Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
File:                     e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft (raw, json)
Hash identifier:          z2UaLsms2V8HDbGfPR6KqVH4FHniOZ5ABxqAILdQ18U=
Subject key identifier:   07:F2:F7:E0:D0:65:85:51:F9:E6:E1:06:ED:8C:4A:1F:B4:86:2E:F5
Authority key identifier: 7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95
Certificate issuer:       /CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
Certificate serial:       019F16AFC5DDCB9F49BAB902BA3535F2D786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
Manifest number:          0AC4
Signing time:             Tue 30 Jun 2026 04:00:45 +0000
Manifest this update:     Tue 30 Jun 2026 04:00:45 +0000
Manifest next update:     Wed 01 Jul 2026 04:00:45 +0000
Files and hashes:         1: 5aHaMqVeMBDhBaX6C5G4xJdeGbA.roa (hash: QOZBNzX+3r101BCPDJTA6RgBDInLW/e+aTQmcxCkTxw=)
                          2: e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl (hash: a8Szpfz0TCz7Birk/VX9uY5soKgNN/HyuUmg57P6z7A=)
                          3: sJ7mh4PMRzR7K0f1_u8SJ1aRsAg.roa (hash: x/O2N0o3jzmoZxKLCYM4NtZQWYu9bJeDNbCslBdV4OM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 21:41:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:16:af:c5:dd:cb:9f:49:ba:b9:02:ba:35:35:f2:d7:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b5516af4b74a1142bef13c3fd707059e61a6b95
        Validity
            Not Before: Jun 30 04:00:45 2026 GMT
            Not After : Jul  1 04:00:45 2026 GMT
        Subject: CN=07f2f7e0d0658551f9e6e106ed8c4a1fb4862ef5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:5e:3d:aa:f5:5c:36:76:f4:aa:63:e8:07:12:
                    41:0d:64:5f:37:94:24:90:60:e0:73:61:d6:78:07:
                    fd:80:44:05:d3:fc:36:04:78:c8:4c:36:41:38:51:
                    4c:6c:95:0b:1b:19:b2:17:83:93:74:ce:d3:15:ef:
                    16:03:da:56:bd:dc:88:32:2f:fd:d9:87:b5:3f:e5:
                    1a:c1:ec:96:ca:c2:3e:9f:44:16:60:7b:06:98:0b:
                    06:2a:09:61:a5:cc:3b:c5:12:e4:2f:73:b9:65:ac:
                    e0:25:a0:ab:d4:8c:89:c6:e5:ab:04:d7:5a:7f:15:
                    5c:ce:d4:5b:73:70:11:40:18:52:aa:db:69:b9:3e:
                    03:81:01:74:10:d6:fb:a1:22:aa:7e:cc:06:32:8f:
                    26:9e:b7:eb:7e:5e:ed:0a:54:27:c2:63:7e:e0:8c:
                    53:c0:39:e1:36:ed:90:14:32:cb:ea:41:65:c4:ea:
                    b3:bd:a3:d2:e2:be:11:c3:9b:b3:74:b1:3c:0d:8b:
                    06:16:0c:49:8c:96:7c:dc:50:26:79:08:f7:99:0a:
                    8f:09:0b:02:76:9a:d2:1c:45:a6:cd:55:e8:91:aa:
                    dc:72:0e:a7:ec:35:29:1e:c0:83:f2:a3:f6:97:6b:
                    ed:8e:c9:b0:bd:32:fc:d7:27:3e:fd:f2:81:7a:dd:
                    ad:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F2:F7:E0:D0:65:85:51:F9:E6:E1:06:ED:8C:4A:1F:B4:86:2E:F5
            X509v3 Authority Key Identifier:
                keyid:7B:55:16:AF:4B:74:A1:14:2B:EF:13:C3:FD:70:70:59:E6:1A:6B:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1UWr0t0oRQr7xPD_XBwWeYaa5U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dc8e13-6dd3-44f9-90f6-7cd1f652d925/1/e1UWr0t0oRQr7xPD_XBwWeYaa5U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:56:b2:d4:9c:1b:24:db:c1:97:c3:90:1e:f0:2e:46:df:05:
         be:2c:12:e4:02:04:f3:63:f7:76:7e:87:0d:cc:1a:8d:75:ea:
         cb:98:8f:66:00:de:37:9f:0f:06:69:2b:c8:8a:5b:45:d4:34:
         94:95:9f:60:0e:01:b5:0c:71:96:c7:b4:20:76:41:be:d6:8d:
         33:63:ac:9f:06:0e:95:a2:2f:c0:fe:43:42:be:bb:14:1f:85:
         4b:cc:d5:25:f3:08:ed:65:a5:88:1d:ea:cb:c7:6d:cf:ea:ee:
         27:b1:08:12:db:cf:b6:bd:e7:98:2a:66:87:57:7c:c4:17:c9:
         5c:1a:d3:08:da:6e:4a:46:31:f9:bc:2f:2d:dd:5e:b5:ee:fe:
         f5:77:73:a2:6f:57:ee:72:ec:4d:e6:9a:31:a2:6b:aa:c5:66:
         cf:ef:90:9d:6d:dd:d9:6e:aa:e8:d8:ae:d7:af:da:d9:a1:0f:
         24:fe:65:7c:92:6d:66:ec:6d:16:b7:b8:59:91:35:cb:e9:f2:
         75:15:ed:b1:a2:fd:6d:59:66:1c:7e:6c:d3:15:8c:78:47:ae:
         b1:33:c1:d1:1c:75:73:87:79:51:62:dd:82:25:e7:02:4f:2c:
         7b:73:a5:c3:c7:b0:ce:b8:5b:07:58:61:7b:8a:96:9c:ca:be:
         e5:f6:64:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Wr8Xdy59JurkCujU18teGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiNTUxNmFmNGI3NGExMTQyYmVmMTNjM2ZkNzA3MDU5ZTYx
YTZiOTUwHhcNMjYwNjMwMDQwMDQ1WhcNMjYwNzAxMDQwMDQ1WjAzMTEwLwYDVQQD
EygwN2YyZjdlMGQwNjU4NTUxZjllNmUxMDZlZDhjNGExZmI0ODYyZWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil49qvVcNnb0qmPoBxJBDWRfN5Qk
kGDgc2HWeAf9gEQF0/w2BHjITDZBOFFMbJULGxmyF4OTdM7TFe8WA9pWvdyIMi/9
2Ye1P+UaweyWysI+n0QWYHsGmAsGKglhpcw7xRLkL3O5ZazgJaCr1IyJxuWrBNda
fxVcztRbc3ARQBhSqttpuT4DgQF0ENb7oSKqfswGMo8mnrfrfl7tClQnwmN+4IxT
wDnhNu2QFDLL6kFlxOqzvaPS4r4Rw5uzdLE8DYsGFgxJjJZ83FAmeQj3mQqPCQsC
dprSHEWmzVXokarccg6n7DUpHsCD8qP2l2vtjsmwvTL81yc+/fKBet2tKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfy9+DQZYVR+ebhBu2MSh+0hi71MB8GA1UdIwQY
MBaAFHtVFq9LdKEUK+8Tw/1wcFnmGmuVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYt
N2NkMWY2NTJkOTI1LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kYzhlMTMtNmRkMy00NGY5LTkwZjYtN2NkMWY2NTJkOTI1
LzEvZTFVV3IwdDBvUlFyN3hQRF9YQndXZVlhYTVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApVay1Jwb
JNvBl8OQHvAuRt8FviwS5AIE82P3dn6HDcwajXXqy5iPZgDeN58PBmkryIpbRdQ0
lJWfYA4BtQxxlse0IHZBvtaNM2OsnwYOlaIvwP5DQr67FB+FS8zVJfMI7WWliB3q
y8dtz+ruJ7EIEtvPtr3nmCpmh1d8xBfJXBrTCNpuSkYx+bwvLd1ete7+9Xdzom9X
7nLsTeaaMaJrqsVmz++QnW3d2W6q6Niu16/a2aEPJP5lfJJtZuxtFre4WZE1y+ny
dRXtsaL9bVlmHH5s0xWMeEeusTPB0Rx1c4d5UWLdgiXnAk8se3Olw8ewzrhbB1hh
e4qWnMq+5fZkiQ==
-----END CERTIFICATE-----
Generated at Tue Jun 30 05:50:13 2026 by rpki-client