Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
File:                     7ouogkxcjSBzJqSjq4k-u49Qlq0.mft (raw, json)
Hash identifier:          bhmQPln/XNpYFxuWg3r9wrH1TCuPoJeOgpr0L9xxacY=
Subject key identifier:   DE:B7:82:88:7A:1B:85:82:3B:F6:B7:09:90:89:91:13:65:24:BF:AC
Authority key identifier: EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD
Certificate issuer:       /CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
Certificate serial:       019F830C125C193361D16E6EBA7677B66445
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
Manifest number:          1AA4
Signing time:             Tue 21 Jul 2026 05:00:33 +0000
Manifest this update:     Tue 21 Jul 2026 05:00:33 +0000
Manifest next update:     Wed 22 Jul 2026 05:00:33 +0000
Files and hashes:         1: 7ouogkxcjSBzJqSjq4k-u49Qlq0.crl (hash: blieUMHg+cT9oIgL9LN0dqTe2c/qG5klwvAz1QVTv0M=)
                          2: 9_qzaYR-EszIpBxI4ownqBBUFGw.roa (hash: VhzjhZWKdSpMHocreuG2Si0iTaWmN7K1sjii56hPLwc=)
                          3: KjzZQ3XHTR1E4K2w5QoidTvxCog.roa (hash: 0FtQ/w38a9SAPO2B+4vZGc9BxQRkeEmmddcJQ1zQ63s=)
                          4: QOp6ldZ4aq2zfMPYvuOeV0oKmeY.roa (hash: 8YOvlrB9urinWAqeR4fd1zgfcxdDnYVPoOrAJi9cHqo=)
                          5: fArGG5h3XzKLS_oJOJoEXulgjHY.roa (hash: rc/JLtUSYcoCTMCyXw3gO5TZj5+PgYpz/cLtgaciNiM=)
                          6: m24O6Wpo34YVFTi5GGLw487-z5U.roa (hash: 8LP656VRzP22y/4rrgOPp8IsbB22qkGycpmzkEoh59Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:83:0c:12:5c:19:33:61:d1:6e:6e:ba:76:77:b6:64:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee8ba8824c5c8d207326a4a3ab893ebb8f5096ad
        Validity
            Not Before: Jul 21 05:00:33 2026 GMT
            Not After : Jul 22 05:00:33 2026 GMT
        Subject: CN=deb782887a1b85823bf6b709908991136524bfac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c9:59:a2:77:59:34:7a:c9:de:a8:2a:f5:56:
                    cb:64:07:8a:51:7f:2c:ba:07:4d:ce:19:a3:19:dc:
                    d9:4a:27:77:2e:e0:4e:b7:8c:13:be:e2:37:76:31:
                    87:53:b3:1c:fa:ee:79:70:c7:77:37:85:98:89:41:
                    db:28:dd:ed:c7:0d:15:a0:06:2b:3b:ef:3f:e2:e1:
                    d0:a1:8e:84:81:41:c3:cd:61:dd:b6:6f:9e:33:27:
                    66:46:3d:13:64:fb:1c:8a:19:a1:4b:ba:13:d9:0d:
                    a3:23:6d:65:fa:cf:76:ef:c4:66:86:ca:08:b4:ce:
                    8f:b4:94:70:44:fc:83:ef:27:88:53:9d:20:7d:4a:
                    52:26:a2:fa:b8:57:5f:1a:13:29:7e:ea:85:24:50:
                    e5:66:4b:fa:52:89:ac:00:df:5e:90:99:48:7c:a9:
                    ee:ca:a8:9f:2c:0f:7b:ee:8e:90:71:1a:c7:d7:05:
                    72:09:a3:3e:5b:58:60:7b:2b:78:33:de:db:f8:a1:
                    02:8e:65:b6:29:3f:91:55:aa:73:b5:53:08:fc:3c:
                    06:51:08:28:63:1f:0b:d0:7f:23:43:39:c4:cd:53:
                    ea:1c:e4:e9:8f:15:1a:f0:a0:32:d5:67:d8:40:4a:
                    87:dc:7e:50:43:31:01:ca:0b:89:c7:dd:29:ad:e3:
                    75:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B7:82:88:7A:1B:85:82:3B:F6:B7:09:90:89:91:13:65:24:BF:AC
            X509v3 Authority Key Identifier:
                keyid:EE:8B:A8:82:4C:5C:8D:20:73:26:A4:A3:AB:89:3E:BB:8F:50:96:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7ouogkxcjSBzJqSjq4k-u49Qlq0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/63509c-5676-4eaf-99d4-eecd28e28e35/1/7ouogkxcjSBzJqSjq4k-u49Qlq0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:73:f6:b3:99:05:09:b3:ae:85:23:b2:bb:5f:da:13:55:9b:
         9a:8a:29:72:99:00:a3:32:d1:fa:70:03:fa:77:1e:e1:c1:49:
         70:33:95:d3:3a:fb:df:7b:12:42:ed:ab:da:e9:c4:5a:e0:b0:
         65:e5:d6:19:64:29:e7:1c:16:fa:5e:f5:2c:a5:1b:82:1c:48:
         84:35:86:57:1d:71:88:ba:52:08:d1:b6:aa:58:60:6f:1c:cd:
         ea:55:ed:b9:fa:e9:69:c6:f7:16:9c:27:ba:0f:55:20:1f:14:
         f6:de:d8:8b:41:cc:d2:c6:81:76:b8:5b:d2:dd:14:e9:93:05:
         b6:6d:35:f4:56:cf:10:95:7b:3a:a1:96:d2:1a:08:62:d3:7d:
         42:1f:78:95:bf:27:14:8d:8a:af:fa:7b:66:ae:a2:9d:21:75:
         1b:c8:b6:d8:42:96:3b:ec:57:f0:1c:61:1c:20:c8:ee:88:3a:
         62:95:33:1b:5e:dc:33:d9:bc:f4:00:ed:43:4b:9d:93:14:e4:
         11:2a:84:87:bc:48:d7:0c:b5:84:fe:1e:3e:8f:de:af:32:2a:
         a3:d9:51:c3:ba:f6:e8:35:cd:12:15:20:91:a3:a5:8a:a7:68:
         96:09:a1:dc:ad:dc:71:fc:80:9c:79:c9:6b:11:f4:67:19:ce:
         91:51:97:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+DDBJcGTNh0W5uunZ3tmRFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlOGJhODgyNGM1YzhkMjA3MzI2YTRhM2FiODkzZWJiOGY1
MDk2YWQwHhcNMjYwNzIxMDUwMDMzWhcNMjYwNzIyMDUwMDMzWjAzMTEwLwYDVQQD
EyhkZWI3ODI4ODdhMWI4NTgyM2JmNmI3MDk5MDg5OTExMzY1MjRiZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuclZondZNHrJ3qgq9VbLZAeKUX8s
ugdNzhmjGdzZSid3LuBOt4wTvuI3djGHU7Mc+u55cMd3N4WYiUHbKN3txw0VoAYr
O+8/4uHQoY6EgUHDzWHdtm+eMydmRj0TZPscihmhS7oT2Q2jI21l+s9278RmhsoI
tM6PtJRwRPyD7yeIU50gfUpSJqL6uFdfGhMpfuqFJFDlZkv6UomsAN9ekJlIfKnu
yqifLA977o6QcRrH1wVyCaM+W1hgeyt4M97b+KECjmW2KT+RVapztVMI/DwGUQgo
Yx8L0H8jQznEzVPqHOTpjxUa8KAy1WfYQEqH3H5QQzEByguJx90preN1LQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN63goh6G4WCO/a3CZCJkRNlJL+sMB8GA1UdIwQY
MBaAFO6LqIJMXI0gcyako6uJPruPUJatMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQt
ZWVjZDI4ZTI4ZTM1LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82MzUwOWMtNTY3Ni00ZWFmLTk5ZDQtZWVjZDI4ZTI4ZTM1
LzEvN291b2dreGNqU0J6SnFTanE0ay11NDlRbHEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiHP2s5kF
CbOuhSOyu1/aE1WbmoopcpkAozLR+nAD+nce4cFJcDOV0zr733sSQu2r2unEWuCw
ZeXWGWQp5xwW+l71LKUbghxIhDWGVx1xiLpSCNG2qlhgbxzN6lXtufrpacb3Fpwn
ug9VIB8U9t7Yi0HM0saBdrhb0t0U6ZMFtm019FbPEJV7OqGW0hoIYtN9Qh94lb8n
FI2Kr/p7Zq6inSF1G8i22EKWO+xX8BxhHCDI7og6YpUzG17cM9m89ADtQ0udkxTk
ESqEh7xI1wy1hP4ePo/erzIqo9lRw7r26DXNEhUgkaOliqdolgmh3K3ccfyAnHnJ
axH0ZxnOkVGX9w==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:50:42 2026 by rpki-client