Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
File:                     71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft (raw, json)
Hash identifier:          euA2LXU+Up28JzEkrusSedxewHy/p+bKUMqByAQv12s=
Subject key identifier:   6D:A5:08:F9:78:CE:B4:3A:14:1D:37:03:23:CF:61:69:51:EC:DB:AD
Authority key identifier: EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14
Certificate issuer:       /CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
Certificate serial:       019F826733409ABC6E8335B6019A2F309E5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
Manifest number:          142C
Signing time:             Tue 21 Jul 2026 02:00:29 +0000
Manifest this update:     Tue 21 Jul 2026 02:00:29 +0000
Manifest next update:     Wed 22 Jul 2026 02:00:29 +0000
Files and hashes:         1: 1PeK2rVaekZNVC3o3pyzwNQgzhE.roa (hash: bT8T+lq1jJgvGdCk3qnNPwcbcmXO99rl74JJHuWU1R4=)
                          2: 71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl (hash: UXw1dnXZ0WKZO5f3p+FOOK7KahN5FDaZC2t4Ylv/GTI=)
                          3: FUAG3jq8oW-DG-4OVip2j9_K6zM.roa (hash: X1mjWztgnVQSSGLyPzOsDPZqwti1AiSyexfKdPbUPdM=)
                          4: U0tl-UVjdgoquFk_RP8dvu9_bzA.roa (hash: fvBK5Ool8MKV1KD0bY966e8iK9zhJNvA5b6LpcKGcn8=)
                          5: WTuF7GM_g7zyE_8wXHuTXrCUE8Q.roa (hash: ToxcyUtODIjk+vfIoE2fDiyxO6Xp7CGXZG+vHQsn3hA=)
                          6: hjDAxUotD7fBXSYLVmy70jVRseo.roa (hash: 0sYxaaTFlbtM3B7RBSkgjokJqeCyvabh5MHOIU6LNCU=)
                          7: i8DSsz1zrzQenpw3T2bP8cFRsq8.roa (hash: oEuQy5j/C31ArjuLYoalrrQGCWj0f7zf2ngtaCvBjYo=)
                          8: zMUHewOkNECVYz7ml1umISWZOVE.roa (hash: G455vMmTjZpLOZTw+9pAQhVOSHGfalAl4TZYjQHUmAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:67:33:40:9a:bc:6e:83:35:b6:01:9a:2f:30:9e:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef54d9e41ea5e2d161b7c4cdb2e4702c4f248e14
        Validity
            Not Before: Jul 21 02:00:29 2026 GMT
            Not After : Jul 22 02:00:29 2026 GMT
        Subject: CN=6da508f978ceb43a141d370323cf616951ecdbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:47:ed:24:56:d4:f9:05:10:07:d1:d7:8b:84:
                    01:fe:95:8f:d7:2a:ec:77:c6:82:53:9a:4b:c5:20:
                    68:dd:95:ea:ba:59:ed:ae:b8:17:32:ba:fd:fa:3c:
                    69:73:63:a4:6d:a7:7e:5f:aa:9f:c4:eb:30:9c:04:
                    11:5d:3e:73:cb:1d:9c:bb:a3:a9:e0:d5:91:d4:c0:
                    a2:d6:7f:51:ea:0b:e3:5c:41:b8:7c:4f:b0:1d:59:
                    79:29:91:4f:91:a4:9f:91:b1:a7:a2:6e:8a:e3:5a:
                    7f:2b:33:db:a1:f2:f2:00:67:80:f2:47:d9:de:51:
                    43:e6:eb:b2:35:8d:aa:bb:17:b0:f1:7b:a4:f5:a7:
                    85:e6:45:66:3e:75:42:0a:1f:f1:96:27:56:b5:9b:
                    f9:21:c2:db:48:2a:b0:13:6d:26:26:02:d6:5c:91:
                    23:3f:d3:d3:c5:6e:6c:17:28:1b:92:93:be:68:9b:
                    6b:56:fc:32:86:5a:b8:92:32:35:4c:35:e2:78:73:
                    a9:99:f9:1b:b5:0c:5d:91:2d:0c:80:79:11:7b:1f:
                    f1:a5:6b:1f:cd:36:b2:5b:7b:a6:39:66:f2:10:e8:
                    1e:7c:68:e9:09:58:6d:2b:a1:28:a3:d9:d9:a4:78:
                    f6:c6:9a:d2:39:29:52:25:05:1e:b6:c3:cc:32:b7:
                    66:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A5:08:F9:78:CE:B4:3A:14:1D:37:03:23:CF:61:69:51:EC:DB:AD
            X509v3 Authority Key Identifier:
                keyid:EF:54:D9:E4:1E:A5:E2:D1:61:B7:C4:CD:B2:E4:70:2C:4F:24:8E:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71TZ5B6l4tFht8TNsuRwLE8kjhQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ec00e2-cbda-4b32-8c32-fbc6fcb5e7a6/1/71TZ5B6l4tFht8TNsuRwLE8kjhQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:a3:92:30:d3:63:92:fc:50:5d:1a:63:89:ca:52:a8:dc:92:
         54:62:59:b5:97:1b:5e:35:35:70:45:d9:a8:31:8e:57:17:6e:
         1e:c2:1e:16:ad:71:05:1b:2c:b7:4d:3f:5e:aa:dd:3f:55:23:
         70:bc:e9:da:41:2a:97:9b:27:1a:34:13:b2:f8:79:82:5b:04:
         27:c1:77:8b:9a:95:eb:7a:eb:a3:2b:3b:c4:50:5d:79:0f:3f:
         1c:d2:6f:c3:6d:b3:0e:a6:b1:8f:81:ed:c2:77:ab:5e:60:56:
         7b:cc:c3:3b:57:7f:bc:f4:a5:ea:f2:98:96:65:62:a7:1a:f5:
         06:ec:eb:7b:34:bb:75:5f:77:b6:82:87:c3:6d:ca:83:99:d1:
         a4:b9:f2:ec:2b:58:c5:3c:40:6f:4c:63:c8:4e:99:92:13:a9:
         b8:a4:29:f6:2a:41:b9:2a:e1:86:cf:93:d8:a7:64:ea:c2:c1:
         53:ad:04:0e:33:a4:49:fc:02:cb:8e:81:07:cf:9f:c6:91:db:
         13:bb:7e:63:ea:ea:14:f8:16:e8:2d:f6:dd:76:f5:77:fe:e5:
         b7:4f:a5:bf:d9:68:e8:51:4c:5d:68:ab:cd:0d:48:3e:d9:5b:
         d8:59:3d:f4:b4:18:05:7f:91:d1:70:60:0a:e2:56:09:13:39:
         88:42:f1:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CZzNAmrxugzW2AZovMJ5eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTRkOWU0MWVhNWUyZDE2MWI3YzRjZGIyZTQ3MDJjNGYy
NDhlMTQwHhcNMjYwNzIxMDIwMDI5WhcNMjYwNzIyMDIwMDI5WjAzMTEwLwYDVQQD
Eyg2ZGE1MDhmOTc4Y2ViNDNhMTQxZDM3MDMyM2NmNjE2OTUxZWNkYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkftJFbU+QUQB9HXi4QB/pWP1yrs
d8aCU5pLxSBo3ZXqulntrrgXMrr9+jxpc2Okbad+X6qfxOswnAQRXT5zyx2cu6Op
4NWR1MCi1n9R6gvjXEG4fE+wHVl5KZFPkaSfkbGnom6K41p/KzPbofLyAGeA8kfZ
3lFD5uuyNY2quxew8Xuk9aeF5kVmPnVCCh/xlidWtZv5IcLbSCqwE20mJgLWXJEj
P9PTxW5sFygbkpO+aJtrVvwyhlq4kjI1TDXieHOpmfkbtQxdkS0MgHkRex/xpWsf
zTayW3umOWbyEOgefGjpCVhtK6Eoo9nZpHj2xprSOSlSJQUetsPMMrdm7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2lCPl4zrQ6FB03AyPPYWlR7NutMB8GA1UdIwQY
MBaAFO9U2eQepeLRYbfEzbLkcCxPJI4UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzIt
ZmJjNmZjYjVlN2E2LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9lYzAwZTItY2JkYS00YjMyLThjMzItZmJjNmZjYjVlN2E2
LzEvNzFUWjVCNmw0dEZodDhUTnN1UndMRThramhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf6OSMNNj
kvxQXRpjicpSqNySVGJZtZcbXjU1cEXZqDGOVxduHsIeFq1xBRsst00/XqrdP1Uj
cLzp2kEql5snGjQTsvh5glsEJ8F3i5qV63rroys7xFBdeQ8/HNJvw22zDqaxj4Ht
wnerXmBWe8zDO1d/vPSl6vKYlmVipxr1BuzrezS7dV93toKHw23Kg5nRpLny7CtY
xTxAb0xjyE6ZkhOpuKQp9ipBuSrhhs+T2Kdk6sLBU60EDjOkSfwCy46BB8+fxpHb
E7t+Y+rqFPgW6C323Xb1d/7lt0+lv9lo6FFMXWirzQ1IPtlb2Fk99LQYBX+R0XBg
CuJWCRM5iELxZg==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:57:37 2026 by rpki-client