Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
File:                     7X77CijxDLp1HJLMsL-_NXuaYl0.mft (raw, json)
Hash identifier:          OpBci+DmzX/i2VJ/wYLiawpT//Qh7LGMD++xNHwxoG8=
Subject key identifier:   7A:54:41:E3:2E:43:75:23:6F:FE:23:11:32:FE:BF:F2:61:91:0F:D9
Authority key identifier: ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D
Certificate issuer:       /CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
Certificate serial:       019F18D6FDE449CE991591B78458374F062A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
Manifest number:          1049
Signing time:             Tue 30 Jun 2026 14:02:50 +0000
Manifest this update:     Tue 30 Jun 2026 14:02:50 +0000
Manifest next update:     Wed 01 Jul 2026 14:02:50 +0000
Files and hashes:         1: 7X77CijxDLp1HJLMsL-_NXuaYl0.crl (hash: k99ekl7ln64Bwzmf+qTzZQKfwHTgckfPanH5hnaCVRs=)
                          2: P24w_jLhUQYot-hYm7zVBeSYmLE.roa (hash: PHPMkNKEzzvlTlm3p3Tx5ImcestRuod2cI9K8iRdJC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:02:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:d6:fd:e4:49:ce:99:15:91:b7:84:58:37:4f:06:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed7efb0a28f10cba751c92ccb0bfbf357b9a625d
        Validity
            Not Before: Jun 30 14:02:50 2026 GMT
            Not After : Jul  1 14:02:50 2026 GMT
        Subject: CN=7a5441e32e4375236ffe231132febff261910fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:04:fa:00:34:1f:24:40:4d:bf:5e:53:56:9b:
                    c4:10:39:de:52:5c:b0:72:49:e2:57:f0:e2:e0:1f:
                    ce:67:05:26:9a:69:e1:30:1c:d4:a9:01:2b:3c:ae:
                    d5:7e:59:50:ac:f0:26:9a:13:6a:15:f8:97:4d:18:
                    f3:c1:41:cb:82:31:35:0a:d2:c6:b0:6e:f5:b1:df:
                    9a:3f:5f:21:a2:85:cd:33:29:fc:ae:72:bd:7a:1f:
                    3e:ae:3c:96:38:0b:e3:20:e3:05:7f:ac:c0:48:e9:
                    8a:b4:33:ef:1b:6f:cd:a5:4b:f8:db:d6:09:9f:12:
                    a4:fa:e0:20:64:21:67:05:4c:7f:05:16:43:e2:0f:
                    a9:42:03:41:07:68:92:0f:d4:1c:7f:a0:f4:66:51:
                    0f:5f:ee:8f:2f:fa:ce:3b:ad:61:7f:5d:e6:b7:67:
                    f5:e7:2f:e7:07:95:d5:24:72:a4:d7:c5:c2:b3:7c:
                    08:31:39:99:b1:3d:23:c9:96:19:bc:84:ff:bc:65:
                    21:c1:fd:cd:a7:2d:55:4b:17:34:14:72:53:38:77:
                    6a:a0:a1:dc:f6:89:5f:f3:83:e6:39:07:a3:30:ae:
                    b9:d0:c6:42:ba:76:0a:05:4e:13:30:a1:4b:0e:43:
                    f2:c2:2d:0b:4b:9f:cb:1e:c7:e6:9f:19:bf:f5:dd:
                    d2:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:54:41:E3:2E:43:75:23:6F:FE:23:11:32:FE:BF:F2:61:91:0F:D9
            X509v3 Authority Key Identifier:
                keyid:ED:7E:FB:0A:28:F1:0C:BA:75:1C:92:CC:B0:BF:BF:35:7B:9A:62:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7X77CijxDLp1HJLMsL-_NXuaYl0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/65ab29-0c20-417a-8958-97fe470809f9/1/7X77CijxDLp1HJLMsL-_NXuaYl0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:1b:eb:01:74:71:9e:25:c4:f1:af:17:64:56:bc:21:ce:53:
         3c:b6:f3:67:2e:ac:f6:c1:84:75:c0:3b:a5:7f:4e:01:80:64:
         f0:ec:99:b7:9d:40:36:4b:95:b5:f0:33:31:dd:56:db:d5:9b:
         4d:e3:d7:00:2f:a6:b2:ef:46:f9:cb:ca:81:3f:e5:1c:88:c4:
         03:0e:68:89:77:72:8f:1d:db:79:78:4d:fc:59:bc:bb:61:6b:
         26:08:83:b8:f9:c1:3f:b8:24:97:2f:88:cb:4f:67:cf:f6:85:
         b5:ee:c5:6e:c9:7d:c9:3c:10:fd:9e:a7:40:b0:83:08:7f:fd:
         36:1e:77:48:2a:42:10:ab:5f:6f:60:f3:69:39:5c:91:39:b2:
         31:13:39:12:9a:00:8e:34:a5:c0:78:32:e0:62:19:bd:41:76:
         f9:1b:cc:22:da:23:89:b1:98:ff:90:c2:bc:d8:24:f5:a4:e4:
         d5:f0:43:11:2b:17:60:a5:5b:40:09:fc:30:98:c1:ed:e3:83:
         b8:c2:11:43:30:e5:5c:4b:47:dd:5c:52:28:40:53:c2:ce:ab:
         1c:06:d7:be:e5:4f:65:bf:ac:e3:6b:18:27:a0:16:58:bc:ac:
         fa:5e:39:01:09:ca:33:94:68:d8:e0:33:5b:77:79:5a:76:05:
         0d:21:61:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Y1v3kSc6ZFZG3hFg3TwYqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkN2VmYjBhMjhmMTBjYmE3NTFjOTJjY2IwYmZiZjM1N2I5
YTYyNWQwHhcNMjYwNjMwMTQwMjUwWhcNMjYwNzAxMTQwMjUwWjAzMTEwLwYDVQQD
Eyg3YTU0NDFlMzJlNDM3NTIzNmZmZTIzMTEzMmZlYmZmMjYxOTEwZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgT6ADQfJEBNv15TVpvEEDneUlyw
ckniV/Di4B/OZwUmmmnhMBzUqQErPK7VfllQrPAmmhNqFfiXTRjzwUHLgjE1CtLG
sG71sd+aP18hooXNMyn8rnK9eh8+rjyWOAvjIOMFf6zASOmKtDPvG2/NpUv429YJ
nxKk+uAgZCFnBUx/BRZD4g+pQgNBB2iSD9Qcf6D0ZlEPX+6PL/rOO61hf13mt2f1
5y/nB5XVJHKk18XCs3wIMTmZsT0jyZYZvIT/vGUhwf3Npy1VSxc0FHJTOHdqoKHc
9olf84PmOQejMK650MZCunYKBU4TMKFLDkPywi0LS5/LHsfmnxm/9d3SrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpUQeMuQ3Ujb/4jETL+v/JhkQ/ZMB8GA1UdIwQY
MBaAFO1++woo8Qy6dRySzLC/vzV7mmJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgt
OTdmZTQ3MDgwOWY5LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS82NWFiMjktMGMyMC00MTdhLTg5NTgtOTdmZTQ3MDgwOWY5
LzEvN1g3N0NpanhETHAxSEpMTXNMLV9OWHVhWWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhvrAXRx
niXE8a8XZFa8Ic5TPLbzZy6s9sGEdcA7pX9OAYBk8OyZt51ANkuVtfAzMd1W29Wb
TePXAC+msu9G+cvKgT/lHIjEAw5oiXdyjx3beXhN/Fm8u2FrJgiDuPnBP7gkly+I
y09nz/aFte7Fbsl9yTwQ/Z6nQLCDCH/9Nh53SCpCEKtfb2DzaTlckTmyMRM5EpoA
jjSlwHgy4GIZvUF2+RvMItojibGY/5DCvNgk9aTk1fBDESsXYKVbQAn8MJjB7eOD
uMIRQzDlXEtH3VxSKEBTws6rHAbXvuVPZb+s42sYJ6AWWLys+l45AQnKM5Ro2OAz
W3d5WnYFDSFhhw==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:16 2026 by rpki-client