Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
File:                     AU79_QZHzLpzSyoFZgEk64wGdWc.mft (raw, json)
Hash identifier:          JB+UESZi3UTolGRuvyGKlzd/TaTKzwCL11he9TGiVXM=
Subject key identifier:   76:3D:4C:04:04:CD:EE:00:14:6D:2E:E0:92:E3:44:D9:CE:EB:50:FD
Authority key identifier: 01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67
Certificate issuer:       /CN=014efdfd0647ccba734b2a05660124eb8c067567
Certificate serial:       019FA9E2AEC8167134253C5D4CDF95E8B277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
Manifest number:          13A8
Signing time:             Tue 28 Jul 2026 18:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:33 +0000
Files and hashes:         1: AU79_QZHzLpzSyoFZgEk64wGdWc.crl (hash: JTyJCSBsHlhoCbmf9y/yEiE1VORXsIjQaQ9ETh33GVU=)
                          2: TIl4ni4I9dnWPD6JhGZ4MT01X9k.roa (hash: xqkMDcDlSk0VZ9Deo2xieEF476AnzgNHWsIFEaEp8us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 18:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:ae:c8:16:71:34:25:3c:5d:4c:df:95:e8:b2:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=014efdfd0647ccba734b2a05660124eb8c067567
        Validity
            Not Before: Jul 28 18:00:33 2026 GMT
            Not After : Jul 29 18:00:33 2026 GMT
        Subject: CN=763d4c0404cdee00146d2ee092e344d9ceeb50fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:7e:c6:51:6a:0c:da:b9:4e:b5:8d:24:0f:
                    42:76:bc:7b:2c:b2:5f:11:59:08:c2:b3:eb:3d:09:
                    2c:93:a5:90:49:28:db:d1:49:4d:0e:a1:89:8e:80:
                    bf:71:a6:21:f1:d4:3d:f3:fd:f4:bf:7f:70:20:c9:
                    1e:56:47:90:99:a2:a5:ff:54:a2:7d:b5:82:c4:b4:
                    c0:a2:47:32:0e:38:28:ae:24:f3:fd:ab:a9:25:27:
                    6c:c4:50:0a:2a:17:ab:2d:93:bf:8b:c8:cc:29:47:
                    3b:17:65:cc:1c:12:ec:22:5f:df:58:16:e4:bb:4c:
                    82:1e:97:ce:dc:79:c2:1e:05:24:99:32:48:19:01:
                    45:11:58:30:d4:96:99:19:30:3c:eb:bb:a9:e9:66:
                    61:be:af:b6:0d:61:26:33:4c:46:ba:68:da:59:3b:
                    28:08:c9:f9:4f:1e:b8:59:21:1d:5e:1d:10:e8:31:
                    1b:c7:e6:5e:51:04:d3:a2:ed:69:97:a5:de:51:1f:
                    9c:8c:59:f1:56:e8:51:5a:7a:ae:00:cb:1f:69:61:
                    6d:41:51:c4:f5:25:49:f3:c3:b9:aa:07:c2:d8:19:
                    3a:21:f9:cf:3e:d1:24:06:07:7e:55:7e:8d:2e:5a:
                    00:24:f1:c4:5e:b9:99:f6:c9:e1:f3:44:2a:86:72:
                    b4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3D:4C:04:04:CD:EE:00:14:6D:2E:E0:92:E3:44:D9:CE:EB:50:FD
            X509v3 Authority Key Identifier:
                keyid:01:4E:FD:FD:06:47:CC:BA:73:4B:2A:05:66:01:24:EB:8C:06:75:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AU79_QZHzLpzSyoFZgEk64wGdWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f9c76b-4c66-4346-8ade-fc6cdaaf250b/1/AU79_QZHzLpzSyoFZgEk64wGdWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:c1:9d:5e:f3:e9:f3:3b:c0:e5:81:47:09:25:c3:38:ae:cc:
         e1:78:2f:d8:1c:53:4f:7e:d4:a2:75:22:36:0f:46:7b:63:0f:
         fe:a8:a6:0b:05:82:2e:e0:79:99:4a:99:a7:b8:47:1d:9a:15:
         af:87:8b:ac:b6:a0:08:ab:22:9b:18:67:ca:a4:e0:df:e9:99:
         ca:53:cd:16:5a:93:b0:f6:69:2c:27:6b:e9:f6:1e:6d:d4:e1:
         ee:fe:45:32:b9:71:ab:f9:3f:37:69:16:8c:5f:11:b1:ce:59:
         84:20:e8:5c:e5:6d:a7:47:3b:5b:cd:92:60:3d:70:3b:6b:16:
         67:03:89:ad:25:0f:26:60:a4:b5:71:50:1d:33:8d:57:8e:1d:
         64:40:ac:46:a3:53:f8:39:f1:2b:87:d5:55:1c:15:9d:23:6c:
         9c:9e:70:13:55:6e:95:6b:e7:19:e1:6e:c7:b1:98:56:9a:6b:
         1c:75:ad:5e:cd:61:64:62:62:73:6d:67:4a:c4:57:77:94:58:
         cb:90:42:3e:9b:d9:9d:ef:bb:92:e0:09:fe:18:e0:47:49:23:
         e2:9f:98:ad:8c:9e:7c:92:11:0b:bb:de:63:7a:c3:0f:55:1f:
         0b:b7:d1:84:a0:f0:e1:6c:9b:42:e3:f8:9e:f3:63:33:6e:46:
         b4:b5:bd:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+p4q7IFnE0JTxdTN+V6LJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxNGVmZGZkMDY0N2NjYmE3MzRiMmEwNTY2MDEyNGViOGMw
Njc1NjcwHhcNMjYwNzI4MTgwMDMzWhcNMjYwNzI5MTgwMDMzWjAzMTEwLwYDVQQD
Eyg3NjNkNGMwNDA0Y2RlZTAwMTQ2ZDJlZTA5MmUzNDRkOWNlZWI1MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBt+xlFqDNq5TrWNJA9Cdrx7LLJf
EVkIwrPrPQksk6WQSSjb0UlNDqGJjoC/caYh8dQ98/30v39wIMkeVkeQmaKl/1Si
fbWCxLTAokcyDjgoriTz/aupJSdsxFAKKherLZO/i8jMKUc7F2XMHBLsIl/fWBbk
u0yCHpfO3HnCHgUkmTJIGQFFEVgw1JaZGTA867up6WZhvq+2DWEmM0xGumjaWTso
CMn5Tx64WSEdXh0Q6DEbx+ZeUQTTou1pl6XeUR+cjFnxVuhRWnquAMsfaWFtQVHE
9SVJ88O5qgfC2Bk6IfnPPtEkBgd+VX6NLloAJPHEXrmZ9snh80QqhnK03wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHY9TAQEze4AFG0u4JLjRNnO61D9MB8GA1UdIwQY
MBaAFAFO/f0GR8y6c0sqBWYBJOuMBnVnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUt
ZmM2Y2RhYWYyNTBiLzEvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9mOWM3NmItNGM2Ni00MzQ2LThhZGUtZmM2Y2RhYWYyNTBi
LzEvQVU3OV9RWkh6THB6U3lvRlpnRWs2NHdHZFdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAncGdXvPp
8zvA5YFHCSXDOK7M4Xgv2BxTT37UonUiNg9Ge2MP/qimCwWCLuB5mUqZp7hHHZoV
r4eLrLagCKsimxhnyqTg3+mZylPNFlqTsPZpLCdr6fYebdTh7v5FMrlxq/k/N2kW
jF8Rsc5ZhCDoXOVtp0c7W82SYD1wO2sWZwOJrSUPJmCktXFQHTONV44dZECsRqNT
+DnxK4fVVRwVnSNsnJ5wE1VulWvnGeFux7GYVpprHHWtXs1hZGJic21nSsRXd5RY
y5BCPpvZne+7kuAJ/hjgR0kj4p+YrYyefJIRC7veY3rDD1UfC7fRhKDw4WybQuP4
nvNjM25GtLW9EA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:15:47 2026 by rpki-client