Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
File:                     pOd3fHr7fUObRvaBxMe_aoJS4xU.mft (raw, json)
Hash identifier:          R+EFj+2uus4rtGG/010tMYGMKIoTU7pKD5zfvtwNAUo=
Subject key identifier:   B4:7B:93:1F:68:CC:AF:89:23:00:E5:EC:68:78:AC:DF:EF:F3:F0:62
Authority key identifier: A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15
Certificate issuer:       /CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
Certificate serial:       019FA1BBC4A954BEEFD5886158044AACEA00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
Manifest number:          10BA
Signing time:             Mon 27 Jul 2026 04:01:05 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:05 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:05 +0000
Files and hashes:         1: buuNqOKeytQjK-fw0E6NNtyOW_g.roa (hash: QnGFqGYlvy+0tU6e4bILPLthTrwM/mOAa/IAuKQfucs=)
                          2: pOd3fHr7fUObRvaBxMe_aoJS4xU.crl (hash: ytNDoWHfJPlyFm5/HHtXrh6eJj4zLLOU6pQx8uCPv5k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:c4:a9:54:be:ef:d5:88:61:58:04:4a:ac:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e7777c7afb7d439b46f681c4c7bf6a8252e315
        Validity
            Not Before: Jul 27 04:01:05 2026 GMT
            Not After : Jul 28 04:01:05 2026 GMT
        Subject: CN=b47b931f68ccaf892300e5ec6878acdfeff3f062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fa:da:e9:52:11:e7:58:9d:3e:31:e2:1d:ce:
                    e6:90:9a:56:b2:d3:29:cf:cc:3e:d9:41:79:db:b4:
                    6c:c0:59:19:79:61:ad:96:e0:57:75:af:6c:94:83:
                    45:2d:3a:53:9d:72:cd:f3:c0:a6:98:60:d2:0c:3c:
                    73:0d:42:19:35:d2:ce:56:41:c4:05:2d:05:88:0a:
                    79:e9:96:84:57:c8:13:5c:d1:8c:99:dd:d8:b6:a6:
                    42:66:42:cc:4d:75:33:47:40:2e:fd:4b:86:ef:f2:
                    7e:99:84:9a:48:19:d0:b2:f6:b1:69:af:cd:d0:1f:
                    ee:6f:d2:f3:54:c3:fb:30:04:8c:b6:d5:af:24:96:
                    bb:a9:95:f9:5e:50:50:ae:75:f6:92:ca:63:06:5e:
                    77:24:a6:43:b7:9f:80:32:97:60:e3:90:d9:d9:da:
                    d0:ad:3c:04:b0:58:82:c7:17:5d:3e:be:2d:c0:eb:
                    8d:3c:0a:da:7b:79:00:06:8d:8f:e1:05:fc:ce:07:
                    a7:8d:17:e7:ee:60:06:e0:15:b4:c3:79:36:80:5a:
                    f3:27:b0:c9:58:27:9b:f0:59:d5:25:cc:bd:81:41:
                    e9:ee:24:25:b6:f7:a6:18:34:9b:13:3f:0e:f2:11:
                    fa:f1:6c:94:f3:b2:6b:c1:4e:77:ef:8e:27:f9:d1:
                    e4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:7B:93:1F:68:CC:AF:89:23:00:E5:EC:68:78:AC:DF:EF:F3:F0:62
            X509v3 Authority Key Identifier:
                keyid:A4:E7:77:7C:7A:FB:7D:43:9B:46:F6:81:C4:C7:BF:6A:82:52:E3:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOd3fHr7fUObRvaBxMe_aoJS4xU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/45ad5b-3ce1-48f1-bef7-641cfb6e3d9b/1/pOd3fHr7fUObRvaBxMe_aoJS4xU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:8d:ff:46:9b:bd:8a:b9:a7:4c:73:94:f6:92:a7:ec:5e:b0:
         b6:e5:a1:65:e8:89:2a:59:aa:f1:11:6b:b8:8a:a8:a8:3b:66:
         1a:7a:87:2c:04:0b:71:47:fa:46:ab:83:f3:eb:d7:52:90:62:
         3f:1e:b3:78:a3:e0:c1:0b:62:96:a5:5c:71:14:cb:44:09:90:
         75:47:55:dd:39:72:a3:1e:23:ae:40:21:f6:9a:c7:e8:b1:ae:
         95:f6:55:44:e1:1a:69:0d:31:16:9c:9c:f9:8d:c7:46:74:c1:
         16:fc:eb:87:35:a5:4d:44:b6:2b:b5:61:39:4d:99:fe:83:59:
         cf:ec:bf:ec:fa:f9:c9:0c:18:13:4b:62:94:cb:99:6b:23:11:
         ef:7a:5b:1d:be:3f:bc:4f:2c:2f:e8:9c:34:21:64:37:13:9b:
         1d:72:18:20:09:c3:59:a4:8a:04:da:2b:36:17:ea:f8:a3:db:
         dc:a7:6d:d1:72:78:8b:a6:44:69:dd:10:56:20:4d:ef:a2:23:
         ca:5d:08:1b:5c:a0:f3:23:69:7a:e3:d2:43:24:98:b8:82:d8:
         7c:6f:50:ed:64:48:6d:6d:43:55:5b:98:76:6a:e2:cf:b0:7b:
         b5:d8:07:2e:ca:aa:70:84:4c:26:c5:40:a6:39:45:27:82:33:
         21:8e:b7:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hu8SpVL7v1YhhWARKrOoAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZTc3NzdjN2FmYjdkNDM5YjQ2ZjY4MWM0YzdiZjZhODI1
MmUzMTUwHhcNMjYwNzI3MDQwMTA1WhcNMjYwNzI4MDQwMTA1WjAzMTEwLwYDVQQD
EyhiNDdiOTMxZjY4Y2NhZjg5MjMwMGU1ZWM2ODc4YWNkZmVmZjNmMDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfra6VIR51idPjHiHc7mkJpWstMp
z8w+2UF527RswFkZeWGtluBXda9slINFLTpTnXLN88CmmGDSDDxzDUIZNdLOVkHE
BS0FiAp56ZaEV8gTXNGMmd3YtqZCZkLMTXUzR0Au/UuG7/J+mYSaSBnQsvaxaa/N
0B/ub9LzVMP7MASMttWvJJa7qZX5XlBQrnX2kspjBl53JKZDt5+AMpdg45DZ2drQ
rTwEsFiCxxddPr4twOuNPArae3kABo2P4QX8zgenjRfn7mAG4BW0w3k2gFrzJ7DJ
WCeb8FnVJcy9gUHp7iQltvemGDSbEz8O8hH68WyU87JrwU53744n+dHkPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLR7kx9ozK+JIwDl7Gh4rN/v8/BiMB8GA1UdIwQY
MBaAFKTnd3x6+31Dm0b2gcTHv2qCUuMVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjct
NjQxY2ZiNmUzZDliLzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS80NWFkNWItM2NlMS00OGYxLWJlZjctNjQxY2ZiNmUzZDli
LzEvcE9kM2ZIcjdmVU9iUnZhQnhNZV9hb0pTNHhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKo3/Rpu9
irmnTHOU9pKn7F6wtuWhZeiJKlmq8RFruIqoqDtmGnqHLAQLcUf6RquD8+vXUpBi
Px6zeKPgwQtilqVccRTLRAmQdUdV3Tlyox4jrkAh9prH6LGulfZVROEaaQ0xFpyc
+Y3HRnTBFvzrhzWlTUS2K7VhOU2Z/oNZz+y/7Pr5yQwYE0tilMuZayMR73pbHb4/
vE8sL+icNCFkNxObHXIYIAnDWaSKBNorNhfq+KPb3Kdt0XJ4i6ZEad0QViBN76Ij
yl0IG1yg8yNpeuPSQySYuILYfG9Q7WRIbW1DVVuYdmriz7B7tdgHLsqqcIRMJsVA
pjlFJ4IzIY63iA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:19:27 2026 by rpki-client