Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
File:                     8M0rO57YMSbUXboSAD1sbjWms4A.mft (raw, json)
Hash identifier:          S2sB8nVhdthIhr/lZ2yKAYfMBrvY5iu9v6u50eRtSlg=
Subject key identifier:   27:1E:39:E4:CE:EA:A7:E9:95:AB:0B:99:7F:19:D3:0B:21:B6:05:DF
Authority key identifier: F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80
Certificate issuer:       /CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
Certificate serial:       019FA906E489CBC3421B33A7A0DC4BB21E7E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
Manifest number:          16F9
Signing time:             Tue 28 Jul 2026 14:00:28 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:28 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:28 +0000
Files and hashes:         1: 8M0rO57YMSbUXboSAD1sbjWms4A.crl (hash: IWzlzVJeKKMzBDNslb36Ket2wCZWSS4QjxD+oHTu7fA=)
                          2: ddIfNiRppOj1v3M6aJwVqmijL0I.roa (hash: EfC5UqZXOZKbq7DWkiDFRsm66HUflEVOFO98FL8DAwE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:e4:89:cb:c3:42:1b:33:a7:a0:dc:4b:b2:1e:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0cd2b3b9ed83126d45dba12003d6c6e35a6b380
        Validity
            Not Before: Jul 28 14:00:28 2026 GMT
            Not After : Jul 29 14:00:28 2026 GMT
        Subject: CN=271e39e4ceeaa7e995ab0b997f19d30b21b605df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c8:2b:74:cd:b0:43:ee:08:f2:7b:72:29:b2:
                    e6:5d:3c:2e:ef:9b:6b:c1:0e:e1:1c:2d:61:e4:d4:
                    20:a8:c8:ba:2c:71:be:12:36:7b:f1:2e:4d:02:d7:
                    1d:37:95:4e:6c:18:6a:59:67:e4:8d:07:58:8c:aa:
                    01:50:71:b2:9d:2f:c7:f1:83:61:d3:90:da:8c:be:
                    a3:d3:93:c2:e7:65:03:8b:2a:42:91:c6:06:d4:96:
                    69:33:85:e5:0f:a3:72:2d:fc:86:48:b7:bd:37:aa:
                    2e:34:76:4e:8a:38:3f:bb:62:54:b2:d7:ee:a4:98:
                    09:9d:52:7d:52:f2:09:45:c5:3d:67:73:bb:f7:a9:
                    e1:f9:59:f9:d6:39:33:7b:e9:7f:c8:14:ac:48:a4:
                    52:03:36:d3:10:7c:86:1a:82:0f:87:88:81:6a:e4:
                    e2:d6:c1:2f:ce:67:90:56:60:fc:59:c1:fa:43:7c:
                    40:ff:33:72:1e:a1:ff:09:2e:e5:cc:a2:e5:b1:26:
                    e4:4a:1a:69:76:8e:17:86:2d:fc:d4:9b:97:c6:32:
                    f2:14:9e:5d:ce:6f:3f:00:9e:dd:ab:d5:0d:6a:ba:
                    59:28:ba:ea:99:91:dc:d9:d6:ad:52:53:10:a1:a9:
                    53:01:51:81:eb:a7:bd:6c:cf:d3:9e:c4:8c:be:27:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:1E:39:E4:CE:EA:A7:E9:95:AB:0B:99:7F:19:D3:0B:21:B6:05:DF
            X509v3 Authority Key Identifier:
                keyid:F0:CD:2B:3B:9E:D8:31:26:D4:5D:BA:12:00:3D:6C:6E:35:A6:B3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8M0rO57YMSbUXboSAD1sbjWms4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/047982-37de-4e70-bebd-7c9e10517c25/1/8M0rO57YMSbUXboSAD1sbjWms4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:09:3c:b5:7d:50:98:71:34:b2:c7:78:9d:17:76:19:37:89:
         61:30:b5:a1:6a:4a:e6:40:e6:4e:4e:73:32:3d:c4:27:a7:2e:
         37:af:42:93:1c:54:42:63:9e:78:b1:5a:8a:f1:56:b2:66:fc:
         d7:ff:17:86:86:6f:a7:62:11:f5:78:a2:64:0d:6f:bd:63:61:
         33:66:4d:6a:b7:49:2d:c7:c2:af:63:2c:47:2c:9b:d7:b3:67:
         b2:fd:05:d0:fb:65:50:31:18:75:e1:26:b2:a9:f8:d7:38:f4:
         91:e8:6d:25:ea:b6:6c:45:26:83:2f:3e:92:8a:67:6d:46:07:
         45:0e:15:e7:de:6d:23:ff:79:76:b2:d3:3f:40:eb:13:05:18:
         99:51:7b:c1:24:8e:fb:37:b6:4f:3d:07:bc:2f:50:da:a7:75:
         b5:58:fd:1c:58:31:a9:6e:de:f4:3c:0c:fd:cd:ad:cc:b5:9c:
         c9:ca:5b:6c:62:ab:6c:88:36:97:92:e4:40:c7:18:88:0a:35:
         3e:78:09:e7:c6:41:3a:fd:d4:e5:2a:b5:d1:7f:ab:50:cd:d1:
         60:cc:90:2d:b4:06:26:16:c4:c8:99:ed:75:8e:9e:e8:c4:7f:
         29:7d:01:aa:84:a7:57:30:10:78:1d:46:81:ee:36:2f:55:9f:
         5a:a6:74:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBuSJy8NCGzOnoNxLsh5+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwY2QyYjNiOWVkODMxMjZkNDVkYmExMjAwM2Q2YzZlMzVh
NmIzODAwHhcNMjYwNzI4MTQwMDI4WhcNMjYwNzI5MTQwMDI4WjAzMTEwLwYDVQQD
EygyNzFlMzllNGNlZWFhN2U5OTVhYjBiOTk3ZjE5ZDMwYjIxYjYwNWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucgrdM2wQ+4I8ntyKbLmXTwu75tr
wQ7hHC1h5NQgqMi6LHG+EjZ78S5NAtcdN5VObBhqWWfkjQdYjKoBUHGynS/H8YNh
05DajL6j05PC52UDiypCkcYG1JZpM4XlD6NyLfyGSLe9N6ouNHZOijg/u2JUstfu
pJgJnVJ9UvIJRcU9Z3O796nh+Vn51jkze+l/yBSsSKRSAzbTEHyGGoIPh4iBauTi
1sEvzmeQVmD8WcH6Q3xA/zNyHqH/CS7lzKLlsSbkShppdo4Xhi381JuXxjLyFJ5d
zm8/AJ7dq9UNarpZKLrqmZHc2datUlMQoalTAVGB66e9bM/TnsSMviciIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCceOeTO6qfplasLmX8Z0wshtgXfMB8GA1UdIwQY
MBaAFPDNKzue2DEm1F26EgA9bG41prOAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQt
N2M5ZTEwNTE3YzI1LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8wNDc5ODItMzdkZS00ZTcwLWJlYmQtN2M5ZTEwNTE3YzI1
LzEvOE0wck81N1lNU2JVWGJvU0FEMXNialdtczRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfAk8tX1Q
mHE0ssd4nRd2GTeJYTC1oWpK5kDmTk5zMj3EJ6cuN69CkxxUQmOeeLFaivFWsmb8
1/8XhoZvp2IR9XiiZA1vvWNhM2ZNardJLcfCr2MsRyyb17Nnsv0F0PtlUDEYdeEm
sqn41zj0kehtJeq2bEUmgy8+kopnbUYHRQ4V595tI/95drLTP0DrEwUYmVF7wSSO
+ze2Tz0HvC9Q2qd1tVj9HFgxqW7e9DwM/c2tzLWcycpbbGKrbIg2l5LkQMcYiAo1
PngJ58ZBOv3U5Sq10X+rUM3RYMyQLbQGJhbEyJntdY6e6MR/KX0BqoSnVzAQeB1G
ge42L1WfWqZ0Fg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:27 2026 by rpki-client