Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
File:                     bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft (raw, json)
Hash identifier:          S0fJ99OMGknF/5QS5bg6FDD0dkvDV+sMTlSvOwIaryk=
Subject key identifier:   63:59:EF:50:4D:8B:67:4F:20:0B:54:82:03:92:F0:3B:5E:AC:B2:9E
Authority key identifier: 6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54
Certificate issuer:       /CN=6c895335ba98f7c626f0c819e9e2894c61d44754
Certificate serial:       019FA2609F3397353A9B770DFD669C7D074D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
Manifest number:          0E07
Signing time:             Mon 27 Jul 2026 07:01:08 +0000
Manifest this update:     Mon 27 Jul 2026 07:01:08 +0000
Manifest next update:     Tue 28 Jul 2026 07:01:08 +0000
Files and hashes:         1: OY-F0hhlIFsLBb-jhlJlozNHKDw.roa (hash: JseVfilW9clKoxV/EybNUEX+K2HrPNZ0B5i1na1LMg8=)
                          2: bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl (hash: M7TwUiiylkB9ccqQ/rtknj0sQ+DOR1LsB/1sX3vYgmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:60:9f:33:97:35:3a:9b:77:0d:fd:66:9c:7d:07:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c895335ba98f7c626f0c819e9e2894c61d44754
        Validity
            Not Before: Jul 27 07:01:08 2026 GMT
            Not After : Jul 28 07:01:08 2026 GMT
        Subject: CN=6359ef504d8b674f200b54820392f03b5eacb29e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e0:a8:21:ed:8c:7b:70:5a:87:23:1b:02:a5:
                    7e:ad:54:ed:7c:5e:c5:ef:2b:e9:be:9b:db:08:8d:
                    df:9e:91:ee:4f:c6:2e:e7:2e:7e:27:cc:c1:72:2d:
                    be:28:03:c5:c0:7d:2e:83:c5:ae:83:9e:8b:71:d3:
                    3c:1d:b2:5b:ee:ce:6e:61:ea:6e:46:ba:4c:10:12:
                    da:28:8e:df:ae:c4:a3:69:db:47:24:73:41:6e:8a:
                    45:d5:80:4c:26:11:dc:4b:86:45:b8:20:23:8d:1e:
                    29:63:3d:cc:0a:13:cb:5a:66:cd:2f:8a:d0:dd:d1:
                    e5:ba:1b:f1:19:a7:81:ed:4f:31:28:f7:06:11:63:
                    bd:b6:7d:4a:d4:d5:63:3e:1b:17:25:83:49:cb:56:
                    80:b8:fc:b8:fc:f9:74:66:9c:94:2b:67:f6:e6:32:
                    ec:95:2c:cf:55:b1:0e:d4:dc:e0:94:ff:55:a9:b4:
                    8a:bc:a3:7b:b8:d1:83:30:45:9a:9c:a0:11:95:7a:
                    a8:f9:8a:35:16:5d:58:b6:b7:72:4b:01:3b:2a:76:
                    38:89:18:ed:6c:f3:61:19:76:29:68:66:d2:aa:f0:
                    71:1e:1d:64:81:2d:70:3e:8d:e0:8f:e3:7c:42:7c:
                    7f:b4:c1:69:59:17:13:64:66:2f:26:5a:5a:84:fe:
                    36:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:EF:50:4D:8B:67:4F:20:0B:54:82:03:92:F0:3B:5E:AC:B2:9E
            X509v3 Authority Key Identifier:
                keyid:6C:89:53:35:BA:98:F7:C6:26:F0:C8:19:E9:E2:89:4C:61:D4:47:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/2a55f5-3cdc-43ea-9803-74ee83736e97/1/bIlTNbqY98Ym8MgZ6eKJTGHUR1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:50:bf:66:77:b6:b4:e6:09:74:5b:47:9e:11:62:a9:8c:a5:
         00:bd:c2:fe:b5:ad:9c:6d:54:27:50:27:98:32:c2:03:a7:0f:
         ad:b5:09:93:34:64:90:3f:66:cc:98:a9:c7:dd:cd:4c:47:30:
         55:41:9b:81:b2:23:27:4d:ce:64:3b:ce:ba:39:ff:6f:03:e7:
         07:3e:45:fc:3d:d2:ad:55:84:6e:db:01:e2:75:8e:b5:40:9d:
         fe:0e:9c:05:9a:b5:b2:5c:7f:8b:3e:bb:5f:34:20:bd:e2:bc:
         92:98:4e:07:91:5a:b6:25:51:61:2b:3e:40:e7:17:ad:1d:72:
         0d:bd:5f:46:42:e7:18:0e:8a:11:4d:a9:88:8f:1c:6a:3b:8e:
         99:38:bf:6e:3b:1f:e3:04:2e:14:34:6f:8e:64:b4:15:24:a2:
         8c:cf:7c:84:10:7d:7e:f5:4c:f5:f0:ec:dc:f5:8a:3e:02:05:
         20:eb:2a:1d:9d:01:45:91:55:ef:d1:f6:b7:2c:db:84:a7:d2:
         fa:24:93:3f:77:af:08:17:e5:ed:a9:c3:69:05:d9:a5:83:d2:
         40:23:de:7a:9a:32:9d:76:ac:83:a4:91:56:76:36:e2:6b:5e:
         c8:33:5b:cf:98:4b:9f:32:7f:70:76:7a:1f:29:10:8b:13:a4:
         e0:a5:8d:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iYJ8zlzU6m3cN/WacfQdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjODk1MzM1YmE5OGY3YzYyNmYwYzgxOWU5ZTI4OTRjNjFk
NDQ3NTQwHhcNMjYwNzI3MDcwMTA4WhcNMjYwNzI4MDcwMTA4WjAzMTEwLwYDVQQD
Eyg2MzU5ZWY1MDRkOGI2NzRmMjAwYjU0ODIwMzkyZjAzYjVlYWNiMjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+CoIe2Me3BahyMbAqV+rVTtfF7F
7yvpvpvbCI3fnpHuT8Yu5y5+J8zBci2+KAPFwH0ug8Wug56LcdM8HbJb7s5uYepu
RrpMEBLaKI7frsSjadtHJHNBbopF1YBMJhHcS4ZFuCAjjR4pYz3MChPLWmbNL4rQ
3dHluhvxGaeB7U8xKPcGEWO9tn1K1NVjPhsXJYNJy1aAuPy4/Pl0ZpyUK2f25jLs
lSzPVbEO1NzglP9VqbSKvKN7uNGDMEWanKARlXqo+Yo1Fl1YtrdySwE7KnY4iRjt
bPNhGXYpaGbSqvBxHh1kgS1wPo3gj+N8Qnx/tMFpWRcTZGYvJlpahP42mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNZ71BNi2dPIAtUggOS8DterLKeMB8GA1UdIwQY
MBaAFGyJUzW6mPfGJvDIGeniiUxh1EdUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMt
NzRlZTgzNzM2ZTk3LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS8yYTU1ZjUtM2NkYy00M2VhLTk4MDMtNzRlZTgzNzM2ZTk3
LzEvYklsVE5icVk5OFltOE1nWjZlS0pUR0hVUjFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVC/Zne2
tOYJdFtHnhFiqYylAL3C/rWtnG1UJ1AnmDLCA6cPrbUJkzRkkD9mzJipx93NTEcw
VUGbgbIjJ03OZDvOujn/bwPnBz5F/D3SrVWEbtsB4nWOtUCd/g6cBZq1slx/iz67
XzQgveK8kphOB5FatiVRYSs+QOcXrR1yDb1fRkLnGA6KEU2piI8cajuOmTi/bjsf
4wQuFDRvjmS0FSSijM98hBB9fvVM9fDs3PWKPgIFIOsqHZ0BRZFV79H2tyzbhKfS
+iSTP3evCBfl7anDaQXZpYPSQCPeepoynXasg6SRVnY24mteyDNbz5hLnzJ/cHZ6
HykQixOk4KWNbQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:19 2026 by rpki-client