:67:eb:51:eb:99:52:5e:10:a9:7d:
                    15:e4:1d:ae:11:04:81:a8:2f:5e:4b:bf:2b:a2:da:
                    73:eb:86:fc:30:d1:32:db:b4:59:2f:11:3f:d8:da:
                    db:5a:9d:19:a3:25:b1:71:66:e1:74:1b:5c:cd:39:
                    05:0d:99:22:a7:0d:0a:0b:7d:d1:5b:a8:0a:8b:92:
                    c8:6f:57:a6:1a:33:ec:f2:2f:4e:3d:e4:0d:71:39:
                    1c:af:df:cd:46:ba:f3:e5:74:99:aa:ad:0b:1f:a0:
                    e4:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0D:C6:6D:DB:C3:7A:5E:3D:A7:09:C9:E1:CB:45:79:02:9C:14:1A
            X509v3 Authority Key Identifier:
                keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:be:97:f0:fe:4a:f7:d1:88:0c:64:f2:ed:a8:98:a9:35:cd:
         65:ff:b1:03:bf:13:67:69:fd:1a:d7:b7:85:d2:3e:d1:3e:31:
         b3:00:4e:bd:5e:84:08:42:e7:ef:07:2d:98:d2:a7:6e:6b:d3:
         5c:fc:d9:b4:e6:7d:57:67:ec:c1:e0:76:50:7a:5f:e0:01:69:
         1b:22:ae:e4:a0:ab:95:27:ff:af:1d:16:5e:31:1e:b6:a9:1b:
         17:41:de:ae:55:a8:10:e5:37:1d:24:da:9f:b5:dc:05:92:d7:
         c6:f2:69:0e:89:ce:01:70:10:26:c4:5d:37:37:86:5f:c9:bb:
         b5:57:00:c3:52:c8:a9:8f:58:17:43:b0:3a:f9:73:85:81:79:
         c4:5f:85:fc:1a:a9:74:2c:4c:5f:5b:87:36:6e:24:c5:b9:7c:
         99:cc:a3:48:4d:5e:e4:4d:f3:41:76:3b:9a:70:f5:6e:3f:94:
         e0:3d:30:e7:cf:02:63:fc:14:a4:6a:c8:cc:eb:e6:2d:22:a3:
         74:6c:b2:1d:9c:f9:46:07:a9:14:07:87:98:15:f4:87:69:84:
         ac:e7:3b:e1:50:7a:bd:11:b2:df:9d:d2:90:6f:3f:72:0c:f7:
         6c:8e:df:95:ca:fa:ae:f2:40:fc:38:42:9a:4f:17:62:b6:86:
         f0:c6:01:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omjsyf106ZGO6U/QUeZ2JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0
ODAwZmEwHhcNMjYwNzI4MTIwMTQ3WhcNMjYwNzI5MTIwMTQ3WjAzMTEwLwYDVQQD
EygwOTBkYzY2ZGRiYzM3YTVlM2RhNzA5YzllMWNiNDU3OTAyOWMxNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqplUGuLoxz56/HU8/k2x5ooBWjQK
FxS8rCD40eV5LgoXdeiw4DEcWd3m1zGLqVAKI9czNp+2w9Jyz6f6O1G9Z0Ksu2DH
GI6w1DvtCLOLR+4nPxcXSiaepr/x1kjOvyaZGz8JU3UDwQCad4WX8z64CEozWeSg
e/PjTC5GhsKnbzLuMYAAzkky9W2AeSBFVMob0j+nDOU0q9IGUmfrUeuZUl4QqX0V
5B2uEQSBqC9eS78rotpz64b8MNEy27RZLxE/2NrbWp0ZoyWxcWbhdBtczTkFDZki
pw0KC33RW6gKi5LIb1emGjPs8i9OPeQNcTkcr9/NRrrz5XSZqq0LH6DkgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAkNxm3bw3pePacJyeHLRXkCnBQaMB8GA1UdIwQY
MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt
ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy
LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlb6X8P5K
99GIDGTy7aiYqTXNZf+xA78TZ2n9Gte3hdI+0T4xswBOvV6ECELn7wctmNKnbmvT
XPzZtOZ9V2fsweB2UHpf4AFpGyKu5KCrlSf/rx0WXjEetqkbF0HerlWoEOU3HSTa
n7XcBZLXxvJpDonOAXAQJsRdNzeGX8m7tVcAw1LIqY9YF0OwOvlzhYF5xF+F/Bqp
dCxMX1uHNm4kxbl8mcyjSE1e5E3zQXY7mnD1bj+U4D0w588CY/wUpGrIzOvmLSKj
dGyyHZz5RgepFAeHmBX0h2mErOc74VB6vRGy353SkG8/cgz3bI7flcr6rvJA/DhC
mk8XYraG8MYBlg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:13:17 2026 by rpki-client