Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
File:                     Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft (raw, json)
Hash identifier:          RPg4uafaI/7t9qkvmu5TN5yKqGlZSNkjGUOVJEstCIQ=
Subject key identifier:   7D:6E:C1:5D:98:5D:88:9C:B0:B4:96:FB:F7:6D:DF:3E:D7:00:2B:E4
Authority key identifier: 3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44
Certificate issuer:       /CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
Certificate serial:       019FA97515BDEF4C5A72883ACEDED16CFC6E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
Manifest number:          0907
Signing time:             Tue 28 Jul 2026 16:00:50 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:50 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:50 +0000
Files and hashes:         1: 4NzEVadCmy_c_rfb2yC17CRbiPw.roa (hash: up/hCbMC+lT39FafzSp9s/xSEH9WLx3l5PerUqpItUQ=)
                          2: Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl (hash: 9JGOWOpldpK4ONc2fvGfNyw7oP9nCktUhjYjdp51U2I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:15:bd:ef:4c:5a:72:88:3a:ce:de:d1:6c:fc:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f3f554b80281dea2a300318aaad6d2d97f1ce44
        Validity
            Not Before: Jul 28 16:00:50 2026 GMT
            Not After : Jul 29 16:00:50 2026 GMT
        Subject: CN=7d6ec15d985d889cb0b496fbf76ddf3ed7002be4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:6f:a2:40:34:49:f9:e6:e7:fc:ca:12:a9:81:
                    7d:72:bb:4c:b4:aa:0c:a8:91:b0:e3:77:2c:c5:b4:
                    8c:7a:8c:d3:c5:8b:c7:e7:30:6d:ef:d6:cf:77:ef:
                    c0:ef:b0:13:b8:7e:34:41:0e:cf:26:13:8b:9d:07:
                    8d:6b:c4:4d:c0:7a:ff:b3:c4:55:b8:09:66:d3:f1:
                    21:ab:86:a2:8a:98:56:a2:ab:51:40:02:ae:dd:1c:
                    ba:07:57:36:5a:e9:ad:bd:84:b9:69:96:a8:a9:ca:
                    ed:78:ce:6a:9f:25:14:94:88:c7:c3:e5:12:46:35:
                    f3:2b:5b:a9:bd:4b:d6:98:dd:88:f9:c7:cb:14:49:
                    76:06:eb:86:9d:93:8b:f3:f0:53:35:62:3f:e0:23:
                    fe:b5:95:e2:d2:8e:39:02:a7:46:f7:fa:27:f0:6c:
                    01:ce:dd:4f:b2:3d:e5:26:6c:d0:f7:5d:72:fd:1c:
                    f8:8f:43:1b:2d:00:01:fe:64:ec:2d:a0:40:82:c6:
                    f4:f9:15:4a:92:f6:55:f3:fe:26:a8:9d:b3:39:99:
                    77:df:f9:6d:f7:ff:10:dc:fe:1e:0a:72:21:9b:0a:
                    cd:4d:96:ac:37:45:2f:55:46:17:63:43:a1:a8:b3:
                    1c:e6:e9:72:35:2e:4e:da:da:c0:7e:64:b3:29:00:
                    c0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:6E:C1:5D:98:5D:88:9C:B0:B4:96:FB:F7:6D:DF:3E:D7:00:2B:E4
            X509v3 Authority Key Identifier:
                keyid:3F:3F:55:4B:80:28:1D:EA:2A:30:03:18:AA:AD:6D:2D:97:F1:CE:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/78d528-7cdf-44c0-acdd-f533b8df80a9/1/Pz9VS4AoHeoqMAMYqq1tLZfxzkQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:bb:1b:85:10:13:c7:76:ee:fc:d8:d9:e9:9a:ab:0e:89:06:
         6d:c2:3f:40:ee:ea:79:e3:83:a1:88:6a:6d:cd:d6:1a:a6:73:
         4b:7f:44:d5:74:bd:4c:ee:2c:c2:05:aa:21:b2:21:ea:f6:08:
         49:45:c1:44:75:56:16:61:f4:73:d5:08:b9:94:c7:d4:a0:4c:
         62:bb:a6:6f:26:72:a3:eb:db:78:10:b1:9f:c9:55:1c:93:14:
         9e:20:e0:f4:f3:aa:da:fc:96:2c:b4:4d:73:8e:0d:2a:7b:a7:
         f6:c0:b3:06:ac:10:a9:ed:07:26:9d:eb:f1:2e:c0:32:87:5f:
         79:3b:98:57:dc:b5:cc:fa:93:f6:a9:7e:de:a5:7a:28:72:94:
         73:f8:91:f6:66:cf:a6:c8:20:92:c8:33:97:c8:a8:3c:32:1f:
         8b:21:43:7b:fe:cd:a1:9c:0f:50:19:8e:e8:fc:37:2d:43:34:
         a6:88:3b:e4:1b:64:f9:8b:8d:68:7a:8d:4d:aa:04:44:db:71:
         29:2a:54:87:37:dd:40:92:f7:c4:63:59:5f:f5:bb:37:bf:65:
         b7:de:b7:9b:53:8a:51:55:c6:8b:53:02:a0:44:51:84:d4:38:
         d7:0e:22:2b:8f:98:05:29:9a:de:f2:43:74:f4:18:d8:4a:4d:
         62:34:6f:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdRW970xacog6zt7RbPxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmM2Y1NTRiODAyODFkZWEyYTMwMDMxOGFhYWQ2ZDJkOTdm
MWNlNDQwHhcNMjYwNzI4MTYwMDUwWhcNMjYwNzI5MTYwMDUwWjAzMTEwLwYDVQQD
Eyg3ZDZlYzE1ZDk4NWQ4ODljYjBiNDk2ZmJmNzZkZGYzZWQ3MDAyYmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2+iQDRJ+ebn/MoSqYF9crtMtKoM
qJGw43csxbSMeozTxYvH5zBt79bPd+/A77ATuH40QQ7PJhOLnQeNa8RNwHr/s8RV
uAlm0/Ehq4aiiphWoqtRQAKu3Ry6B1c2WumtvYS5aZaoqcrteM5qnyUUlIjHw+US
RjXzK1upvUvWmN2I+cfLFEl2BuuGnZOL8/BTNWI/4CP+tZXi0o45AqdG9/on8GwB
zt1Psj3lJmzQ911y/Rz4j0MbLQAB/mTsLaBAgsb0+RVKkvZV8/4mqJ2zOZl33/lt
9/8Q3P4eCnIhmwrNTZasN0UvVUYXY0OhqLMc5ulyNS5O2trAfmSzKQDAZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH1uwV2YXYicsLSW+/dt3z7XACvkMB8GA1UdIwQY
MBaAFD8/VUuAKB3qKjADGKqtbS2X8c5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQt
ZjUzM2I4ZGY4MGE5LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy83OGQ1MjgtN2NkZi00NGMwLWFjZGQtZjUzM2I4ZGY4MGE5
LzEvUHo5VlM0QW9IZW9xTUFNWXFxMXRMWmZ4emtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbsbhRAT
x3bu/NjZ6ZqrDokGbcI/QO7qeeODoYhqbc3WGqZzS39E1XS9TO4swgWqIbIh6vYI
SUXBRHVWFmH0c9UIuZTH1KBMYrumbyZyo+vbeBCxn8lVHJMUniDg9POq2vyWLLRN
c44NKnun9sCzBqwQqe0HJp3r8S7AModfeTuYV9y1zPqT9ql+3qV6KHKUc/iR9mbP
psggksgzl8ioPDIfiyFDe/7NoZwPUBmO6Pw3LUM0pog75Btk+YuNaHqNTaoERNtx
KSpUhzfdQJL3xGNZX/W7N79lt963m1OKUVXGi1MCoERRhNQ41w4iK4+YBSma3vJD
dPQY2EpNYjRvBw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:09 2026 by rpki-client