Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
File:                     cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft (raw, json)
Hash identifier:          0D5YQFYuzBE8ic3OaX8CBg4e0gniWTlLV9AW2Pk870c=
Subject key identifier:   76:18:5F:F6:22:04:E1:EE:FF:5D:84:E3:08:6B:52:4E:77:6E:C8:5A
Authority key identifier: 72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A
Certificate issuer:       /CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
Certificate serial:       019F84FA35E79158595B0F39D54CD2CA870D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
Manifest number:          0BE7
Signing time:             Tue 21 Jul 2026 14:00:18 +0000
Manifest this update:     Tue 21 Jul 2026 14:00:18 +0000
Manifest next update:     Wed 22 Jul 2026 14:00:18 +0000
Files and hashes:         1: RIVpRVcoTiPM597Ay6ktG1nRpoI.roa (hash: 8WsKosIyT+/va+/3Ff2UyTN4wl8h0E62UrDqXKvX/7s=)
                          2: cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl (hash: ZMcQnu7Khob30hcR0funVMYefcuaYOYWb1jqkUJitDM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:fa:35:e7:91:58:59:5b:0f:39:d5:4c:d2:ca:87:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72e5b57bb398d5e1839a3fe4254df70d712ce14a
        Validity
            Not Before: Jul 21 14:00:18 2026 GMT
            Not After : Jul 22 14:00:18 2026 GMT
        Subject: CN=76185ff62204e1eeff5d84e3086b524e776ec85a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1f:a5:78:b4:13:74:9e:e5:2c:cc:e7:00:f1:
                    8b:fc:10:38:14:18:5a:a3:c8:99:68:08:38:aa:e6:
                    0c:30:ed:b4:7c:75:3c:58:4d:ab:d4:4e:a7:cd:aa:
                    d9:21:7b:e7:f0:1f:f8:1c:5a:2e:24:ea:5c:da:76:
                    72:0e:df:93:1b:4e:5f:74:e4:d9:32:75:08:9b:9c:
                    85:44:5f:b4:f7:f9:87:25:4f:a0:06:6d:ab:cc:8a:
                    51:1b:02:14:b2:5a:11:64:40:f0:9e:6d:9d:28:aa:
                    07:79:29:11:8b:38:6b:08:e4:ad:44:0b:2e:59:e3:
                    04:ce:3a:fa:c6:77:a9:50:3d:f0:ab:75:d8:3e:f0:
                    32:46:b6:c5:1b:db:9d:49:da:16:31:f9:f7:56:5d:
                    7a:98:c6:13:67:cb:53:6e:a7:1c:92:b5:b2:82:99:
                    9f:7a:c1:e4:ae:bf:a8:7e:67:6e:b3:8d:64:07:39:
                    5e:63:6b:91:bb:9e:22:18:5f:8b:b3:04:c4:45:9a:
                    42:12:da:58:df:79:8a:8b:c2:78:f0:85:38:09:ab:
                    f2:a7:18:c7:c2:1f:a3:34:ac:7f:52:df:da:d0:ed:
                    4c:a6:ac:1a:bc:08:83:91:d3:e2:48:a7:e0:cb:08:
                    ea:22:2a:2f:d1:70:42:a0:f6:4b:fc:6c:06:01:3b:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:18:5F:F6:22:04:E1:EE:FF:5D:84:E3:08:6B:52:4E:77:6E:C8:5A
            X509v3 Authority Key Identifier:
                keyid:72:E5:B5:7B:B3:98:D5:E1:83:9A:3F:E4:25:4D:F7:0D:71:2C:E1:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuW1e7OY1eGDmj_kJU33DXEs4Uo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/470cb8-eb6a-4934-9d47-968d0c7f22bb/1/cuW1e7OY1eGDmj_kJU33DXEs4Uo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:e8:b0:15:b0:2e:de:32:c7:d6:42:a0:d8:c9:bd:25:05:a4:
         8b:f9:23:18:0c:2d:a3:36:b3:3a:41:09:2e:54:8a:f1:ef:10:
         0c:2d:72:15:9a:22:28:29:c5:5a:c3:fb:9b:1c:55:39:f1:f1:
         2c:46:de:f3:69:3c:f1:eb:8b:c2:d6:32:5b:46:4f:50:42:32:
         37:d9:48:ec:c8:6b:26:12:ce:47:f6:ea:22:12:ae:23:96:92:
         3a:a2:3e:55:b0:29:85:14:d9:2f:68:02:c0:ba:cc:24:30:d7:
         b0:84:aa:5f:0b:cf:fd:61:63:47:ca:a7:99:19:ba:02:92:f2:
         22:6a:d2:5e:d0:f1:5d:cf:20:5d:1f:c9:08:a6:2d:2f:49:8a:
         6e:0e:67:d4:11:3d:e9:db:1a:6c:89:33:af:f0:55:24:0b:8d:
         b3:16:14:77:e0:b0:1e:d5:47:6f:50:dd:c9:bb:38:52:0e:91:
         f5:1c:29:6c:85:e4:aa:d7:e2:d4:73:62:a9:a7:43:ef:5f:e7:
         c7:ad:11:e0:56:e4:eb:8b:42:59:b5:c4:20:0e:71:f4:53:3d:
         8e:5d:2c:e4:37:ea:a9:62:f7:28:72:41:22:d5:95:3e:8a:b4:
         a9:28:0c:f0:26:2c:e7:59:29:fd:b2:0f:9f:49:cd:71:53:2c:
         87:89:b9:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+E+jXnkVhZWw851UzSyocNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyZTViNTdiYjM5OGQ1ZTE4MzlhM2ZlNDI1NGRmNzBkNzEy
Y2UxNGEwHhcNMjYwNzIxMTQwMDE4WhcNMjYwNzIyMTQwMDE4WjAzMTEwLwYDVQQD
Eyg3NjE4NWZmNjIyMDRlMWVlZmY1ZDg0ZTMwODZiNTI0ZTc3NmVjODVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlR+leLQTdJ7lLMznAPGL/BA4FBha
o8iZaAg4quYMMO20fHU8WE2r1E6nzarZIXvn8B/4HFouJOpc2nZyDt+TG05fdOTZ
MnUIm5yFRF+09/mHJU+gBm2rzIpRGwIUsloRZEDwnm2dKKoHeSkRizhrCOStRAsu
WeMEzjr6xnepUD3wq3XYPvAyRrbFG9udSdoWMfn3Vl16mMYTZ8tTbqcckrWygpmf
esHkrr+ofmdus41kBzleY2uRu54iGF+LswTERZpCEtpY33mKi8J48IU4CavypxjH
wh+jNKx/Ut/a0O1MpqwavAiDkdPiSKfgywjqIiov0XBCoPZL/GwGATs9qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYYX/YiBOHu/12E4whrUk53bshaMB8GA1UdIwQY
MBaAFHLltXuzmNXhg5o/5CVN9w1xLOFKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDct
OTY4ZDBjN2YyMmJiLzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS80NzBjYjgtZWI2YS00OTM0LTlkNDctOTY4ZDBjN2YyMmJi
LzEvY3VXMWU3T1kxZUdEbWpfa0pVMzNEWEVzNFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOeiwFbAu
3jLH1kKg2Mm9JQWki/kjGAwtozazOkEJLlSK8e8QDC1yFZoiKCnFWsP7mxxVOfHx
LEbe82k88euLwtYyW0ZPUEIyN9lI7MhrJhLOR/bqIhKuI5aSOqI+VbAphRTZL2gC
wLrMJDDXsISqXwvP/WFjR8qnmRm6ApLyImrSXtDxXc8gXR/JCKYtL0mKbg5n1BE9
6dsabIkzr/BVJAuNsxYUd+CwHtVHb1Ddybs4Ug6R9RwpbIXkqtfi1HNiqadD71/n
x60R4Fbk64tCWbXEIA5x9FM9jl0s5DfqqWL3KHJBItWVPoq0qSgM8CYs51kp/bIP
n0nNcVMsh4m5Nw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:21:23 2026 by rpki-client