Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
File:                     B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft (raw, json)
Hash identifier:          dTe5xJu9bUwf43pbszuFCXKrzoIMJqH1h/KjC6RA9p4=
Subject key identifier:   52:8A:1B:E2:CA:5F:CA:7B:D7:3B:DE:4A:62:62:6D:40:C2:33:18:88
Authority key identifier: 07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94
Certificate issuer:       /CN=07664130764480ef2dd8178116b5dd0c59d2e994
Certificate serial:       019FA906F6AF9997018138E52589B48DA3D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
Manifest number:          01FE
Signing time:             Tue 28 Jul 2026 14:00:33 +0000
Manifest this update:     Tue 28 Jul 2026 14:00:33 +0000
Manifest next update:     Wed 29 Jul 2026 14:00:33 +0000
Files and hashes:         1: 3ClflYOCERr_Ro48IStxxlR6OkE.asa (hash: yUYnf8vfvP0dW5+JLs6OxQVLMfM3//FHX+mPYuLeYgU=)
                          2: B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl (hash: mvH2wUTINqUYJJaJ/YpUnei6DWCRFoYS2hLURUwCA4w=)
                          3: CTiIYG5Z0i8NFD9GTIvIRbIzJQ8.roa (hash: lHylF9jTQy3B30h+EVJ1w8Da80DIiicRD5M1TS3mYr4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:06:f6:af:99:97:01:81:38:e5:25:89:b4:8d:a3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07664130764480ef2dd8178116b5dd0c59d2e994
        Validity
            Not Before: Jul 28 14:00:33 2026 GMT
            Not After : Jul 29 14:00:33 2026 GMT
        Subject: CN=528a1be2ca5fca7bd73bde4a62626d40c2331888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:ec:24:fa:58:a6:f9:e0:b6:61:e4:65:89:
                    ff:0e:34:f8:59:c2:a5:1f:c2:24:b3:19:53:be:21:
                    72:d0:3d:59:be:1e:fe:35:60:e8:6c:ff:e1:95:da:
                    b3:32:fa:b5:15:21:04:2b:53:71:11:be:b6:fe:04:
                    98:4c:aa:f2:b6:a5:c1:16:1b:db:c0:f8:09:84:b8:
                    7f:af:ed:cb:71:8b:df:e0:b8:b4:2d:54:bb:af:60:
                    49:61:b4:97:d1:90:3b:f7:ac:ec:ab:ce:0a:0a:b7:
                    4f:0e:08:db:33:af:48:ad:76:a9:a1:c0:35:b2:1b:
                    80:4e:40:e1:ad:ae:1d:69:2e:e6:71:32:4c:4a:30:
                    4e:c3:1e:b1:31:1b:08:7a:ef:d3:80:29:ca:e4:d7:
                    ec:82:02:15:f3:9b:6e:4f:87:84:98:93:c4:31:26:
                    ec:8c:00:ea:91:ef:4f:89:1d:ec:c6:f8:ac:5c:f9:
                    1e:25:00:03:d8:0b:0a:91:af:d3:cc:7a:04:6a:22:
                    b0:f7:0b:e3:14:6b:17:d8:71:de:15:87:e2:20:69:
                    0a:21:4c:06:36:b4:54:ba:65:13:d6:c1:80:35:71:
                    29:8b:6b:c8:0f:0a:a8:ae:7e:68:3c:d2:f9:58:88:
                    17:5e:20:76:bf:a3:84:00:e1:5e:d0:9b:65:22:4d:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8A:1B:E2:CA:5F:CA:7B:D7:3B:DE:4A:62:62:6D:40:C2:33:18:88
            X509v3 Authority Key Identifier:
                keyid:07:66:41:30:76:44:80:EF:2D:D8:17:81:16:B5:DD:0C:59:D2:E9:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6b21d4-3287-4d35-82d5-11e12f95b529/1/B2ZBMHZEgO8t2BeBFrXdDFnS6ZQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:7e:25:5a:31:05:68:f9:40:7a:01:f2:ea:b7:4e:f8:85:3f:
         bf:49:ae:d8:09:c7:2f:d2:95:b8:18:de:bb:18:ec:a4:ef:81:
         bc:49:d8:13:7d:9f:a7:ed:84:c1:20:f1:fa:79:c0:4a:ac:bb:
         23:fe:dd:0a:14:dd:f1:6a:99:85:3c:0c:10:a9:5c:61:8c:7f:
         0d:46:43:64:f7:c3:3b:f4:19:bf:e4:a4:83:9a:c3:64:53:3c:
         cf:98:00:2b:1d:0d:69:6a:41:7f:f1:36:45:57:8f:83:f4:d2:
         a5:3d:3c:cc:0f:03:b1:cd:3b:d5:8b:a4:df:fb:dc:b3:0c:72:
         1e:d6:45:a2:82:ff:48:66:60:b3:50:8c:39:f7:46:22:a2:70:
         40:5d:49:d3:1a:26:d9:db:02:72:75:d1:55:24:6e:d7:e4:fe:
         3c:cf:5a:2c:b8:af:76:93:99:55:d9:cc:32:61:29:ac:0a:53:
         22:ea:07:c4:ad:14:fa:d8:e4:6a:95:b6:3a:90:91:b9:ee:af:
         ae:d7:8e:34:4e:79:93:60:97:51:c7:12:b1:bf:a8:e0:69:51:
         05:85:10:b4:3b:b8:1d:0f:8f:54:22:3b:84:9b:af:76:31:60:
         59:d9:32:f6:81:f0:1a:bf:69:a7:4f:a8:02:da:42:65:17:c9:
         ce:22:7f:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pBvavmZcBgTjlJYm0jaPSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3NjY0MTMwNzY0NDgwZWYyZGQ4MTc4MTE2YjVkZDBjNTlk
MmU5OTQwHhcNMjYwNzI4MTQwMDMzWhcNMjYwNzI5MTQwMDMzWjAzMTEwLwYDVQQD
Eyg1MjhhMWJlMmNhNWZjYTdiZDczYmRlNGE2MjYyNmQ0MGMyMzMxODg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlorsJPpYpvngtmHkZYn/DjT4WcKl
H8IksxlTviFy0D1Zvh7+NWDobP/hldqzMvq1FSEEK1NxEb62/gSYTKrytqXBFhvb
wPgJhLh/r+3LcYvf4Li0LVS7r2BJYbSX0ZA796zsq84KCrdPDgjbM69IrXapocA1
shuATkDhra4daS7mcTJMSjBOwx6xMRsIeu/TgCnK5NfsggIV85tuT4eEmJPEMSbs
jADqke9PiR3sxvisXPkeJQAD2AsKka/TzHoEaiKw9wvjFGsX2HHeFYfiIGkKIUwG
NrRUumUT1sGANXEpi2vIDwqorn5oPNL5WIgXXiB2v6OEAOFe0JtlIk0rJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKKG+LKX8p71zveSmJibUDCMxiIMB8GA1UdIwQY
MBaAFAdmQTB2RIDvLdgXgRa13QxZ0umUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82YjIxZDQtMzI4Ny00ZDM1LTgyZDUt
MTFlMTJmOTViNTI5LzEvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82YjIxZDQtMzI4Ny00ZDM1LTgyZDUtMTFlMTJmOTViNTI5
LzEvQjJaQk1IWkVnTzh0MkJlQkZyWGRERm5TNlpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgX4lWjEF
aPlAegHy6rdO+IU/v0mu2AnHL9KVuBjeuxjspO+BvEnYE32fp+2EwSDx+nnASqy7
I/7dChTd8WqZhTwMEKlcYYx/DUZDZPfDO/QZv+Skg5rDZFM8z5gAKx0NaWpBf/E2
RVePg/TSpT08zA8Dsc071Yuk3/vcswxyHtZFooL/SGZgs1CMOfdGIqJwQF1J0xom
2dsCcnXRVSRu1+T+PM9aLLivdpOZVdnMMmEprApTIuoHxK0U+tjkapW2OpCRue6v
rteONE55k2CXUccSsb+o4GlRBYUQtDu4HQ+PVCI7hJuvdjFgWdky9oHwGr9pp0+o
AtpCZRfJziJ/1A==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:54 2026 by rpki-client