Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
File:                     7JezJx8tLSwHdy-q0BM8VG5JdAg.mft (raw, json)
Hash identifier:          s2loF+NmjN3sdRRcrXe0KYQNOI/9pJ/tkcUrnM5/Hsk=
Subject key identifier:   21:22:A3:5E:CA:20:23:6F:AA:36:26:15:FC:4E:2B:BF:9D:89:6F:22
Authority key identifier: EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08
Certificate issuer:       /CN=ec97b3271f2d2d2c07772faad0133c546e497408
Certificate serial:       019FAD88E738745F237236F9A29E77318E4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
Manifest number:          01C5
Signing time:             Wed 29 Jul 2026 11:00:58 +0000
Manifest this update:     Wed 29 Jul 2026 11:00:58 +0000
Manifest next update:     Thu 30 Jul 2026 11:00:58 +0000
Files and hashes:         1: 7JezJx8tLSwHdy-q0BM8VG5JdAg.crl (hash: AChFout1cV6LqubwJ9Y+WKVq9OKCCPss0l6fJlkRGZw=)
                          2: tZzd-4vJwTNaHI1mDTSbAye9aUg.roa (hash: WUVxikPavSYyUIB2ehZCr1awJETbczoTgfaX/AVFzSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:88:e7:38:74:5f:23:72:36:f9:a2:9e:77:31:8e:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec97b3271f2d2d2c07772faad0133c546e497408
        Validity
            Not Before: Jul 29 11:00:58 2026 GMT
            Not After : Jul 30 11:00:58 2026 GMT
        Subject: CN=2122a35eca20236faa362615fc4e2bbf9d896f22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b2:43:1b:0c:8b:7d:d8:e7:09:0c:31:41:b5:
                    90:49:3b:3e:e2:00:35:97:17:9f:b8:20:a4:b6:1d:
                    d4:e8:d7:5e:db:bd:52:f6:67:63:37:28:db:3c:61:
                    df:48:b9:dd:c6:a9:78:4d:3e:db:33:17:20:91:dd:
                    37:70:d0:51:4f:70:bb:d8:4e:30:15:a8:9d:c1:b6:
                    b0:6a:ed:3f:f1:52:bf:78:e1:d2:1a:9d:15:90:3e:
                    8b:53:f3:89:95:8c:82:11:0e:a9:c3:c8:df:79:0f:
                    c5:91:0b:cd:7a:c1:be:b7:f5:0f:cc:d3:0f:12:ec:
                    cf:07:5b:b1:d9:34:a4:32:12:01:48:0f:84:c0:9a:
                    9e:31:13:d2:77:4b:6c:c6:5e:8e:2c:88:67:01:ae:
                    99:a5:33:f3:b3:d1:17:9f:66:49:57:87:ee:85:34:
                    6b:29:77:73:30:c7:e8:1c:97:f5:9e:75:d8:4e:f7:
                    20:71:39:f4:48:72:e6:3f:f6:2d:96:b7:f7:38:29:
                    fa:de:b0:05:40:40:28:ea:d4:e7:7d:34:f4:61:58:
                    9b:89:ba:7b:1b:ce:ca:52:d6:96:17:a3:97:13:3c:
                    56:a2:a1:53:eb:07:8e:ed:61:15:18:57:e1:73:2c:
                    ba:e8:9c:9c:75:b2:54:89:a2:02:e7:23:cd:9e:3c:
                    79:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:22:A3:5E:CA:20:23:6F:AA:36:26:15:FC:4E:2B:BF:9D:89:6F:22
            X509v3 Authority Key Identifier:
                keyid:EC:97:B3:27:1F:2D:2D:2C:07:77:2F:AA:D0:13:3C:54:6E:49:74:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7JezJx8tLSwHdy-q0BM8VG5JdAg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/81a7d1-9f06-4821-aac1-c297f821a362/1/7JezJx8tLSwHdy-q0BM8VG5JdAg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:fd:9a:41:ea:cf:31:e7:6f:20:c3:c1:16:34:fc:c7:60:0c:
         47:bc:3e:b1:8a:90:1f:7f:55:ed:64:22:55:1b:c2:17:aa:bf:
         ad:ed:87:8f:dd:f5:1a:e9:8a:1e:1f:2a:fd:c7:88:16:0e:34:
         f6:5d:33:e3:21:aa:9e:07:9e:1b:a9:77:af:3e:20:4c:02:a8:
         51:22:8d:fb:ba:29:ec:f5:ed:04:43:32:d9:1c:b6:82:84:a0:
         ef:e2:78:75:5f:59:98:d5:c7:72:90:9c:c0:d6:9d:59:f2:3c:
         b4:2a:c1:54:a2:f7:87:a9:bf:c8:93:5c:b6:8c:72:49:d7:c9:
         5f:9d:f3:ef:e4:fa:a1:be:9c:af:b6:b0:8d:41:7f:c6:5c:67:
         41:6d:d6:cb:22:bb:59:f6:3e:c3:bc:59:c4:57:51:e9:f4:b3:
         6e:7a:b2:8a:af:d4:15:40:d5:96:83:40:e5:e3:2a:d7:43:9b:
         53:be:93:dd:ea:ee:29:93:7a:fe:5c:69:63:62:43:45:58:42:
         e8:93:0c:0d:3e:81:a0:d4:55:93:03:22:b0:d9:92:f0:dd:51:
         5a:8c:18:09:da:2c:fa:e4:08:24:e0:87:96:08:6d:69:ae:98:
         96:95:8b:fc:f2:d8:59:71:05:d0:d7:15:ed:61:99:35:46:e3:
         4e:3e:9c:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tiOc4dF8jcjb5op53MY5PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjOTdiMzI3MWYyZDJkMmMwNzc3MmZhYWQwMTMzYzU0NmU0
OTc0MDgwHhcNMjYwNzI5MTEwMDU4WhcNMjYwNzMwMTEwMDU4WjAzMTEwLwYDVQQD
EygyMTIyYTM1ZWNhMjAyMzZmYWEzNjI2MTVmYzRlMmJiZjlkODk2ZjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7JDGwyLfdjnCQwxQbWQSTs+4gA1
lxefuCCkth3U6Nde271S9mdjNyjbPGHfSLndxql4TT7bMxcgkd03cNBRT3C72E4w
Faidwbawau0/8VK/eOHSGp0VkD6LU/OJlYyCEQ6pw8jfeQ/FkQvNesG+t/UPzNMP
EuzPB1ux2TSkMhIBSA+EwJqeMRPSd0tsxl6OLIhnAa6ZpTPzs9EXn2ZJV4fuhTRr
KXdzMMfoHJf1nnXYTvcgcTn0SHLmP/Ytlrf3OCn63rAFQEAo6tTnfTT0YVibibp7
G87KUtaWF6OXEzxWoqFT6weO7WEVGFfhcyy66JycdbJUiaIC5yPNnjx5ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEio17KICNvqjYmFfxOK7+diW8iMB8GA1UdIwQY
MBaAFOyXsycfLS0sB3cvqtATPFRuSXQIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0plekp4OHRMU3dIZHktcTBCTThWRzVKZEFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi84MWE3ZDEtOWYwNi00ODIxLWFhYzEt
YzI5N2Y4MjFhMzYyLzEvN0plekp4OHRMU3dIZHktcTBCTThWRzVKZEFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi84MWE3ZDEtOWYwNi00ODIxLWFhYzEtYzI5N2Y4MjFhMzYy
LzEvN0plekp4OHRMU3dIZHktcTBCTThWRzVKZEFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdf2aQerP
MedvIMPBFjT8x2AMR7w+sYqQH39V7WQiVRvCF6q/re2Hj931GumKHh8q/ceIFg40
9l0z4yGqngeeG6l3rz4gTAKoUSKN+7op7PXtBEMy2Ry2goSg7+J4dV9ZmNXHcpCc
wNadWfI8tCrBVKL3h6m/yJNctoxySdfJX53z7+T6ob6cr7awjUF/xlxnQW3WyyK7
WfY+w7xZxFdR6fSzbnqyiq/UFUDVloNA5eMq10ObU76T3eruKZN6/lxpY2JDRVhC
6JMMDT6BoNRVkwMisNmS8N1RWowYCdos+uQIJOCHlghtaa6YlpWL/PLYWXEF0NcV
7WGZNUbjTj6cdQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:12:59 2026 by rpki-client