Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
File:                     jmOEMlhq5gL_Datn0JsZUVJOggU.mft (raw, json)
Hash identifier:          Y1R9U0LAwfNp7S2izqs7QCksYgt8GAQJIsGbDBq2y1A=
Subject key identifier:   EF:DF:B4:2A:E0:9F:64:E4:34:17:3B:F2:9A:41:BB:94:FB:24:F6:FB
Authority key identifier: 8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05
Certificate issuer:       /CN=8e638432586ae602ff0dab67d09b1951524e8205
Certificate serial:       019FA1BC0777C34F69522C5A9D6059AB6722
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
Manifest number:          03F2
Signing time:             Mon 27 Jul 2026 04:01:21 +0000
Manifest this update:     Mon 27 Jul 2026 04:01:21 +0000
Manifest next update:     Tue 28 Jul 2026 04:01:21 +0000
Files and hashes:         1: U6fyPIg5ovdf3i2qfPC2WuuXRmU.roa (hash: 51JfirD5ph0Mlaqz0ZFat9LDvr0NCB5fGDpKtCYppz0=)
                          2: jmOEMlhq5gL_Datn0JsZUVJOggU.crl (hash: Em0bNjZ+SvI/Dgcgd+CYo5YJdejKF6pL4TyLmF0SSJ8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bc:07:77:c3:4f:69:52:2c:5a:9d:60:59:ab:67:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e638432586ae602ff0dab67d09b1951524e8205
        Validity
            Not Before: Jul 27 04:01:21 2026 GMT
            Not After : Jul 28 04:01:21 2026 GMT
        Subject: CN=efdfb42ae09f64e434173bf29a41bb94fb24f6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:69:3c:bc:2e:73:8c:76:84:bb:d5:b9:e1:
                    53:32:31:00:d2:89:54:a7:e5:0b:0a:87:fb:04:bd:
                    1c:15:43:12:fc:b5:d6:a5:ce:18:2d:57:74:9c:9b:
                    08:37:32:3d:ff:ae:d0:ca:de:62:a4:ad:ec:02:39:
                    03:04:18:25:c5:0b:c4:87:16:63:c8:af:92:c4:df:
                    44:7f:00:3e:e2:6d:68:60:81:49:e8:16:3a:b8:27:
                    b1:2b:27:6d:3a:74:17:30:84:44:91:d2:06:60:3f:
                    ca:fc:c1:6b:26:44:a9:92:15:ac:86:4b:67:62:b2:
                    ea:47:67:26:d8:06:e2:9b:25:19:b5:51:67:50:77:
                    63:1a:7e:b5:08:fc:4e:d6:22:8e:0e:64:a9:88:6b:
                    95:c4:bc:82:ae:fd:08:19:fc:f1:57:14:b0:ea:84:
                    e2:d5:56:e5:5f:89:cc:a6:eb:f8:75:ad:e3:1f:af:
                    6a:89:39:94:27:68:bc:f6:cf:69:3a:5d:9a:fa:e3:
                    00:50:55:15:5b:bb:db:74:18:0c:ae:c9:c6:55:08:
                    a0:54:4e:d8:ce:1c:bb:6d:c5:dc:74:83:b9:2f:cc:
                    e4:5f:d4:b7:52:db:7c:89:3c:12:fb:e4:25:2f:6a:
                    3e:e2:bc:34:b2:1e:a2:af:84:60:60:7f:b4:ec:39:
                    1d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:B4:2A:E0:9F:64:E4:34:17:3B:F2:9A:41:BB:94:FB:24:F6:FB
            X509v3 Authority Key Identifier:
                keyid:8E:63:84:32:58:6A:E6:02:FF:0D:AB:67:D0:9B:19:51:52:4E:82:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmOEMlhq5gL_Datn0JsZUVJOggU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/03c99d-93c5-4508-b54a-ed38c47fbac6/1/jmOEMlhq5gL_Datn0JsZUVJOggU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3d:f3:1f:f7:cc:46:2a:76:7e:58:b5:90:08:dd:47:71:c8:
         eb:9b:b4:e6:d3:b5:34:d0:40:6e:4a:1e:c4:32:2c:77:6f:09:
         34:f8:4c:ff:a7:8d:35:8f:f7:5c:19:5d:51:a9:59:41:34:a3:
         39:c6:26:85:b7:0b:8e:d7:4b:4d:b8:99:ff:d0:f9:8b:98:2c:
         fb:83:a4:70:9f:4e:58:98:0c:50:89:b9:4e:75:38:8f:f5:b4:
         9c:f7:91:04:c3:6e:cc:63:a3:fb:e9:71:fe:5c:90:1d:96:cd:
         27:31:68:c9:7c:65:15:13:82:0f:e4:0e:49:7a:55:79:f2:42:
         d0:c5:5d:88:10:4e:ea:f7:74:bc:fa:fb:3b:0f:3f:ca:2e:6b:
         f7:c8:e7:ff:ab:a3:ad:aa:b6:c6:9a:34:0d:fa:56:3f:bf:2a:
         c7:24:04:f2:57:28:73:97:98:31:d5:d3:eb:8a:f9:1e:f0:73:
         06:31:c2:03:51:2f:fc:22:09:64:bb:c3:52:62:72:e4:31:5c:
         24:5e:05:a9:77:77:f8:74:f6:51:7c:f8:79:e4:5d:0d:3e:ee:
         21:57:e3:45:ec:1a:ff:c9:b1:63:d8:75:1e:bb:df:08:66:27:
         7b:04:2f:72:51:17:98:ab:b7:c7:d2:15:b6:a8:d5:29:ea:03:
         ac:2f:33:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hvAd3w09pUixanWBZq2ciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNjM4NDMyNTg2YWU2MDJmZjBkYWI2N2QwOWIxOTUxNTI0
ZTgyMDUwHhcNMjYwNzI3MDQwMTIxWhcNMjYwNzI4MDQwMTIxWjAzMTEwLwYDVQQD
EyhlZmRmYjQyYWUwOWY2NGU0MzQxNzNiZjI5YTQxYmI5NGZiMjRmNmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6tpPLwuc4x2hLvVueFTMjEA0olU
p+ULCof7BL0cFUMS/LXWpc4YLVd0nJsINzI9/67Qyt5ipK3sAjkDBBglxQvEhxZj
yK+SxN9EfwA+4m1oYIFJ6BY6uCexKydtOnQXMIREkdIGYD/K/MFrJkSpkhWshktn
YrLqR2cm2AbimyUZtVFnUHdjGn61CPxO1iKODmSpiGuVxLyCrv0IGfzxVxSw6oTi
1VblX4nMpuv4da3jH69qiTmUJ2i89s9pOl2a+uMAUFUVW7vbdBgMrsnGVQigVE7Y
zhy7bcXcdIO5L8zkX9S3Utt8iTwS++QlL2o+4rw0sh6ir4RgYH+07DkdzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO/ftCrgn2TkNBc78ppBu5T7JPb7MB8GA1UdIwQY
MBaAFI5jhDJYauYC/w2rZ9CbGVFSToIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEt
ZWQzOGM0N2ZiYWM2LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8wM2M5OWQtOTNjNS00NTA4LWI1NGEtZWQzOGM0N2ZiYWM2
LzEvam1PRU1saHE1Z0xfRGF0bjBKc1pVVkpPZ2dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgT3zH/fM
Rip2fli1kAjdR3HI65u05tO1NNBAbkoexDIsd28JNPhM/6eNNY/3XBldUalZQTSj
OcYmhbcLjtdLTbiZ/9D5i5gs+4OkcJ9OWJgMUIm5TnU4j/W0nPeRBMNuzGOj++lx
/lyQHZbNJzFoyXxlFROCD+QOSXpVefJC0MVdiBBO6vd0vPr7Ow8/yi5r98jn/6uj
raq2xpo0DfpWP78qxyQE8lcoc5eYMdXT64r5HvBzBjHCA1Ev/CIJZLvDUmJy5DFc
JF4FqXd3+HT2UXz4eeRdDT7uIVfjRewa/8mxY9h1HrvfCGYnewQvclEXmKu3x9IV
tqjVKeoDrC8zww==
-----END CERTIFICATE-----
Generated at Mon Jul 27 12:45:15 2026 by rpki-client