Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
File:                     mXyCWBNDX7ARVDjuP2B2N869jo4.mft (raw, json)
Hash identifier:          v5HzqhjaOQ98nZQ+qt0GUxDp9+b7ipKpMbpQAPtTCH8=
Subject key identifier:   7E:A9:68:14:C6:D3:F4:EE:A4:D5:19:52:09:F4:40:58:89:01:38:16
Authority key identifier: 99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E
Certificate issuer:       /CN=997c825813435fb0115438ee3f607637cebd8e8e
Certificate serial:       019F8BA14AFFDC3024881C031292757F169B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
Manifest number:          02A3
Signing time:             Wed 22 Jul 2026 21:00:31 +0000
Manifest this update:     Wed 22 Jul 2026 21:00:31 +0000
Manifest next update:     Thu 23 Jul 2026 21:00:31 +0000
Files and hashes:         1: IqAZ7XQz7BlbCx4e-ofeDvMJfNU.roa (hash: Kp2XtcxtOkZThbBMLc4hB6JTrGLoaZOP4GbgJkvTA/A=)
                          2: mXyCWBNDX7ARVDjuP2B2N869jo4.crl (hash: x9frpb56aZQ4d5rW4sq6KxuuaK3d2x4uNnNClt48TQ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 23 Jul 2026 20:09:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8b:a1:4a:ff:dc:30:24:88:1c:03:12:92:75:7f:16:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997c825813435fb0115438ee3f607637cebd8e8e
        Validity
            Not Before: Jul 22 21:00:31 2026 GMT
            Not After : Jul 23 21:00:31 2026 GMT
        Subject: CN=7ea96814c6d3f4eea4d5195209f4405889013816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f3:26:3b:8d:fc:af:02:a6:fa:26:b6:ce:ca:
                    72:01:c5:8d:de:06:63:25:d6:01:98:5f:af:76:f2:
                    f7:cf:d0:ce:64:a2:7a:30:4e:90:3e:f2:a6:c4:1d:
                    66:f1:cb:24:33:f0:02:17:08:dc:a5:bb:76:55:e6:
                    d9:92:16:e0:c6:61:1f:aa:ae:a1:4b:84:ec:8c:af:
                    98:9d:92:20:b6:b4:71:10:82:ed:74:99:cc:37:c6:
                    d5:7e:87:a3:96:44:1e:3b:1a:7a:09:27:2c:c5:84:
                    51:b4:59:60:64:92:9d:04:0a:d0:43:2b:8d:9a:8f:
                    84:4b:c8:27:22:fc:32:60:6f:e4:e3:0b:4b:fc:29:
                    67:ba:c6:41:ee:48:dd:fc:a5:76:3f:f3:92:af:b5:
                    8e:22:6d:30:ce:66:d7:47:f0:d2:f3:e4:f2:2f:d3:
                    66:98:1a:cf:ac:80:b7:93:b9:13:86:ad:31:54:5f:
                    75:24:0c:73:ed:e3:fd:b6:f8:81:04:5c:ed:dd:b2:
                    8a:b2:0e:7a:33:e1:f1:40:8c:06:0d:e5:4c:3e:38:
                    62:b7:99:a7:de:dc:e5:df:4a:ee:1c:f9:8e:5d:e1:
                    28:21:fb:be:3c:ad:c9:f9:d7:14:d6:43:ae:4e:4a:
                    dd:39:3f:59:67:5f:dc:91:d7:ff:5b:f7:0e:e7:f8:
                    d7:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A9:68:14:C6:D3:F4:EE:A4:D5:19:52:09:F4:40:58:89:01:38:16
            X509v3 Authority Key Identifier:
                keyid:99:7C:82:58:13:43:5F:B0:11:54:38:EE:3F:60:76:37:CE:BD:8E:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mXyCWBNDX7ARVDjuP2B2N869jo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/2f5502-007a-4683-9872-28f71abba03a/1/mXyCWBNDX7ARVDjuP2B2N869jo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:33:e8:76:39:8b:29:4e:69:0a:11:3e:a6:34:3d:3b:f8:f6:
         f9:5c:ee:32:72:f8:a4:49:40:b1:a5:ba:72:5f:2a:1f:9b:c2:
         21:12:c3:f6:14:44:e2:25:e0:99:76:ec:c0:92:21:04:c4:96:
         a8:2d:52:e1:5e:17:48:0a:44:74:fe:94:23:a4:5f:c7:0d:0d:
         dc:11:f7:af:87:8b:10:28:0e:02:b8:27:23:b0:35:48:93:30:
         43:34:b2:c9:dc:f6:d0:ea:3b:63:36:f5:a8:ea:24:b1:4c:f0:
         2c:7d:27:8a:38:af:f0:f5:99:f6:cf:33:9f:68:25:69:3c:4c:
         e7:d6:24:59:c3:13:aa:7c:c9:a7:8c:12:34:c1:02:f0:cd:ae:
         80:90:7c:00:8e:b1:72:8e:56:d8:53:6a:d7:9f:c0:5a:03:17:
         80:26:9a:14:37:b1:70:37:d7:9b:e8:e8:1a:0d:70:7c:c6:5c:
         d9:cd:f8:e5:f4:64:26:72:f3:4c:c7:83:c6:2c:22:fc:f7:8e:
         41:87:3a:57:a9:4c:36:11:26:fc:7b:52:61:3f:94:8b:bb:66:
         75:4f:13:4c:52:72:20:6e:f5:11:f0:a1:78:06:cb:4d:73:45:
         72:95:1e:1b:ec:5c:8f:9d:f1:72:84:58:18:03:4a:7b:1a:b6:
         2f:a9:da:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+LoUr/3DAkiBwDEpJ1fxabMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5N2M4MjU4MTM0MzVmYjAxMTU0MzhlZTNmNjA3NjM3Y2Vi
ZDhlOGUwHhcNMjYwNzIyMjEwMDMxWhcNMjYwNzIzMjEwMDMxWjAzMTEwLwYDVQQD
Eyg3ZWE5NjgxNGM2ZDNmNGVlYTRkNTE5NTIwOWY0NDA1ODg5MDEzODE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/MmO438rwKm+ia2zspyAcWN3gZj
JdYBmF+vdvL3z9DOZKJ6ME6QPvKmxB1m8cskM/ACFwjcpbt2VebZkhbgxmEfqq6h
S4TsjK+YnZIgtrRxEILtdJnMN8bVfoejlkQeOxp6CScsxYRRtFlgZJKdBArQQyuN
mo+ES8gnIvwyYG/k4wtL/ClnusZB7kjd/KV2P/OSr7WOIm0wzmbXR/DS8+TyL9Nm
mBrPrIC3k7kThq0xVF91JAxz7eP9tviBBFzt3bKKsg56M+HxQIwGDeVMPjhit5mn
3tzl30ruHPmOXeEoIfu+PK3J+dcU1kOuTkrdOT9ZZ1/ckdf/W/cO5/jXiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6paBTG0/TupNUZUgn0QFiJATgWMB8GA1UdIwQY
MBaAFJl8glgTQ1+wEVQ47j9gdjfOvY6OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzIt
MjhmNzFhYmJhMDNhLzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8yZjU1MDItMDA3YS00NjgzLTk4NzItMjhmNzFhYmJhMDNh
LzEvbVh5Q1dCTkRYN0FSVkRqdVAyQjJOODY5am80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHDPodjmL
KU5pChE+pjQ9O/j2+VzuMnL4pElAsaW6cl8qH5vCIRLD9hRE4iXgmXbswJIhBMSW
qC1S4V4XSApEdP6UI6Rfxw0N3BH3r4eLECgOArgnI7A1SJMwQzSyydz20Oo7Yzb1
qOoksUzwLH0nijiv8PWZ9s8zn2glaTxM59YkWcMTqnzJp4wSNMEC8M2ugJB8AI6x
co5W2FNq15/AWgMXgCaaFDexcDfXm+joGg1wfMZc2c345fRkJnLzTMeDxiwi/PeO
QYc6V6lMNhEm/HtSYT+Ui7tmdU8TTFJyIG71EfCheAbLTXNFcpUeG+xcj53xcoRY
GANKexq2L6na+A==
-----END CERTIFICATE-----
Generated at Thu Jul 23 03:04:42 2026 by rpki-client