Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
File:                     0Mv2ugl6drYQyFYDW8GN55fCpnc.mft (raw, json)
Hash identifier:          9B9IzHlaQGAcZ9/U3/vIM1/bY0+IcmPgjQO2o7UcISg=
Subject key identifier:   46:EE:0B:45:EF:C4:F1:1B:B4:7E:1B:21:30:20:2F:E5:43:D8:6E:23
Authority key identifier: D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77
Certificate issuer:       /CN=d0cbf6ba097a76b610c856035bc18de797c2a677
Certificate serial:       019FA37285246D91B06A1696CF1DF188B991
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
Manifest number:          0BB9
Signing time:             Mon 27 Jul 2026 12:00:19 +0000
Manifest this update:     Mon 27 Jul 2026 12:00:19 +0000
Manifest next update:     Tue 28 Jul 2026 12:00:19 +0000
Files and hashes:         1: 0Mv2ugl6drYQyFYDW8GN55fCpnc.crl (hash: of+2h9vYniuyr5zk/vM8/f1LLbKE/nJEmjGlAntej/U=)
                          2: DqXib1Ly2xFoTm2bjcxnicthk1w.roa (hash: g/TBWWlwOSVO9LY7Rp7QlLHadW83dAk0kFgZL+CVZlo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 12:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:72:85:24:6d:91:b0:6a:16:96:cf:1d:f1:88:b9:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0cbf6ba097a76b610c856035bc18de797c2a677
        Validity
            Not Before: Jul 27 12:00:19 2026 GMT
            Not After : Jul 28 12:00:19 2026 GMT
        Subject: CN=46ee0b45efc4f11bb47e1b2130202fe543d86e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:49:e9:4a:30:f7:d5:0a:1b:b4:9a:f3:3e:81:
                    cd:c9:6c:0d:fc:da:47:78:35:43:da:f4:a9:3d:0d:
                    54:08:77:33:6e:82:0e:86:60:ac:2e:9d:3e:4f:a4:
                    25:4f:4c:02:b3:a1:5e:f7:20:b7:28:ce:5b:df:39:
                    d3:62:e1:34:b0:87:75:d7:ef:6b:ee:f9:f7:d1:cd:
                    26:3d:68:19:8b:e2:e8:c5:d9:d5:33:83:5e:0e:ae:
                    ec:00:55:3f:d6:b1:6b:4e:e1:3e:3c:cb:45:f9:a7:
                    dc:64:20:fd:5b:a7:5e:12:dd:2a:7b:9f:a4:95:f4:
                    7f:16:57:19:bf:3f:ba:5b:a4:63:04:bc:15:7e:32:
                    cb:e4:5b:fa:e0:a4:aa:02:a7:9a:2c:92:a9:d4:63:
                    ad:b8:2b:a0:2f:87:d9:45:4d:33:84:df:7a:79:d2:
                    b5:33:27:a2:8c:b4:6b:c9:88:7c:a5:aa:5e:bb:81:
                    96:ae:42:c5:7f:2a:1a:b0:a4:39:0a:38:3b:b6:91:
                    69:be:11:85:ba:5b:46:90:a5:22:ae:0f:e3:80:01:
                    e5:7c:ae:5e:c2:c7:38:7e:6c:87:f0:02:25:84:5c:
                    1c:d4:b2:0f:29:f8:46:66:77:60:02:60:61:bf:b8:
                    d0:c8:50:8f:06:80:50:ea:9c:fc:a1:5f:df:a0:73:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EE:0B:45:EF:C4:F1:1B:B4:7E:1B:21:30:20:2F:E5:43:D8:6E:23
            X509v3 Authority Key Identifier:
                keyid:D0:CB:F6:BA:09:7A:76:B6:10:C8:56:03:5B:C1:8D:E7:97:C2:A6:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0Mv2ugl6drYQyFYDW8GN55fCpnc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f99b62-b3e3-4c5d-aa86-d668c53f6612/1/0Mv2ugl6drYQyFYDW8GN55fCpnc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:cb:ab:40:2f:26:96:80:70:06:c2:90:46:ed:fe:81:ee:7b:
         a8:bd:ba:7f:17:8f:c4:a9:a0:bf:21:19:8e:25:b6:44:39:48:
         f5:3b:51:20:81:47:dc:d6:17:cb:93:44:b1:06:30:24:a1:43:
         90:78:a2:6c:9a:85:a5:a7:18:1d:0f:42:f8:f4:76:b3:a7:b2:
         87:ba:6c:76:b4:e2:80:e3:74:a9:ae:89:80:0b:5d:c9:99:06:
         e7:f6:4f:ea:d2:fb:98:b6:7b:14:9b:08:6f:45:ae:2b:b7:de:
         3f:0d:52:f0:80:47:35:cd:c3:62:c5:66:de:d2:57:49:e6:c9:
         88:89:a3:dc:12:e1:72:4c:7a:d2:4a:46:7a:3b:b8:24:d0:d6:
         fa:cd:3d:d8:04:94:11:30:b4:b6:12:e6:5e:7a:15:8d:1b:a5:
         17:11:c2:99:a5:48:20:f4:68:96:0b:45:2d:cb:67:97:03:c4:
         cd:c6:f9:af:d1:78:0a:6f:0f:f9:dd:5c:4f:98:ef:8a:80:1a:
         76:02:46:37:b0:7d:6b:1d:2d:89:15:03:f0:c5:b0:46:41:f1:
         d7:9c:bf:71:c2:f7:20:b5:a4:2d:5f:af:9a:5c:a2:87:62:d6:
         53:05:f2:28:9c:f5:aa:c6:b8:a4:a0:b0:ad:e6:20:ed:60:f2:
         c5:65:ab:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jcoUkbZGwahaWzx3xiLmRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwY2JmNmJhMDk3YTc2YjYxMGM4NTYwMzViYzE4ZGU3OTdj
MmE2NzcwHhcNMjYwNzI3MTIwMDE5WhcNMjYwNzI4MTIwMDE5WjAzMTEwLwYDVQQD
Eyg0NmVlMGI0NWVmYzRmMTFiYjQ3ZTFiMjEzMDIwMmZlNTQzZDg2ZTIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwknpSjD31QobtJrzPoHNyWwN/NpH
eDVD2vSpPQ1UCHczboIOhmCsLp0+T6QlT0wCs6Fe9yC3KM5b3znTYuE0sId11+9r
7vn30c0mPWgZi+LoxdnVM4NeDq7sAFU/1rFrTuE+PMtF+afcZCD9W6deEt0qe5+k
lfR/FlcZvz+6W6RjBLwVfjLL5Fv64KSqAqeaLJKp1GOtuCugL4fZRU0zhN96edK1
MyeijLRryYh8papeu4GWrkLFfyoasKQ5Cjg7tpFpvhGFultGkKUirg/jgAHlfK5e
wsc4fmyH8AIlhFwc1LIPKfhGZndgAmBhv7jQyFCPBoBQ6pz8oV/foHNOkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbuC0XvxPEbtH4bITAgL+VD2G4jMB8GA1UdIwQY
MBaAFNDL9roJena2EMhWA1vBjeeXwqZ3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYt
ZDY2OGM1M2Y2NjEyLzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mOTliNjItYjNlMy00YzVkLWFhODYtZDY2OGM1M2Y2NjEy
LzEvME12MnVnbDZkcllReUZZRFc4R041NWZDcG5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqMurQC8m
loBwBsKQRu3+ge57qL26fxePxKmgvyEZjiW2RDlI9TtRIIFH3NYXy5NEsQYwJKFD
kHiibJqFpacYHQ9C+PR2s6eyh7psdrTigON0qa6JgAtdyZkG5/ZP6tL7mLZ7FJsI
b0WuK7fePw1S8IBHNc3DYsVm3tJXSebJiImj3BLhckx60kpGeju4JNDW+s092ASU
ETC0thLmXnoVjRulFxHCmaVIIPRolgtFLctnlwPEzcb5r9F4Cm8P+d1cT5jvioAa
dgJGN7B9ax0tiRUD8MWwRkHx15y/ccL3ILWkLV+vmlyih2LWUwXyKJz1qsa4pKCw
reYg7WDyxWWr0g==
-----END CERTIFICATE-----
Generated at Mon Jul 27 18:18:28 2026 by rpki-client