Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
File:                     m_duqO3gk8p7UNTh216dQaIqnhc.mft (raw, json)
Hash identifier:          YScnfOZxGmCsPqKPGfflrT1Imwz0TYYAgM2NAHnqKqo=
Subject key identifier:   E6:03:4C:7E:6E:6B:FE:22:0D:FF:C3:18:3E:6A:93:EB:C6:49:8D:05
Authority key identifier: 9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17
Certificate issuer:       /CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
Certificate serial:       019FA7F42A6E362AC46336E75EE5805C2B2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
Manifest number:          56
Signing time:             Tue 28 Jul 2026 09:00:24 +0000
Manifest this update:     Tue 28 Jul 2026 09:00:24 +0000
Manifest next update:     Wed 29 Jul 2026 09:00:24 +0000
Files and hashes:         1: bOGl1-6EedmnZ4zucIcjUxvlS0Y.asa (hash: Q6krfBDjlGauofXs7gP/pmJni/QaEEcGfQXEECmRFnI=)
                          2: m_duqO3gk8p7UNTh216dQaIqnhc.crl (hash: zLJwhnMqHy3y/6BB4HEiMtT/NloGIpWz0mHGSJYnrU4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 09:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:2a:6e:36:2a:c4:63:36:e7:5e:e5:80:5c:2b:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bf76ea8ede093ca7b50d4e1db5e9d41a22a9e17
        Validity
            Not Before: Jul 28 09:00:24 2026 GMT
            Not After : Jul 29 09:00:24 2026 GMT
        Subject: CN=e6034c7e6e6bfe220dffc3183e6a93ebc6498d05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:26:f2:00:16:83:6e:bf:e4:4a:66:6d:59:61:
                    23:51:4a:ab:1f:e9:9e:08:2f:c4:41:e5:22:cd:b2:
                    b6:45:c7:b4:e1:c0:dd:99:7e:80:c6:e6:1c:e3:e0:
                    ca:ae:c0:ba:20:f1:8c:24:90:86:da:ea:22:32:e9:
                    f0:01:ce:9e:d1:d9:4b:6d:25:7d:14:5b:b0:7b:c7:
                    7b:7a:b7:e5:ef:65:e7:25:9d:b9:9b:50:88:d9:8d:
                    6a:ed:9f:1d:3a:1d:f7:7a:5b:30:ad:8f:b6:f7:dd:
                    18:05:7c:2a:c7:1e:f3:38:60:31:49:aa:8e:e5:7c:
                    b0:78:9a:8e:07:8e:0f:b7:61:4b:2c:f5:70:57:89:
                    cc:b2:3e:0b:77:41:a9:00:97:18:7e:10:f5:17:e5:
                    9f:8b:d9:18:72:cc:da:36:67:e8:b0:22:8f:f6:36:
                    4f:be:15:d3:de:67:af:4c:b8:3a:fd:03:68:d7:2e:
                    1a:36:dc:88:61:c4:6f:7f:25:8c:4c:7c:a0:84:45:
                    3a:a7:9d:3d:43:a3:e4:c1:45:1b:58:d2:5d:13:80:
                    ec:ec:46:69:91:49:59:cd:07:13:fa:8c:91:5e:c4:
                    09:ee:34:b3:37:c9:38:7f:a9:82:7a:95:b2:66:8e:
                    bc:01:52:66:6b:01:a9:74:1e:c4:83:47:81:68:4d:
                    fb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:03:4C:7E:6E:6B:FE:22:0D:FF:C3:18:3E:6A:93:EB:C6:49:8D:05
            X509v3 Authority Key Identifier:
                keyid:9B:F7:6E:A8:ED:E0:93:CA:7B:50:D4:E1:DB:5E:9D:41:A2:2A:9E:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m_duqO3gk8p7UNTh216dQaIqnhc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/e7244a-2c6c-42ee-8e22-fab4c56d3013/1/m_duqO3gk8p7UNTh216dQaIqnhc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:c9:bc:86:e2:7e:7e:09:dd:b9:e2:a4:3a:e9:99:82:c3:aa:
         94:10:12:e1:9b:3f:97:f6:01:bb:fa:68:51:a9:07:ec:d5:91:
         0f:7d:34:8d:c9:88:14:2f:56:70:49:d3:70:8a:fe:8a:ce:25:
         65:ef:76:a3:e0:2f:44:c5:1c:c5:36:2d:4a:cf:78:a8:e5:3a:
         f4:b4:f6:f1:40:56:5b:a5:d8:43:83:3e:6f:d0:70:ee:d6:38:
         c6:d1:3f:73:1c:39:88:97:ca:84:63:13:b3:88:58:4e:d6:ed:
         54:cf:1d:70:66:62:ac:cc:7c:d9:1e:74:4a:45:db:cc:c0:f6:
         a5:35:bd:d0:32:e8:ee:31:0a:33:af:66:1d:05:7d:9d:48:71:
         b0:21:64:3f:2f:bb:e0:98:d1:ac:53:58:ec:70:4e:7c:14:68:
         ef:4e:41:5f:08:b1:0c:97:0e:56:e1:d9:0a:a6:8f:b3:26:32:
         13:b6:e4:74:aa:e4:75:7b:b3:d5:a3:fa:1a:85:d3:d3:f4:fd:
         20:39:2e:e9:c9:b7:b1:2c:45:63:54:0b:fa:c7:97:fd:91:51:
         fd:37:5d:60:ff:a4:a7:e8:6a:90:a5:d5:be:95:6b:0c:3e:1d:
         cf:6d:7b:e0:10:89:75:fe:71:00:ee:31:af:ad:b2:07:e4:87:
         c2:03:88:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+n9CpuNirEYzbnXuWAXCsuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliZjc2ZWE4ZWRlMDkzY2E3YjUwZDRlMWRiNWU5ZDQxYTIy
YTllMTcwHhcNMjYwNzI4MDkwMDI0WhcNMjYwNzI5MDkwMDI0WjAzMTEwLwYDVQQD
EyhlNjAzNGM3ZTZlNmJmZTIyMGRmZmMzMTgzZTZhOTNlYmM2NDk4ZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlCbyABaDbr/kSmZtWWEjUUqrH+me
CC/EQeUizbK2Rce04cDdmX6AxuYc4+DKrsC6IPGMJJCG2uoiMunwAc6e0dlLbSV9
FFuwe8d7erfl72XnJZ25m1CI2Y1q7Z8dOh33elswrY+2990YBXwqxx7zOGAxSaqO
5XyweJqOB44Pt2FLLPVwV4nMsj4Ld0GpAJcYfhD1F+Wfi9kYcszaNmfosCKP9jZP
vhXT3mevTLg6/QNo1y4aNtyIYcRvfyWMTHyghEU6p509Q6PkwUUbWNJdE4Ds7EZp
kUlZzQcT+oyRXsQJ7jSzN8k4f6mCepWyZo68AVJmawGpdB7Eg0eBaE37FwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYDTH5ua/4iDf/DGD5qk+vGSY0FMB8GA1UdIwQY
MBaAFJv3bqjt4JPKe1DU4dtenUGiKp4XMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbV9kdXFPM2drOHA3VU5UaDIxNmRRYUlxbmhjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9lNzI0NGEtMmM2Yy00MmVlLThlMjIt
ZmFiNGM1NmQzMDEzLzEvbV9kdXFPM2drOHA3VU5UaDIxNmRRYUlxbmhjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy9lNzI0NGEtMmM2Yy00MmVlLThlMjItZmFiNGM1NmQzMDEz
LzEvbV9kdXFPM2drOHA3VU5UaDIxNmRRYUlxbmhjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMm8huJ+
fgndueKkOumZgsOqlBAS4Zs/l/YBu/poUakH7NWRD300jcmIFC9WcEnTcIr+is4l
Ze92o+AvRMUcxTYtSs94qOU69LT28UBWW6XYQ4M+b9Bw7tY4xtE/cxw5iJfKhGMT
s4hYTtbtVM8dcGZirMx82R50SkXbzMD2pTW90DLo7jEKM69mHQV9nUhxsCFkPy+7
4JjRrFNY7HBOfBRo705BXwixDJcOVuHZCqaPsyYyE7bkdKrkdXuz1aP6GoXT0/T9
IDku6cm3sSxFY1QL+seX/ZFR/TddYP+kp+hqkKXVvpVrDD4dz2174BCJdf5xAO4x
r62yB+SHwgOIkw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 16:41:12 2026 by rpki-client