Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
File:                     Sv9B3ejOR9Ry174skEhFBIwwqWA.mft (raw, json)
Hash identifier:          WUBltWEc9GMt5bynjq/fsv0h+6RCoPgsjiBw2UYwhwI=
Subject key identifier:   82:37:C7:FE:3D:3C:8A:AD:5C:FC:B8:3B:23:3D:40:72:9C:E0:00:3D
Authority key identifier: 4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60
Certificate issuer:       /CN=4aff41dde8ce47d472d7be2c904845048c30a960
Certificate serial:       019FAB63B2C8CF0827F7D6110AC6619B7631
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
Manifest number:          0153
Signing time:             Wed 29 Jul 2026 01:01:05 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:05 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:05 +0000
Files and hashes:         1: 64rZ1l1fxnqrXjonOeV1eeEvkjc.roa (hash: RKliE8vgwX94fwVvTWqD6n+wasJnNrBVuMdqT01fLuw=)
                          2: Sv9B3ejOR9Ry174skEhFBIwwqWA.crl (hash: cvqdR81G4mPhiov+mULY+8su5dlfzLn7T30F4mDEbBM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:b2:c8:cf:08:27:f7:d6:11:0a:c6:61:9b:76:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4aff41dde8ce47d472d7be2c904845048c30a960
        Validity
            Not Before: Jul 29 01:01:05 2026 GMT
            Not After : Jul 30 01:01:05 2026 GMT
        Subject: CN=8237c7fe3d3c8aad5cfcb83b233d40729ce0003d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:94:a9:72:12:85:9f:58:a4:14:fa:c3:e6:
                    03:de:5c:5e:e7:4d:46:97:e4:2e:97:50:51:f0:66:
                    ab:0f:9c:7f:db:5e:5d:8d:8c:45:94:b6:23:2e:8a:
                    5f:54:b5:74:13:53:2b:e1:d5:20:11:d5:3d:a3:48:
                    d6:2d:13:0e:79:13:18:b7:a7:12:f1:c8:e7:36:82:
                    63:8f:ec:f0:c5:85:92:70:8c:0b:16:9a:45:00:7e:
                    da:13:19:63:ef:47:5a:65:a6:90:ec:33:c2:90:df:
                    d2:70:e8:2c:81:22:82:99:c0:9b:e1:36:3f:f8:f5:
                    47:35:d7:13:7f:7f:49:01:c5:ce:0e:86:92:7e:48:
                    12:e5:99:c9:51:cd:d2:91:ab:7d:be:c8:2e:61:e8:
                    a6:ca:39:3b:fd:99:54:eb:d9:7b:66:b3:ec:b2:e4:
                    bd:19:b3:6c:ba:fc:73:5b:96:45:5d:71:ed:42:47:
                    7b:9e:a3:86:ac:b7:13:d7:56:3a:5d:b7:4f:df:9a:
                    9b:ad:50:4d:11:ae:8b:d2:7b:a7:99:77:80:0b:0f:
                    09:c5:e5:cc:6c:f8:c2:6d:66:ee:93:88:c8:27:20:
                    34:c7:78:37:ee:d3:1f:3d:d3:98:77:c5:10:7a:5d:
                    14:fc:48:62:3a:c3:b6:b1:55:76:fd:7c:05:1f:16:
                    f2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:37:C7:FE:3D:3C:8A:AD:5C:FC:B8:3B:23:3D:40:72:9C:E0:00:3D
            X509v3 Authority Key Identifier:
                keyid:4A:FF:41:DD:E8:CE:47:D4:72:D7:BE:2C:90:48:45:04:8C:30:A9:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sv9B3ejOR9Ry174skEhFBIwwqWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/9a39f4-f837-4c46-be6e-d93065bb2a6a/1/Sv9B3ejOR9Ry174skEhFBIwwqWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f1:94:d0:92:0d:69:ac:b6:e0:95:1a:45:a5:b1:36:40:b3:
         73:09:fc:c6:fb:05:1d:e2:04:53:76:e4:32:76:26:d5:55:32:
         77:c0:40:3f:26:5b:1f:ec:31:f9:c4:eb:f1:66:91:7e:37:c0:
         79:a9:67:13:7d:cf:7b:2c:b6:08:26:a9:9b:b4:7b:e5:4a:f8:
         06:f8:d0:95:7a:c1:2e:17:f7:0c:f0:17:05:11:12:76:7b:02:
         2f:1c:f2:e6:e4:70:a4:d8:e2:38:5b:ab:1d:d4:49:9d:d1:8a:
         35:fa:de:07:62:fa:58:f7:47:30:2c:13:00:3e:2a:30:e3:83:
         1a:44:57:dd:84:59:9a:62:6d:5a:fd:82:a9:23:a2:df:15:4f:
         a5:d3:9d:3f:66:77:ab:7e:7a:21:f4:87:fb:1e:c6:5b:1c:10:
         9f:5e:04:19:a1:86:5a:e2:44:40:69:7d:50:15:60:0d:90:f3:
         60:9f:fd:cf:b4:48:31:8c:97:62:9d:12:6f:fc:fb:df:f0:21:
         56:65:2b:67:de:cf:ae:c0:7f:be:9f:0a:86:42:7a:7e:cb:15:
         18:72:a5:65:8c:26:25:01:4a:d0:38:11:31:b1:32:40:80:ad:
         7f:08:c2:81:41:84:bf:8b:a7:b3:f8:f6:f8:6f:17:69:c2:e5:
         40:fc:de:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rY7LIzwgn99YRCsZhm3YxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhZmY0MWRkZThjZTQ3ZDQ3MmQ3YmUyYzkwNDg0NTA0OGMz
MGE5NjAwHhcNMjYwNzI5MDEwMTA1WhcNMjYwNzMwMDEwMTA1WjAzMTEwLwYDVQQD
Eyg4MjM3YzdmZTNkM2M4YWFkNWNmY2I4M2IyMzNkNDA3MjljZTAwMDNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OyUqXIShZ9YpBT6w+YD3lxe501G
l+Qul1BR8GarD5x/215djYxFlLYjLopfVLV0E1Mr4dUgEdU9o0jWLRMOeRMYt6cS
8cjnNoJjj+zwxYWScIwLFppFAH7aExlj70daZaaQ7DPCkN/ScOgsgSKCmcCb4TY/
+PVHNdcTf39JAcXODoaSfkgS5ZnJUc3Skat9vsguYeimyjk7/ZlU69l7ZrPssuS9
GbNsuvxzW5ZFXXHtQkd7nqOGrLcT11Y6XbdP35qbrVBNEa6L0nunmXeACw8JxeXM
bPjCbWbuk4jIJyA0x3g37tMfPdOYd8UQel0U/EhiOsO2sVV2/XwFHxbygQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFII3x/49PIqtXPy4OyM9QHKc4AA9MB8GA1UdIwQY
MBaAFEr/Qd3ozkfUcte+LJBIRQSMMKlgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3Y5QjNlak9SOVJ5MTc0c2tFaEZCSXd3cVdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC85YTM5ZjQtZjgzNy00YzQ2LWJlNmUt
ZDkzMDY1YmIyYTZhLzEvU3Y5QjNlak9SOVJ5MTc0c2tFaEZCSXd3cVdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC85YTM5ZjQtZjgzNy00YzQ2LWJlNmUtZDkzMDY1YmIyYTZh
LzEvU3Y5QjNlak9SOVJ5MTc0c2tFaEZCSXd3cVdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPGU0JIN
aay24JUaRaWxNkCzcwn8xvsFHeIEU3bkMnYm1VUyd8BAPyZbH+wx+cTr8WaRfjfA
ealnE33Peyy2CCapm7R75Ur4BvjQlXrBLhf3DPAXBRESdnsCLxzy5uRwpNjiOFur
HdRJndGKNfreB2L6WPdHMCwTAD4qMOODGkRX3YRZmmJtWv2CqSOi3xVPpdOdP2Z3
q356IfSH+x7GWxwQn14EGaGGWuJEQGl9UBVgDZDzYJ/9z7RIMYyXYp0Sb/z73/Ah
VmUrZ97PrsB/vp8KhkJ6fssVGHKlZYwmJQFK0DgRMbEyQICtfwjCgUGEv4uns/j2
+G8XacLlQPzeZA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:51:10 2026 by rpki-client