Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
File:                     xi18rB_7LD-94oRiW_GvTGuuaw4.mft (raw, json)
Hash identifier:          ziyTwTuE7lPKdVTGLO5DA+RjWqO9OY3Bn5uCsSDQWJk=
Subject key identifier:   06:B5:3F:D8:90:9A:7C:47:05:56:87:35:AE:2F:78:66:AB:34:50:DD
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Certificate issuer:       /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial:       019FAA88817F93F75D6962646810B5719764
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
Manifest number:          0F84
Signing time:             Tue 28 Jul 2026 21:01:40 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:40 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:40 +0000
Files and hashes:         1: brf91ENcAgUp0obWF-s4t0ccdXg.roa (hash: L3X4nsh8efFRGAeVZaXiM6ZqsZGp3bsgy9UCI0jKigw=)
                          2: lG6FMWT2cKO27fqSgyD7NwJGZic.roa (hash: 8vr9/y84LRaPCw3bPTcjeu/NXDEsRUvrX9EcTdM7j5g=)
                          3: xi18rB_7LD-94oRiW_GvTGuuaw4.crl (hash: JWXOhzU/0+I6nQYpftNLf71GyExzGSzlb9i1B5WPkxo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:81:7f:93:f7:5d:69:62:64:68:10:b5:71:97:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
        Validity
            Not Before: Jul 28 21:01:40 2026 GMT
            Not After : Jul 29 21:01:40 2026 GMT
        Subject: CN=06b53fd8909a7c4705568735ae2f7866ab3450dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5c:11:4c:eb:d5:e3:5a:73:ab:31:30:68:de:
                    90:3c:9f:cd:82:57:0e:be:62:21:35:24:6c:e2:d5:
                    16:31:27:e9:17:ad:9f:86:41:01:8e:56:cc:bd:12:
                    f7:d1:51:5e:b1:88:a0:ee:af:8b:7b:02:74:ce:80:
                    4f:a7:b1:35:75:ec:0a:4e:29:b3:61:e6:37:88:e4:
                    0f:59:68:49:76:ff:ba:43:71:63:ac:95:4b:df:ce:
                    a5:67:de:9e:4a:fc:fa:98:50:4b:c3:ae:30:59:f5:
                    f3:33:5f:05:a5:b1:40:ed:ef:0a:6f:9b:e9:c4:8c:
                    90:4c:9b:15:ea:e4:9d:57:57:fe:85:ef:b6:b7:c3:
                    73:46:55:ed:eb:17:1e:ea:c4:3c:1d:04:38:a6:f3:
                    2b:ea:ac:59:a6:bd:33:39:a4:3b:a2:f7:9e:ad:48:
                    93:b5:e1:21:c8:24:dc:f0:b4:66:31:d4:a3:ba:de:
                    ff:7c:4e:d8:95:a3:f5:03:9f:10:32:79:0b:af:4a:
                    ea:ee:02:64:61:d8:49:3b:a8:58:91:a0:92:b1:be:
                    aa:2a:2f:11:9c:36:37:5b:fb:e1:94:98:20:ab:7c:
                    5d:c3:d5:92:6b:f7:52:32:1b:06:fa:5d:7c:cd:0d:
                    ab:4c:ed:6c:35:fb:95:29:ef:50:64:10:b8:90:66:
                    40:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:B5:3F:D8:90:9A:7C:47:05:56:87:35:AE:2F:78:66:AB:34:50:DD
            X509v3 Authority Key Identifier:
                keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:f4:6c:ac:3a:3b:d8:04:eb:e3:a2:81:8f:9d:d3:d4:4d:f0:
         ee:4c:98:5b:db:3b:38:95:63:76:bd:21:f6:e5:aa:01:9a:7c:
         2f:05:6b:e5:dc:23:98:44:9a:f3:48:ea:5c:d0:19:67:0b:3b:
         e0:61:1e:3b:b1:92:38:e2:a4:9f:0c:01:bf:a9:c0:17:c5:c2:
         76:ab:59:94:dd:54:f5:79:ba:41:13:40:e6:c5:7c:c9:48:4f:
         ea:f3:87:71:72:08:6e:16:f6:9e:24:08:55:1d:1a:dc:ba:19:
         a3:43:d9:01:fb:13:4e:18:8d:3a:46:cf:26:8f:3e:20:35:ea:
         1a:54:0a:3f:f1:06:87:7c:6a:c3:8d:d3:15:7c:7e:d8:32:a1:
         be:7c:61:4d:fa:e2:ba:de:21:ff:12:68:4e:eb:c2:44:76:bf:
         25:ee:28:f1:b5:25:62:51:fa:18:c5:5a:23:3a:37:6d:26:6a:
         c4:5e:e8:59:9f:ef:9b:35:e0:e1:a6:ad:17:c2:20:c2:ea:35:
         c7:8d:a6:f1:1f:42:37:14:27:24:c8:22:54:50:25:49:46:c4:
         5b:9a:b5:ec:9a:57:bf:18:44:25:bd:79:8a:0c:71:49:8d:3a:
         96:ce:9b:0a:ae:44:1c:25:a5:3e:9c:af:0c:cf:96:54:e0:a9:
         05:8e:60:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiIF/k/ddaWJkaBC1cZdkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MmQ3Y2FjMWZmYjJjM2ZiZGUyODQ2MjViZjFhZjRjNmJh
ZTZiMGUwHhcNMjYwNzI4MjEwMTQwWhcNMjYwNzI5MjEwMTQwWjAzMTEwLwYDVQQD
EygwNmI1M2ZkODkwOWE3YzQ3MDU1Njg3MzVhZTJmNzg2NmFiMzQ1MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lwRTOvV41pzqzEwaN6QPJ/NglcO
vmIhNSRs4tUWMSfpF62fhkEBjlbMvRL30VFesYig7q+LewJ0zoBPp7E1dewKTimz
YeY3iOQPWWhJdv+6Q3FjrJVL386lZ96eSvz6mFBLw64wWfXzM18FpbFA7e8Kb5vp
xIyQTJsV6uSdV1f+he+2t8NzRlXt6xce6sQ8HQQ4pvMr6qxZpr0zOaQ7oveerUiT
teEhyCTc8LRmMdSjut7/fE7YlaP1A58QMnkLr0rq7gJkYdhJO6hYkaCSsb6qKi8R
nDY3W/vhlJggq3xdw9WSa/dSMhsG+l18zQ2rTO1sNfuVKe9QZBC4kGZASQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAa1P9iQmnxHBVaHNa4veGarNFDdMB8GA1UdIwQY
MBaAFMYtfKwf+yw/veKEYlvxr0xrrmsOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEt
MTU0NGI0NGQ1OWNhLzEveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82Y2Q1ZmMtNjBjYy00NWRlLWJkOGEtMTU0NGI0NGQ1OWNh
LzEveGkxOHJCXzdMRC05NG9SaVdfR3ZUR3V1YXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWvRsrDo7
2ATr46KBj53T1E3w7kyYW9s7OJVjdr0h9uWqAZp8LwVr5dwjmESa80jqXNAZZws7
4GEeO7GSOOKknwwBv6nAF8XCdqtZlN1U9Xm6QRNA5sV8yUhP6vOHcXIIbhb2niQI
VR0a3LoZo0PZAfsTThiNOkbPJo8+IDXqGlQKP/EGh3xqw43TFXx+2DKhvnxhTfri
ut4h/xJoTuvCRHa/Je4o8bUlYlH6GMVaIzo3bSZqxF7oWZ/vmzXg4aatF8Igwuo1
x42m8R9CNxQnJMgiVFAlSUbEW5q17JpXvxhEJb15igxxSY06ls6bCq5EHCWlPpyv
DM+WVOCpBY5gTg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:44:15 2026 by rpki-client