Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
File:                     ov7n60DFpFQ5UC658zG-_qxPjQw.mft (raw, json)
Hash identifier:          EvYpfQvtedF16UMOcb86xm/9dHXlwPcAesondNfvH20=
Subject key identifier:   B7:D2:7C:01:CA:50:ED:37:5B:B8:09:99:35:62:FE:9F:DE:EE:B0:82
Authority key identifier: A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C
Certificate issuer:       /CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
Certificate serial:       019F85684D7C23F2A416E633403AE8C54C68
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
Manifest number:          02DD
Signing time:             Tue 21 Jul 2026 16:00:33 +0000
Manifest this update:     Tue 21 Jul 2026 16:00:33 +0000
Manifest next update:     Wed 22 Jul 2026 16:00:33 +0000
Files and hashes:         1: 5kXDHLDSjZAiVMFLveILTRxDNMc.roa (hash: PW8kbjXuOxH53eIcya9Iptxt2w97yH9EEIP9BBnXX6Y=)
                          2: ov7n60DFpFQ5UC658zG-_qxPjQw.crl (hash: mE7726BPI5390onzaoPWvFk14sOMWGkkAqO7lNMc2RU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:68:4d:7c:23:f2:a4:16:e6:33:40:3a:e8:c5:4c:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2fee7eb40c5a45439502eb9f331befeac4f8d0c
        Validity
            Not Before: Jul 21 16:00:33 2026 GMT
            Not After : Jul 22 16:00:33 2026 GMT
        Subject: CN=b7d27c01ca50ed375bb809993562fe9fdeeeb082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:82:39:61:84:11:41:1b:4c:10:a7:8a:7c:22:
                    0f:5f:72:c6:f7:8c:2f:a0:66:d7:d6:0a:b7:9b:70:
                    a1:3d:03:74:71:20:f6:93:df:b9:e7:b0:48:af:d3:
                    2d:7d:06:a5:5e:4a:f8:e2:77:d4:f9:66:f3:15:4f:
                    3c:97:ab:83:cb:94:7a:95:3c:54:83:6c:6c:64:d5:
                    90:46:d5:c0:a2:09:31:de:27:31:96:20:7c:5d:18:
                    9d:64:fd:d5:6f:bd:be:41:d2:51:43:75:99:ec:09:
                    08:8c:4b:94:dc:26:c7:db:39:c6:5b:18:45:af:44:
                    11:70:e8:ea:ad:a4:17:72:88:f1:a7:5f:11:15:33:
                    0c:f0:71:6d:f8:4b:5d:dc:ae:4a:ad:4a:a3:d5:d9:
                    0b:93:57:9d:20:6f:8c:90:5e:03:02:62:ba:4e:99:
                    92:ff:bd:3a:54:2e:9b:04:d6:88:13:ef:b7:2f:74:
                    30:23:d5:9f:4a:fb:8b:0a:b4:7b:4b:7f:4b:72:26:
                    e6:89:11:6d:8c:e7:ca:5e:40:89:40:0d:b5:97:f7:
                    7e:0d:8a:c3:32:8b:3e:64:17:78:21:67:ee:cd:82:
                    ad:61:9a:11:db:42:04:07:c1:38:cf:e9:af:e8:32:
                    5b:15:81:73:2c:a0:ca:dd:e4:a2:49:a1:dd:32:75:
                    ca:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D2:7C:01:CA:50:ED:37:5B:B8:09:99:35:62:FE:9F:DE:EE:B0:82
            X509v3 Authority Key Identifier:
                keyid:A2:FE:E7:EB:40:C5:A4:54:39:50:2E:B9:F3:31:BE:FE:AC:4F:8D:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ov7n60DFpFQ5UC658zG-_qxPjQw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7697f5-448a-4c9a-959a-706dae51c401/1/ov7n60DFpFQ5UC658zG-_qxPjQw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:b1:70:2b:11:32:48:a4:f5:d7:41:7c:37:4c:67:94:1e:44:
         7c:e8:af:10:0e:99:c2:84:1e:a9:ca:76:96:2b:09:49:38:64:
         53:30:8d:85:55:a5:6b:18:f4:5a:e8:e3:12:6d:26:f8:2a:ab:
         96:80:8e:dc:d3:b6:af:dd:3a:b7:22:49:a0:a9:45:54:c2:38:
         71:1a:1e:92:17:81:a1:5c:23:a9:f3:b3:e3:5e:be:30:6b:25:
         0c:41:e4:55:0b:c5:13:65:95:14:45:92:0e:d0:7b:eb:da:40:
         27:63:4e:82:c9:b0:7a:e8:5a:2d:ea:aa:ee:d4:dd:be:25:d8:
         2d:4b:4a:24:4c:2d:aa:87:dc:8a:71:e9:d3:f3:e8:89:48:b5:
         9c:2c:68:bb:8a:89:2d:72:85:f7:6f:72:08:3d:3a:8d:33:a3:
         7d:59:34:ea:ab:57:11:f3:23:3f:ad:c2:a7:74:5b:2a:48:94:
         a0:47:f2:d5:07:90:ef:83:3a:6d:81:4d:c8:cc:a5:5b:6b:4b:
         dd:59:0d:3c:c5:1f:1d:d1:06:0c:fc:d5:61:63:84:ef:8d:9e:
         5b:13:98:23:f7:8d:1b:27:66:ca:f7:0c:48:a6:a7:03:7c:6e:
         62:28:3e:b5:69:93:b6:7d:1b:5a:64:35:38:1c:32:66:c9:1b:
         f7:e9:1a:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaE18I/KkFuYzQDroxUxoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyZmVlN2ViNDBjNWE0NTQzOTUwMmViOWYzMzFiZWZlYWM0
ZjhkMGMwHhcNMjYwNzIxMTYwMDMzWhcNMjYwNzIyMTYwMDMzWjAzMTEwLwYDVQQD
EyhiN2QyN2MwMWNhNTBlZDM3NWJiODA5OTkzNTYyZmU5ZmRlZWViMDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4I5YYQRQRtMEKeKfCIPX3LG94wv
oGbX1gq3m3ChPQN0cSD2k9+557BIr9MtfQalXkr44nfU+WbzFU88l6uDy5R6lTxU
g2xsZNWQRtXAogkx3icxliB8XRidZP3Vb72+QdJRQ3WZ7AkIjEuU3CbH2znGWxhF
r0QRcOjqraQXcojxp18RFTMM8HFt+Etd3K5KrUqj1dkLk1edIG+MkF4DAmK6TpmS
/706VC6bBNaIE++3L3QwI9WfSvuLCrR7S39LcibmiRFtjOfKXkCJQA21l/d+DYrD
Mos+ZBd4IWfuzYKtYZoR20IEB8E4z+mv6DJbFYFzLKDK3eSiSaHdMnXKPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfSfAHKUO03W7gJmTVi/p/e7rCCMB8GA1UdIwQY
MBaAFKL+5+tAxaRUOVAuufMxvv6sT40MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3Y3bjYwREZwRlE1VUM2NTh6Ry1fcXhQalF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Njk3ZjUtNDQ4YS00YzlhLTk1OWEt
NzA2ZGFlNTFjNDAxLzEvb3Y3bjYwREZwRlE1VUM2NTh6Ry1fcXhQalF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi83Njk3ZjUtNDQ4YS00YzlhLTk1OWEtNzA2ZGFlNTFjNDAx
LzEvb3Y3bjYwREZwRlE1VUM2NTh6Ry1fcXhQalF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrFwKxEy
SKT110F8N0xnlB5EfOivEA6ZwoQeqcp2lisJSThkUzCNhVWlaxj0WujjEm0m+Cqr
loCO3NO2r906tyJJoKlFVMI4cRoekheBoVwjqfOz416+MGslDEHkVQvFE2WVFEWS
DtB769pAJ2NOgsmweuhaLeqq7tTdviXYLUtKJEwtqofcinHp0/PoiUi1nCxou4qJ
LXKF929yCD06jTOjfVk06qtXEfMjP63Cp3RbKkiUoEfy1QeQ74M6bYFNyMylW2tL
3VkNPMUfHdEGDPzVYWOE742eWxOYI/eNGydmyvcMSKanA3xuYig+tWmTtn0bWmQ1
OBwyZskb9+kacQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:48:42 2026 by rpki-client