Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
File:                     M8-_vy7M05OqMMIhNplluEcZLag.mft (raw, json)
Hash identifier:          b1jPNyWOlOULEXdAEHON3W952F1o+7znx8sowfED6eo=
Subject key identifier:   52:11:44:1B:F6:08:3B:2F:C0:6B:3D:6B:B3:64:63:A9:9C:A9:27:80
Authority key identifier: 33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8
Certificate issuer:       /CN=33cfbfbf2eccd393aa30c221369965b847192da8
Certificate serial:       019FAC08492C51071AC8EF7E2D2B5BB195FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
Manifest number:          154D
Signing time:             Wed 29 Jul 2026 04:00:51 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:51 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:51 +0000
Files and hashes:         1: M8-_vy7M05OqMMIhNplluEcZLag.crl (hash: aA5/bQ7/enNN69Kd7ksFvGEzwrvuEFp2SkEm7xmI7ls=)
                          2: W_o6705Rn3HRwEzZ4PCeXI4OEgY.roa (hash: lFPEOT/5NpV8dy93XgRrFMslloDtdGEK/UAHkmtykNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 04:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:08:49:2c:51:07:1a:c8:ef:7e:2d:2b:5b:b1:95:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33cfbfbf2eccd393aa30c221369965b847192da8
        Validity
            Not Before: Jul 29 04:00:51 2026 GMT
            Not After : Jul 30 04:00:51 2026 GMT
        Subject: CN=5211441bf6083b2fc06b3d6bb36463a99ca92780
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:68:19:3e:eb:74:1b:ee:8e:b4:c5:65:2b:d0:
                    f0:55:c4:eb:2c:67:20:fd:d0:ae:81:7d:39:ec:09:
                    6b:79:28:5c:ab:29:47:ec:e1:83:70:4d:84:66:45:
                    3b:76:28:9f:20:6d:e6:c2:10:7e:38:4a:cd:4b:9e:
                    5c:15:46:88:81:c4:39:34:80:b2:16:93:6f:0b:36:
                    35:a4:fd:cb:e8:a6:d5:01:ae:77:89:4c:65:3d:86:
                    93:ba:b0:14:06:3e:5e:80:92:c4:e5:7b:3a:d0:fd:
                    73:e4:7b:b0:2b:b4:22:80:f2:93:5e:ad:d2:09:de:
                    1d:97:e0:6b:c2:a9:5f:96:76:26:4f:99:ff:99:06:
                    e7:f0:94:5d:b6:20:1c:1d:96:3a:cb:ed:59:8d:d7:
                    bb:04:d6:c1:a8:24:8c:36:ce:88:0a:74:05:e7:04:
                    2a:34:87:8c:7a:40:6d:38:17:12:3c:7f:14:2a:8c:
                    85:26:ba:af:ef:3c:3d:ba:3e:72:46:bd:d1:9d:ea:
                    80:60:79:c2:f3:d3:17:07:ad:00:23:c7:34:bc:2c:
                    39:f2:eb:3e:15:47:39:0b:86:b5:33:14:11:54:e1:
                    cf:4a:d3:2b:26:84:35:49:4b:1a:56:69:b0:b7:69:
                    a8:0b:4b:78:72:fd:1d:0d:35:f4:9b:70:3b:dd:27:
                    84:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:11:44:1B:F6:08:3B:2F:C0:6B:3D:6B:B3:64:63:A9:9C:A9:27:80
            X509v3 Authority Key Identifier:
                keyid:33:CF:BF:BF:2E:CC:D3:93:AA:30:C2:21:36:99:65:B8:47:19:2D:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8-_vy7M05OqMMIhNplluEcZLag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/ad050f-a22d-4a77-958c-357a61361dcb/1/M8-_vy7M05OqMMIhNplluEcZLag.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:84:cb:fa:bb:66:d3:cd:cf:a9:33:da:d9:2d:f3:66:17:5a:
         a5:56:c3:03:22:e9:4e:33:0f:59:37:dc:ee:ad:f1:61:1e:55:
         e9:af:c0:4d:6c:df:45:d5:89:ba:2e:fd:c6:0b:06:c2:78:fa:
         c4:89:57:82:df:e0:05:b8:f0:07:f5:72:d6:59:d7:c5:1e:12:
         fc:6c:50:89:b9:f2:55:58:0a:dc:66:2a:33:e1:c8:37:d6:17:
         14:86:97:15:84:2e:87:5b:9e:36:1c:b2:e7:ed:ca:1d:43:fd:
         68:03:a4:57:f4:c1:c2:b8:1d:a9:0c:20:5d:86:1f:36:8b:be:
         76:44:f3:6c:2e:e5:95:3c:9a:01:60:02:a6:93:ea:29:66:f9:
         58:ca:6a:e1:35:59:c1:cc:ec:2b:2b:ac:cd:7f:b9:06:4d:17:
         90:00:3d:61:33:e5:b9:df:1a:01:11:32:f7:0c:7e:16:38:0b:
         ca:ea:01:c3:9a:93:0a:14:b5:96:1f:ed:a4:1d:22:f2:fb:13:
         1a:ea:1f:8c:c5:3f:c6:50:f3:40:83:7b:2f:a5:a8:b5:a2:91:
         54:dd:55:67:c4:f1:f3:29:ea:c7:72:5a:cd:0a:98:22:80:fd:
         2c:db:e9:88:d1:b1:6d:f7:43:28:5f:97:08:d7:07:8f:c6:3a:
         a3:c9:4e:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sCEksUQcayO9+LStbsZX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzY2ZiZmJmMmVjY2QzOTNhYTMwYzIyMTM2OTk2NWI4NDcx
OTJkYTgwHhcNMjYwNzI5MDQwMDUxWhcNMjYwNzMwMDQwMDUxWjAzMTEwLwYDVQQD
Eyg1MjExNDQxYmY2MDgzYjJmYzA2YjNkNmJiMzY0NjNhOTljYTkyNzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGgZPut0G+6OtMVlK9DwVcTrLGcg
/dCugX057AlreShcqylH7OGDcE2EZkU7diifIG3mwhB+OErNS55cFUaIgcQ5NICy
FpNvCzY1pP3L6KbVAa53iUxlPYaTurAUBj5egJLE5Xs60P1z5HuwK7QigPKTXq3S
Cd4dl+BrwqlflnYmT5n/mQbn8JRdtiAcHZY6y+1Zjde7BNbBqCSMNs6ICnQF5wQq
NIeMekBtOBcSPH8UKoyFJrqv7zw9uj5yRr3RneqAYHnC89MXB60AI8c0vCw58us+
FUc5C4a1MxQRVOHPStMrJoQ1SUsaVmmwt2moC0t4cv0dDTX0m3A73SeEzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIRRBv2CDsvwGs9a7NkY6mcqSeAMB8GA1UdIwQY
MBaAFDPPv78uzNOTqjDCITaZZbhHGS2oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMt
MzU3YTYxMzYxZGNiLzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC9hZDA1MGYtYTIyZC00YTc3LTk1OGMtMzU3YTYxMzYxZGNi
LzEvTTgtX3Z5N00wNU9xTU1JaE5wbGx1RWNaTGFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASoTL+rtm
083PqTPa2S3zZhdapVbDAyLpTjMPWTfc7q3xYR5V6a/ATWzfRdWJui79xgsGwnj6
xIlXgt/gBbjwB/Vy1lnXxR4S/GxQibnyVVgK3GYqM+HIN9YXFIaXFYQuh1ueNhyy
5+3KHUP9aAOkV/TBwrgdqQwgXYYfNou+dkTzbC7llTyaAWACppPqKWb5WMpq4TVZ
wczsKyuszX+5Bk0XkAA9YTPlud8aAREy9wx+FjgLyuoBw5qTChS1lh/tpB0i8vsT
GuofjMU/xlDzQIN7L6WotaKRVN1VZ8Tx8ynqx3JazQqYIoD9LNvpiNGxbfdDKF+X
CNcHj8Y6o8lO1g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:12:03 2026 by rpki-client