Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
File:                     F1pykOwpjBtk2YYwbxsk09M2aYY.mft (raw, json)
Hash identifier:          cbk6jPoZvCod/IC7o8xlsEMs4NVti6yq0OlkCY+U8B8=
Subject key identifier:   E7:15:0C:C8:30:53:56:79:0D:A8:80:EC:14:8F:AC:E1:CB:20:FA:4B
Authority key identifier: 17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86
Certificate issuer:       /CN=175a7290ec298c1b64d986306f1b24d3d3366986
Certificate serial:       019FA14E1407DC4B64C26343BEC3E88915A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
Manifest number:          0276
Signing time:             Mon 27 Jul 2026 02:01:16 +0000
Manifest this update:     Mon 27 Jul 2026 02:01:16 +0000
Manifest next update:     Tue 28 Jul 2026 02:01:16 +0000
Files and hashes:         1: F1pykOwpjBtk2YYwbxsk09M2aYY.crl (hash: C+DJWKy4XdjNyZ5V02IpZGNA5gUFWeJDUB8Dm1KWYqU=)
                          2: gCCPOIqrilObRY-20jJBuOKvlg4.roa (hash: SYvt+ifw0BqFAbOybuBVVwfG7PXUsxmnVp0Phqp9hmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4e:14:07:dc:4b:64:c2:63:43:be:c3:e8:89:15:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=175a7290ec298c1b64d986306f1b24d3d3366986
        Validity
            Not Before: Jul 27 02:01:16 2026 GMT
            Not After : Jul 28 02:01:16 2026 GMT
        Subject: CN=e7150cc8305356790da880ec148face1cb20fa4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f9:84:8f:ff:58:40:18:92:e4:04:9a:03:94:
                    84:b8:83:31:b1:61:3f:8b:14:81:44:15:36:28:1d:
                    33:e6:a6:44:ea:c1:25:6f:e1:e4:1b:0f:f0:a5:75:
                    10:f7:a9:cc:53:25:5d:01:9a:a4:9b:87:e6:c2:7e:
                    15:0a:73:bd:f1:94:1d:5e:ff:67:e1:c0:38:58:c6:
                    a2:7c:32:ce:e3:d5:b6:24:72:d0:8f:3a:f9:ac:3e:
                    be:dd:a0:71:35:0d:33:7b:a0:32:19:b6:f6:4b:9e:
                    d0:34:c1:ce:ae:d3:9b:da:32:63:93:a8:f8:14:2e:
                    9c:b1:06:98:fb:89:4b:8f:e6:f4:19:a8:7c:b4:92:
                    ce:3c:94:7c:9c:cf:ff:d6:2d:dc:c7:a1:47:14:d3:
                    6e:a4:d5:a2:5b:9b:ec:9f:f2:ea:3d:3f:76:91:fc:
                    f5:c8:02:da:d1:4c:1f:de:32:b3:af:2e:55:ab:03:
                    21:cc:7a:a1:63:7b:c1:27:a0:98:6e:d9:dd:cf:d3:
                    d3:07:34:e3:ce:85:de:b4:3e:7b:55:78:27:06:8f:
                    50:d7:3f:6f:b8:27:9e:fd:d3:b5:cd:d8:c6:4b:ea:
                    12:d2:c4:32:32:f3:33:7b:76:dd:14:d0:e6:78:78:
                    57:f4:8a:a5:3b:d2:08:d2:f6:15:03:5b:54:fd:1d:
                    42:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:15:0C:C8:30:53:56:79:0D:A8:80:EC:14:8F:AC:E1:CB:20:FA:4B
            X509v3 Authority Key Identifier:
                keyid:17:5A:72:90:EC:29:8C:1B:64:D9:86:30:6F:1B:24:D3:D3:36:69:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F1pykOwpjBtk2YYwbxsk09M2aYY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/bd7f30-07ca-49ac-80c9-7eaff6b0f8cd/1/F1pykOwpjBtk2YYwbxsk09M2aYY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d9:55:21:62:8d:5f:2a:15:88:56:a6:c9:18:92:3b:bb:4a:
         7d:94:01:0b:8d:0f:e8:21:a7:04:30:c0:00:86:a7:64:b1:71:
         0a:02:81:8e:76:a0:dc:60:39:de:27:17:f0:02:ad:47:ba:a0:
         ca:24:ee:a8:b5:85:b5:68:49:fd:e6:5b:0e:d7:61:9d:cf:77:
         42:94:1a:f5:de:4a:91:7e:91:ff:18:a5:a7:b5:e4:45:c3:1e:
         23:30:87:0d:a8:61:c3:2f:33:1b:09:3b:e1:37:88:db:2b:56:
         a5:64:8a:75:84:e6:fd:03:5e:24:93:95:84:04:84:1a:bc:aa:
         44:37:38:1b:15:12:2b:b9:c3:22:8a:e5:46:50:5b:90:eb:ba:
         a4:e8:c4:60:93:ab:a0:a9:1f:71:79:9a:75:23:dd:18:8f:d6:
         84:32:64:6e:b2:7e:d4:04:e3:5f:eb:02:a3:cd:10:57:de:ec:
         55:03:31:ce:d1:18:da:f0:86:0a:3a:0d:97:b5:2f:2a:01:6f:
         69:fc:57:a7:d2:d5:3a:dd:10:d0:a0:97:8d:13:38:6b:a2:1f:
         54:4f:26:38:c8:32:2c:1d:70:4c:b3:11:ad:0d:09:c8:00:6a:
         04:54:b3:ee:4a:f2:5b:9b:1c:6a:04:8e:36:d1:ed:8e:62:08:
         12:af:2e:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hThQH3EtkwmNDvsPoiRWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NWE3MjkwZWMyOThjMWI2NGQ5ODYzMDZmMWIyNGQzZDMz
NjY5ODYwHhcNMjYwNzI3MDIwMTE2WhcNMjYwNzI4MDIwMTE2WjAzMTEwLwYDVQQD
EyhlNzE1MGNjODMwNTM1Njc5MGRhODgwZWMxNDhmYWNlMWNiMjBmYTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5vmEj/9YQBiS5ASaA5SEuIMxsWE/
ixSBRBU2KB0z5qZE6sElb+HkGw/wpXUQ96nMUyVdAZqkm4fmwn4VCnO98ZQdXv9n
4cA4WMaifDLO49W2JHLQjzr5rD6+3aBxNQ0ze6AyGbb2S57QNMHOrtOb2jJjk6j4
FC6csQaY+4lLj+b0Gah8tJLOPJR8nM//1i3cx6FHFNNupNWiW5vsn/LqPT92kfz1
yALa0Uwf3jKzry5VqwMhzHqhY3vBJ6CYbtndz9PTBzTjzoXetD57VXgnBo9Q1z9v
uCee/dO1zdjGS+oS0sQyMvMze3bdFNDmeHhX9IqlO9II0vYVA1tU/R1C3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOcVDMgwU1Z5DaiA7BSPrOHLIPpLMB8GA1UdIwQY
MBaAFBdacpDsKYwbZNmGMG8bJNPTNmmGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzkt
N2VhZmY2YjBmOGNkLzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9iZDdmMzAtMDdjYS00OWFjLTgwYzktN2VhZmY2YjBmOGNk
LzEvRjFweWtPd3BqQnRrMllZd2J4c2swOU0yYVlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitlVIWKN
XyoViFamyRiSO7tKfZQBC40P6CGnBDDAAIanZLFxCgKBjnag3GA53icX8AKtR7qg
yiTuqLWFtWhJ/eZbDtdhnc93QpQa9d5KkX6R/xilp7XkRcMeIzCHDahhwy8zGwk7
4TeI2ytWpWSKdYTm/QNeJJOVhASEGryqRDc4GxUSK7nDIorlRlBbkOu6pOjEYJOr
oKkfcXmadSPdGI/WhDJkbrJ+1ATjX+sCo80QV97sVQMxztEY2vCGCjoNl7UvKgFv
afxXp9LVOt0Q0KCXjRM4a6IfVE8mOMgyLB1wTLMRrQ0JyABqBFSz7kryW5scagSO
NtHtjmIIEq8u0Q==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:26:10 2026 by rpki-client