Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.mft
File:                     xycqvq1nwP4JQgt-PEOEwdkLOb4.mft (raw, json)
Hash identifier:          NxvDgIaMTPlUZcrc0vrtH2dENL5UaCySttFE8mi47GU=
Subject key identifier:   78:2B:EE:92:2B:21:61:02:01:66:DF:97:CF:7C:87:2C:18:AC:8B:2F
Authority key identifier: C7:27:2A:BE:AD:67:C0:FE:09:42:0B:7E:3C:43:84:C1:D9:0B:39:BE
Certificate issuer:       /CN=c7272abead67c0fe09420b7e3c4384c1d90b39be
Certificate serial:       019F382A5289283C4E3889D69EE8CDC4A167
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xycqvq1nwP4JQgt-PEOEwdkLOb4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.mft
Manifest number:          03
Signing time:             Mon 06 Jul 2026 16:02:05 +0000
Manifest this update:     Mon 06 Jul 2026 16:02:05 +0000
Manifest next update:     Tue 07 Jul 2026 16:02:05 +0000
Files and hashes:         1: sz_RURVVArJ2c0K_kIxh1TMdrjQ.roa (hash: 2vEISfxUPcn+xHZ+k4Ao76dl9RMN0Hg4rGFr03MSLWo=)
                          2: xycqvq1nwP4JQgt-PEOEwdkLOb4.crl (hash: 1JA45Tlf85eny1RY34HfU6xsvyPVBxXOFG8EDWG/o4U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/xycqvq1nwP4JQgt-PEOEwdkLOb4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 14:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:38:2a:52:89:28:3c:4e:38:89:d6:9e:e8:cd:c4:a1:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7272abead67c0fe09420b7e3c4384c1d90b39be
        Validity
            Not Before: Jul  6 16:02:05 2026 GMT
            Not After : Jul  7 16:02:05 2026 GMT
        Subject: CN=782bee922b2161020166df97cf7c872c18ac8b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8d:34:e4:cf:16:fe:7a:aa:89:84:fd:2d:0a:
                    22:54:61:f2:a7:7a:fb:74:c9:19:f9:d4:6e:12:d1:
                    5c:4e:fc:b8:c1:8c:7c:58:77:cf:61:34:67:64:d7:
                    d3:52:aa:34:5b:0a:ab:f1:6f:57:32:45:64:1c:93:
                    f4:6f:31:38:e8:8c:62:33:8f:41:df:50:26:93:de:
                    e2:91:f6:00:16:b3:57:06:78:54:f8:20:cc:b9:43:
                    e8:94:2d:29:be:21:52:b8:96:e0:37:e4:59:8b:7e:
                    fa:83:c3:0a:82:21:43:48:84:3d:be:58:9f:df:fc:
                    8a:64:c8:b0:29:f6:f6:c0:55:07:a3:7b:76:03:50:
                    2e:a5:3c:3c:89:0f:98:fa:f2:96:a7:d5:b8:2c:8e:
                    38:4b:aa:c5:3f:f1:72:9f:11:07:53:52:d4:ed:d1:
                    12:38:c0:25:c2:53:f8:0a:ce:e0:27:cf:23:53:7c:
                    13:42:23:42:30:88:ff:d0:1c:dc:0d:1b:a1:7e:51:
                    65:bf:88:36:39:7d:ca:da:56:05:24:72:44:d1:70:
                    9b:65:30:70:e3:be:c6:66:62:13:a2:ee:96:9b:49:
                    08:6b:e6:dd:ac:0d:96:3e:a3:8d:cc:51:5b:97:3d:
                    45:dd:88:51:c8:22:7c:f0:0f:ab:e7:07:c2:f0:09:
                    87:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2B:EE:92:2B:21:61:02:01:66:DF:97:CF:7C:87:2C:18:AC:8B:2F
            X509v3 Authority Key Identifier:
                keyid:C7:27:2A:BE:AD:67:C0:FE:09:42:0B:7E:3C:43:84:C1:D9:0B:39:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xycqvq1nwP4JQgt-PEOEwdkLOb4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/81eb6a-5ddb-4cdf-b266-c984b904408b/1/xycqvq1nwP4JQgt-PEOEwdkLOb4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:bb:d8:c6:89:96:eb:cd:fa:e0:2a:f8:7a:e0:e9:0a:b8:e1:
         f3:f2:03:ec:23:65:31:e7:20:9c:c8:72:72:b3:07:cc:99:40:
         3c:77:3e:d8:9f:ea:5b:d3:c8:1b:f6:93:3a:a1:7a:94:ec:c7:
         a7:4f:00:7f:44:b9:92:a3:2d:bc:27:ba:d7:88:ab:4b:a7:ca:
         0c:46:cb:43:5d:a2:58:f0:0c:7f:68:ff:b0:d6:f4:6a:0b:76:
         b8:db:11:35:18:1a:aa:2c:29:09:72:be:93:90:cb:f8:19:fe:
         a3:05:60:99:05:8d:77:81:45:31:f5:ae:b8:f2:f3:bf:e0:ad:
         39:1f:86:4d:b0:84:88:66:01:14:b3:ce:91:cd:4b:7e:b8:c8:
         e8:20:b3:9a:ba:1c:be:22:82:31:64:7f:20:0d:69:cb:cf:ee:
         ba:d2:b0:01:de:ad:6c:02:64:76:c2:25:f1:d0:2e:59:f0:91:
         6d:37:ef:4c:c2:b8:1c:45:9c:9a:18:51:fc:34:ed:71:e6:01:
         a0:46:14:6e:81:38:16:45:52:4b:1b:f5:f5:5e:bb:9d:3d:df:
         d4:d7:a8:85:78:45:d2:6d:ed:34:ab:3d:e9:67:cd:08:b1:6f:
         0d:90:09:30:b2:da:d0:7e:81:9c:b4:89:e4:46:cc:9f:2c:09:
         e0:9c:8d:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ84KlKJKDxOOInWnujNxKFnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MjcyYWJlYWQ2N2MwZmUwOTQyMGI3ZTNjNDM4NGMxZDkw
YjM5YmUwHhcNMjYwNzA2MTYwMjA1WhcNMjYwNzA3MTYwMjA1WjAzMTEwLwYDVQQD
Eyg3ODJiZWU5MjJiMjE2MTAyMDE2NmRmOTdjZjdjODcyYzE4YWM4YjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvY005M8W/nqqiYT9LQoiVGHyp3r7
dMkZ+dRuEtFcTvy4wYx8WHfPYTRnZNfTUqo0Wwqr8W9XMkVkHJP0bzE46IxiM49B
31Amk97ikfYAFrNXBnhU+CDMuUPolC0pviFSuJbgN+RZi376g8MKgiFDSIQ9vlif
3/yKZMiwKfb2wFUHo3t2A1AupTw8iQ+Y+vKWp9W4LI44S6rFP/FynxEHU1LU7dES
OMAlwlP4Cs7gJ88jU3wTQiNCMIj/0BzcDRuhflFlv4g2OX3K2lYFJHJE0XCbZTBw
477GZmITou6Wm0kIa+bdrA2WPqONzFFblz1F3YhRyCJ88A+r5wfC8AmH5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHgr7pIrIWECAWbfl898hywYrIsvMB8GA1UdIwQY
MBaAFMcnKr6tZ8D+CUILfjxDhMHZCzm+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHljcXZxMW53UDRKUWd0LVBFT0V3ZGtMT2I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS84MWViNmEtNWRkYi00Y2RmLWIyNjYt
Yzk4NGI5MDQ0MDhiLzEveHljcXZxMW53UDRKUWd0LVBFT0V3ZGtMT2I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS84MWViNmEtNWRkYi00Y2RmLWIyNjYtYzk4NGI5MDQ0MDhi
LzEveHljcXZxMW53UDRKUWd0LVBFT0V3ZGtMT2I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7vYxomW
68364Cr4euDpCrjh8/ID7CNlMecgnMhycrMHzJlAPHc+2J/qW9PIG/aTOqF6lOzH
p08Af0S5kqMtvCe614irS6fKDEbLQ12iWPAMf2j/sNb0agt2uNsRNRgaqiwpCXK+
k5DL+Bn+owVgmQWNd4FFMfWuuPLzv+CtOR+GTbCEiGYBFLPOkc1LfrjI6CCzmroc
viKCMWR/IA1py8/uutKwAd6tbAJkdsIl8dAuWfCRbTfvTMK4HEWcmhhR/DTtceYB
oEYUboE4FkVSSxv19V67nT3f1NeohXhF0m3tNKs96WfNCLFvDZAJMLLa0H6BnLSJ
5EbMnywJ4JyNnA==
-----END CERTIFICATE-----
Generated at Mon Jul 6 23:18:01 2026 by rpki-client