Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
File:                     EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft (raw, json)
Hash identifier:          Ihxf1jzShoZXNQT+4Vl9bFOablW8Az/XKWBUdi0ZiK4=
Subject key identifier:   80:16:11:7D:78:EA:8C:28:E7:50:E5:44:9A:68:06:56:9C:38:D0:AD
Authority key identifier: 12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04
Certificate issuer:       /CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
Certificate serial:       019F8643D470195B78D908F5051D030D7C42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
Manifest number:          0FE7
Signing time:             Tue 21 Jul 2026 20:00:19 +0000
Manifest this update:     Tue 21 Jul 2026 20:00:19 +0000
Manifest next update:     Wed 22 Jul 2026 20:00:19 +0000
Files and hashes:         1: EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl (hash: z9sXFdtKJ2xE90ba/6DGDHWjplcpQbKk8+TLkvUd2ew=)
                          2: td4dGRbuQXuKOfRIriO4IH6YFGY.roa (hash: h708rv3/l6vNPHP6e/EPvLnr8GERga9y5D+OKNGmAAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:43:d4:70:19:5b:78:d9:08:f5:05:1d:03:0d:7c:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12731f6d7e3e20ad9bf31b8acd606f0893b9fe04
        Validity
            Not Before: Jul 21 20:00:19 2026 GMT
            Not After : Jul 22 20:00:19 2026 GMT
        Subject: CN=8016117d78ea8c28e750e5449a6806569c38d0ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:40:ad:ee:da:6c:2b:77:f2:1f:84:ba:18:9e:
                    ed:d1:1f:d8:c1:b3:6d:79:06:08:10:88:ce:78:2a:
                    1d:63:4e:e9:97:6e:7e:09:55:b5:00:8c:9b:8b:34:
                    67:6f:6d:d6:92:71:a6:35:28:bf:4a:7d:b8:5d:3e:
                    d8:92:45:c7:f1:ae:44:49:36:68:4d:f8:ba:c2:f1:
                    30:fa:9e:31:88:79:62:74:1b:2e:eb:fe:ab:08:3b:
                    6c:fe:a5:5e:5e:a9:9e:fd:c6:f9:b9:97:bc:74:8d:
                    b1:3f:2b:fc:2f:28:3d:18:9f:1a:97:0b:33:b9:76:
                    4b:3d:aa:bc:94:76:a0:79:ad:f2:2b:36:75:6f:85:
                    64:cc:92:18:7d:b3:08:a5:d1:a8:4c:c3:32:46:97:
                    c0:18:e3:39:8d:81:f2:6d:34:e8:92:3b:18:20:31:
                    53:fe:b9:53:58:2a:23:09:97:2e:d1:19:c6:06:12:
                    22:69:5a:92:5f:74:a5:df:c8:27:19:08:27:49:f0:
                    33:2f:d2:19:66:b7:db:60:a1:1f:91:f9:6d:ad:cc:
                    ac:c5:03:26:1d:75:2a:f2:34:70:b4:4e:8d:1f:46:
                    29:18:57:83:c0:b7:ac:cf:c6:4f:ba:3b:4f:cb:42:
                    20:ed:e2:76:f5:07:00:0d:c6:d3:89:25:01:f2:5b:
                    b1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:16:11:7D:78:EA:8C:28:E7:50:E5:44:9A:68:06:56:9C:38:D0:AD
            X509v3 Authority Key Identifier:
                keyid:12:73:1F:6D:7E:3E:20:AD:9B:F3:1B:8A:CD:60:6F:08:93:B9:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9364bf-01ab-447b-ab1a-1d772e2e6438/1/EnMfbX4-IK2b8xuKzWBvCJO5_gQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:a0:1a:ec:03:01:98:46:06:99:d4:f1:cc:ed:e5:e9:38:08:
         e1:e7:e9:a7:ca:b8:6d:86:66:1a:de:4d:34:b9:fd:2b:5b:c1:
         d9:c2:f4:22:ae:9a:9d:79:6c:8a:cd:0a:b1:50:4e:ed:6c:84:
         85:08:e2:2c:c0:f5:19:5c:bb:81:3d:19:99:74:49:93:18:3d:
         0c:f0:49:fc:92:c3:80:b8:6b:a2:01:62:dc:32:06:d7:47:3d:
         e5:76:5b:96:f3:bc:03:3a:c6:e3:0f:21:71:05:ea:4d:59:eb:
         32:15:75:5e:12:bd:e5:02:f4:82:8c:0b:f5:9b:9e:53:19:17:
         99:2c:91:ac:6d:d9:ca:b8:cb:84:00:55:bd:70:6d:56:9e:d8:
         dd:09:43:de:3d:88:48:90:f3:ba:b1:f7:1f:bb:99:ba:e6:9a:
         46:ef:e2:d2:67:d1:9a:fe:28:e1:43:d0:8d:9c:c6:70:20:6a:
         33:e8:c7:70:28:12:4c:c6:c1:9c:98:43:4e:8b:47:ae:f5:ca:
         e9:7a:01:b7:3f:d1:0a:be:d8:38:25:a4:41:61:e1:d7:47:d6:
         26:29:b7:8e:83:e0:cf:37:ac:78:de:ea:f9:5f:d4:3d:d5:a1:
         19:94:7f:6f:22:a3:51:dd:bd:81:cf:8a:2a:42:e9:45:9a:ed:
         71:52:0f:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GQ9RwGVt42Qj1BR0DDXxCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyNzMxZjZkN2UzZTIwYWQ5YmYzMWI4YWNkNjA2ZjA4OTNi
OWZlMDQwHhcNMjYwNzIxMjAwMDE5WhcNMjYwNzIyMjAwMDE5WjAzMTEwLwYDVQQD
Eyg4MDE2MTE3ZDc4ZWE4YzI4ZTc1MGU1NDQ5YTY4MDY1NjljMzhkMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0Ct7tpsK3fyH4S6GJ7t0R/YwbNt
eQYIEIjOeCodY07pl25+CVW1AIybizRnb23WknGmNSi/Sn24XT7YkkXH8a5ESTZo
Tfi6wvEw+p4xiHlidBsu6/6rCDts/qVeXqme/cb5uZe8dI2xPyv8Lyg9GJ8alwsz
uXZLPaq8lHagea3yKzZ1b4VkzJIYfbMIpdGoTMMyRpfAGOM5jYHybTTokjsYIDFT
/rlTWCojCZcu0RnGBhIiaVqSX3Sl38gnGQgnSfAzL9IZZrfbYKEfkfltrcysxQMm
HXUq8jRwtE6NH0YpGFeDwLesz8ZPujtPy0Ig7eJ29QcADcbTiSUB8luxBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAWEX146owo51DlRJpoBlacONCtMB8GA1UdIwQY
MBaAFBJzH21+PiCtm/Mbis1gbwiTuf4EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEt
MWQ3NzJlMmU2NDM4LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC85MzY0YmYtMDFhYi00NDdiLWFiMWEtMWQ3NzJlMmU2NDM4
LzEvRW5NZmJYNC1JSzJiOHh1S3pXQnZDSk81X2dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEqAa7AMB
mEYGmdTxzO3l6TgI4efpp8q4bYZmGt5NNLn9K1vB2cL0Iq6anXlsis0KsVBO7WyE
hQjiLMD1GVy7gT0ZmXRJkxg9DPBJ/JLDgLhrogFi3DIG10c95XZblvO8AzrG4w8h
cQXqTVnrMhV1XhK95QL0gowL9ZueUxkXmSyRrG3ZyrjLhABVvXBtVp7Y3QlD3j2I
SJDzurH3H7uZuuaaRu/i0mfRmv4o4UPQjZzGcCBqM+jHcCgSTMbBnJhDTotHrvXK
6XoBtz/RCr7YOCWkQWHh10fWJim3joPgzzeseN7q+V/UPdWhGZR/byKjUd29gc+K
KkLpRZrtcVIPGA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:38:29 2026 by rpki-client