Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
File:                     _a9B0EvGh9D_mK19QHaEdRxGyj4.mft (raw, json)
Hash identifier:          i6Y1DiW6CgHSLhkvoQPgR+nWC3XEXw++qpBgGBQmrG4=
Subject key identifier:   47:B0:EC:CF:7D:CA:98:F1:26:52:BF:7E:52:20:88:AF:29:D7:DA:C5
Authority key identifier: FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E
Certificate issuer:       /CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
Certificate serial:       019FA3E057ED30A4A956CE6E6261564C0E70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
Manifest number:          0465
Signing time:             Mon 27 Jul 2026 14:00:16 +0000
Manifest this update:     Mon 27 Jul 2026 14:00:16 +0000
Manifest next update:     Tue 28 Jul 2026 14:00:16 +0000
Files and hashes:         1: 6OMId8qLq9FNz-0vxg5RBukY9zs.roa (hash: xe2yi3J7qtfn/452oWa5yO6AXTtiMtVrNox5id3Mshk=)
                          2: MaydDWrUbLvw1QYZAkPLLUQxbi0.roa (hash: wvyXfigpqaIstAVGqzcAWkhhWQ5Hr2D2AHS65eJuN5U=)
                          3: _a9B0EvGh9D_mK19QHaEdRxGyj4.crl (hash: NHpe/cCufHAvceq/RIhWhG8W3fxO/FCUoDfVuFIYBYo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:e0:57:ed:30:a4:a9:56:ce:6e:62:61:56:4c:0e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdaf41d04bc687d0ff98ad7d407684751c46ca3e
        Validity
            Not Before: Jul 27 14:00:16 2026 GMT
            Not After : Jul 28 14:00:16 2026 GMT
        Subject: CN=47b0eccf7dca98f12652bf7e522088af29d7dac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f0:0a:7e:62:bb:ce:d6:03:bc:42:d4:a9:9e:
                    83:42:5f:a0:f4:fd:8d:75:12:9d:9a:66:6c:d0:b4:
                    67:36:cc:51:b4:dc:60:f3:9b:a5:d0:3f:de:bc:87:
                    b1:22:e3:b8:86:30:79:69:8b:8e:3b:8b:1b:6c:df:
                    b7:0f:5f:33:dd:84:89:81:9b:84:2f:6c:cc:fd:26:
                    1a:82:c0:c0:0d:54:9d:8b:30:7a:7b:8d:3a:68:b9:
                    8b:75:d2:97:42:65:cb:9e:f3:40:4b:09:1b:6e:a2:
                    a9:a6:ad:1e:74:0a:24:1b:a3:68:90:b1:93:22:cc:
                    9e:28:3a:e2:26:90:29:bd:1e:43:77:4e:a0:d8:b7:
                    1a:68:9b:5e:1c:fb:14:e6:d7:ed:72:03:b5:7f:a6:
                    71:a3:f8:5a:0b:a7:00:01:ea:85:a6:b1:52:50:8e:
                    7d:44:fe:27:8c:95:53:51:c9:8f:73:b4:8f:82:bf:
                    43:14:31:e2:66:52:b1:bf:ca:1e:5d:39:a2:1f:66:
                    c5:82:9b:5b:06:9b:fc:fb:c8:a1:2f:3f:dd:4f:8c:
                    fc:98:7a:a2:d0:59:7e:bb:23:74:dc:2e:09:ef:15:
                    00:14:48:44:84:97:6a:d6:a9:8e:2e:83:8f:1e:0f:
                    4e:29:ea:1f:5f:95:27:18:75:ae:85:22:03:d0:28:
                    75:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:B0:EC:CF:7D:CA:98:F1:26:52:BF:7E:52:20:88:AF:29:D7:DA:C5
            X509v3 Authority Key Identifier:
                keyid:FD:AF:41:D0:4B:C6:87:D0:FF:98:AD:7D:40:76:84:75:1C:46:CA:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a9B0EvGh9D_mK19QHaEdRxGyj4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/16cdfa-6ab9-47fa-b871-ea2021800342/1/_a9B0EvGh9D_mK19QHaEdRxGyj4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ff:c8:b3:18:96:5f:38:9a:5f:06:6b:0a:0f:fc:4c:4c:d6:
         61:f8:c2:07:e1:9e:ce:02:89:6e:fd:51:dd:75:d2:c0:0c:aa:
         bf:43:29:67:1f:95:9f:38:8c:dc:70:a2:f1:fd:91:cc:0d:74:
         74:f4:5d:dc:0a:fb:64:c0:36:24:1f:e9:cb:f5:22:00:8e:ae:
         66:bf:31:f6:96:8a:ca:94:79:27:b7:60:47:0c:69:22:15:fc:
         15:c7:77:7c:6c:b8:57:19:c8:31:6a:d5:9d:e5:63:29:60:06:
         3f:d7:ee:5b:18:3d:25:5a:cb:e9:59:6b:24:29:95:e7:13:3b:
         ba:1e:40:78:56:9d:e6:64:f8:d6:f6:4a:15:4c:0d:42:26:ed:
         61:cf:47:9d:a0:09:2a:72:e9:b0:38:d2:d1:35:5c:e7:b2:cf:
         23:11:c3:08:64:60:55:9b:d4:d9:09:8e:ea:4b:ae:3c:f2:33:
         8e:87:17:8d:15:89:a2:23:3a:54:81:d1:a7:7f:42:4c:02:61:
         10:ce:43:02:63:09:6f:74:3f:c1:60:2e:e7:b4:df:ce:ab:30:
         07:2c:bc:b0:4d:a5:12:6d:dd:9a:bd:c0:79:22:15:d3:e9:df:
         b7:c4:d5:9b:6c:69:c7:05:4b:48:6e:57:5f:9d:ec:0b:24:0e:
         dc:3b:41:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+j4FftMKSpVs5uYmFWTA5wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYWY0MWQwNGJjNjg3ZDBmZjk4YWQ3ZDQwNzY4NDc1MWM0
NmNhM2UwHhcNMjYwNzI3MTQwMDE2WhcNMjYwNzI4MTQwMDE2WjAzMTEwLwYDVQQD
Eyg0N2IwZWNjZjdkY2E5OGYxMjY1MmJmN2U1MjIwODhhZjI5ZDdkYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfAKfmK7ztYDvELUqZ6DQl+g9P2N
dRKdmmZs0LRnNsxRtNxg85ul0D/evIexIuO4hjB5aYuOO4sbbN+3D18z3YSJgZuE
L2zM/SYagsDADVSdizB6e406aLmLddKXQmXLnvNASwkbbqKppq0edAokG6NokLGT
IsyeKDriJpApvR5Dd06g2LcaaJteHPsU5tftcgO1f6Zxo/haC6cAAeqFprFSUI59
RP4njJVTUcmPc7SPgr9DFDHiZlKxv8oeXTmiH2bFgptbBpv8+8ihLz/dT4z8mHqi
0Fl+uyN03C4J7xUAFEhEhJdq1qmOLoOPHg9OKeofX5UnGHWuhSID0Ch1OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEew7M99ypjxJlK/flIgiK8p19rFMB8GA1UdIwQY
MBaAFP2vQdBLxofQ/5itfUB2hHUcRso+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8xNmNkZmEtNmFiOS00N2ZhLWI4NzEt
ZWEyMDIxODAwMzQyLzEvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8xNmNkZmEtNmFiOS00N2ZhLWI4NzEtZWEyMDIxODAwMzQy
LzEvX2E5QjBFdkdoOURfbUsxOVFIYUVkUnhHeWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZv/IsxiW
XziaXwZrCg/8TEzWYfjCB+GezgKJbv1R3XXSwAyqv0MpZx+VnziM3HCi8f2RzA10
dPRd3Ar7ZMA2JB/py/UiAI6uZr8x9paKypR5J7dgRwxpIhX8Fcd3fGy4VxnIMWrV
neVjKWAGP9fuWxg9JVrL6VlrJCmV5xM7uh5AeFad5mT41vZKFUwNQibtYc9HnaAJ
KnLpsDjS0TVc57LPIxHDCGRgVZvU2QmO6kuuPPIzjocXjRWJoiM6VIHRp39CTAJh
EM5DAmMJb3Q/wWAu57TfzqswByy8sE2lEm3dmr3AeSIV0+nft8TVm2xpxwVLSG5X
X53sCyQO3DtB3A==
-----END CERTIFICATE-----
Generated at Mon Jul 27 15:35:22 2026 by rpki-client