Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
File:                     1IspGxb22WyArX0xKS9WDU-q6_A.mft (raw, json)
Hash identifier:          mJODOsc1zsXf/3qXV7Eki3daYPyAQ1tifwK5+9U9W+c=
Subject key identifier:   8B:E5:F7:E2:87:52:92:E4:67:71:DB:C6:A0:9B:F2:94:68:17:39:DB
Authority key identifier: D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0
Certificate issuer:       /CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
Certificate serial:       019FBD6A8398B011989C569C48CAF83E76A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
Manifest number:          0C2F
Signing time:             Sat 01 Aug 2026 13:01:42 +0000
Manifest this update:     Sat 01 Aug 2026 13:01:42 +0000
Manifest next update:     Sun 02 Aug 2026 13:01:42 +0000
Files and hashes:         1: 1IspGxb22WyArX0xKS9WDU-q6_A.crl (hash: lJduf+2N0oNI3RuI1to1BWPN75Qj27/3gbkVbiNSHw4=)
                          2: 3_W7wx2-fypI1zi7oF8Q3NS1T7k.roa (hash: R18F2OZx+pMzaBIwLtZY9ZTcDCGHNNWTIHQDPwa2kWg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Aug 2026 11:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:bd:6a:83:98:b0:11:98:9c:56:9c:48:ca:f8:3e:76:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48b291b16f6d96c80ad7d31292f560d4faaebf0
        Validity
            Not Before: Aug  1 13:01:42 2026 GMT
            Not After : Aug  2 13:01:42 2026 GMT
        Subject: CN=8be5f7e2875292e46771dbc6a09bf294681739db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7c:dc:9a:5e:a3:62:67:e7:0e:dc:15:42:16:
                    21:71:f2:d9:da:83:01:ea:5a:55:ec:d5:59:2c:3b:
                    ed:58:b5:54:51:7f:7c:89:01:82:ac:31:80:9c:e3:
                    6b:66:5b:68:4b:a3:f5:5d:ba:a1:bb:54:88:e7:56:
                    b4:12:9a:d8:a6:ed:e9:be:32:3c:a3:f6:5c:bd:b7:
                    1c:52:60:90:dc:ee:25:fc:94:02:5e:32:6e:d7:1f:
                    f2:b9:58:f8:9c:2c:66:0b:a2:d4:84:c5:11:49:52:
                    a5:09:17:44:d1:46:27:bb:43:2f:ad:a7:2f:e4:aa:
                    79:4c:c0:da:c3:32:fd:a9:1e:ef:d7:cb:8a:eb:3f:
                    0a:4b:9a:19:2e:e4:3f:6b:89:40:a3:3c:46:77:0d:
                    4f:55:55:5f:37:cf:c5:ea:90:d3:66:5e:d1:37:a0:
                    16:10:f0:0a:9c:e5:00:22:79:0f:89:2c:2d:c5:38:
                    d8:69:b8:2d:98:4a:4a:09:81:5b:1e:21:1b:2a:a9:
                    1f:69:76:69:af:2f:f7:33:4d:f7:38:bc:89:d1:29:
                    ec:bc:51:80:74:3d:d3:40:eb:08:0c:61:3d:6c:d7:
                    f5:dd:c2:93:eb:1d:87:a7:db:68:75:f8:13:e4:06:
                    39:67:a2:74:69:77:2a:a7:aa:b5:e7:ff:e3:69:09:
                    cc:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E5:F7:E2:87:52:92:E4:67:71:DB:C6:A0:9B:F2:94:68:17:39:DB
            X509v3 Authority Key Identifier:
                keyid:D4:8B:29:1B:16:F6:D9:6C:80:AD:7D:31:29:2F:56:0D:4F:AA:EB:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IspGxb22WyArX0xKS9WDU-q6_A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/1083e9-b9dd-4c82-9878-7f8bfac73977/1/1IspGxb22WyArX0xKS9WDU-q6_A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:79:75:01:a6:db:ba:44:f2:32:56:4d:2c:99:b5:3f:39:e3:
         84:83:4a:ad:e7:68:ab:0c:4e:8e:ab:2b:16:b1:a3:39:73:f7:
         f4:5b:de:d6:02:e5:ba:56:80:55:84:0d:9b:e9:20:77:4d:aa:
         d4:48:a4:e4:3b:5b:09:7d:ae:de:e2:68:63:45:8d:06:52:2b:
         59:f2:e3:ed:d8:b0:4c:fa:59:42:78:27:73:33:08:09:a5:de:
         c1:19:2e:51:ae:3e:9a:3d:29:14:b8:13:61:c0:ab:ba:59:bd:
         73:96:39:38:56:fa:57:bc:5d:a6:1d:ac:43:b2:45:e9:cf:26:
         aa:d1:91:b3:3d:79:bb:d4:45:51:00:96:7d:4b:18:1c:8f:a0:
         c6:96:83:54:78:9f:a1:e3:1f:29:01:21:cf:aa:fe:d9:5d:70:
         c3:6e:bd:d3:b3:08:73:ba:b4:ae:15:64:89:03:65:e3:ca:00:
         c9:19:df:0a:4f:e5:d8:fe:1c:75:31:fd:9e:06:62:58:f5:c4:
         2c:58:b7:b2:0c:3c:10:44:bc:34:d0:b3:b4:5c:fe:26:2b:aa:
         b7:8d:15:86:52:a3:ff:f7:94:bf:8a:91:5e:6e:21:42:78:ba:
         ff:68:e0:73:1b:99:d3:08:e5:72:42:92:fa:83:88:e2:52:a0:
         68:1a:0f:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+9aoOYsBGYnFacSMr4PnaoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGIyOTFiMTZmNmQ5NmM4MGFkN2QzMTI5MmY1NjBkNGZh
YWViZjAwHhcNMjYwODAxMTMwMTQyWhcNMjYwODAyMTMwMTQyWjAzMTEwLwYDVQQD
Eyg4YmU1ZjdlMjg3NTI5MmU0Njc3MWRiYzZhMDliZjI5NDY4MTczOWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXzcml6jYmfnDtwVQhYhcfLZ2oMB
6lpV7NVZLDvtWLVUUX98iQGCrDGAnONrZltoS6P1Xbqhu1SI51a0EprYpu3pvjI8
o/ZcvbccUmCQ3O4l/JQCXjJu1x/yuVj4nCxmC6LUhMURSVKlCRdE0UYnu0Mvracv
5Kp5TMDawzL9qR7v18uK6z8KS5oZLuQ/a4lAozxGdw1PVVVfN8/F6pDTZl7RN6AW
EPAKnOUAInkPiSwtxTjYabgtmEpKCYFbHiEbKqkfaXZpry/3M033OLyJ0SnsvFGA
dD3TQOsIDGE9bNf13cKT6x2Hp9todfgT5AY5Z6J0aXcqp6q15//jaQnMTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvl9+KHUpLkZ3HbxqCb8pRoFznbMB8GA1UdIwQY
MBaAFNSLKRsW9tlsgK19MSkvVg1PquvwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4Nzgt
N2Y4YmZhYzczOTc3LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC8xMDgzZTktYjlkZC00YzgyLTk4NzgtN2Y4YmZhYzczOTc3
LzEvMUlzcEd4YjIyV3lBclgweEtTOVdEVS1xNl9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABXl1Aabb
ukTyMlZNLJm1PznjhINKredoqwxOjqsrFrGjOXP39Fve1gLlulaAVYQNm+kgd02q
1Eik5DtbCX2u3uJoY0WNBlIrWfLj7diwTPpZQngnczMICaXewRkuUa4+mj0pFLgT
YcCrulm9c5Y5OFb6V7xdph2sQ7JF6c8mqtGRsz15u9RFUQCWfUsYHI+gxpaDVHif
oeMfKQEhz6r+2V1ww26907MIc7q0rhVkiQNl48oAyRnfCk/l2P4cdTH9ngZiWPXE
LFi3sgw8EES8NNCztFz+Jiuqt40VhlKj//eUv4qRXm4hQni6/2jgcxuZ0wjlckKS
+oOI4lKgaBoPog==
-----END CERTIFICATE-----
Generated at Sat Aug 1 19:58:16 2026 by rpki-client