Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
File:                     m7viALvfN5tQRVFjAXudR3fx210.mft (raw, json)
Hash identifier:          DCTU04cUxH4Qs+gfuCK2+anslq1rIYZlP6V3Ll1pKEE=
Subject key identifier:   25:94:70:20:D6:EE:A0:44:45:44:39:09:86:06:E1:CE:EB:6A:64:6C
Authority key identifier: 9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D
Certificate issuer:       /CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
Certificate serial:       019F2811BD055BCF4E3F4374777BDB380CB2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
Manifest number:          1527
Signing time:             Fri 03 Jul 2026 13:01:18 +0000
Manifest this update:     Fri 03 Jul 2026 13:01:18 +0000
Manifest next update:     Sat 04 Jul 2026 13:01:18 +0000
Files and hashes:         1: 3M-I49wkG4qtVUQtqTf_KmrWNvA.roa (hash: iXuHTvqfqDOn3nAH4lrOfDQTC+bw79xI1HWf+6YE6Ng=)
                          2: m7viALvfN5tQRVFjAXudR3fx210.crl (hash: RHBjsnefoYyjTeibyM+7hu1Pywxd9GbTPMzFuZQEbAk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 11:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:28:11:bd:05:5b:cf:4e:3f:43:74:77:7b:db:38:0c:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9bbbe200bbdf379b50455163017b9d4777f1db5d
        Validity
            Not Before: Jul  3 13:01:18 2026 GMT
            Not After : Jul  4 13:01:18 2026 GMT
        Subject: CN=25947020d6eea044454439098606e1ceeb6a646c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:2d:b0:82:c7:95:91:25:95:e3:a3:b1:d3:8d:
                    4a:95:38:a0:c7:05:ec:66:9a:22:1a:e3:b2:3f:f2:
                    5f:3d:46:ef:5d:b6:86:de:ec:dd:d5:a5:99:ab:66:
                    c0:69:09:0b:62:23:95:d4:61:0d:19:4f:af:7c:36:
                    4c:ee:b9:6d:a0:84:dc:7f:52:0c:69:9f:72:23:74:
                    4d:95:af:7d:23:7c:d9:1c:7b:fd:da:34:27:8e:f0:
                    07:f9:9b:5b:37:95:65:91:8c:03:31:87:ab:d8:a2:
                    39:84:09:c9:d1:da:f4:8c:f0:e0:f9:4e:b0:c7:07:
                    19:ce:3c:f4:3c:c8:8a:68:63:a9:3b:30:d7:6c:ec:
                    82:2f:73:28:78:cd:5b:25:93:e1:04:7e:ac:a5:46:
                    ce:11:15:68:11:41:75:83:f2:a5:85:55:fc:00:9d:
                    a2:02:68:2a:e6:96:0e:cc:11:df:e9:d8:c7:1a:b5:
                    61:47:1a:fc:c9:87:67:b0:f7:62:a9:d8:03:8d:e4:
                    4e:03:bb:4d:48:f7:0e:d4:c6:65:22:de:da:5c:af:
                    3a:9c:04:d4:40:a1:12:07:1f:4c:b0:e7:b6:1d:03:
                    70:20:87:cd:4a:49:01:c2:eb:5f:ce:3a:48:81:c9:
                    3d:82:49:0f:50:1a:5d:2e:6d:92:1c:35:5b:10:a0:
                    62:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:94:70:20:D6:EE:A0:44:45:44:39:09:86:06:E1:CE:EB:6A:64:6C
            X509v3 Authority Key Identifier:
                keyid:9B:BB:E2:00:BB:DF:37:9B:50:45:51:63:01:7B:9D:47:77:F1:DB:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7viALvfN5tQRVFjAXudR3fx210.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/12/92901f-266e-49a3-8f56-a219cb4d4a3b/1/m7viALvfN5tQRVFjAXudR3fx210.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3d:2f:7f:7b:03:41:03:11:b3:38:72:fb:95:ad:ec:de:ce:
         ae:43:fa:36:52:96:0d:b0:49:44:6b:59:d5:1c:33:4b:4a:29:
         3b:b3:2a:81:36:cc:78:ac:94:0b:fb:bc:cf:6e:bc:13:4b:79:
         81:62:ea:af:cd:d6:5a:05:3b:61:90:46:02:c9:c9:45:39:3f:
         a6:b2:5a:a8:38:67:5a:82:80:70:71:6e:32:63:ef:ea:e5:8b:
         80:07:df:fa:c9:ff:ac:30:be:bf:53:67:d0:13:e8:d2:fd:b8:
         78:12:ec:d9:3d:6f:0e:c8:11:ee:38:ae:fb:44:52:3b:c1:27:
         2d:af:d4:a6:c2:fe:6b:90:df:97:6b:31:1a:6a:8d:d6:d5:6d:
         ac:f9:60:84:b6:31:55:63:70:6d:13:47:2b:13:9a:79:de:9e:
         50:fd:15:e9:68:f5:aa:3e:1d:47:e5:c3:6f:a8:6b:a6:f2:0a:
         a3:72:aa:22:ff:03:26:a6:eb:00:bc:90:f4:21:df:78:ac:1e:
         07:47:6e:82:14:80:8e:ce:e8:c2:59:d1:86:0c:8a:97:d5:da:
         e4:cf:88:9a:bf:cc:c5:23:64:6a:08:6c:9a:e2:c4:ab:e0:4b:
         7c:20:3a:3c:e2:8e:0b:cc:6f:7c:66:36:c6:2d:41:ce:e5:81:
         1a:85:30:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8oEb0FW89OP0N0d3vbOAyyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliYmJlMjAwYmJkZjM3OWI1MDQ1NTE2MzAxN2I5ZDQ3Nzdm
MWRiNWQwHhcNMjYwNzAzMTMwMTE4WhcNMjYwNzA0MTMwMTE4WjAzMTEwLwYDVQQD
EygyNTk0NzAyMGQ2ZWVhMDQ0NDU0NDM5MDk4NjA2ZTFjZWViNmE2NDZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5S2wgseVkSWV46Ox041KlTigxwXs
ZpoiGuOyP/JfPUbvXbaG3uzd1aWZq2bAaQkLYiOV1GENGU+vfDZM7rltoITcf1IM
aZ9yI3RNla99I3zZHHv92jQnjvAH+ZtbN5VlkYwDMYer2KI5hAnJ0dr0jPDg+U6w
xwcZzjz0PMiKaGOpOzDXbOyCL3MoeM1bJZPhBH6spUbOERVoEUF1g/KlhVX8AJ2i
Amgq5pYOzBHf6djHGrVhRxr8yYdnsPdiqdgDjeROA7tNSPcO1MZlIt7aXK86nATU
QKESBx9MsOe2HQNwIIfNSkkBwutfzjpIgck9gkkPUBpdLm2SHDVbEKBiuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWUcCDW7qBERUQ5CYYG4c7ramRsMB8GA1UdIwQY
MBaAFJu74gC73zebUEVRYwF7nUd38dtdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYt
YTIxOWNiNGQ0YTNiLzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi85MjkwMWYtMjY2ZS00OWEzLThmNTYtYTIxOWNiNGQ0YTNi
LzEvbTd2aUFMdmZONXRRUlZGakFYdWRSM2Z4MjEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFz0vf3sD
QQMRszhy+5Wt7N7OrkP6NlKWDbBJRGtZ1RwzS0opO7MqgTbMeKyUC/u8z268E0t5
gWLqr83WWgU7YZBGAsnJRTk/prJaqDhnWoKAcHFuMmPv6uWLgAff+sn/rDC+v1Nn
0BPo0v24eBLs2T1vDsgR7jiu+0RSO8EnLa/UpsL+a5Dfl2sxGmqN1tVtrPlghLYx
VWNwbRNHKxOaed6eUP0V6Wj1qj4dR+XDb6hrpvIKo3KqIv8DJqbrALyQ9CHfeKwe
B0dughSAjs7owlnRhgyKl9Xa5M+Imr/MxSNkaghsmuLEq+BLfCA6POKOC8xvfGY2
xi1BzuWBGoUw4w==
-----END CERTIFICATE-----
Generated at Fri Jul 3 17:48:43 2026 by rpki-client