Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
File:                     Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft (raw, json)
Hash identifier:          wMEKQMJv4Vk/vGlQEFJHDGKoznl2SC0vdOr7jabsuBI=
Subject key identifier:   16:EF:6D:72:67:D3:97:29:C6:C5:E6:4C:6C:9E:29:91:05:69:3D:9A
Authority key identifier: 46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12
Certificate issuer:       /CN=464d733de81fbd486d442358e0c15370520f9312
Certificate serial:       019FA25FF4721661D8A0E7BD04043D2005D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
Manifest number:          0471
Signing time:             Mon 27 Jul 2026 07:00:25 +0000
Manifest this update:     Mon 27 Jul 2026 07:00:25 +0000
Manifest next update:     Tue 28 Jul 2026 07:00:25 +0000
Files and hashes:         1: Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl (hash: nnRCHYDjkYOCWacFKkA/Rgn+L0iC8RXB04DLV1qKFg0=)
                          2: X2-StnXGjfI9wfKhZQp0793U3Io.roa (hash: l8ocH0IxQsjfL6ukdiPqqCpYZzs3R9sEM3Pe+2LGF84=)
                          3: _BGqcu40RXoTf10_8VGIOgqYEiw.roa (hash: EO0e4LrOi8gJaif6ib941Se3Fz7ZwcHJpJUxBOS6sjg=)
                          4: sYLKdeDOUeQxy_Kv2E_Cnj0I44k.roa (hash: 7UjSkmLEewaWHHfvbCaxDyZlIQWGWRAv2o5SfuX7IBI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 07:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:5f:f4:72:16:61:d8:a0:e7:bd:04:04:3d:20:05:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464d733de81fbd486d442358e0c15370520f9312
        Validity
            Not Before: Jul 27 07:00:25 2026 GMT
            Not After : Jul 28 07:00:25 2026 GMT
        Subject: CN=16ef6d7267d39729c6c5e64c6c9e299105693d9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:55:c4:5b:06:00:fd:e0:39:3e:3c:dd:09:ea:
                    49:0b:9c:8e:d5:f0:3d:4f:36:43:3a:14:82:f4:12:
                    0a:3c:58:76:72:10:36:53:6a:e5:45:72:63:18:65:
                    d8:7f:8a:f9:a5:c1:f3:07:1b:51:ca:21:23:08:61:
                    39:1a:4d:d0:c9:fb:c6:41:ca:7b:a6:e1:0b:24:fb:
                    3f:98:e5:70:28:9c:d4:13:55:76:fa:e6:9d:37:b9:
                    a6:d1:bc:46:bc:dd:7f:af:00:db:b9:ad:12:47:07:
                    5c:92:08:03:19:99:f5:19:66:f7:44:e3:03:85:76:
                    1e:b0:9b:66:52:64:d4:6b:f2:33:93:9e:a2:0d:2d:
                    5e:dd:c5:ae:f8:98:6a:48:2c:71:40:1c:80:8e:04:
                    91:d1:6d:a4:2c:cf:ad:62:3a:44:a2:30:92:56:68:
                    ff:61:cc:09:56:20:7f:cd:3b:af:f6:d1:cc:cb:d9:
                    16:85:ca:62:9e:8d:fa:17:b7:c1:f3:88:8b:73:61:
                    d9:36:06:7a:f5:28:34:2e:a9:7f:5a:c2:f1:a4:a6:
                    0d:40:f5:ea:3f:f0:61:3d:c7:72:a1:75:51:0d:0a:
                    4b:24:1e:1d:fc:90:eb:91:6c:38:63:73:55:83:64:
                    66:72:95:a3:48:3f:72:0b:71:c0:11:01:73:d9:f4:
                    83:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EF:6D:72:67:D3:97:29:C6:C5:E6:4C:6C:9E:29:91:05:69:3D:9A
            X509v3 Authority Key Identifier:
                keyid:46:4D:73:3D:E8:1F:BD:48:6D:44:23:58:E0:C1:53:70:52:0F:93:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rk1zPegfvUhtRCNY4MFTcFIPkxI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d7ffed-6c1d-4131-950f-a49d1a006dc9/1/Rk1zPegfvUhtRCNY4MFTcFIPkxI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:e3:3d:8f:d4:8a:73:70:26:da:f4:cd:5f:c0:82:2b:89:f6:
         3e:8c:94:3f:05:35:1c:cf:a6:f8:5c:88:1a:21:bd:66:17:18:
         e8:cd:55:6d:c9:40:0c:bc:7a:b8:d2:03:b8:ff:31:66:17:c7:
         55:a8:66:c2:c5:25:ae:6a:74:c1:e5:24:8e:99:e8:5f:88:d4:
         48:fb:53:04:9c:bf:3e:51:21:fd:2c:1d:3a:56:f9:71:b4:23:
         09:03:9f:1b:c2:7a:0a:10:aa:9c:0d:08:f8:ff:0b:aa:9f:df:
         29:43:ab:59:21:47:d6:bf:35:cf:0a:ae:52:48:72:86:b2:fe:
         75:c7:ae:8d:35:54:35:a3:95:f2:89:95:e5:09:8c:eb:fe:f0:
         35:ab:cf:9d:5b:65:12:14:ee:e7:22:09:4d:f8:19:ee:c4:6a:
         6f:0a:e9:62:42:80:a4:6b:b7:24:e1:55:00:7f:9e:2d:b9:98:
         3f:42:8a:63:64:1d:b4:32:6c:40:1b:e4:ba:22:04:1c:b7:a9:
         5e:ff:de:3c:2d:6c:c2:33:2f:e9:b1:9a:56:ab:37:9a:ec:20:
         3f:60:2c:d7:ca:42:b0:b7:5e:0b:35:71:02:ab:28:74:02:50:
         7a:22:64:b1:b1:a2:97:8d:b2:36:42:93:5b:b4:13:cd:d6:02:
         ed:1d:88:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iX/RyFmHYoOe9BAQ9IAXWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NGQ3MzNkZTgxZmJkNDg2ZDQ0MjM1OGUwYzE1MzcwNTIw
ZjkzMTIwHhcNMjYwNzI3MDcwMDI1WhcNMjYwNzI4MDcwMDI1WjAzMTEwLwYDVQQD
EygxNmVmNmQ3MjY3ZDM5NzI5YzZjNWU2NGM2YzllMjk5MTA1NjkzZDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFXEWwYA/eA5PjzdCepJC5yO1fA9
TzZDOhSC9BIKPFh2chA2U2rlRXJjGGXYf4r5pcHzBxtRyiEjCGE5Gk3QyfvGQcp7
puELJPs/mOVwKJzUE1V2+uadN7mm0bxGvN1/rwDbua0SRwdckggDGZn1GWb3ROMD
hXYesJtmUmTUa/Izk56iDS1e3cWu+JhqSCxxQByAjgSR0W2kLM+tYjpEojCSVmj/
YcwJViB/zTuv9tHMy9kWhcpino36F7fB84iLc2HZNgZ69Sg0Lql/WsLxpKYNQPXq
P/BhPcdyoXVRDQpLJB4d/JDrkWw4Y3NVg2RmcpWjSD9yC3HAEQFz2fSDEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbvbXJn05cpxsXmTGyeKZEFaT2aMB8GA1UdIwQY
MBaAFEZNcz3oH71IbUQjWODBU3BSD5MSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYt
YTQ5ZDFhMDA2ZGM5LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kN2ZmZWQtNmMxZC00MTMxLTk1MGYtYTQ5ZDFhMDA2ZGM5
LzEvUmsxelBlZ2Z2VWh0UkNOWTRNRlRjRklQa3hJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEOM9j9SK
c3Am2vTNX8CCK4n2PoyUPwU1HM+m+FyIGiG9ZhcY6M1VbclADLx6uNIDuP8xZhfH
VahmwsUlrmp0weUkjpnoX4jUSPtTBJy/PlEh/SwdOlb5cbQjCQOfG8J6ChCqnA0I
+P8Lqp/fKUOrWSFH1r81zwquUkhyhrL+dceujTVUNaOV8omV5QmM6/7wNavPnVtl
EhTu5yIJTfgZ7sRqbwrpYkKApGu3JOFVAH+eLbmYP0KKY2QdtDJsQBvkuiIEHLep
Xv/ePC1swjMv6bGaVqs3muwgP2As18pCsLdeCzVxAqsodAJQeiJksbGil42yNkKT
W7QTzdYC7R2IVg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:40:10 2026 by rpki-client