Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File:                     x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier:          UK8EDIVazPLQZJ29CmuWf31mZICI8PqVaOn2N7PMnSw=
Subject key identifier:   1A:35:E3:C0:FC:63:99:90:B9:0B:5F:53:2D:80:23:3A:D2:7F:84:A4
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer:       /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial:       019F8644B9FEC7D277808AE3E3A731117EF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number:          1147
Signing time:             Tue 21 Jul 2026 20:01:18 +0000
Manifest this update:     Tue 21 Jul 2026 20:01:18 +0000
Manifest next update:     Wed 22 Jul 2026 20:01:18 +0000
Files and hashes:         1: MUDlj_foqQtHS4g3iVOxdnqwX5U.roa (hash: 8ddMF47yP0pJAVGHQdkSQLRsafhb5eoMN8E4QvTkIwo=)
                          2: T_ajvR2nQAvlNGNDSwjL2eitBKI.roa (hash: uZlllXoSCgzxncNwBPd5Cx/IZ61QG4puWlaD0A2LBZ8=)
                          3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: pJ727gqBSMMSCgLhOAi/Z0Bu8fWJuqD+f3X1VP+cSso=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:44:b9:fe:c7:d2:77:80:8a:e3:e3:a7:31:11:7e:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
        Validity
            Not Before: Jul 21 20:01:18 2026 GMT
            Not After : Jul 22 20:01:18 2026 GMT
        Subject: CN=1a35e3c0fc639990b90b5f532d80233ad27f84a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d0:d6:66:12:60:db:cc:44:4a:30:6b:00:65:
                    e2:fe:cc:6b:b1:38:ee:0d:bd:5b:ee:b3:83:42:6e:
                    c7:f6:fb:66:3a:3e:67:20:32:d7:17:4b:f8:cf:c1:
                    ec:68:66:d3:37:22:dc:e1:e2:ec:a2:dd:c4:a8:b9:
                    f3:cd:8b:4d:6a:eb:8b:de:10:fb:82:6a:65:8a:ec:
                    73:77:ea:5a:fd:32:b0:bc:40:38:e4:a4:47:b6:d2:
                    88:de:5e:5d:85:49:f4:79:a7:f2:f8:6a:64:f8:4f:
                    52:aa:45:04:58:23:a0:db:67:4f:64:4a:04:ce:23:
                    38:78:dc:32:f6:af:a2:28:38:4e:87:62:0f:36:00:
                    db:31:80:b9:79:36:74:74:c4:1a:8a:dd:df:a9:a9:
                    02:fa:a8:54:f5:bd:e6:8a:2b:7f:dd:8b:f7:e5:21:
                    6c:e4:02:9b:89:15:fd:85:46:3a:fb:71:c9:80:48:
                    48:48:ff:f2:48:cc:2b:12:7d:4f:c5:d9:1a:a8:e3:
                    60:b1:40:88:d6:e7:69:25:ce:a2:a1:16:4a:4d:87:
                    b0:2b:5a:20:46:84:53:bd:5b:12:ec:01:b4:8f:4b:
                    dd:64:3c:1b:ce:46:23:d5:d3:84:44:08:80:f7:24:
                    9f:50:4b:ca:63:76:a5:6e:08:0b:bb:8f:e3:dd:61:
                    5b:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:35:E3:C0:FC:63:99:90:B9:0B:5F:53:2D:80:23:3A:D2:7F:84:A4
            X509v3 Authority Key Identifier:
                keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:9b:fa:93:c4:9d:04:b1:c6:78:a9:b8:6b:bf:46:55:91:64:
         18:a6:11:01:56:18:3c:86:43:54:17:df:0b:3c:f8:03:05:1b:
         c5:16:29:a6:cc:a2:ca:28:a8:4c:7a:90:c0:6c:a6:b5:68:d2:
         f9:c0:5a:d1:ca:15:03:98:aa:d1:71:d1:84:a4:13:31:7c:f0:
         28:ea:06:9c:2d:38:fa:5c:dc:9c:2a:81:ec:70:ac:dd:8e:ed:
         d1:0e:8c:0c:17:3f:c2:06:a0:a0:e3:11:41:e9:15:11:30:e5:
         22:d4:97:99:13:49:fb:d7:68:41:5b:5a:bb:44:b3:b4:ac:67:
         f2:8d:c8:1e:a0:b6:10:4d:18:2f:c8:6a:a5:0c:17:fa:35:66:
         51:3b:dc:04:bc:d5:c8:12:8c:6e:4b:b1:13:c7:44:35:b3:df:
         bf:d2:e1:5c:75:5b:ee:f1:f4:f4:de:95:16:ff:7f:7f:5a:7b:
         d6:3c:c4:06:18:5c:7c:b5:bb:0c:e8:fe:1c:1a:2b:7e:b4:e5:
         5b:85:f6:fd:5d:9f:4c:b2:08:52:22:75:16:d4:95:a5:2a:73:
         8a:eb:c5:7f:3b:a8:29:16:b9:95:9b:6a:f1:9a:16:47:8b:77:
         34:fb:5b:eb:aa:c4:4d:b6:17:ec:1e:6c:b8:96:0f:22:da:38:
         13:99:a7:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GRLn+x9J3gIrj46cxEX71MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWJhYmQ3ODZkYTEzODA1NjU1YjFiNTUwMWZkY2JmNDMz
YmM3OGQwHhcNMjYwNzIxMjAwMTE4WhcNMjYwNzIyMjAwMTE4WjAzMTEwLwYDVQQD
EygxYTM1ZTNjMGZjNjM5OTkwYjkwYjVmNTMyZDgwMjMzYWQyN2Y4NGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNDWZhJg28xESjBrAGXi/sxrsTju
Db1b7rODQm7H9vtmOj5nIDLXF0v4z8HsaGbTNyLc4eLsot3EqLnzzYtNauuL3hD7
gmpliuxzd+pa/TKwvEA45KRHttKI3l5dhUn0eafy+Gpk+E9SqkUEWCOg22dPZEoE
ziM4eNwy9q+iKDhOh2IPNgDbMYC5eTZ0dMQait3fqakC+qhU9b3miit/3Yv35SFs
5AKbiRX9hUY6+3HJgEhISP/ySMwrEn1PxdkaqONgsUCI1udpJc6ioRZKTYewK1og
RoRTvVsS7AG0j0vdZDwbzkYj1dOERAiA9ySfUEvKY3albggLu4/j3WFbEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBo148D8Y5mQuQtfUy2AIzrSf4SkMB8GA1UdIwQY
MBaAFMfrq9eG2hOAVlWxtVAf3L9DO8eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgt
MGRjZDAzZGMwODk3LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgtMGRjZDAzZGMwODk3
LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbZv6k8Sd
BLHGeKm4a79GVZFkGKYRAVYYPIZDVBffCzz4AwUbxRYppsyiyiioTHqQwGymtWjS
+cBa0coVA5iq0XHRhKQTMXzwKOoGnC04+lzcnCqB7HCs3Y7t0Q6MDBc/wgagoOMR
QekVETDlItSXmRNJ+9doQVtau0SztKxn8o3IHqC2EE0YL8hqpQwX+jVmUTvcBLzV
yBKMbkuxE8dENbPfv9LhXHVb7vH09N6VFv9/f1p71jzEBhhcfLW7DOj+HBorfrTl
W4X2/V2fTLIIUiJ1FtSVpSpziuvFfzuoKRa5lZtq8ZoWR4t3NPtb66rETbYX7B5s
uJYPIto4E5mnyw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:28 2026 by rpki-client