Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
File:                     uO0-vNIVX5oXihA62rSP2osidaU.mft (raw, json)
Hash identifier:          v2AeixocUPc+Unu5GNMgWGtDbqGgS5ZUvcQvjXtirto=
Subject key identifier:   CD:A3:03:4A:17:F5:B9:D1:5A:BD:B4:AF:78:2F:27:0C:53:C1:1C:48
Authority key identifier: B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5
Certificate issuer:       /CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
Certificate serial:       019F84C3A81189EA6C8F0492479015876618
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
Manifest number:          1527
Signing time:             Tue 21 Jul 2026 13:00:42 +0000
Manifest this update:     Tue 21 Jul 2026 13:00:42 +0000
Manifest next update:     Wed 22 Jul 2026 13:00:42 +0000
Files and hashes:         1: 1-fsHYTIUTFY0216Qbk8IXnoEcp8.roa (hash: bfgMgiAWnH7b52b8mMjuMw9kDEycqTEWeJ8kbQp2a6c=)
                          2: WIAk63chBCdGYiGDL4jJVIzgpHA.roa (hash: e3taT/GSCbu7IKCePzef39V4CQeoRg7zNm3KotlMe7A=)
                          3: Z4cd67t_oTbTTOY62m-SDIBMEfk.roa (hash: /PTXJtjmPJ7VKf+Ddpyha9KTCciauyGlpPXGyj6aw+Y=)
                          4: uO0-vNIVX5oXihA62rSP2osidaU.crl (hash: uiTHNvpNGP0YU/2quf9OxdB9b2Kbd1mf8Cd50INodjY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c3:a8:11:89:ea:6c:8f:04:92:47:90:15:87:66:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8ed3ebcd2155f9a178a103adab48fda8b2275a5
        Validity
            Not Before: Jul 21 13:00:42 2026 GMT
            Not After : Jul 22 13:00:42 2026 GMT
        Subject: CN=cda3034a17f5b9d15abdb4af782f270c53c11c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d9:91:6b:87:76:42:aa:0a:6d:c4:1b:c3:8c:
                    0b:37:ae:fe:87:b5:02:b8:28:c5:5b:72:cb:3e:d7:
                    e5:80:59:52:e0:13:04:87:75:f7:6f:8d:0c:da:89:
                    71:54:fe:11:95:ee:a0:5b:d4:10:69:40:42:c8:27:
                    1e:4c:20:bc:87:40:a7:44:97:e3:80:a9:4b:e0:c4:
                    31:e5:5a:dd:e3:38:c9:9e:27:a5:b1:01:2e:8b:69:
                    81:45:49:8c:fd:4e:79:84:aa:d0:84:54:61:c9:eb:
                    82:0b:81:76:58:c2:cf:cc:de:57:65:cd:b8:06:ee:
                    7a:fb:b6:0c:af:dd:90:71:fc:33:ac:25:fb:34:7f:
                    29:82:ea:7e:5b:27:da:62:02:5f:d7:5c:4b:e1:18:
                    e0:6d:9b:9a:d9:2d:19:59:df:9d:33:99:ad:98:f5:
                    67:5d:d4:fa:97:96:63:d3:26:a5:3c:21:0a:53:1a:
                    2f:a2:16:73:ac:df:5c:f2:4b:6a:43:f9:9b:0c:0d:
                    c4:76:af:39:1c:6b:ce:88:b2:52:2c:a6:d9:c2:47:
                    63:81:5b:2e:10:a5:97:9f:0a:5a:6a:e2:c4:81:06:
                    18:08:3c:98:4f:52:6c:23:e0:97:b7:66:e8:34:b7:
                    ba:ea:95:f2:19:ea:e1:62:e1:0e:1f:06:a9:e6:4e:
                    88:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:A3:03:4A:17:F5:B9:D1:5A:BD:B4:AF:78:2F:27:0C:53:C1:1C:48
            X509v3 Authority Key Identifier:
                keyid:B8:ED:3E:BC:D2:15:5F:9A:17:8A:10:3A:DA:B4:8F:DA:8B:22:75:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uO0-vNIVX5oXihA62rSP2osidaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/421c6d-535c-4c13-8da3-dea12dd8c7f4/1/uO0-vNIVX5oXihA62rSP2osidaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:15:06:86:e3:ad:72:de:7e:67:4d:0a:d4:65:e8:bf:aa:be:
         77:b8:8c:ca:51:4c:cb:f3:ef:02:f9:24:46:73:32:48:3c:bc:
         8b:03:80:46:2e:07:87:23:b8:98:f4:d5:3a:66:bc:b9:2d:67:
         76:26:de:47:a3:e1:fb:b6:58:13:6b:d4:36:a0:72:fe:30:fa:
         92:b3:a0:d6:83:cc:4f:04:18:f3:0f:75:a5:71:82:90:24:6e:
         1f:4d:3a:7c:7f:00:f7:b4:ae:4d:50:30:32:6e:93:48:fd:d5:
         9e:fd:e0:ac:72:9b:04:c8:f2:dc:10:ce:50:c1:d5:ae:a3:2d:
         02:5c:c1:af:40:63:92:09:b8:3a:a9:e1:bb:d6:4a:c5:15:f5:
         e1:a1:fd:fc:b0:8a:e6:44:b8:95:40:69:71:c5:42:55:7e:f7:
         1c:d1:e9:6f:57:27:fd:c7:c8:06:28:e6:af:e1:eb:fb:d2:5b:
         51:71:d6:68:89:6b:eb:92:3a:57:3f:d7:53:74:2e:40:ad:c1:
         9c:7a:91:48:c3:60:27:dc:bf:5d:d3:f8:09:70:7e:77:c4:e5:
         36:de:d9:52:7e:f4:7a:cb:8d:41:89:8d:12:b8:21:96:fa:23:
         4a:21:e8:df:68:ef:eb:fd:e7:67:d2:8a:dd:7d:46:b8:1a:51:
         98:aa:4e:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Ew6gRiepsjwSSR5AVh2YYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZWQzZWJjZDIxNTVmOWExNzhhMTAzYWRhYjQ4ZmRhOGIy
Mjc1YTUwHhcNMjYwNzIxMTMwMDQyWhcNMjYwNzIyMTMwMDQyWjAzMTEwLwYDVQQD
EyhjZGEzMDM0YTE3ZjViOWQxNWFiZGI0YWY3ODJmMjcwYzUzYzExYzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNmRa4d2QqoKbcQbw4wLN67+h7UC
uCjFW3LLPtflgFlS4BMEh3X3b40M2olxVP4Rle6gW9QQaUBCyCceTCC8h0CnRJfj
gKlL4MQx5Vrd4zjJnielsQEui2mBRUmM/U55hKrQhFRhyeuCC4F2WMLPzN5XZc24
Bu56+7YMr92QcfwzrCX7NH8pgup+WyfaYgJf11xL4RjgbZua2S0ZWd+dM5mtmPVn
XdT6l5Zj0yalPCEKUxovohZzrN9c8ktqQ/mbDA3Edq85HGvOiLJSLKbZwkdjgVsu
EKWXnwpaauLEgQYYCDyYT1JsI+CXt2boNLe66pXyGerhYuEOHwap5k6IEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2jA0oX9bnRWr20r3gvJwxTwRxIMB8GA1UdIwQY
MBaAFLjtPrzSFV+aF4oQOtq0j9qLInWlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi80MjFjNmQtNTM1Yy00YzEzLThkYTMt
ZGVhMTJkZDhjN2Y0LzEvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi80MjFjNmQtNTM1Yy00YzEzLThkYTMtZGVhMTJkZDhjN2Y0
LzEvdU8wLXZOSVZYNW9YaWhBNjJyU1Ayb3NpZGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaBUGhuOt
ct5+Z00K1GXov6q+d7iMylFMy/PvAvkkRnMySDy8iwOARi4HhyO4mPTVOma8uS1n
dibeR6Ph+7ZYE2vUNqBy/jD6krOg1oPMTwQY8w91pXGCkCRuH006fH8A97SuTVAw
Mm6TSP3Vnv3grHKbBMjy3BDOUMHVrqMtAlzBr0Bjkgm4Oqnhu9ZKxRX14aH9/LCK
5kS4lUBpccVCVX73HNHpb1cn/cfIBijmr+Hr+9JbUXHWaIlr65I6Vz/XU3QuQK3B
nHqRSMNgJ9y/XdP4CXB+d8TlNt7ZUn70esuNQYmNErghlvojSiHo32jv6/3nZ9KK
3X1GuBpRmKpO6A==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:56 2026 by rpki-client