Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
File:                     sP8nOo_iEgkLoct4xjMfgOeMMCU.mft (raw, json)
Hash identifier:          8+f4Xd9kBD9ujBd1qTzDD4qAwPTYYcwfQZMkrnuEU8c=
Subject key identifier:   1B:ED:C4:9E:F2:96:9F:85:14:50:EC:E2:80:E9:4A:38:2A:07:75:43
Authority key identifier: B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25
Certificate issuer:       /CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
Certificate serial:       019F9F95E3E1C5EBD289918DA7A42F4C5F22
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
Manifest number:          039F
Signing time:             Sun 26 Jul 2026 18:00:28 +0000
Manifest this update:     Sun 26 Jul 2026 18:00:28 +0000
Manifest next update:     Mon 27 Jul 2026 18:00:28 +0000
Files and hashes:         1: Zv79TTxsf83wSa-br66v_0Kz3P0.roa (hash: PshdlsPP60SM0Q8DKrvKNK5rgHz5shKnndSXnKZ2nf8=)
                          2: sP8nOo_iEgkLoct4xjMfgOeMMCU.crl (hash: vvtDIdq0BnALw14pEzrkS6e8NzQ0N+gR3HnI0kYR0pM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:95:e3:e1:c5:eb:d2:89:91:8d:a7:a4:2f:4c:5f:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b0ff273a8fe212090ba1cb78c6331f80e78c3025
        Validity
            Not Before: Jul 26 18:00:28 2026 GMT
            Not After : Jul 27 18:00:28 2026 GMT
        Subject: CN=1bedc49ef2969f851450ece280e94a382a077543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:49:0a:cd:e6:04:87:cf:b2:21:d4:5f:c9:59:
                    94:02:e0:eb:31:99:a9:64:fc:55:82:21:94:5a:57:
                    d1:2e:ec:73:d0:fc:99:b4:72:1a:d1:a9:a9:8e:3d:
                    98:06:d2:2e:72:3a:f6:ae:a1:0d:7c:6c:ed:80:7d:
                    24:82:a8:08:82:7a:00:05:dd:5e:d0:e3:1f:2c:2e:
                    d0:af:83:7a:99:8e:b8:62:e4:ed:04:7c:b1:92:3a:
                    84:9d:13:83:b5:75:4b:ef:8a:73:de:cb:ca:12:1d:
                    04:85:cd:38:45:c5:f5:c5:2d:06:ba:96:7e:bc:95:
                    59:a6:fb:f7:9c:06:8c:7c:bb:19:9d:9b:ae:8e:dd:
                    b0:da:fc:d9:8c:21:f1:4b:d9:30:24:6a:c0:b4:fd:
                    0d:c9:1e:30:6b:7a:ec:cc:b3:ae:d8:cb:30:16:da:
                    ab:31:f3:34:da:fc:19:db:c3:f5:01:09:11:5d:ff:
                    9d:3d:b8:c6:ee:9b:83:55:fa:8b:8b:53:ad:64:e7:
                    18:53:de:93:c3:f3:62:e2:14:3b:49:70:b4:f7:41:
                    c7:3e:09:30:b0:36:0c:45:a7:85:93:96:42:47:fe:
                    e2:fb:b1:cd:01:6f:37:fd:f3:86:c6:27:ed:da:dc:
                    f2:31:ad:b1:d1:ee:39:89:9d:89:1f:6b:4e:54:f2:
                    d5:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:ED:C4:9E:F2:96:9F:85:14:50:EC:E2:80:E9:4A:38:2A:07:75:43
            X509v3 Authority Key Identifier:
                keyid:B0:FF:27:3A:8F:E2:12:09:0B:A1:CB:78:C6:33:1F:80:E7:8C:30:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sP8nOo_iEgkLoct4xjMfgOeMMCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/7f1255-d3ad-4cb2-abfd-88d3ca9006d5/1/sP8nOo_iEgkLoct4xjMfgOeMMCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:f1:d5:7c:58:4d:ea:ee:7b:b8:fc:29:5f:d8:19:f7:50:20:
         cd:92:85:48:06:db:e6:31:6d:21:6a:05:b2:0e:37:bc:d6:98:
         d4:dc:8d:98:fa:22:18:f0:0b:1d:69:30:9c:7d:0f:de:58:f9:
         a0:0f:73:33:73:1e:ca:25:5a:e6:b4:8b:a2:2d:a8:96:08:26:
         0c:17:ad:d7:03:68:ac:d3:6b:92:3c:34:4c:83:08:a0:2b:4d:
         9f:10:0c:31:b5:20:84:1c:82:74:de:f6:36:b1:44:c2:40:bf:
         39:36:4f:b9:d7:d2:0d:eb:6d:75:51:f0:6b:67:82:63:72:12:
         30:65:13:e8:25:ce:52:2b:d4:a4:78:02:19:09:5b:a4:7d:ce:
         6c:2f:87:f7:a8:ed:7b:fc:ea:09:d7:06:1c:8d:86:33:45:f9:
         50:0f:fd:7d:75:90:24:85:43:9d:c2:f6:bf:c7:94:25:4c:ad:
         8a:88:12:43:f6:5c:bb:61:eb:9f:c1:db:dc:ce:08:d3:49:bc:
         91:24:ee:a8:bb:85:bb:35:aa:66:31:d8:1f:f8:e4:a7:5a:78:
         5b:f4:43:98:ea:b2:07:d0:4c:9d:45:e9:fa:19:01:9c:4e:9b:
         0c:74:a0:2b:ce:26:34:bd:56:cc:df:b6:b0:a4:9f:df:c3:fe:
         ac:f1:00:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+flePhxevSiZGNp6QvTF8iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmYyNzNhOGZlMjEyMDkwYmExY2I3OGM2MzMxZjgwZTc4
YzMwMjUwHhcNMjYwNzI2MTgwMDI4WhcNMjYwNzI3MTgwMDI4WjAzMTEwLwYDVQQD
EygxYmVkYzQ5ZWYyOTY5Zjg1MTQ1MGVjZTI4MGU5NGEzODJhMDc3NTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEkKzeYEh8+yIdRfyVmUAuDrMZmp
ZPxVgiGUWlfRLuxz0PyZtHIa0ampjj2YBtIucjr2rqENfGztgH0kgqgIgnoABd1e
0OMfLC7Qr4N6mY64YuTtBHyxkjqEnRODtXVL74pz3svKEh0Ehc04RcX1xS0GupZ+
vJVZpvv3nAaMfLsZnZuujt2w2vzZjCHxS9kwJGrAtP0NyR4wa3rszLOu2MswFtqr
MfM02vwZ28P1AQkRXf+dPbjG7puDVfqLi1OtZOcYU96Tw/Ni4hQ7SXC090HHPgkw
sDYMRaeFk5ZCR/7i+7HNAW83/fOGxift2tzyMa2x0e45iZ2JH2tOVPLVbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBvtxJ7ylp+FFFDs4oDpSjgqB3VDMB8GA1UdIwQY
MBaAFLD/JzqP4hIJC6HLeMYzH4DnjDAlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQt
ODhkM2NhOTAwNmQ1LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS83ZjEyNTUtZDNhZC00Y2IyLWFiZmQtODhkM2NhOTAwNmQ1
LzEvc1A4bk9vX2lFZ2tMb2N0NHhqTWZnT2VNTUNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK/HVfFhN
6u57uPwpX9gZ91AgzZKFSAbb5jFtIWoFsg43vNaY1NyNmPoiGPALHWkwnH0P3lj5
oA9zM3MeyiVa5rSLoi2olggmDBet1wNorNNrkjw0TIMIoCtNnxAMMbUghByCdN72
NrFEwkC/OTZPudfSDettdVHwa2eCY3ISMGUT6CXOUivUpHgCGQlbpH3ObC+H96jt
e/zqCdcGHI2GM0X5UA/9fXWQJIVDncL2v8eUJUytiogSQ/Zcu2Hrn8Hb3M4I00m8
kSTuqLuFuzWqZjHYH/jkp1p4W/RDmOqyB9BMnUXp+hkBnE6bDHSgK84mNL1WzN+2
sKSf38P+rPEANQ==
-----END CERTIFICATE-----
Generated at Mon Jul 27 00:53:23 2026 by rpki-client