Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
File:                     7jfTSGm8YLfZ54M19KMjgftyEOU.mft (raw, json)
Hash identifier:          H+k2NpuwKgO6JCfciEEFXm47DzYlNXoOxXnPEGabPgU=
Subject key identifier:   33:B8:E3:21:40:56:1C:1C:45:F8:4D:D7:FF:A3:E8:FA:E7:1C:DE:0B
Authority key identifier: EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5
Certificate issuer:       /CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
Certificate serial:       019F13E6AA81E0DCF61070768630027CBD2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
Manifest number:          1990
Signing time:             Mon 29 Jun 2026 15:01:51 +0000
Manifest this update:     Mon 29 Jun 2026 15:01:51 +0000
Manifest next update:     Tue 30 Jun 2026 15:01:51 +0000
Files and hashes:         1: 7jfTSGm8YLfZ54M19KMjgftyEOU.crl (hash: AcnFVJj2jErzGL3bbUbC0inat8617DLDFYxMpJQBNFI=)
                          2: XHVi61WiazNgcFLfPPLSGooyVY0.roa (hash: DsQUXKDSsnP3SOeoq0hMzedmYIiSFC88k9HokDNi5rA=)
                          3: mYTd35kRkIBF88OmyEhVri7c_EM.roa (hash: 8He+vLv80dG8+N+bwzMwaOxaSPkQw5v1/xR4GgFaHQ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:e6:aa:81:e0:dc:f6:10:70:76:86:30:02:7c:bd:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee37d34869bc60b7d9e78335f4a32381fb7210e5
        Validity
            Not Before: Jun 29 15:01:51 2026 GMT
            Not After : Jun 30 15:01:51 2026 GMT
        Subject: CN=33b8e32140561c1c45f84dd7ffa3e8fae71cde0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:10:6d:93:53:02:dc:35:e8:c8:80:15:4b:
                    d3:2c:3e:b5:7f:2b:e0:e7:41:66:66:82:c6:a1:c0:
                    2e:4b:3c:a2:45:f4:b6:d1:bc:1a:08:22:a1:f5:68:
                    66:c7:04:fc:93:7d:df:9a:7e:b1:25:b3:a2:d0:f3:
                    37:ec:df:e3:3d:40:4c:21:62:85:95:db:1e:86:fb:
                    4b:93:65:9a:60:10:a6:9d:cb:2b:4b:d0:51:63:0d:
                    8f:67:8d:2a:c7:6b:8e:3f:d0:ea:69:ad:9e:b0:f4:
                    9f:ca:ea:5a:63:55:63:3e:04:11:a4:64:f5:9e:20:
                    38:9c:ca:8d:38:28:c6:cc:c5:6b:98:60:37:47:76:
                    77:4c:6f:a7:f7:89:90:d0:39:8e:4e:8f:7e:fb:ab:
                    0a:ea:b3:18:ff:d9:64:fa:5a:9d:4f:74:d5:c2:5f:
                    79:ca:27:49:8a:c7:13:7e:5b:c8:3e:b4:7f:a2:eb:
                    f1:1d:dc:0f:d8:77:5a:63:10:11:33:c2:02:66:ef:
                    fe:3b:86:27:b3:e4:9d:f9:2b:5d:53:0a:1c:f5:16:
                    77:0c:c2:10:05:fb:42:6e:06:28:6d:5d:a2:83:26:
                    37:11:4d:74:19:18:db:d5:ec:f8:9c:a2:47:20:f0:
                    05:71:66:0a:86:bd:78:25:84:94:df:2c:4e:d2:07:
                    48:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:B8:E3:21:40:56:1C:1C:45:F8:4D:D7:FF:A3:E8:FA:E7:1C:DE:0B
            X509v3 Authority Key Identifier:
                keyid:EE:37:D3:48:69:BC:60:B7:D9:E7:83:35:F4:A3:23:81:FB:72:10:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jfTSGm8YLfZ54M19KMjgftyEOU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/c8c5e4-225a-489e-9100-ab2ce94c1423/1/7jfTSGm8YLfZ54M19KMjgftyEOU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e0:82:64:1b:d0:15:8c:3e:5c:cf:90:06:5b:4c:5e:17:97:
         43:72:dd:7d:92:34:7d:5b:3c:c9:61:fa:58:fb:bb:be:c7:d0:
         b5:0c:95:35:bc:d6:70:8a:eb:b6:f3:ee:6b:1c:e7:fd:da:f8:
         c4:11:ed:b5:e0:a5:25:a1:72:e1:94:18:03:89:ff:fb:0a:06:
         a0:0d:f5:92:72:16:bf:4a:6a:c3:03:87:17:28:e8:7f:59:e9:
         0a:de:5e:b8:a5:ba:6c:4b:8e:bc:21:ea:29:3b:14:f4:32:75:
         95:1d:04:d1:cb:5e:e4:7f:39:d8:03:91:1f:1c:8b:60:a3:7f:
         08:6f:86:e1:5e:9f:46:99:73:65:51:3d:8f:17:96:99:1d:51:
         55:be:58:42:29:82:da:c3:0d:85:09:30:20:a0:49:96:6e:62:
         19:b8:5d:ca:cc:e7:e4:f8:8d:54:ac:21:68:9c:cf:ed:32:14:
         40:d1:4d:88:3e:99:b8:d8:3a:b3:02:a2:34:39:2e:28:2e:2d:
         f1:fd:1f:a9:09:d2:81:8f:cc:75:8f:66:de:69:51:08:fa:86:
         38:b1:f6:f0:67:15:c2:5b:ee:7f:df:88:20:01:24:aa:2f:eb:
         62:48:93:46:82:82:1f:15:9d:bd:0a:58:cf:28:3c:e6:75:68:
         a0:a6:34:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8T5qqB4Nz2EHB2hjACfL0tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzdkMzQ4NjliYzYwYjdkOWU3ODMzNWY0YTMyMzgxZmI3
MjEwZTUwHhcNMjYwNjI5MTUwMTUxWhcNMjYwNjMwMTUwMTUxWjAzMTEwLwYDVQQD
EygzM2I4ZTMyMTQwNTYxYzFjNDVmODRkZDdmZmEzZThmYWU3MWNkZTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6YQbZNTAtw16MiAFUvTLD61fyvg
50FmZoLGocAuSzyiRfS20bwaCCKh9WhmxwT8k33fmn6xJbOi0PM37N/jPUBMIWKF
ldsehvtLk2WaYBCmncsrS9BRYw2PZ40qx2uOP9Dqaa2esPSfyupaY1VjPgQRpGT1
niA4nMqNOCjGzMVrmGA3R3Z3TG+n94mQ0DmOTo9++6sK6rMY/9lk+lqdT3TVwl95
yidJiscTflvIPrR/ouvxHdwP2HdaYxARM8ICZu/+O4Yns+Sd+StdUwoc9RZ3DMIQ
BftCbgYobV2igyY3EU10GRjb1ez4nKJHIPAFcWYKhr14JYSU3yxO0gdIuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO44yFAVhwcRfhN1/+j6PrnHN4LMB8GA1UdIwQY
MBaAFO4300hpvGC32eeDNfSjI4H7chDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAt
YWIyY2U5NGMxNDIzLzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jOGM1ZTQtMjI1YS00ODllLTkxMDAtYWIyY2U5NGMxNDIz
LzEvN2pmVFNHbThZTGZaNTRNMTlLTWpnZnR5RU9VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABuCCZBvQ
FYw+XM+QBltMXheXQ3LdfZI0fVs8yWH6WPu7vsfQtQyVNbzWcIrrtvPuaxzn/dr4
xBHtteClJaFy4ZQYA4n/+woGoA31knIWv0pqwwOHFyjof1npCt5euKW6bEuOvCHq
KTsU9DJ1lR0E0cte5H852AORHxyLYKN/CG+G4V6fRplzZVE9jxeWmR1RVb5YQimC
2sMNhQkwIKBJlm5iGbhdyszn5PiNVKwhaJzP7TIUQNFNiD6ZuNg6swKiNDkuKC4t
8f0fqQnSgY/MdY9m3mlRCPqGOLH28GcVwlvuf9+IIAEkqi/rYkiTRoKCHxWdvQpY
zyg85nVooKY0Vg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 18:32:56 2026 by rpki-client