Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
File:                     pcY3PqsZz0PdL0MRE5g4PuK60DA.mft (raw, json)
Hash identifier:          UjAZz61s2Pp8IQvORnnXNTd8qw/mc3wIhUAGxhdq89k=
Subject key identifier:   F6:68:D1:3B:87:89:09:42:EF:C5:3A:18:52:C9:76:4C:22:CD:90:71
Authority key identifier: A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30
Certificate issuer:       /CN=a5c6373eab19cf43dd2f43111398383ee2bad030
Certificate serial:       019FA82BA94D3BF18617DAB9269CBDD2CEA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
Manifest number:          148F
Signing time:             Tue 28 Jul 2026 10:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:01 +0000
Files and hashes:         1: 3TWQKB1cnPa0egTpgv4hHONnk6g.roa (hash: 7Md6IbzdaA19dddiYJSTqvYDtis8EUY+mCYILklb6m4=)
                          2: U6ayks1P5BRjFFhc1UxRq5VC3jI.roa (hash: nvEU1lFde+SY+X4ElX6UspKi9KkL8IPg/Z79T8X9J68=)
                          3: o_KgOnMxvvekvBuPyEEYSnKNWEc.roa (hash: mk2PcWlp1oVsxXXBvuzmUNaWlANp8uf/qu/yWtEPDuk=)
                          4: pcY3PqsZz0PdL0MRE5g4PuK60DA.crl (hash: nOHSvF5/eNAe8gzg2zB5xQlebi04X4UEaVTaX4evsbg=)
                          5: xC-EAU29A34DWs98hyrYzhXpyZ8.roa (hash: jAQevc7Xb/Yzwsa/p7bJP+rHW+tHRc2iSYt5PmCJM2M=)
                          6: xiRiEOWddXme3nTY0cPZtUg6ADU.roa (hash: gYS4wLSjO292ggFXgtLrb2tXsY0mWqq4tWIaaZhXMCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:a9:4d:3b:f1:86:17:da:b9:26:9c:bd:d2:ce:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5c6373eab19cf43dd2f43111398383ee2bad030
        Validity
            Not Before: Jul 28 10:01:01 2026 GMT
            Not After : Jul 29 10:01:01 2026 GMT
        Subject: CN=f668d13b87890942efc53a1852c9764c22cd9071
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:06:b3:9f:33:1e:7d:2a:da:b9:5e:7f:9d:3e:
                    a6:da:e9:23:3a:46:8c:50:05:16:cb:e7:4e:86:b0:
                    b4:7f:fb:36:a3:bd:75:07:b0:55:1a:b6:d3:46:c6:
                    f7:46:07:ea:77:1b:5d:f2:9f:1d:ff:9b:72:c0:1a:
                    f1:9d:ee:1a:ec:34:c1:a7:fa:65:fd:5d:d0:67:76:
                    81:b8:6a:5c:ee:7f:ca:51:44:1d:9e:35:0b:58:21:
                    93:64:b1:48:f1:43:9a:9c:a4:54:d3:bc:73:94:98:
                    21:7d:72:dc:61:6d:25:01:5c:d8:f2:7d:6a:f3:8a:
                    0e:9f:58:a8:bc:75:a6:69:c3:d8:7c:4c:e3:71:9d:
                    21:b8:f7:03:6f:50:fc:8a:a0:a8:9a:db:71:af:95:
                    63:1a:5f:8c:17:05:31:ee:34:8b:90:00:26:11:0f:
                    c7:01:bd:eb:2f:aa:81:56:c6:9f:2e:4e:16:66:47:
                    6b:61:af:38:91:7e:84:9a:7e:66:ba:78:a3:46:56:
                    98:15:20:c5:f9:b3:16:39:b5:8e:f5:23:65:ae:4c:
                    45:19:63:e4:36:c1:ba:2e:00:b3:bf:4b:8a:4d:e7:
                    23:53:bf:db:9a:91:82:de:36:ef:28:f1:f8:ca:b8:
                    b4:d9:d3:54:3e:01:ba:eb:ad:cc:7a:b7:70:38:46:
                    e8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:68:D1:3B:87:89:09:42:EF:C5:3A:18:52:C9:76:4C:22:CD:90:71
            X509v3 Authority Key Identifier:
                keyid:A5:C6:37:3E:AB:19:CF:43:DD:2F:43:11:13:98:38:3E:E2:BA:D0:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pcY3PqsZz0PdL0MRE5g4PuK60DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/f0f5e3-6050-4e2d-a4ea-a4ea0a63f766/1/pcY3PqsZz0PdL0MRE5g4PuK60DA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:9d:6a:9e:17:5b:90:79:1d:7c:13:37:78:c4:e4:4c:d0:08:
         ea:c7:30:3d:75:b4:64:3d:0f:cc:c9:69:56:c5:19:e6:da:8d:
         2a:b3:8d:61:8a:0f:c3:72:8b:3b:7b:03:b8:1c:8c:7e:90:43:
         c2:22:3d:73:6c:de:ef:da:5e:0a:5f:4e:3b:ee:42:9c:5e:c3:
         fe:18:b1:d8:a5:d7:1d:73:52:3c:d9:e6:f3:4a:2e:7c:26:ea:
         51:7f:14:c8:83:f9:67:fb:f4:a8:05:8d:8b:3b:9d:be:80:f9:
         0d:69:e8:ff:74:1a:57:52:55:23:8d:d9:15:09:09:c8:47:8c:
         4b:a8:45:fb:99:c8:2d:43:39:87:cf:b3:81:67:f9:eb:a1:f3:
         6f:73:d2:39:c4:0e:5e:0e:6c:df:c7:72:83:a9:77:64:07:d1:
         b6:1c:dc:2c:e4:b5:df:b5:af:42:11:2d:47:f2:19:66:e5:18:
         e3:26:6b:57:68:60:3c:40:79:39:3f:ab:42:ed:9c:55:38:d9:
         60:4b:bc:b7:f1:70:7c:7d:6d:88:42:85:39:5a:53:06:d7:45:
         7d:fa:fa:7f:8a:9d:07:2e:21:a0:fb:e9:41:d7:09:fe:94:ef:
         d0:ae:10:8c:d5:44:a2:36:85:e2:e4:d1:2f:6b:2b:cc:dd:00:
         db:d1:09:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK6lNO/GGF9q5Jpy90s6gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YzYzNzNlYWIxOWNmNDNkZDJmNDMxMTEzOTgzODNlZTJi
YWQwMzAwHhcNMjYwNzI4MTAwMTAxWhcNMjYwNzI5MTAwMTAxWjAzMTEwLwYDVQQD
EyhmNjY4ZDEzYjg3ODkwOTQyZWZjNTNhMTg1MmM5NzY0YzIyY2Q5MDcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQaznzMefSrauV5/nT6m2ukjOkaM
UAUWy+dOhrC0f/s2o711B7BVGrbTRsb3Rgfqdxtd8p8d/5tywBrxne4a7DTBp/pl
/V3QZ3aBuGpc7n/KUUQdnjULWCGTZLFI8UOanKRU07xzlJghfXLcYW0lAVzY8n1q
84oOn1iovHWmacPYfEzjcZ0huPcDb1D8iqComttxr5VjGl+MFwUx7jSLkAAmEQ/H
Ab3rL6qBVsafLk4WZkdrYa84kX6Emn5munijRlaYFSDF+bMWObWO9SNlrkxFGWPk
NsG6LgCzv0uKTecjU7/bmpGC3jbvKPH4yri02dNUPgG6663MerdwOEboMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZo0TuHiQlC78U6GFLJdkwizZBxMB8GA1UdIwQY
MBaAFKXGNz6rGc9D3S9DEROYOD7iutAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEt
YTRlYTBhNjNmNzY2LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mMGY1ZTMtNjA1MC00ZTJkLWE0ZWEtYTRlYTBhNjNmNzY2
LzEvcGNZM1Bxc1p6MFBkTDBNUkU1ZzRQdUs2MERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIp1qnhdb
kHkdfBM3eMTkTNAI6scwPXW0ZD0PzMlpVsUZ5tqNKrONYYoPw3KLO3sDuByMfpBD
wiI9c2ze79peCl9OO+5CnF7D/hix2KXXHXNSPNnm80oufCbqUX8UyIP5Z/v0qAWN
izudvoD5DWno/3QaV1JVI43ZFQkJyEeMS6hF+5nILUM5h8+zgWf566Hzb3PSOcQO
Xg5s38dyg6l3ZAfRthzcLOS137WvQhEtR/IZZuUY4yZrV2hgPEB5OT+rQu2cVTjZ
YEu8t/FwfH1tiEKFOVpTBtdFffr6f4qdBy4hoPvpQdcJ/pTv0K4QjNVEojaF4uTR
L2srzN0A29EJGw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:31:07 2026 by rpki-client