Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
File:                     1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft (raw, json)
Hash identifier:          kLZ3r9CLA6yFpNHUPL/cKWGxE9JOpDz17X9+PqP5wz8=
Subject key identifier:   6A:58:F5:24:EB:A2:4D:D5:80:85:2A:DE:9C:64:66:F9:3F:4C:3D:95
Authority key identifier: D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84
Certificate issuer:       /CN=d58214cfa326611e9d494135a12ce8276f0f1784
Certificate serial:       019F9E8361AA9D05497FF974418E2BE80411
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
Manifest number:          0B57
Signing time:             Sun 26 Jul 2026 13:00:38 +0000
Manifest this update:     Sun 26 Jul 2026 13:00:38 +0000
Manifest next update:     Mon 27 Jul 2026 13:00:38 +0000
Files and hashes:         1: 1V2eWPwMoUqafAswREwesTHJcEg.roa (hash: 8Ljm/PxM1d30P31h1Ux7eMRQhRm58ZX/tSxXvNMir84=)
                          2: 1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl (hash: 6b63Gr43RTk9TfdpTR2fZrSRTnmFHSuk/pH3o5GQ+lc=)
                          3: B5mgROa_HhZghovwN5tBttE8vQ4.roa (hash: htlrxZ1Q52aR4gDDugtXWGZbxc/WBqlk8qnt1UWg1Vo=)
                          4: IgmLWgxDoTeSu4Zj1Iq-sm2kgMM.roa (hash: Sc1PupxYmmww1l6h7WqQdd4+okMgETcdRza36R2yaQ4=)
                          5: URQ0ixwikEDnD5vaplcoCL7PWCE.roa (hash: U9bd3yHk+qz1wvsZbw78086KKHXfP+Uyk5WS+MvNdrE=)
                          6: csxH9N8tVIrkBDMI7J2H9oHB5ts.roa (hash: YnDsKZSvVyafr0VpozmsvhXFno1wOxr2STYbFQyZa38=)
                          7: eEzl8wdO2N_6D7w_9Bax5AX4F6k.roa (hash: M2fSlXcaKrSdl8K4kyFGKfTwtRUdwGtRzjVZehMj0zg=)
                          8: ltZGgLjX0XyN_sNeCxdT7qUBPK0.roa (hash: bXF+LPFRGG+z/2Erpeh6wrq94VssmzlD+z8l/AbxQ+I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 13:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:83:61:aa:9d:05:49:7f:f9:74:41:8e:2b:e8:04:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d58214cfa326611e9d494135a12ce8276f0f1784
        Validity
            Not Before: Jul 26 13:00:38 2026 GMT
            Not After : Jul 27 13:00:38 2026 GMT
        Subject: CN=6a58f524eba24dd580852ade9c6466f93f4c3d95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:d6:b5:79:e5:7c:79:43:ca:76:90:d6:ef:
                    94:28:90:b7:93:3f:5a:18:df:cd:0e:70:2d:e9:fa:
                    fb:b7:22:d6:6f:97:7c:64:7b:a0:56:29:6d:20:68:
                    07:c3:7d:05:c7:c9:db:d2:00:e1:22:fe:f6:5e:ee:
                    72:d2:ef:e6:24:6b:50:0f:a4:b4:e8:8d:3c:ea:59:
                    59:06:68:28:73:44:04:7a:89:03:41:c3:2f:1b:c4:
                    1e:a4:31:65:ba:0b:0d:8b:9f:c6:8d:b0:0e:4e:7a:
                    b9:2a:7a:5f:69:25:70:08:85:fc:ca:22:7b:8d:b6:
                    aa:59:2d:a3:57:fb:fa:9d:7f:4b:d0:f7:b8:6c:97:
                    47:d8:5b:01:df:9b:cd:3b:ba:76:38:b8:a8:7d:6a:
                    4f:37:c1:71:7b:f9:23:f4:d1:42:d0:50:6b:2e:56:
                    f8:d4:90:92:c8:d0:08:20:d5:5a:d2:ed:f1:19:b2:
                    2e:d5:12:5b:4a:47:29:54:d5:70:e4:40:3f:77:73:
                    12:fb:55:9a:a4:38:27:cb:7e:b3:c8:5d:c9:80:3e:
                    75:45:bd:ea:70:af:5e:a3:1c:25:32:51:9d:9f:67:
                    c4:ab:5c:ff:5f:49:8c:fa:89:de:71:88:de:fa:73:
                    6c:32:bd:a8:eb:41:4c:e3:1b:25:ee:ff:b7:a2:73:
                    bf:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:58:F5:24:EB:A2:4D:D5:80:85:2A:DE:9C:64:66:F9:3F:4C:3D:95
            X509v3 Authority Key Identifier:
                keyid:D5:82:14:CF:A3:26:61:1E:9D:49:41:35:A1:2C:E8:27:6F:0F:17:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/777eef-4d02-4d39-b1e4-1079d55aee91/1/1YIUz6MmYR6dSUE1oSzoJ28PF4Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:a1:cb:5b:16:b3:f5:03:49:6b:18:35:f0:1e:73:ba:8a:f0:
         37:dc:5f:cc:cf:62:36:ca:6b:1b:74:64:57:6e:2f:4a:35:af:
         43:3b:a5:a6:93:68:7f:07:04:9a:03:ae:73:35:6d:d1:06:e5:
         d7:05:9e:28:a6:ea:c5:94:18:f1:6c:dd:c4:36:bd:d4:63:a3:
         95:91:d1:4b:c9:1c:75:20:48:32:e3:3b:fd:1c:a3:34:ea:98:
         6e:30:7a:0f:3c:09:e4:04:f1:94:5e:cf:05:60:ce:5d:6a:ec:
         f4:9e:2e:3a:5a:b9:3c:5a:7d:fd:de:bd:7b:72:2a:00:e7:78:
         f6:b9:bd:12:f7:ff:53:c2:b9:53:98:58:8c:5e:5a:b5:16:aa:
         ba:15:8b:fd:40:ce:1e:15:6b:db:1b:6f:ea:b5:00:74:43:b7:
         e8:f2:68:82:0f:ff:c4:1f:34:05:47:f7:c8:8a:19:3f:8a:0f:
         85:d4:33:ea:42:1d:3d:bb:d2:96:5e:1a:63:4b:5e:61:eb:8e:
         02:3f:c8:cf:eb:1a:38:6a:d6:d8:6b:9b:ae:45:d4:98:7d:46:
         b0:cf:87:44:cb:eb:e4:09:cf:c3:d7:27:5d:8a:ae:39:d4:84:
         53:e1:b9:4c:f1:0c:6e:ef:e9:86:62:cf:ba:d6:a5:7f:ec:94:
         78:8e:9f:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+eg2GqnQVJf/l0QY4r6AQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ODIxNGNmYTMyNjYxMWU5ZDQ5NDEzNWExMmNlODI3NmYw
ZjE3ODQwHhcNMjYwNzI2MTMwMDM4WhcNMjYwNzI3MTMwMDM4WjAzMTEwLwYDVQQD
Eyg2YTU4ZjUyNGViYTI0ZGQ1ODA4NTJhZGU5YzY0NjZmOTNmNGMzZDk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvtvWtXnlfHlDynaQ1u+UKJC3kz9a
GN/NDnAt6fr7tyLWb5d8ZHugViltIGgHw30Fx8nb0gDhIv72Xu5y0u/mJGtQD6S0
6I086llZBmgoc0QEeokDQcMvG8QepDFlugsNi5/GjbAOTnq5KnpfaSVwCIX8yiJ7
jbaqWS2jV/v6nX9L0Pe4bJdH2FsB35vNO7p2OLiofWpPN8Fxe/kj9NFC0FBrLlb4
1JCSyNAIINVa0u3xGbIu1RJbSkcpVNVw5EA/d3MS+1WapDgny36zyF3JgD51Rb3q
cK9eoxwlMlGdn2fEq1z/X0mM+onecYje+nNsMr2o60FM4xsl7v+3onO/TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpY9STrok3VgIUq3pxkZvk/TD2VMB8GA1UdIwQY
MBaAFNWCFM+jJmEenUlBNaEs6CdvDxeEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQt
MTA3OWQ1NWFlZTkxLzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi83NzdlZWYtNGQwMi00ZDM5LWIxZTQtMTA3OWQ1NWFlZTkx
LzEvMVlJVXo2TW1ZUjZkU1VFMW9Tem9KMjhQRjRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuKHLWxaz
9QNJaxg18B5zuorwN9xfzM9iNsprG3RkV24vSjWvQzulppNofwcEmgOuczVt0Qbl
1wWeKKbqxZQY8WzdxDa91GOjlZHRS8kcdSBIMuM7/RyjNOqYbjB6DzwJ5ATxlF7P
BWDOXWrs9J4uOlq5PFp9/d69e3IqAOd49rm9Evf/U8K5U5hYjF5atRaquhWL/UDO
HhVr2xtv6rUAdEO36PJogg//xB80BUf3yIoZP4oPhdQz6kIdPbvSll4aY0teYeuO
Aj/Iz+saOGrW2GubrkXUmH1GsM+HRMvr5AnPw9cnXYquOdSEU+G5TPEMbu/phmLP
utalf+yUeI6fRQ==
-----END CERTIFICATE-----
Generated at Sun Jul 26 19:05:14 2026 by rpki-client