Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
File:                     9aEH8WvGsAt2TDms_WMzY2RtWZY.mft (raw, json)
Hash identifier:          2qZyudXiKwCJK+RSAACb6MRxxTtZe0b/911T/LzQ+Ew=
Subject key identifier:   ED:1C:79:2F:3F:7C:61:FE:18:0E:2A:31:FB:4D:A1:E1:31:81:40:19
Authority key identifier: F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96
Certificate issuer:       /CN=f5a107f16bc6b00b764c39acfd633363646d5996
Certificate serial:       019FCC392B7559D79EEFFD7881AEC8285483
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
Manifest number:          0707
Signing time:             Tue 04 Aug 2026 10:02:06 +0000
Manifest this update:     Tue 04 Aug 2026 10:02:06 +0000
Manifest next update:     Wed 05 Aug 2026 10:02:06 +0000
Files and hashes:         1: 9aEH8WvGsAt2TDms_WMzY2RtWZY.crl (hash: O1pHucNzfnzynlEdlp4iomilnLpWuzSMcL5W4R5DiJg=)
                          2: YR9nbJSvjMz22hEhrLxozqfTYpM.roa (hash: gYf5CcRkkh/Fk5/cmxIrFjAzYsJs0D1iQQ35mLjqwnM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:39:2b:75:59:d7:9e:ef:fd:78:81:ae:c8:28:54:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5a107f16bc6b00b764c39acfd633363646d5996
        Validity
            Not Before: Aug  4 10:02:06 2026 GMT
            Not After : Aug  5 10:02:06 2026 GMT
        Subject: CN=ed1c792f3f7c61fe180e2a31fb4da1e131814019
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:64:24:a8:10:ad:7a:81:99:a0:46:9e:ab:73:
                    ea:3e:fc:e2:80:94:eb:47:7d:a3:b8:60:c0:c6:42:
                    75:13:7f:cc:b6:e0:bb:8e:be:33:30:91:36:2e:50:
                    01:82:2c:9f:a9:3e:85:21:83:49:9c:8c:00:3f:ca:
                    74:9e:ec:15:25:70:6f:a7:92:3d:e8:bb:85:7e:7b:
                    fc:ef:3b:ce:ec:83:83:a6:7a:0b:bf:7e:6c:c2:06:
                    1c:35:3e:ac:75:a9:94:c1:00:94:e1:cf:15:fb:6f:
                    bd:59:b5:57:07:28:11:b5:71:ad:1a:a7:c6:ba:81:
                    dd:f7:bb:c2:06:5b:f7:e9:76:72:d5:e1:41:df:80:
                    ed:fd:87:f7:3e:75:cb:6f:d3:fd:df:ea:93:73:1a:
                    97:98:30:6c:b7:2a:26:7c:43:c0:5f:4c:54:d1:fb:
                    fa:41:c9:20:bd:da:d1:2c:e3:fb:81:b0:e5:2b:55:
                    eb:b7:3f:64:0f:a2:25:c1:b9:a1:5a:e4:5f:cb:10:
                    f0:73:3f:44:78:4d:7f:28:bd:09:0d:87:83:f9:2a:
                    5c:19:f6:80:c4:d3:9e:a4:2f:17:db:bd:44:ed:33:
                    e4:4e:73:ea:30:a0:ad:0e:fe:f0:b0:c6:36:e4:ae:
                    ac:f7:e8:b6:7c:2e:83:3f:67:e6:1e:59:4e:59:e8:
                    f7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:1C:79:2F:3F:7C:61:FE:18:0E:2A:31:FB:4D:A1:E1:31:81:40:19
            X509v3 Authority Key Identifier:
                keyid:F5:A1:07:F1:6B:C6:B0:0B:76:4C:39:AC:FD:63:33:63:64:6D:59:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aEH8WvGsAt2TDms_WMzY2RtWZY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/f0ba5e-6bb3-4858-8b2b-9f1cfb8d1428/1/9aEH8WvGsAt2TDms_WMzY2RtWZY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:55:11:ba:3d:aa:52:27:4d:3e:34:0c:cf:7c:55:68:0c:96:
         e0:d3:4c:d7:3d:cf:93:69:1e:6e:54:40:8a:33:f8:f4:83:a0:
         ea:56:b7:ca:73:2e:86:05:01:fc:8f:93:db:3b:da:89:3b:6d:
         39:9e:dd:ce:8b:0f:b9:a6:42:e1:2e:3e:65:ca:d1:2c:f5:89:
         75:d0:a2:0b:37:83:99:5c:8e:b4:ec:33:55:39:ae:d2:f9:7c:
         1d:f8:74:f2:8c:b1:f6:e1:fa:3c:ad:b5:38:0c:4f:67:da:3b:
         fd:bc:3c:83:8f:21:c7:4f:6c:9d:da:50:72:86:3f:64:90:86:
         fc:35:7b:e4:98:06:8d:d3:cc:97:a6:8d:0d:f8:c9:d1:1a:05:
         ed:d0:b4:34:73:9a:ca:8b:dd:b7:b0:cc:27:fc:57:6d:ac:4a:
         98:dc:42:96:de:a7:9e:4d:72:cb:dc:2f:65:38:b3:cc:d9:02:
         6e:0e:97:a5:39:5e:a0:3c:e3:40:5f:32:40:71:69:44:d0:29:
         86:79:8f:a0:c0:d7:7f:b2:6c:7b:fe:b5:f5:2f:92:1d:ba:33:
         b6:bb:01:51:fd:a5:ca:71:9b:cf:a0:39:47:23:e6:d0:1d:f8:
         c0:46:ff:8d:05:e5:cc:9a:31:62:09:da:84:bb:c7:a4:8f:83:
         f5:48:98:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/MOSt1Wdee7/14ga7IKFSDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YTEwN2YxNmJjNmIwMGI3NjRjMzlhY2ZkNjMzMzYzNjQ2
ZDU5OTYwHhcNMjYwODA0MTAwMjA2WhcNMjYwODA1MTAwMjA2WjAzMTEwLwYDVQQD
EyhlZDFjNzkyZjNmN2M2MWZlMTgwZTJhMzFmYjRkYTFlMTMxODE0MDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWQkqBCteoGZoEaeq3PqPvzigJTr
R32juGDAxkJ1E3/MtuC7jr4zMJE2LlABgiyfqT6FIYNJnIwAP8p0nuwVJXBvp5I9
6LuFfnv87zvO7IODpnoLv35swgYcNT6sdamUwQCU4c8V+2+9WbVXBygRtXGtGqfG
uoHd97vCBlv36XZy1eFB34Dt/Yf3PnXLb9P93+qTcxqXmDBstyomfEPAX0xU0fv6
QckgvdrRLOP7gbDlK1Xrtz9kD6IlwbmhWuRfyxDwcz9EeE1/KL0JDYeD+SpcGfaA
xNOepC8X271E7TPkTnPqMKCtDv7wsMY25K6s9+i2fC6DP2fmHllOWej3qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0ceS8/fGH+GA4qMftNoeExgUAZMB8GA1UdIwQY
MBaAFPWhB/FrxrALdkw5rP1jM2NkbVmWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmIt
OWYxY2ZiOGQxNDI4LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9mMGJhNWUtNmJiMy00ODU4LThiMmItOWYxY2ZiOGQxNDI4
LzEvOWFFSDhXdkdzQXQyVERtc19XTXpZMlJ0V1pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX1URuj2q
UidNPjQMz3xVaAyW4NNM1z3Pk2keblRAijP49IOg6la3ynMuhgUB/I+T2zvaiTtt
OZ7dzosPuaZC4S4+ZcrRLPWJddCiCzeDmVyOtOwzVTmu0vl8Hfh08oyx9uH6PK21
OAxPZ9o7/bw8g48hx09sndpQcoY/ZJCG/DV75JgGjdPMl6aNDfjJ0RoF7dC0NHOa
yovdt7DMJ/xXbaxKmNxClt6nnk1yy9wvZTizzNkCbg6XpTleoDzjQF8yQHFpRNAp
hnmPoMDXf7Jse/619S+SHboztrsBUf2lynGbz6A5RyPm0B34wEb/jQXlzJoxYgna
hLvHpI+D9UiYwA==
-----END CERTIFICATE-----
Generated at Tue Aug 4 13:56:36 2026 by rpki-client