Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
File:                     0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft (raw, json)
Hash identifier:          Z6Ycxkd/pLABl6uhAt89WEo7EqIZPT0FmQ8s2nHYvKw=
Subject key identifier:   C4:55:A0:BD:3E:3F:7D:C8:1A:00:8E:DD:A3:43:E3:73:3B:C2:CB:71
Authority key identifier: D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B
Certificate issuer:       /CN=d2c17db099bd419eba552a37704deeed3b2e303b
Certificate serial:       019FDA61D1632FA307234F4E61E3A735F250
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
Manifest number:          07D9
Signing time:             Fri 07 Aug 2026 04:01:11 +0000
Manifest this update:     Fri 07 Aug 2026 04:01:11 +0000
Manifest next update:     Sat 08 Aug 2026 04:01:11 +0000
Files and hashes:         1: 0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl (hash: WRLXRWTFKXDawMXRywNIueKd/EQFowY+D54B5eNQbnM=)
                          2: 1-MrxZrcPXM7BvaVdVabElQiwAhg.roa (hash: 5Yrq+V+8IPQZLxO9mgzwmCCXtczV+ZsgweXRxHjq37Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 04:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:da:61:d1:63:2f:a3:07:23:4f:4e:61:e3:a7:35:f2:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2c17db099bd419eba552a37704deeed3b2e303b
        Validity
            Not Before: Aug  7 04:01:11 2026 GMT
            Not After : Aug  8 04:01:11 2026 GMT
        Subject: CN=c455a0bd3e3f7dc81a008edda343e3733bc2cb71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4b:fd:09:91:af:01:c0:52:09:84:89:dc:b4:
                    c0:4e:43:03:fe:21:18:34:a8:0f:4f:82:05:5a:38:
                    52:f6:b6:5a:2d:a8:86:4e:69:60:d7:db:9f:1d:5d:
                    dd:b2:40:f0:67:5c:ef:15:20:a5:15:cd:9c:fd:91:
                    88:1e:fa:10:2f:92:4f:cc:2a:54:eb:a3:84:d6:0b:
                    b3:dd:75:42:ca:03:60:31:54:78:ae:57:60:3e:82:
                    17:e4:0f:61:e1:82:41:2a:3e:92:13:65:4b:13:32:
                    53:cd:a5:9e:df:5f:37:86:e1:20:33:5d:d1:31:2e:
                    2b:58:22:a7:90:30:af:21:3d:9b:b9:7b:e4:2e:40:
                    62:0f:6b:25:79:f7:f7:95:af:f4:da:95:95:04:13:
                    94:2e:f2:99:fa:58:59:9a:98:e4:36:27:d2:d2:d8:
                    a2:91:32:9d:9b:07:fd:a0:24:7f:63:b1:f9:c2:ef:
                    f6:4c:9b:b5:30:9f:dd:c4:70:03:a4:5e:fc:62:7b:
                    98:cb:ed:21:fe:cd:69:df:5f:5e:57:e0:ef:3a:1e:
                    da:ef:46:fa:30:0f:e2:c9:82:8b:b2:c8:a5:f7:35:
                    e3:d2:2a:b9:70:ed:4d:c0:aa:a1:73:6a:9c:a4:c2:
                    e9:4b:09:c1:4e:a8:52:22:bd:d2:34:61:98:f8:a6:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:55:A0:BD:3E:3F:7D:C8:1A:00:8E:DD:A3:43:E3:73:3B:C2:CB:71
            X509v3 Authority Key Identifier:
                keyid:D2:C1:7D:B0:99:BD:41:9E:BA:55:2A:37:70:4D:EE:ED:3B:2E:30:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sF9sJm9QZ66VSo3cE3u7TsuMDs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7cba62-77d0-4118-a4c5-a1076d127ec6/1/0sF9sJm9QZ66VSo3cE3u7TsuMDs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:df:0a:f3:8a:0e:21:45:48:34:33:d3:1b:f2:a0:e1:83:98:
         c6:d3:a2:37:c6:4a:a7:a3:cb:6e:14:1f:a6:2b:14:74:58:a6:
         fd:e7:37:cc:aa:b4:57:ad:86:83:c4:ee:53:fc:38:61:38:35:
         01:ef:68:79:3f:cd:11:55:a7:69:0d:43:59:be:dc:63:f5:6e:
         ae:a9:fd:5e:35:14:b3:6e:31:fe:41:53:8f:2d:d1:d9:d9:91:
         90:92:ae:a8:cb:1f:17:9c:29:fd:54:9a:43:7a:2a:9e:43:07:
         ef:4b:1a:49:b7:c6:8b:3a:59:ec:96:0e:01:80:64:92:52:1c:
         8f:ee:ab:8c:d2:95:d2:19:49:5e:0a:48:2c:55:c8:7c:ce:00:
         31:93:8a:ff:5e:f1:1a:40:56:48:12:48:ad:c1:85:34:63:29:
         9b:7f:d2:ff:63:3a:7d:e4:04:ff:b8:4f:a9:36:92:24:79:81:
         4c:8c:fb:92:c0:37:b8:34:b6:c4:d0:67:28:36:60:3a:7a:fb:
         d4:a0:d8:18:f5:70:5c:6a:a3:18:54:02:9e:5b:2b:e8:40:8d:
         27:5b:5f:3f:0f:0f:14:fa:db:0f:f3:e3:ce:d0:f1:d3:8a:9e:
         35:19:1c:d3:7e:57:16:ef:2b:70:f6:1d:e3:35:e2:bf:74:f8:
         1f:e4:01:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/aYdFjL6MHI09OYeOnNfJQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyYzE3ZGIwOTliZDQxOWViYTU1MmEzNzcwNGRlZWVkM2Iy
ZTMwM2IwHhcNMjYwODA3MDQwMTExWhcNMjYwODA4MDQwMTExWjAzMTEwLwYDVQQD
EyhjNDU1YTBiZDNlM2Y3ZGM4MWEwMDhlZGRhMzQzZTM3MzNiYzJjYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEv9CZGvAcBSCYSJ3LTATkMD/iEY
NKgPT4IFWjhS9rZaLaiGTmlg19ufHV3dskDwZ1zvFSClFc2c/ZGIHvoQL5JPzCpU
66OE1guz3XVCygNgMVR4rldgPoIX5A9h4YJBKj6SE2VLEzJTzaWe3183huEgM13R
MS4rWCKnkDCvIT2buXvkLkBiD2sleff3la/02pWVBBOULvKZ+lhZmpjkNifS0tii
kTKdmwf9oCR/Y7H5wu/2TJu1MJ/dxHADpF78YnuYy+0h/s1p319eV+DvOh7a70b6
MA/iyYKLssil9zXj0iq5cO1NwKqhc2qcpMLpSwnBTqhSIr3SNGGY+KYccwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMRVoL0+P33IGgCO3aND43M7wstxMB8GA1UdIwQY
MBaAFNLBfbCZvUGeulUqN3BN7u07LjA7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUt
YTEwNzZkMTI3ZWM2LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi83Y2JhNjItNzdkMC00MTE4LWE0YzUtYTEwNzZkMTI3ZWM2
LzEvMHNGOXNKbTlRWjY2VlNvM2NFM3U3VHN1TURzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlN8K84oO
IUVINDPTG/Kg4YOYxtOiN8ZKp6PLbhQfpisUdFim/ec3zKq0V62Gg8TuU/w4YTg1
Ae9oeT/NEVWnaQ1DWb7cY/Vurqn9XjUUs24x/kFTjy3R2dmRkJKuqMsfF5wp/VSa
Q3oqnkMH70saSbfGizpZ7JYOAYBkklIcj+6rjNKV0hlJXgpILFXIfM4AMZOK/17x
GkBWSBJIrcGFNGMpm3/S/2M6feQE/7hPqTaSJHmBTIz7ksA3uDS2xNBnKDZgOnr7
1KDYGPVwXGqjGFQCnlsr6ECNJ1tfPw8PFPrbD/PjztDx04qeNRkc035XFu8rcPYd
4zXiv3T4H+QBIQ==
-----END CERTIFICATE-----
Generated at Fri Aug 7 12:30:33 2026 by rpki-client