Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
File:                     7enwFkj2hDY4I6bY7srOV5unt_8.mft (raw, json)
Hash identifier:          bXHjxpA86o+z3um7B0JLCsuylCDDCCC0CvjD1Zoeqa8=
Subject key identifier:   BC:55:09:F2:43:71:F8:DA:2E:D4:AD:3D:9E:B1:68:20:82:7D:D6:DA
Authority key identifier: ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF
Certificate issuer:       /CN=ede9f01648f684363823a6d8eecace579ba7b7ff
Certificate serial:       019F4BE783A9F548304D63D88BEFFB9DEC04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
Manifest number:          1C
Signing time:             Fri 10 Jul 2026 12:01:31 +0000
Manifest this update:     Fri 10 Jul 2026 12:01:31 +0000
Manifest next update:     Sat 11 Jul 2026 12:01:31 +0000
Files and hashes:         1: 7enwFkj2hDY4I6bY7srOV5unt_8.crl (hash: bWcNNwV2CIU1/olzo1mv7MANPW6PbVWdctME8GQ+ASc=)
                          2: N0pj_XAkmpu_lY4emTSafGvqA94.asa (hash: Uuz9QFe+O+ehHKa3uQpLvcHnBTIPRP4id7lgGYmUWlw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 11 Jul 2026 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:4b:e7:83:a9:f5:48:30:4d:63:d8:8b:ef:fb:9d:ec:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ede9f01648f684363823a6d8eecace579ba7b7ff
        Validity
            Not Before: Jul 10 12:01:31 2026 GMT
            Not After : Jul 11 12:01:31 2026 GMT
        Subject: CN=bc5509f24371f8da2ed4ad3d9eb16820827dd6da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:db:98:84:63:dc:0e:ce:1b:20:67:00:c9:55:
                    cc:aa:1d:81:17:d3:98:d3:0a:3a:51:0e:38:c3:d0:
                    6a:ef:a8:a8:3a:01:ae:25:c9:0b:ca:69:c5:46:e9:
                    37:41:26:f6:08:b6:58:17:3b:37:2d:e2:18:7f:05:
                    78:1f:01:57:7c:98:8e:63:08:2b:a7:22:28:e6:04:
                    a3:c1:a4:ce:25:e4:9e:a2:18:2c:dd:78:35:34:5c:
                    54:cf:ab:1f:7c:fc:ad:f5:0a:f0:8c:5d:f1:fb:31:
                    9f:6b:c0:db:3a:a9:79:fe:e1:ff:6d:39:ff:09:af:
                    7a:dc:22:8f:99:ea:d9:86:b6:f3:c7:15:c0:ad:97:
                    eb:39:88:34:1b:02:a9:bd:55:92:1e:09:57:a2:7c:
                    89:dc:7c:73:e3:3f:4a:cd:e5:51:c6:c6:1e:bc:d7:
                    ea:3f:82:f2:2a:74:f8:17:cc:9f:a3:61:2b:29:2e:
                    5e:dd:e1:8a:9f:4d:b2:ed:f4:76:a9:9a:bf:6f:92:
                    b1:2d:88:db:61:27:8d:c8:4f:1c:4f:9b:e3:a8:49:
                    c8:f3:9e:0c:62:bf:b2:2e:1d:42:81:8e:87:17:62:
                    b2:f4:83:ae:d0:81:ed:b0:45:c2:61:1a:6d:22:9a:
                    ed:a0:76:f7:ec:e8:d9:a0:6b:34:fd:00:e7:b5:3e:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:55:09:F2:43:71:F8:DA:2E:D4:AD:3D:9E:B1:68:20:82:7D:D6:DA
            X509v3 Authority Key Identifier:
                keyid:ED:E9:F0:16:48:F6:84:36:38:23:A6:D8:EE:CA:CE:57:9B:A7:B7:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7enwFkj2hDY4I6bY7srOV5unt_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/8943ef-042b-4427-9059-1421d7c54fa5/1/7enwFkj2hDY4I6bY7srOV5unt_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:b5:b1:ac:29:09:35:e8:93:21:0a:4f:40:3a:40:fd:39:02:
         05:79:fc:92:80:7c:7d:75:48:0e:be:66:87:86:d6:07:36:d7:
         00:63:06:8a:ac:72:e7:1d:57:06:e4:88:09:5c:82:8e:e8:e3:
         df:c2:ad:e8:43:7c:42:d1:2f:23:e9:d8:27:aa:a2:6d:2f:ec:
         ce:df:5b:2b:24:28:5f:06:04:4b:93:ff:b7:be:11:9a:eb:bf:
         65:9d:e7:e5:40:6a:92:5f:fa:25:51:eb:ff:77:bf:f0:a2:b7:
         c6:c9:0e:2d:11:58:b3:03:b4:08:a3:fe:b8:9b:96:bd:0b:7f:
         ba:22:b0:98:92:a0:90:b0:93:7a:9b:54:c1:fc:ec:9a:8c:0a:
         ba:f1:a8:79:f9:60:07:27:0c:07:76:41:f1:9a:b9:88:ff:a4:
         aa:b7:5d:99:53:f4:43:4b:df:1d:a0:f8:c7:ff:f1:67:ef:21:
         34:f2:c0:01:a0:c6:3a:47:64:14:c0:98:23:a2:e7:33:0c:2d:
         6b:c9:55:7b:fd:aa:16:0b:0d:19:56:a5:36:71:84:ec:9c:9d:
         43:c4:01:17:b6:5d:09:50:8c:80:db:0e:d2:a1:97:00:8f:75:
         51:c2:e4:34:db:40:0e:77:c0:f2:67:9c:d8:91:69:bc:fd:2f:
         e1:1f:d1:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9L54Op9UgwTWPYi+/7newEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkZTlmMDE2NDhmNjg0MzYzODIzYTZkOGVlY2FjZTU3OWJh
N2I3ZmYwHhcNMjYwNzEwMTIwMTMxWhcNMjYwNzExMTIwMTMxWjAzMTEwLwYDVQQD
EyhiYzU1MDlmMjQzNzFmOGRhMmVkNGFkM2Q5ZWIxNjgyMDgyN2RkNmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2duYhGPcDs4bIGcAyVXMqh2BF9OY
0wo6UQ44w9Bq76ioOgGuJckLymnFRuk3QSb2CLZYFzs3LeIYfwV4HwFXfJiOYwgr
pyIo5gSjwaTOJeSeohgs3Xg1NFxUz6sffPyt9QrwjF3x+zGfa8DbOql5/uH/bTn/
Ca963CKPmerZhrbzxxXArZfrOYg0GwKpvVWSHglXonyJ3Hxz4z9KzeVRxsYevNfq
P4LyKnT4F8yfo2ErKS5e3eGKn02y7fR2qZq/b5KxLYjbYSeNyE8cT5vjqEnI854M
Yr+yLh1CgY6HF2Ky9IOu0IHtsEXCYRptIprtoHb37OjZoGs0/QDntT6JpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLxVCfJDcfjaLtStPZ6xaCCCfdbaMB8GA1UdIwQY
MBaAFO3p8BZI9oQ2OCOm2O7Kzlebp7f/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2Vud0ZrajJoRFk0STZiWTdzck9WNXVudF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTkt
MTQyMWQ3YzU0ZmE1LzEvN2Vud0ZrajJoRFk0STZiWTdzck9WNXVudF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi84OTQzZWYtMDQyYi00NDI3LTkwNTktMTQyMWQ3YzU0ZmE1
LzEvN2Vud0ZrajJoRFk0STZiWTdzck9WNXVudF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO7WxrCkJ
NeiTIQpPQDpA/TkCBXn8koB8fXVIDr5mh4bWBzbXAGMGiqxy5x1XBuSICVyCjujj
38Kt6EN8QtEvI+nYJ6qibS/szt9bKyQoXwYES5P/t74Rmuu/ZZ3n5UBqkl/6JVHr
/3e/8KK3xskOLRFYswO0CKP+uJuWvQt/uiKwmJKgkLCTeptUwfzsmowKuvGoeflg
BycMB3ZB8Zq5iP+kqrddmVP0Q0vfHaD4x//xZ+8hNPLAAaDGOkdkFMCYI6LnMwwt
a8lVe/2qFgsNGValNnGE7JydQ8QBF7ZdCVCMgNsO0qGXAI91UcLkNNtADnfA8mec
2JFpvP0v4R/RYA==
-----END CERTIFICATE-----
Generated at Fri Jul 10 18:48:23 2026 by rpki-client