Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
File:                     _sb7WkZ5dMl3qZfG3aFGSAXtN58.mft (raw, json)
Hash identifier:          yTGzVo2NPMnLzS7rbi4+FZcsMBuq9rQto7vOHZ8fvuI=
Subject key identifier:   D4:17:15:24:89:76:E4:FF:1B:30:E7:37:F9:6C:CB:52:5D:BF:8D:F6
Authority key identifier: FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F
Certificate issuer:       /CN=fec6fb5a467974c977a997c6dda1464805ed379f
Certificate serial:       019F841EACC1684ABD8E6C0CF76EC10D617D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
Manifest number:          0D62
Signing time:             Tue 21 Jul 2026 10:00:30 +0000
Manifest this update:     Tue 21 Jul 2026 10:00:30 +0000
Manifest next update:     Wed 22 Jul 2026 10:00:30 +0000
Files and hashes:         1: 4ypzGfCHhgDoMmCtv9mhP95DsH8.roa (hash: cgyweP6TWOD2EkCngfHayXAx2FserZFtDFpsPs5VJG0=)
                          2: 9xs44BTciEe79T5DFs_dv3etyAA.roa (hash: hm5e8WZY1I0zpkj9lyYKgGK1z/f607v96gqeEkkvWMs=)
                          3: _sb7WkZ5dMl3qZfG3aFGSAXtN58.crl (hash: wgM+tSQtt5BtlpJCytjJTTKMMYDeK3sRZYvooIFSIOo=)
                          4: nMOMLSKNHZWnqOpaztV5tvRIW_0.roa (hash: hzcdgrRKntQ9Q0+tx+TtRx6J7FNm7FNdX1mkQMztsyI=)
                          5: qybWWPweMAxxbe6Dx9t3-MHAIDM.roa (hash: Vk+vGEJAunUNZlN6ZA7MDbwnLEBdBJ90nYvsUNNE5Fs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:1e:ac:c1:68:4a:bd:8e:6c:0c:f7:6e:c1:0d:61:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fec6fb5a467974c977a997c6dda1464805ed379f
        Validity
            Not Before: Jul 21 10:00:30 2026 GMT
            Not After : Jul 22 10:00:30 2026 GMT
        Subject: CN=d41715248976e4ff1b30e737f96ccb525dbf8df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c9:0b:1b:8a:1c:2a:bd:c2:92:5d:63:b7:43:
                    73:f5:ee:42:8f:dd:4a:18:db:49:69:84:09:82:7b:
                    25:c2:4f:b5:22:cd:91:2f:f0:64:84:74:de:c0:d7:
                    ae:c6:07:1a:d0:03:99:8b:93:b1:08:b4:43:2f:c3:
                    9f:90:21:31:7d:70:8b:16:23:ca:47:98:3a:ef:05:
                    07:d3:23:a1:29:3f:46:b7:64:3a:9b:db:87:9e:2a:
                    58:85:4e:53:61:5a:43:f4:ec:55:33:08:34:9d:b9:
                    b4:3a:44:4b:c7:2c:15:5b:66:20:7f:df:12:ae:e5:
                    1f:ed:a8:be:38:a6:18:61:bd:88:85:f5:cf:1e:8a:
                    2d:d5:58:e7:cc:de:77:6b:c8:40:1b:3d:c5:ef:6f:
                    5a:f4:1b:64:fb:6f:eb:88:ee:1e:c8:1d:f0:db:21:
                    4d:76:3c:5e:c6:14:e1:4e:39:a6:1f:9b:0a:db:40:
                    41:c7:44:bc:c1:66:32:21:63:33:ca:e9:c9:f1:b1:
                    d4:57:4e:2e:6d:0c:95:43:93:4d:d8:46:ab:77:d8:
                    ca:56:62:c4:6e:74:7b:fa:31:4a:06:c9:71:ae:98:
                    65:60:dc:6f:32:b2:3d:6b:90:8e:96:28:3a:b9:98:
                    13:9b:90:bd:77:c5:2a:59:b6:ca:5c:70:8f:4c:d8:
                    fc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:17:15:24:89:76:E4:FF:1B:30:E7:37:F9:6C:CB:52:5D:BF:8D:F6
            X509v3 Authority Key Identifier:
                keyid:FE:C6:FB:5A:46:79:74:C9:77:A9:97:C6:DD:A1:46:48:05:ED:37:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sb7WkZ5dMl3qZfG3aFGSAXtN58.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ac52c3-ca44-4784-b72e-12641f9e6fc0/1/_sb7WkZ5dMl3qZfG3aFGSAXtN58.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:2f:51:9f:42:1e:9a:a3:36:4b:7a:e4:2c:8d:41:f8:07:51:
         51:37:5e:c0:7d:11:8b:db:06:30:9f:e5:1e:86:82:81:bd:76:
         fd:ba:bc:9a:4d:9b:b2:9b:66:4b:25:61:37:77:17:70:4d:d2:
         6e:40:75:e2:f3:7c:18:f6:f0:8f:d7:0d:9c:67:15:e1:25:e9:
         59:9c:8e:0d:7d:cf:67:6a:da:b7:bd:6f:c3:4d:ac:6f:53:d7:
         c8:04:7a:a6:05:d2:db:af:cd:bb:8e:90:b4:83:ce:da:af:48:
         d3:ae:c3:5c:a6:43:81:50:41:9f:00:67:5d:69:29:da:af:e6:
         38:30:db:92:40:06:cb:cd:32:bb:3f:65:60:09:1b:bb:42:93:
         1d:b2:ef:f5:bb:41:9f:a0:ca:74:df:03:08:62:85:ef:af:7a:
         d7:81:1e:61:ed:7f:ef:3a:54:22:5e:53:bf:c1:9d:14:a4:d4:
         ef:45:c4:2d:5d:26:a9:0f:ac:1b:05:7b:bf:5e:0c:c6:55:2d:
         de:46:04:c2:10:96:a2:f3:c6:1f:b6:23:52:1a:42:ab:f9:da:
         af:46:22:25:40:a0:52:29:98:32:b4:6f:2b:83:94:02:dd:a0:
         f8:f9:5f:de:1f:db:3a:fd:46:a6:f0:84:90:02:b9:4b:14:1c:
         5c:b1:6a:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+EHqzBaEq9jmwM927BDWF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzZmYjVhNDY3OTc0Yzk3N2E5OTdjNmRkYTE0NjQ4MDVl
ZDM3OWYwHhcNMjYwNzIxMTAwMDMwWhcNMjYwNzIyMTAwMDMwWjAzMTEwLwYDVQQD
EyhkNDE3MTUyNDg5NzZlNGZmMWIzMGU3MzdmOTZjY2I1MjVkYmY4ZGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMkLG4ocKr3Ckl1jt0Nz9e5Cj91K
GNtJaYQJgnslwk+1Is2RL/BkhHTewNeuxgca0AOZi5OxCLRDL8OfkCExfXCLFiPK
R5g67wUH0yOhKT9Gt2Q6m9uHnipYhU5TYVpD9OxVMwg0nbm0OkRLxywVW2Ygf98S
ruUf7ai+OKYYYb2IhfXPHoot1VjnzN53a8hAGz3F729a9Btk+2/riO4eyB3w2yFN
djxexhThTjmmH5sK20BBx0S8wWYyIWMzyunJ8bHUV04ubQyVQ5NN2Eard9jKVmLE
bnR7+jFKBslxrphlYNxvMrI9a5COlig6uZgTm5C9d8UqWbbKXHCPTNj8IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQXFSSJduT/GzDnN/lsy1Jdv432MB8GA1UdIwQY
MBaAFP7G+1pGeXTJd6mXxt2hRkgF7TefMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUt
MTI2NDFmOWU2ZmMwLzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9hYzUyYzMtY2E0NC00Nzg0LWI3MmUtMTI2NDFmOWU2ZmMw
LzEvX3NiN1drWjVkTWwzcVpmRzNhRkdTQVh0TjU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADC9Rn0Ie
mqM2S3rkLI1B+AdRUTdewH0Ri9sGMJ/lHoaCgb12/bq8mk2bsptmSyVhN3cXcE3S
bkB14vN8GPbwj9cNnGcV4SXpWZyODX3PZ2rat71vw02sb1PXyAR6pgXS26/Nu46Q
tIPO2q9I067DXKZDgVBBnwBnXWkp2q/mODDbkkAGy80yuz9lYAkbu0KTHbLv9btB
n6DKdN8DCGKF769614EeYe1/7zpUIl5Tv8GdFKTU70XELV0mqQ+sGwV7v14MxlUt
3kYEwhCWovPGH7YjUhpCq/nar0YiJUCgUimYMrRvK4OUAt2g+Plf3h/bOv1GpvCE
kAK5SxQcXLFqdA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 12:13:53 2026 by rpki-client