Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File:                     licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier:          uX6Zkqcin3ogoF1mODR0UJJMESe1o1cHU+LyoEuGr3Q=
Subject key identifier:   F6:A9:D7:F1:70:E9:29:66:6A:C1:C5:34:2D:31:76:22:59:EF:B1:5C
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer:       /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial:       019FA1F226F7FF2C0AAD14747AC2FC844833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number:          0E85
Signing time:             Mon 27 Jul 2026 05:00:29 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:29 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:29 +0000
Files and hashes:         1: KUOqjCxyAKEhTbAupzFiFaYvtyw.roa (hash: os3TCsMwZbVNQhnConL+JRAfWiuBh8Xi7SXGh1W8p5c=)
                          2: aZ8AkYbZDzLWgutOqU36IbLeq9I.roa (hash: cnNNZQp5lYYOI91A8raXO1cOrkw9J8G5tTC55Sx7Npk=)
                          3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: D5NQMp+OkWJR3OyYZwCM9Vtxhlw+U4loXGOx+TDJp84=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:26:f7:ff:2c:0a:ad:14:74:7a:c2:fc:84:48:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
        Validity
            Not Before: Jul 27 05:00:29 2026 GMT
            Not After : Jul 28 05:00:29 2026 GMT
        Subject: CN=f6a9d7f170e929666ac1c5342d31762259efb15c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:a7:b0:f0:47:a7:7a:d3:77:47:32:cd:e0:
                    a4:dc:a0:68:b2:7f:da:e9:ee:a9:ca:02:32:20:31:
                    43:6f:bd:95:cd:f7:7f:9e:2b:48:2f:2f:ab:d0:9e:
                    32:d5:fc:dc:b2:a3:d5:ac:b3:95:1e:62:8b:0d:ea:
                    45:20:83:1c:1d:cc:8e:82:0f:c6:29:6b:b6:0b:82:
                    c9:30:a3:ba:33:44:20:9a:dd:ea:d4:68:44:bf:0b:
                    50:5e:ae:75:a7:e3:5f:12:0a:1d:21:a8:49:85:29:
                    05:9f:84:88:ad:d8:27:61:60:31:78:6c:6e:22:7a:
                    68:ae:ab:dc:38:45:9d:cf:90:77:4c:a6:2a:e5:19:
                    cb:82:0e:a4:87:85:32:56:3a:92:a9:24:ab:76:1b:
                    f9:8a:ed:f7:43:de:8d:76:85:53:22:db:80:c8:16:
                    95:c1:27:76:23:b1:36:a9:e1:03:f9:e0:29:d6:27:
                    3b:04:fd:92:a6:16:7e:e8:67:81:16:fa:e7:ae:6b:
                    66:8f:4a:7d:78:2c:79:bc:f2:8c:fd:f8:a6:f2:c3:
                    22:9c:68:31:b5:38:fe:7e:df:10:bd:86:a2:49:c2:
                    b2:b6:69:28:d2:77:7c:ee:d6:85:e2:4e:64:2e:1f:
                    16:a0:12:88:5a:df:57:51:1c:45:47:e6:00:1e:ea:
                    c5:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:A9:D7:F1:70:E9:29:66:6A:C1:C5:34:2D:31:76:22:59:EF:B1:5C
            X509v3 Authority Key Identifier:
                keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:a8:a5:f1:a3:db:5a:03:eb:9e:6e:64:ef:ad:08:ee:d1:d3:
         f4:32:db:10:ae:12:2a:10:ad:e0:d5:f0:2c:05:6a:0e:84:2a:
         1d:15:7e:1b:0d:db:d1:f0:76:bf:34:2d:d0:fc:2f:4b:72:9d:
         1e:8c:6e:13:10:86:65:99:8a:c1:98:16:7f:51:cf:6b:d6:7a:
         ba:08:48:31:4f:75:ad:92:96:31:c8:13:1a:10:33:41:91:31:
         12:e4:9b:f0:d6:86:7c:55:c6:1e:a0:ca:dc:94:07:58:54:1c:
         44:69:59:1c:49:0e:a5:a8:4c:72:66:40:fa:c3:5e:ad:39:b6:
         f3:b9:e8:da:19:85:13:2c:15:87:f4:9a:1e:fd:90:25:63:1a:
         29:e1:a1:04:56:9a:6c:3d:d2:f5:7d:ef:de:a7:54:5f:16:ef:
         73:23:3a:76:d2:5a:e8:91:a2:ed:9b:fa:89:84:68:51:36:1f:
         81:25:ca:95:ee:4f:a2:ae:60:84:e2:62:a4:b9:c3:63:f2:dc:
         33:6a:1f:c9:14:a7:b5:d8:96:8d:69:8b:39:a1:e6:96:e2:bb:
         12:7a:e7:5f:e9:1f:60:77:bb:1a:f4:96:5b:d7:ff:51:bd:a6:
         62:6d:59:7f:34:49:63:14:1b:93:41:69:bc:cb:58:12:fb:49:
         bf:25:d7:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8ib3/ywKrRR0esL8hEgzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk
MGU5YjYwHhcNMjYwNzI3MDUwMDI5WhcNMjYwNzI4MDUwMDI5WjAzMTEwLwYDVQQD
EyhmNmE5ZDdmMTcwZTkyOTY2NmFjMWM1MzQyZDMxNzYyMjU5ZWZiMTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnansPBHp3rTd0cyzeCk3KBosn/a
6e6pygIyIDFDb72Vzfd/nitILy+r0J4y1fzcsqPVrLOVHmKLDepFIIMcHcyOgg/G
KWu2C4LJMKO6M0Qgmt3q1GhEvwtQXq51p+NfEgodIahJhSkFn4SIrdgnYWAxeGxu
InporqvcOEWdz5B3TKYq5RnLgg6kh4UyVjqSqSSrdhv5iu33Q96NdoVTItuAyBaV
wSd2I7E2qeED+eAp1ic7BP2SphZ+6GeBFvrnrmtmj0p9eCx5vPKM/fim8sMinGgx
tTj+ft8QvYaiScKytmko0nd87taF4k5kLh8WoBKIWt9XURxFR+YAHurFWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPap1/Fw6SlmasHFNC0xdiJZ77FcMB8GA1UdIwQY
MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt
MWNhM2ZiYmZiYTNmLzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm
LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALail8aPb
WgPrnm5k760I7tHT9DLbEK4SKhCt4NXwLAVqDoQqHRV+Gw3b0fB2vzQt0PwvS3Kd
HoxuExCGZZmKwZgWf1HPa9Z6ughIMU91rZKWMcgTGhAzQZExEuSb8NaGfFXGHqDK
3JQHWFQcRGlZHEkOpahMcmZA+sNerTm287no2hmFEywVh/SaHv2QJWMaKeGhBFaa
bD3S9X3v3qdUXxbvcyM6dtJa6JGi7Zv6iYRoUTYfgSXKle5Poq5ghOJipLnDY/Lc
M2ofyRSntdiWjWmLOaHmluK7EnrnX+kfYHe7GvSWW9f/Ub2mYm1ZfzRJYxQbk0Fp
vMtYEvtJvyXX3w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:32 2026 by rpki-client