Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
File:                     DefybbQ61DIFvrBn_Qqz4wAnhl0.mft (raw, json)
Hash identifier:          9PbQe+CwxqKd2vLTCXARLo8eSXTrYe7SoqtMKdQdMGk=
Subject key identifier:   66:BD:F0:3A:E2:AA:E8:7D:2B:08:17:47:88:6E:3E:B8:16:54:3E:16
Authority key identifier: 0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D
Certificate issuer:       /CN=0de7f26db43ad43205beb067fd0ab3e30027865d
Certificate serial:       019FA93E37DC568434F4FB3B407AC4835527
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
Manifest number:          1701
Signing time:             Tue 28 Jul 2026 15:00:54 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:54 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:54 +0000
Files and hashes:         1: DefybbQ61DIFvrBn_Qqz4wAnhl0.crl (hash: Vel+mWoPd3+yBkq3Zr9+Zz1HBpE80PKv0Ovt9yT3s2s=)
                          2: g323boBVOxyFFRDtn1suxBzGHN0.roa (hash: eyZdCahVj22vnipsJsBb9tIVCdJEj0KFcdD786lVupg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3e:37:dc:56:84:34:f4:fb:3b:40:7a:c4:83:55:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0de7f26db43ad43205beb067fd0ab3e30027865d
        Validity
            Not Before: Jul 28 15:00:54 2026 GMT
            Not After : Jul 29 15:00:54 2026 GMT
        Subject: CN=66bdf03ae2aae87d2b081747886e3eb816543e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a4:8f:5b:97:06:f9:4b:d5:3e:73:74:ad:e2:
                    7f:bb:13:07:b0:41:94:0d:79:e3:b3:25:7d:0a:56:
                    2f:bf:f9:86:ad:c4:a6:bc:26:9a:4d:bb:1b:8f:95:
                    e5:ae:7d:b6:cf:0d:80:40:a0:d8:87:df:e9:89:fc:
                    af:db:5c:82:c9:c1:fd:88:4b:0c:ca:6d:75:d8:04:
                    3b:ec:f0:da:c3:9f:43:a8:e9:5a:7a:49:f4:f0:7e:
                    32:b1:0f:c7:72:c7:49:50:ec:79:eb:d9:a9:95:83:
                    a8:91:48:0d:de:60:05:46:1e:7a:54:e8:a9:6a:93:
                    0c:da:08:1b:3f:bc:9e:ee:9b:b4:d5:76:1b:90:24:
                    9d:a7:2d:1a:6e:34:2b:30:32:30:b7:ca:a4:e7:87:
                    56:a9:c3:63:35:af:04:20:7b:d3:a1:02:a1:cf:ef:
                    23:39:c8:3e:7f:cc:70:9c:ca:1a:6a:2b:6e:98:97:
                    3f:77:e1:c8:dd:3c:7e:d4:d1:f9:39:e2:dd:35:dc:
                    9c:a0:91:46:43:09:36:d1:7d:e9:04:37:55:69:ad:
                    e5:75:82:be:4d:e8:f8:58:43:a5:6f:db:cd:48:e7:
                    d7:c6:94:08:5b:26:5e:d5:9e:e0:34:c3:66:68:22:
                    96:ea:6e:3d:fb:61:95:39:26:cf:df:c3:70:98:9d:
                    81:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:BD:F0:3A:E2:AA:E8:7D:2B:08:17:47:88:6E:3E:B8:16:54:3E:16
            X509v3 Authority Key Identifier:
                keyid:0D:E7:F2:6D:B4:3A:D4:32:05:BE:B0:67:FD:0A:B3:E3:00:27:86:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DefybbQ61DIFvrBn_Qqz4wAnhl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ae32b9-5c9d-4ef0-9b92-d22123397b50/1/DefybbQ61DIFvrBn_Qqz4wAnhl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:26:3b:70:46:a5:42:34:41:61:cb:81:77:64:97:b3:29:94:
         96:f8:f5:49:9f:ae:c3:52:b4:f2:35:ca:1e:8a:e2:a5:03:8c:
         a9:39:e1:df:e0:db:03:b4:21:a1:47:f4:31:92:fe:bf:a3:d1:
         80:b5:06:c8:d7:6d:6a:43:7f:ec:d2:5c:dc:96:fa:39:9c:4e:
         5c:44:40:16:7e:2b:5d:b0:81:f0:98:00:6f:1f:50:6f:c8:b0:
         2b:39:54:17:88:83:1c:d5:23:c2:19:72:db:88:d9:0a:4e:9a:
         27:ac:7b:f6:06:11:06:7d:13:89:06:48:31:88:3a:e7:b6:58:
         f2:40:cd:21:de:f9:91:19:79:52:33:34:74:5d:50:a7:63:85:
         c8:13:25:da:b3:f5:90:da:75:db:70:ca:90:37:25:e6:9a:b0:
         63:48:eb:35:a6:a2:89:03:f2:ee:85:da:5b:d3:fe:77:10:0a:
         3b:ae:a9:fe:40:9c:2a:77:25:fc:e3:ff:02:e4:56:af:3b:52:
         39:3c:80:4e:65:b9:74:62:6f:b3:24:ad:77:b2:34:75:a9:1d:
         d1:11:3b:a0:95:aa:5d:e9:4d:a0:f4:7e:62:f2:88:ef:07:94:
         6e:77:13:0d:87:a3:65:1a:68:a9:6d:76:48:be:ae:fe:c4:e7:
         fa:60:97:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pPjfcVoQ09Ps7QHrEg1UnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkZTdmMjZkYjQzYWQ0MzIwNWJlYjA2N2ZkMGFiM2UzMDAy
Nzg2NWQwHhcNMjYwNzI4MTUwMDU0WhcNMjYwNzI5MTUwMDU0WjAzMTEwLwYDVQQD
Eyg2NmJkZjAzYWUyYWFlODdkMmIwODE3NDc4ODZlM2ViODE2NTQzZTE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp6SPW5cG+UvVPnN0reJ/uxMHsEGU
DXnjsyV9ClYvv/mGrcSmvCaaTbsbj5Xlrn22zw2AQKDYh9/pifyv21yCycH9iEsM
ym112AQ77PDaw59DqOlaekn08H4ysQ/HcsdJUOx569mplYOokUgN3mAFRh56VOip
apMM2ggbP7ye7pu01XYbkCSdpy0abjQrMDIwt8qk54dWqcNjNa8EIHvToQKhz+8j
Ocg+f8xwnMoaaitumJc/d+HI3Tx+1NH5OeLdNdycoJFGQwk20X3pBDdVaa3ldYK+
Tej4WEOlb9vNSOfXxpQIWyZe1Z7gNMNmaCKW6m49+2GVOSbP38NwmJ2BsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGa98Driquh9KwgXR4huPrgWVD4WMB8GA1UdIwQY
MBaAFA3n8m20OtQyBb6wZ/0Ks+MAJ4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTIt
ZDIyMTIzMzk3YjUwLzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9hZTMyYjktNWM5ZC00ZWYwLTliOTItZDIyMTIzMzk3YjUw
LzEvRGVmeWJiUTYxRElGdnJCbl9RcXo0d0FuaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSY7cEal
QjRBYcuBd2SXsymUlvj1SZ+uw1K08jXKHoripQOMqTnh3+DbA7QhoUf0MZL+v6PR
gLUGyNdtakN/7NJc3Jb6OZxOXERAFn4rXbCB8JgAbx9Qb8iwKzlUF4iDHNUjwhly
24jZCk6aJ6x79gYRBn0TiQZIMYg657ZY8kDNId75kRl5UjM0dF1Qp2OFyBMl2rP1
kNp123DKkDcl5pqwY0jrNaaiiQPy7oXaW9P+dxAKO66p/kCcKncl/OP/AuRWrztS
OTyATmW5dGJvsyStd7I0dakd0RE7oJWqXelNoPR+YvKI7weUbncTDYejZRpoqW12
SL6u/sTn+mCXng==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:53 2026 by rpki-client