Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
File:                     U8NcqD_N9xskTtgDrEaOFFPYJo8.mft (raw, json)
Hash identifier:          9DOu9dUxUlAWzMQJckwm+FsirQIGu5UGK4HPo5/mU7M=
Subject key identifier:   4F:0E:0A:D4:28:FD:2A:89:63:09:08:08:BD:27:48:EC:C2:00:62:95
Authority key identifier: 53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F
Certificate issuer:       /CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
Certificate serial:       019F82302C12BD0D6754236265F2B4C800BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
Manifest number:          0C04
Signing time:             Tue 21 Jul 2026 01:00:22 +0000
Manifest this update:     Tue 21 Jul 2026 01:00:22 +0000
Manifest next update:     Wed 22 Jul 2026 01:00:22 +0000
Files and hashes:         1: 0P9xPfTELLOLsIkje98I5DI3JMM.roa (hash: /5GbceYSZZKUMKDpKsep1xA2kefROVR28hBE+53Ms/s=)
                          2: U8NcqD_N9xskTtgDrEaOFFPYJo8.crl (hash: Obg+5chOnYJuepXOSZtZMjQKY783oBqvhsc7ofComrI=)
                          3: pfH2GwBcvDoKyHCIT0cM2iz_ms0.roa (hash: Mm7/tRb+RTedsr3+m2DHJUxAaM0FcO0MUgT9eZ4XDVI=)
                          4: zMo_08BFuPtuYYrEDlRKq-rmGBo.roa (hash: vZCIJPH6khDNzPRPnP73DDsgX8UFqI/TfAzpfgqnDZI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 01:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:30:2c:12:bd:0d:67:54:23:62:65:f2:b4:c8:00:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c35ca83fcdf71b244ed803ac468e1453d8268f
        Validity
            Not Before: Jul 21 01:00:22 2026 GMT
            Not After : Jul 22 01:00:22 2026 GMT
        Subject: CN=4f0e0ad428fd2a8963090808bd2748ecc2006295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:57:9b:74:6b:75:15:cd:e9:79:1d:93:56:bd:
                    f0:2c:c2:27:23:9a:c8:58:e4:c1:6e:a4:fd:3c:70:
                    35:98:f4:6e:e6:4b:cf:0e:b4:87:ff:d8:34:7e:c4:
                    95:b8:7c:50:c8:fc:2d:48:4c:16:21:4c:ad:fa:1f:
                    ff:84:6f:37:6b:94:e9:09:50:04:32:25:5b:8e:06:
                    91:3b:eb:86:dd:af:f8:de:97:7a:54:d2:7e:28:16:
                    10:5a:d1:3c:75:6e:12:60:ae:93:2f:5c:d3:1d:95:
                    a2:15:a5:a8:84:a0:3c:31:74:be:61:68:6c:e5:25:
                    8c:38:0c:20:4d:63:82:ee:49:e9:04:01:d6:7f:87:
                    1d:0b:e7:cd:d5:20:02:e6:b2:58:10:86:e6:f8:fc:
                    df:a2:af:57:1c:b2:82:37:68:df:56:2c:c8:39:8e:
                    01:73:4d:fd:d8:d3:e1:5f:de:80:15:8e:91:ad:5d:
                    c6:a0:a7:be:b1:2f:48:08:48:3d:d0:eb:cc:85:b0:
                    f1:5c:7b:b6:5a:56:00:c5:50:14:17:87:28:eb:e0:
                    da:a9:0b:71:ff:5b:e6:e6:3a:1a:92:66:b8:27:30:
                    40:11:f8:64:28:4f:9e:90:02:0b:6f:e5:61:21:f7:
                    de:d4:3d:50:4a:5d:cf:0f:9f:8e:cf:ea:71:e2:ce:
                    83:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0E:0A:D4:28:FD:2A:89:63:09:08:08:BD:27:48:EC:C2:00:62:95
            X509v3 Authority Key Identifier:
                keyid:53:C3:5C:A8:3F:CD:F7:1B:24:4E:D8:03:AC:46:8E:14:53:D8:26:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8NcqD_N9xskTtgDrEaOFFPYJo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/fef2e0-ba37-4812-95ad-411a2712164d/1/U8NcqD_N9xskTtgDrEaOFFPYJo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f6:09:ef:70:71:01:29:41:72:bc:53:04:24:4d:48:84:65:
         11:e9:f1:48:73:5b:0e:62:24:08:47:b6:31:a0:e0:1e:43:e0:
         72:c7:61:e3:02:78:6d:ab:b5:a3:f6:41:a8:d6:32:72:49:07:
         93:41:f0:57:f5:69:d6:f1:a8:3b:43:73:25:40:99:ec:8f:22:
         e3:b8:8c:b1:85:c2:7a:af:4f:57:8c:44:ab:a9:cf:30:00:e7:
         70:8c:8f:c6:1d:de:18:b4:2a:4a:dd:c8:48:cb:a8:ac:6a:b4:
         d6:db:a1:9f:17:1c:15:f3:3b:3f:2d:23:bb:2d:3c:c1:df:1a:
         a2:af:d9:43:df:5d:a2:1a:c3:47:24:b1:49:5a:6d:4e:c9:8f:
         cd:02:c4:4b:4f:97:40:c8:bb:ab:35:03:92:69:d8:94:e2:ba:
         6a:24:53:6f:bd:93:eb:5b:56:df:8f:11:0b:ef:87:29:74:da:
         da:0a:c3:d8:12:95:ec:28:db:13:9b:9a:c5:1b:b4:0c:18:60:
         c4:99:04:3d:81:f0:74:c4:53:51:0b:1c:6d:01:a1:ca:67:e1:
         e4:93:70:77:74:d7:c1:ff:c1:3e:01:d3:06:5d:39:52:25:7b:
         cb:02:09:ce:79:fb:c4:af:be:25:3a:44:1f:b1:2c:9a:57:e8:
         64:f8:bc:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+CMCwSvQ1nVCNiZfK0yAC6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzM1Y2E4M2ZjZGY3MWIyNDRlZDgwM2FjNDY4ZTE0NTNk
ODI2OGYwHhcNMjYwNzIxMDEwMDIyWhcNMjYwNzIyMDEwMDIyWjAzMTEwLwYDVQQD
Eyg0ZjBlMGFkNDI4ZmQyYTg5NjMwOTA4MDhiZDI3NDhlY2MyMDA2Mjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VebdGt1Fc3peR2TVr3wLMInI5rI
WOTBbqT9PHA1mPRu5kvPDrSH/9g0fsSVuHxQyPwtSEwWIUyt+h//hG83a5TpCVAE
MiVbjgaRO+uG3a/43pd6VNJ+KBYQWtE8dW4SYK6TL1zTHZWiFaWohKA8MXS+YWhs
5SWMOAwgTWOC7knpBAHWf4cdC+fN1SAC5rJYEIbm+Pzfoq9XHLKCN2jfVizIOY4B
c0392NPhX96AFY6RrV3GoKe+sS9ICEg90OvMhbDxXHu2WlYAxVAUF4co6+DaqQtx
/1vm5joakma4JzBAEfhkKE+ekAILb+VhIffe1D1QSl3PD5+Oz+px4s6DSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8OCtQo/SqJYwkICL0nSOzCAGKVMB8GA1UdIwQY
MBaAFFPDXKg/zfcbJE7YA6xGjhRT2CaPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQt
NDExYTI3MTIxNjRkLzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9mZWYyZTAtYmEzNy00ODEyLTk1YWQtNDExYTI3MTIxNjRk
LzEvVThOY3FEX045eHNrVHRnRHJFYU9GRlBZSm84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnvYJ73Bx
ASlBcrxTBCRNSIRlEenxSHNbDmIkCEe2MaDgHkPgcsdh4wJ4bau1o/ZBqNYyckkH
k0HwV/Vp1vGoO0NzJUCZ7I8i47iMsYXCeq9PV4xEq6nPMADncIyPxh3eGLQqSt3I
SMuorGq01tuhnxccFfM7Py0juy08wd8aoq/ZQ99dohrDRySxSVptTsmPzQLES0+X
QMi7qzUDkmnYlOK6aiRTb72T61tW348RC++HKXTa2grD2BKV7CjbE5uaxRu0DBhg
xJkEPYHwdMRTUQscbQGhymfh5JNwd3TXwf/BPgHTBl05UiV7ywIJznn7xK++JTpE
H7EsmlfoZPi8oA==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:04:45 2026 by rpki-client