Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
File:                     p-7aZdzUOH1yJwBcHhOgbUSHe28.mft (raw, json)
Hash identifier:          jiOAAcp1ZcnJnaKolM12YqiUD2PGdeQb71YK/jIttNc=
Subject key identifier:   B8:18:FD:83:12:A4:77:CB:5F:55:5A:8B:50:85:15:4A:DC:B0:79:A1
Authority key identifier: A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F
Certificate issuer:       /CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
Certificate serial:       019EC1B72CBD53B969E9E2BE8D4A20D014EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
Manifest number:          166C
Signing time:             Sat 13 Jun 2026 16:01:07 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:07 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:07 +0000
Files and hashes:         1: 2U0mDkF6k188FlI68TZ1uJWmy1k.roa (hash: 7JEOUa3UIN+/J9E0Zd5VhYU2fI+uSkBnOTYRU58DUPc=)
                          2: p-7aZdzUOH1yJwBcHhOgbUSHe28.crl (hash: V9Pfkn7kOOW7mGWHaq9wcYCJDbxKserkMiRqb+nXP/E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:2c:bd:53:b9:69:e9:e2:be:8d:4a:20:d0:14:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7eeda65dcd4387d7227005c1e13a06d44877b6f
        Validity
            Not Before: Jun 13 16:01:07 2026 GMT
            Not After : Jun 14 16:01:07 2026 GMT
        Subject: CN=b818fd8312a477cb5f555a8b5085154adcb079a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:cd:6c:da:60:a0:8b:ae:5e:cd:6b:49:af:57:
                    e0:ae:ac:26:84:ec:35:14:aa:2b:9b:84:ed:f9:92:
                    3d:17:4d:60:33:d3:df:dc:53:82:53:a3:98:65:ef:
                    05:ae:5a:02:58:d4:0a:26:d2:7c:f9:b3:bd:65:15:
                    ca:9b:53:77:04:67:0a:39:eb:fa:39:11:0a:43:04:
                    c3:d9:ab:a6:04:65:99:52:d6:d1:e1:62:8f:53:f3:
                    fe:70:8f:ca:5c:f0:cb:ad:9c:bf:23:3b:29:23:e1:
                    46:2b:e9:01:34:58:cb:03:ad:a3:86:ba:3b:57:ec:
                    e9:48:55:80:a1:24:aa:ef:43:fd:9c:2b:06:b4:38:
                    fc:9c:c2:bb:3a:b1:c5:c3:30:b3:41:c3:ed:67:c6:
                    a7:6c:40:cc:d8:00:76:09:c2:11:79:04:fa:99:76:
                    e8:7f:bc:bd:15:f4:69:06:e6:9e:61:77:4f:e6:70:
                    6f:92:51:b9:69:bc:09:c4:09:c3:35:9c:a9:9a:43:
                    9b:d1:6c:e8:4d:e3:a9:cd:e9:cb:49:f6:c4:e8:38:
                    94:a1:e2:7a:8c:b3:ea:4d:9a:b9:ad:0a:90:82:47:
                    6d:f4:39:c1:08:d3:a9:81:ae:0e:17:86:db:da:50:
                    54:dc:e1:92:3a:56:2d:95:7c:13:0b:a5:be:7d:ed:
                    12:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:18:FD:83:12:A4:77:CB:5F:55:5A:8B:50:85:15:4A:DC:B0:79:A1
            X509v3 Authority Key Identifier:
                keyid:A7:EE:DA:65:DC:D4:38:7D:72:27:00:5C:1E:13:A0:6D:44:87:7B:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-7aZdzUOH1yJwBcHhOgbUSHe28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/e59168-82d2-455e-8f88-c155f95436e1/1/p-7aZdzUOH1yJwBcHhOgbUSHe28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:77:02:cb:c8:e5:17:0a:6c:65:9b:b5:4e:e8:40:90:88:7a:
         cd:eb:d9:cb:78:2d:13:07:aa:6a:88:3d:34:d4:ce:01:62:97:
         7f:a6:97:e3:ef:66:4a:55:45:8d:f6:75:69:31:9b:41:14:77:
         fe:7d:5e:18:99:88:57:0a:bc:db:3a:95:ce:fa:f6:3e:fd:f5:
         f1:71:68:3c:95:44:17:27:b4:2b:fd:81:ca:ec:e9:83:2b:c8:
         62:8b:04:18:5c:c9:df:cb:0a:8c:54:8b:f4:bd:95:b3:38:c9:
         94:97:89:83:78:e1:18:50:fb:10:9e:af:c5:e6:af:53:d1:78:
         63:d7:d0:5d:ca:9b:69:2e:7d:f6:80:ff:98:ba:8e:bc:84:63:
         1b:e3:5d:b5:d7:45:93:c0:bd:f6:99:37:ce:d7:0d:77:f4:91:
         ff:d5:ce:3b:dd:e6:7e:7b:63:80:0e:9a:be:a5:47:65:e2:ff:
         f3:dc:92:bb:10:5d:98:44:92:47:6a:51:65:ab:83:00:bc:09:
         74:3c:b7:ee:e5:55:78:69:02:af:cf:73:ba:6b:95:69:5c:3f:
         47:a6:7a:6c:88:81:44:b6:1a:ce:c8:61:22:52:c5:b2:b5:ca:
         96:08:4e:2d:91:e5:d7:3f:2a:1f:6b:45:77:50:ec:56:11:17:
         0a:6b:2e:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Btyy9U7lp6eK+jUog0BTrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZWVkYTY1ZGNkNDM4N2Q3MjI3MDA1YzFlMTNhMDZkNDQ4
NzdiNmYwHhcNMjYwNjEzMTYwMTA3WhcNMjYwNjE0MTYwMTA3WjAzMTEwLwYDVQQD
EyhiODE4ZmQ4MzEyYTQ3N2NiNWY1NTVhOGI1MDg1MTU0YWRjYjA3OWExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuM1s2mCgi65ezWtJr1fgrqwmhOw1
FKorm4Tt+ZI9F01gM9Pf3FOCU6OYZe8FrloCWNQKJtJ8+bO9ZRXKm1N3BGcKOev6
OREKQwTD2aumBGWZUtbR4WKPU/P+cI/KXPDLrZy/IzspI+FGK+kBNFjLA62jhro7
V+zpSFWAoSSq70P9nCsGtDj8nMK7OrHFwzCzQcPtZ8anbEDM2AB2CcIReQT6mXbo
f7y9FfRpBuaeYXdP5nBvklG5abwJxAnDNZypmkOb0WzoTeOpzenLSfbE6DiUoeJ6
jLPqTZq5rQqQgkdt9DnBCNOpga4OF4bb2lBU3OGSOlYtlXwTC6W+fe0SxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgY/YMSpHfLX1Vai1CFFUrcsHmhMB8GA1UdIwQY
MBaAFKfu2mXc1Dh9cicAXB4ToG1Eh3tvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgt
YzE1NWY5NTQzNmUxLzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC9lNTkxNjgtODJkMi00NTVlLThmODgtYzE1NWY5NTQzNmUx
LzEvcC03YVpkelVPSDF5SndCY0hoT2diVVNIZTI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3cCy8jl
FwpsZZu1TuhAkIh6zevZy3gtEweqaog9NNTOAWKXf6aX4+9mSlVFjfZ1aTGbQRR3
/n1eGJmIVwq82zqVzvr2Pv318XFoPJVEFye0K/2ByuzpgyvIYosEGFzJ38sKjFSL
9L2VszjJlJeJg3jhGFD7EJ6vxeavU9F4Y9fQXcqbaS599oD/mLqOvIRjG+NdtddF
k8C99pk3ztcNd/SR/9XOO93mfntjgA6avqVHZeL/89ySuxBdmESSR2pRZauDALwJ
dDy37uVVeGkCr89zumuVaVw/R6Z6bIiBRLYazshhIlLFsrXKlghOLZHl1z8qH2tF
d1DsVhEXCmsunQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:44:42 2026 by rpki-client