Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
File:                     79pPUsK3lM5LX38h4ySxubEGXRw.mft (raw, json)
Hash identifier:          3PI+NzLaepLHIwfo+Mv5/HwHv2ct1t8MfYyQOz5/olw=
Subject key identifier:   E6:24:68:26:D2:FA:D4:D9:37:89:1F:AF:D5:A0:80:2A:E1:4A:4A:1E
Authority key identifier: EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C
Certificate issuer:       /CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
Certificate serial:       019F859FB88462517EAB9B1055ABC512C74F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
Manifest number:          01D8
Signing time:             Tue 21 Jul 2026 17:01:04 +0000
Manifest this update:     Tue 21 Jul 2026 17:01:04 +0000
Manifest next update:     Wed 22 Jul 2026 17:01:04 +0000
Files and hashes:         1: 79pPUsK3lM5LX38h4ySxubEGXRw.crl (hash: SsNG6NJxyugHVTJiZ9wredmTFnopb2Td5Rpk1/vYKns=)
                          2: swO-HTW4j5qDDjQOOjuNXgqW8xU.roa (hash: XU3HpZ66wu/qbtiav87O6TEaXO9w/HkLcs/bSmMTwpQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:b8:84:62:51:7e:ab:9b:10:55:ab:c5:12:c7:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efda4f52c2b794ce4b5f7f21e324b1b9b1065d1c
        Validity
            Not Before: Jul 21 17:01:04 2026 GMT
            Not After : Jul 22 17:01:04 2026 GMT
        Subject: CN=e6246826d2fad4d937891fafd5a0802ae14a4a1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:57:f5:07:23:e2:6c:fe:48:c1:50:aa:bb:f9:
                    a1:d0:5b:df:12:dd:bb:46:39:8e:52:ee:fb:30:70:
                    dd:5b:58:5f:8d:00:45:12:5a:f1:58:68:03:ea:ba:
                    c5:d8:00:62:3c:46:f3:76:fb:a7:8c:be:d4:c1:8a:
                    e8:9a:3f:74:b6:ac:a5:1b:58:35:e6:c0:c5:36:07:
                    d1:10:c9:fd:9f:04:89:fe:87:ce:65:77:00:e7:70:
                    e7:89:4c:b9:99:51:08:61:0f:a6:1b:b5:a4:aa:7e:
                    54:0a:f1:d1:7f:f0:d2:80:23:6e:df:2b:d7:1c:8a:
                    f2:21:11:97:14:c6:71:53:36:69:7c:d4:27:43:f2:
                    a7:2a:bc:06:e1:20:9e:8a:39:a0:98:76:82:f8:5c:
                    63:eb:ab:5c:f0:46:4d:26:7c:cc:a7:22:48:83:f5:
                    df:e8:ef:63:be:02:dd:1a:dc:da:59:a6:9d:8f:44:
                    44:a4:aa:a9:eb:52:f5:09:85:17:f8:87:61:ad:92:
                    a4:03:dd:04:55:bb:61:6a:1d:d4:d3:54:0d:d5:32:
                    87:50:95:dc:ef:5a:53:80:3a:30:70:ae:d3:cd:d8:
                    2f:31:16:fe:45:d4:de:c6:27:6b:06:b8:57:6a:d9:
                    eb:0e:1a:b2:8c:d7:f9:4b:65:fc:8c:4c:b5:3c:4f:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:24:68:26:D2:FA:D4:D9:37:89:1F:AF:D5:A0:80:2A:E1:4A:4A:1E
            X509v3 Authority Key Identifier:
                keyid:EF:DA:4F:52:C2:B7:94:CE:4B:5F:7F:21:E3:24:B1:B9:B1:06:5D:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/79pPUsK3lM5LX38h4ySxubEGXRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/7641b8-78ea-4e15-b199-798f54f32808/1/79pPUsK3lM5LX38h4ySxubEGXRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:81:fd:13:6d:e4:47:88:56:7b:94:f0:f4:ac:96:34:4a:9e:
         fc:e9:8c:a0:0d:80:3b:b9:5f:6e:b3:a9:da:c5:32:90:ad:1b:
         50:b9:49:7e:fa:3c:52:f4:3b:7f:b2:a2:0b:3f:2a:fc:d2:e2:
         0f:7d:22:f9:11:5d:e9:c3:be:2a:02:05:5a:6d:d9:7d:0a:9e:
         54:3c:d6:a0:ce:9d:0c:02:56:19:06:39:13:f4:dd:d5:e2:d5:
         19:39:5b:b1:c5:f0:ef:cf:5e:c2:56:d4:e7:28:bb:26:4f:43:
         59:8c:d8:74:68:bc:6d:7b:4b:94:8b:4a:c0:3e:2a:71:b0:c4:
         92:d2:58:4a:9d:f9:83:67:5c:c5:d4:ab:af:a8:f6:31:75:3f:
         12:22:5f:26:e7:fb:8d:7e:6e:63:73:48:80:99:34:30:58:d1:
         d7:a4:30:69:7b:c5:08:98:91:e6:85:59:06:be:5b:da:69:7a:
         87:97:92:8f:69:3b:13:2e:c6:ae:23:d6:89:e5:4b:9e:69:38:
         61:46:2b:58:5d:04:38:c8:56:8e:c0:a5:81:19:22:01:89:f1:
         bc:be:d1:f0:94:00:c5:f1:17:e6:a3:49:97:8b:61:ff:1a:03:
         92:52:e7:de:0c:6a:38:f6:dc:17:55:80:2e:2f:46:50:30:48:
         ce:a4:a5:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fn7iEYlF+q5sQVavFEsdPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZGE0ZjUyYzJiNzk0Y2U0YjVmN2YyMWUzMjRiMWI5YjEw
NjVkMWMwHhcNMjYwNzIxMTcwMTA0WhcNMjYwNzIyMTcwMTA0WjAzMTEwLwYDVQQD
EyhlNjI0NjgyNmQyZmFkNGQ5Mzc4OTFmYWZkNWEwODAyYWUxNGE0YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lf1ByPibP5IwVCqu/mh0FvfEt27
RjmOUu77MHDdW1hfjQBFElrxWGgD6rrF2ABiPEbzdvunjL7UwYromj90tqylG1g1
5sDFNgfREMn9nwSJ/ofOZXcA53DniUy5mVEIYQ+mG7Wkqn5UCvHRf/DSgCNu3yvX
HIryIRGXFMZxUzZpfNQnQ/KnKrwG4SCeijmgmHaC+Fxj66tc8EZNJnzMpyJIg/Xf
6O9jvgLdGtzaWaadj0REpKqp61L1CYUX+IdhrZKkA90EVbthah3U01QN1TKHUJXc
71pTgDowcK7TzdgvMRb+RdTexidrBrhXatnrDhqyjNf5S2X8jEy1PE8xdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYkaCbS+tTZN4kfr9WggCrhSkoeMB8GA1UdIwQY
MBaAFO/aT1LCt5TOS19/IeMksbmxBl0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzlwUFVzSzNsTTVMWDM4aDR5U3h1YkVHWFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS83NjQxYjgtNzhlYS00ZTE1LWIxOTkt
Nzk4ZjU0ZjMyODA4LzEvNzlwUFVzSzNsTTVMWDM4aDR5U3h1YkVHWFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS83NjQxYjgtNzhlYS00ZTE1LWIxOTktNzk4ZjU0ZjMyODA4
LzEvNzlwUFVzSzNsTTVMWDM4aDR5U3h1YkVHWFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFoH9E23k
R4hWe5Tw9KyWNEqe/OmMoA2AO7lfbrOp2sUykK0bULlJfvo8UvQ7f7KiCz8q/NLi
D30i+RFd6cO+KgIFWm3ZfQqeVDzWoM6dDAJWGQY5E/Td1eLVGTlbscXw789ewlbU
5yi7Jk9DWYzYdGi8bXtLlItKwD4qcbDEktJYSp35g2dcxdSrr6j2MXU/EiJfJuf7
jX5uY3NIgJk0MFjR16QwaXvFCJiR5oVZBr5b2ml6h5eSj2k7Ey7GriPWieVLnmk4
YUYrWF0EOMhWjsClgRkiAYnxvL7R8JQAxfEX5qNJl4th/xoDklLn3gxqOPbcF1WA
Li9GUDBIzqSlkw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 23:22:57 2026 by rpki-client