Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
File:                     _KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft (raw, json)
Hash identifier:          /OY8wP2Dp11kem8q8jo67o+x92JoeZ4+hF+24v32qL8=
Subject key identifier:   4C:09:2D:8E:DB:ED:90:47:E5:94:6F:CA:4A:30:22:C3:9D:D8:01:59
Authority key identifier: FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7
Certificate issuer:       /CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
Certificate serial:       019FA9071015346C3EA75F99834F7C3AA48C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
Manifest number:          073F
Signing time:             Tue 28 Jul 2026 14:00:40 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:40 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:40 +0000
Files and hashes:         1: 6_lDwO9S-PZTwYR6rqeMkPI69T0.roa (hash: neEGA+hYnP8CjWfiQmsokGNa6auT6dI2/F1+F88xPUc=)
                          2: HgKic6ekM35QFsoMboEVFjIB9NE.roa (hash: He9li/VbBorSL9OR08x2iT60v6rUZMCHaohd8CS+JJE=)
                          3: IVH2Tg1CY4ZRK6T_OFtKHr5Tg4w.roa (hash: paS2HrmO9LI/c37GN0LFXIStqUHvKAKZhc4SNlkMN68=)
                          4: L2JBwXn0_M5VePo6q3NCFb8xLnM.roa (hash: UZ+pSOfmFCdt9QWA2qepdtq6OMmO8+hZ5Y2AO5lO+NE=)
                          5: _KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl (hash: eak0MgfRFN5M+j5V3zbR+wOYHHhvnrfW33WSvUzO5No=)
                          6: r93BFIAx7lK03ClWMKEgnNMRy3k.roa (hash: 4jsVxNS7oJ5jGPb+Oqg5cVDnCqMG9rPwVMnyLP528N4=)
                          7: tII-kyxxSugYobEeIbAgNDo451s.roa (hash: Lv7S4x6BZW4ZHs5wH+NnqBYKST4za7yZuPdbD8t6zpk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:10:15:34:6c:3e:a7:5f:99:83:4f:7c:3a:a4:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fca396f1c344b079c5d2f27bfb313377febb2ec7
        Validity
            Not Before: Jul 28 14:00:40 2026 GMT
            Not After : Jul 29 14:00:40 2026 GMT
        Subject: CN=4c092d8edbed9047e5946fca4a3022c39dd80159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:20:d5:74:e7:2b:34:d7:0f:8e:15:11:49:91:
                    47:57:8e:1c:20:55:c4:45:88:b2:28:0b:65:01:bd:
                    1d:e3:73:7d:5a:2b:ef:2d:09:d1:c8:77:2e:15:ca:
                    f5:ed:16:a0:91:9b:6c:42:38:8b:66:19:6e:65:86:
                    de:e6:4e:89:fc:51:b7:c8:93:ab:a3:74:1a:ab:56:
                    3b:65:59:bc:3d:b0:be:fb:15:51:04:fb:0e:82:eb:
                    fb:67:52:d6:ae:b3:18:4c:01:6f:1e:a8:32:a6:bf:
                    84:b5:e3:20:85:50:36:82:5c:34:06:53:c2:e1:a5:
                    da:e9:95:f1:6c:d9:e4:30:b4:ff:92:38:a5:88:a0:
                    b1:a3:27:8c:48:13:81:b1:55:b0:99:ad:b7:8e:ed:
                    56:5b:18:ac:46:d1:a1:fc:04:bd:e8:98:90:e9:99:
                    c7:15:88:51:57:2f:a0:14:b0:28:c8:01:f6:40:cd:
                    50:63:2a:63:01:a4:11:a9:36:97:a6:97:e4:0a:17:
                    a0:29:3a:08:3b:45:2a:26:8a:dd:cb:a6:63:8d:c3:
                    bc:9c:65:b4:38:86:61:b3:31:2d:76:d8:de:48:0c:
                    c1:b6:d6:6b:32:c6:8a:f6:6d:77:fc:a6:88:fa:9c:
                    d2:48:ad:69:8d:58:15:b1:66:48:57:d9:03:a2:b4:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:09:2D:8E:DB:ED:90:47:E5:94:6F:CA:4A:30:22:C3:9D:D8:01:59
            X509v3 Authority Key Identifier:
                keyid:FC:A3:96:F1:C3:44:B0:79:C5:D2:F2:7B:FB:31:33:77:FE:BB:2E:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14e141-caa5-41fb-945b-ffb16ebd111f/1/_KOW8cNEsHnF0vJ7-zEzd_67Lsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:89:2c:37:4c:39:7a:7c:56:b7:22:db:3c:9b:e3:64:b2:36:
         2a:75:2c:ae:21:22:83:16:1c:55:3a:8a:0f:c4:c6:56:99:30:
         83:32:e4:3f:2c:6a:d4:c3:fe:1d:da:67:27:8c:45:db:ed:d4:
         0c:7b:fa:4c:02:22:66:87:5a:8d:f1:23:1b:f8:6a:3c:71:25:
         f3:e9:54:84:a6:b9:d1:8b:89:a5:dc:69:9d:7c:89:89:88:fd:
         7f:03:aa:d1:fb:a7:5e:ea:df:47:e5:62:e4:06:f4:41:90:f1:
         b9:47:2f:1d:75:43:1f:29:bc:c3:42:c7:70:f9:bc:17:31:34:
         76:e3:cb:20:bf:ea:be:04:be:40:dd:f0:bd:44:dc:54:9f:64:
         db:f9:f6:fb:41:bf:5e:16:13:6d:99:f2:91:a7:f8:95:ff:b1:
         a7:eb:5f:2b:51:0e:ce:21:b1:ad:21:df:20:81:2e:c9:09:ca:
         33:0b:c6:e8:a2:ad:65:91:a4:7b:5d:67:02:54:14:d3:67:24:
         e3:d6:55:15:80:f1:f6:10:53:23:55:6f:72:cc:1d:ee:d7:cc:
         5c:25:f3:66:5c:36:57:2e:e2:a3:67:3d:ab:f6:53:4f:32:b7:
         43:94:85:2a:01:2f:f3:12:1e:e3:0f:7d:9e:71:9c:fb:eb:27:
         aa:e5:7e:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBxAVNGw+p1+Zg098OqSMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjYTM5NmYxYzM0NGIwNzljNWQyZjI3YmZiMzEzMzc3ZmVi
YjJlYzcwHhcNMjYwNzI4MTQwMDQwWhcNMjYwNzI5MTQwMDQwWjAzMTEwLwYDVQQD
Eyg0YzA5MmQ4ZWRiZWQ5MDQ3ZTU5NDZmY2E0YTMwMjJjMzlkZDgwMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSDVdOcrNNcPjhURSZFHV44cIFXE
RYiyKAtlAb0d43N9WivvLQnRyHcuFcr17RagkZtsQjiLZhluZYbe5k6J/FG3yJOr
o3Qaq1Y7ZVm8PbC++xVRBPsOguv7Z1LWrrMYTAFvHqgypr+EteMghVA2glw0BlPC
4aXa6ZXxbNnkMLT/kjiliKCxoyeMSBOBsVWwma23ju1WWxisRtGh/AS96JiQ6ZnH
FYhRVy+gFLAoyAH2QM1QYypjAaQRqTaXppfkChegKToIO0UqJordy6ZjjcO8nGW0
OIZhszEtdtjeSAzBttZrMsaK9m13/KaI+pzSSK1pjVgVsWZIV9kDorT3/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwJLY7b7ZBH5ZRvykowIsOd2AFZMB8GA1UdIwQY
MBaAFPyjlvHDRLB5xdLye/sxM3f+uy7HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWIt
ZmZiMTZlYmQxMTFmLzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8xNGUxNDEtY2FhNS00MWZiLTk0NWItZmZiMTZlYmQxMTFm
LzEvX0tPVzhjTkVzSG5GMHZKNy16RXpkXzY3THNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApIksN0w5
enxWtyLbPJvjZLI2KnUsriEigxYcVTqKD8TGVpkwgzLkPyxq1MP+HdpnJ4xF2+3U
DHv6TAIiZodajfEjG/hqPHEl8+lUhKa50YuJpdxpnXyJiYj9fwOq0funXurfR+Vi
5Ab0QZDxuUcvHXVDHym8w0LHcPm8FzE0duPLIL/qvgS+QN3wvUTcVJ9k2/n2+0G/
XhYTbZnykaf4lf+xp+tfK1EOziGxrSHfIIEuyQnKMwvG6KKtZZGke11nAlQU02ck
49ZVFYDx9hBTI1Vvcswd7tfMXCXzZlw2Vy7io2c9q/ZTTzK3Q5SFKgEv8xIe4w99
nnGc++snquV+4Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:05 2026 by rpki-client