Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
File:                     CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft (raw, json)
Hash identifier:          a26lyYTLIdMgl8g7C5JlCLu5RfyBYIelQc0h4YS7axQ=
Subject key identifier:   11:0A:98:45:B2:C9:1E:3A:78:5B:CA:30:05:A9:2F:5D:94:86:58:27
Authority key identifier: 08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA
Certificate issuer:       /CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
Certificate serial:       019FA906C908466A67D25860D810593A4B92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
Manifest number:          1965
Signing time:             Tue 28 Jul 2026 14:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:21 +0000
Files and hashes:         1: 9FMdAJpJObGaK-lhU63lLtnTmI8.roa (hash: iIiD99Z2LWAsYTeI+Wi/SqEc7CWMVEjakdaMwbyIs0M=)
                          2: CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl (hash: P56qurWfLUR86gSpNLyZhXZp79NRexY2t7e5XA4jOl0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:c9:08:46:6a:67:d2:58:60:d8:10:59:3a:4b:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08fcf0ed5b5677c1155f2b784c6d73d8093af1aa
        Validity
            Not Before: Jul 28 14:00:21 2026 GMT
            Not After : Jul 29 14:00:21 2026 GMT
        Subject: CN=110a9845b2c91e3a785bca3005a92f5d94865827
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:93:53:cc:6d:57:5a:40:6a:ab:49:37:4a:60:
                    7c:95:7a:10:ce:99:99:87:59:d5:bf:f4:cc:97:14:
                    37:92:55:70:dd:8c:a2:75:d1:d5:ce:40:f3:a8:97:
                    ab:a1:d5:97:1c:08:18:97:3a:48:0b:77:d0:53:4d:
                    cb:a5:28:03:6a:62:14:ac:90:5f:f3:55:3c:e8:1e:
                    a0:35:87:41:5f:67:ce:91:f9:2a:62:a6:57:ef:42:
                    a0:af:41:8d:53:90:55:4f:4d:91:70:63:cf:3c:e8:
                    78:24:42:7a:8b:d5:62:ae:1f:d1:79:a3:fa:c4:d2:
                    f5:50:65:55:01:8f:71:3a:f2:4f:09:66:7f:42:3f:
                    2c:34:6c:de:56:07:ac:c8:03:d1:a0:8d:48:2b:bc:
                    af:d2:fc:a7:57:73:99:7a:b8:1f:13:09:69:2c:00:
                    6d:65:12:b6:eb:e6:5f:c1:9a:8d:ea:47:53:b7:fe:
                    c4:1f:45:bc:d9:e9:47:3c:e6:8d:65:af:39:db:82:
                    ea:93:7e:8b:11:52:6f:10:20:a4:41:ac:88:c4:f6:
                    98:ac:e3:b7:a0:7b:76:e2:d6:4a:6c:b8:49:56:be:
                    f4:42:64:36:08:84:19:c3:40:62:0e:1b:98:f2:cb:
                    64:ce:93:18:7e:ba:95:4b:07:42:53:ba:26:dd:84:
                    ed:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0A:98:45:B2:C9:1E:3A:78:5B:CA:30:05:A9:2F:5D:94:86:58:27
            X509v3 Authority Key Identifier:
                keyid:08:FC:F0:ED:5B:56:77:C1:15:5F:2B:78:4C:6D:73:D8:09:3A:F1:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPzw7VtWd8EVXyt4TG1z2Ak68ao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/493b98-7f59-4f61-9945-1e8ddafe3a14/1/CPzw7VtWd8EVXyt4TG1z2Ak68ao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:0b:8b:2e:f4:0d:8c:87:1d:86:af:b1:71:e2:a8:ce:6f:23:
         3e:ba:89:a5:31:f5:4b:0b:fa:ac:e2:e0:bc:d3:72:68:6c:17:
         0d:25:79:d5:88:01:92:02:17:c5:fc:3b:10:76:02:d8:ca:61:
         a3:ad:13:4e:e3:8e:76:cc:23:fc:03:1a:fc:57:15:ff:39:f8:
         64:d5:d3:a6:b4:d2:7e:5f:30:47:9b:a1:88:99:d8:c7:d7:b1:
         0a:6f:49:9b:00:28:37:f7:a2:3e:c8:05:aa:a5:d1:a7:7f:03:
         6f:d5:e6:e6:4f:d5:cb:3b:b4:88:1a:d0:a3:08:bf:40:ef:59:
         d4:c0:dd:de:2b:70:4e:d6:ca:96:5a:ea:f7:e5:be:b6:dd:b5:
         9b:57:9c:71:aa:40:c2:7f:41:fd:38:14:c9:3e:82:8e:9b:11:
         dc:c4:75:4e:22:99:bc:36:3c:57:1e:cc:7c:85:07:33:81:c5:
         a8:3a:c5:13:f6:f6:96:1b:88:88:2d:e4:e3:ec:bb:37:88:42:
         c6:1b:4b:3f:4b:e6:e0:e2:eb:aa:4d:85:dd:9a:55:c7:d3:e1:
         4a:4a:76:e0:2f:18:41:3b:83:e5:f8:64:f7:ba:f6:48:89:05:
         1a:f0:92:43:d4:3d:89:d6:e6:89:6f:4d:4d:82:40:33:77:b2:
         bb:f2:28:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBskIRmpn0lhg2BBZOkuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ZmNmMGVkNWI1Njc3YzExNTVmMmI3ODRjNmQ3M2Q4MDkz
YWYxYWEwHhcNMjYwNzI4MTQwMDIxWhcNMjYwNzI5MTQwMDIxWjAzMTEwLwYDVQQD
EygxMTBhOTg0NWIyYzkxZTNhNzg1YmNhMzAwNWE5MmY1ZDk0ODY1ODI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJNTzG1XWkBqq0k3SmB8lXoQzpmZ
h1nVv/TMlxQ3klVw3YyiddHVzkDzqJerodWXHAgYlzpIC3fQU03LpSgDamIUrJBf
81U86B6gNYdBX2fOkfkqYqZX70Kgr0GNU5BVT02RcGPPPOh4JEJ6i9Virh/ReaP6
xNL1UGVVAY9xOvJPCWZ/Qj8sNGzeVgesyAPRoI1IK7yv0vynV3OZergfEwlpLABt
ZRK26+ZfwZqN6kdTt/7EH0W82elHPOaNZa8524Lqk36LEVJvECCkQayIxPaYrOO3
oHt24tZKbLhJVr70QmQ2CIQZw0BiDhuY8stkzpMYfrqVSwdCU7om3YTtOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEKmEWyyR46eFvKMAWpL12UhlgnMB8GA1UdIwQY
MBaAFAj88O1bVnfBFV8reExtc9gJOvGqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUt
MWU4ZGRhZmUzYTE0LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80OTNiOTgtN2Y1OS00ZjYxLTk5NDUtMWU4ZGRhZmUzYTE0
LzEvQ1B6dzdWdFdkOEVWWHl0NFRHMXoyQWs2OGFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASguLLvQN
jIcdhq+xceKozm8jPrqJpTH1Swv6rOLgvNNyaGwXDSV51YgBkgIXxfw7EHYC2Mph
o60TTuOOdswj/AMa/FcV/zn4ZNXTprTSfl8wR5uhiJnYx9exCm9JmwAoN/eiPsgF
qqXRp38Db9Xm5k/Vyzu0iBrQowi/QO9Z1MDd3itwTtbKllrq9+W+tt21m1eccapA
wn9B/TgUyT6CjpsR3MR1TiKZvDY8Vx7MfIUHM4HFqDrFE/b2lhuIiC3k4+y7N4hC
xhtLP0vm4OLrqk2F3ZpVx9PhSkp24C8YQTuD5fhk97r2SIkFGvCSQ9Q9idbmiW9N
TYJAM3eyu/IoWA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:21:39 2026 by rpki-client