Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
File:                     1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft (raw, json)
Hash identifier:          kq9t4Bw7Jeug32aiQjku2OLHVTPlWpaCMMnnUJ+9HtA=
Subject key identifier:   3F:DB:69:4A:73:A8:94:CD:F3:66:07:51:C3:BC:B8:10:7F:E9:06:3D
Authority key identifier: FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71
Certificate issuer:       /CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
Certificate serial:       019FA0E022FD2C539BB0CDD1D77CBFAC2C30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
Manifest number:          05B6
Signing time:             Mon 27 Jul 2026 00:01:11 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:11 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:11 +0000
Files and hashes:         1: 1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl (hash: Q53hKSorPiAG2WcTlnbPogrtIGE5DKKeemO/1A27emw=)
                          2: sC0hoXoWj_HwhmcKc-TtsMsB4YY.roa (hash: N2LSoYEdjYVnYrlxpJXv18oXM2NsCiHnH6YLnUAlgaQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:22:fd:2c:53:9b:b0:cd:d1:d7:7c:bf:ac:2c:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb6efed2a24ac120ed26ae92ae48581b77d24971
        Validity
            Not Before: Jul 27 00:01:11 2026 GMT
            Not After : Jul 28 00:01:11 2026 GMT
        Subject: CN=3fdb694a73a894cdf3660751c3bcb8107fe9063d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:01:16:24:4e:c8:9c:87:69:52:1b:04:e5:35:
                    2a:ea:74:10:7e:ce:63:75:2d:a4:1a:8f:a2:fa:89:
                    8c:76:29:dd:f7:b0:7d:f1:31:a2:2c:d7:78:96:92:
                    26:55:09:73:b0:2f:38:b1:a7:99:fb:fa:32:f1:9b:
                    d0:db:6f:4d:5d:04:e1:cf:7c:d0:3f:84:ac:c0:be:
                    5a:43:dc:9b:55:74:8d:91:be:cc:80:4a:85:76:d1:
                    cb:31:87:ac:0a:f7:25:ef:20:85:8b:24:d1:4f:ac:
                    bf:c1:20:2e:c9:b8:06:2d:71:ea:39:38:0e:1f:12:
                    fd:9e:68:19:a5:19:5a:31:a2:29:24:78:b7:90:72:
                    df:5d:ae:11:a1:28:75:74:78:7a:01:0e:1a:33:01:
                    e3:4f:9f:a2:9c:14:29:e3:38:7c:70:26:a1:83:4e:
                    ed:fe:c8:69:b9:81:db:72:aa:53:9c:41:41:92:1b:
                    c9:5c:ce:9d:78:18:d2:c3:50:f8:03:c0:22:21:4f:
                    82:21:9d:b7:9b:cc:d4:4a:4b:65:b7:d8:11:06:95:
                    62:d3:9c:78:8b:72:3e:3e:87:38:46:24:e1:2f:59:
                    9d:65:06:dd:59:79:b7:d3:d5:47:cb:f1:bb:e0:30:
                    c3:05:6c:85:c8:28:80:32:b4:d6:52:85:83:fe:82:
                    20:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DB:69:4A:73:A8:94:CD:F3:66:07:51:C3:BC:B8:10:7F:E9:06:3D
            X509v3 Authority Key Identifier:
                keyid:FB:6E:FE:D2:A2:4A:C1:20:ED:26:AE:92:AE:48:58:1B:77:D2:49:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-27-0qJKwSDtJq6SrkhYG3fSSXE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f545a4-22fa-451c-87af-62f316d07d70/1/1-27-0qJKwSDtJq6SrkhYG3fSSXE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:ac:32:71:cf:9a:4a:72:a8:80:29:80:4c:d9:11:6f:68:1a:
         48:e3:ea:dd:8c:7a:f0:86:16:3d:4e:eb:58:ba:88:1c:c0:d8:
         7e:a6:cf:b8:9c:1c:72:b5:52:ac:b5:6f:eb:77:fa:72:82:6d:
         5d:ad:2f:27:5c:7e:a7:8c:a4:4d:28:78:60:89:bc:81:a9:29:
         7a:50:bf:63:38:4a:27:39:da:48:c1:72:67:d1:df:36:45:45:
         5b:b2:90:5f:31:20:93:fd:07:5e:09:4d:a3:18:98:a5:aa:ff:
         f7:68:60:be:17:a7:1c:f3:62:2e:4a:49:db:16:ed:93:35:f9:
         65:e1:f7:2a:4e:84:5b:00:b4:00:6a:84:ec:c0:49:f3:3f:f6:
         8d:a4:13:17:3f:cd:48:57:ce:72:02:9f:c5:e8:34:6a:8c:b3:
         d7:f4:fd:4c:55:85:1e:98:82:a3:57:97:c1:30:96:3a:8d:31:
         5c:b6:3b:f0:e1:46:28:25:d9:96:d2:32:12:df:6a:26:67:4b:
         45:96:c6:f1:cb:6f:45:1d:bc:eb:e2:f2:19:5f:01:9f:4a:d8:
         b7:76:d4:8e:b6:ec:d1:10:e6:20:80:15:a2:60:1b:68:d5:dd:
         cb:7c:83:36:5c:61:48:10:59:b4:49:50:bc:79:5e:ac:a7:a8:
         cc:63:4e:70
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+g4CL9LFObsM3R13y/rCwwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNmVmZWQyYTI0YWMxMjBlZDI2YWU5MmFlNDg1ODFiNzdk
MjQ5NzEwHhcNMjYwNzI3MDAwMTExWhcNMjYwNzI4MDAwMTExWjAzMTEwLwYDVQQD
EygzZmRiNjk0YTczYTg5NGNkZjM2NjA3NTFjM2JjYjgxMDdmZTkwNjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgEWJE7InIdpUhsE5TUq6nQQfs5j
dS2kGo+i+omMdind97B98TGiLNd4lpImVQlzsC84saeZ+/oy8ZvQ229NXQThz3zQ
P4SswL5aQ9ybVXSNkb7MgEqFdtHLMYesCvcl7yCFiyTRT6y/wSAuybgGLXHqOTgO
HxL9nmgZpRlaMaIpJHi3kHLfXa4RoSh1dHh6AQ4aMwHjT5+inBQp4zh8cCahg07t
/shpuYHbcqpTnEFBkhvJXM6deBjSw1D4A8AiIU+CIZ23m8zUSktlt9gRBpVi05x4
i3I+Poc4RiThL1mdZQbdWXm309VHy/G74DDDBWyFyCiAMrTWUoWD/oIgVQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD/baUpzqJTN82YHUcO8uBB/6QY9MB8GA1UdIwQY
MBaAFPtu/tKiSsEg7Saukq5IWBt30klxMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0yNy0wcUpLd1NEdEpxNlNya2hZRzNmU1NYRS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYmEvZjU0NWE0LTIyZmEtNDUxYy04N2Fm
LTYyZjMxNmQwN2Q3MC8xLzEtMjctMHFKS3dTRHRKcTZTcmtoWUczZlNTWEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2JhL2Y1NDVhNC0yMmZhLTQ1MWMtODdhZi02MmYzMTZkMDdk
NzAvMS8xLTI3LTBxSkt3U0R0SnE2U3JraFlHM2ZTU1hFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaKwy
cc+aSnKogCmATNkRb2gaSOPq3Yx68IYWPU7rWLqIHMDYfqbPuJwccrVSrLVv63f6
coJtXa0vJ1x+p4ykTSh4YIm8gakpelC/YzhKJznaSMFyZ9HfNkVFW7KQXzEgk/0H
XglNoxiYpar/92hgvhenHPNiLkpJ2xbtkzX5ZeH3Kk6EWwC0AGqE7MBJ8z/2jaQT
Fz/NSFfOcgKfxeg0aoyz1/T9TFWFHpiCo1eXwTCWOo0xXLY78OFGKCXZltIyEt9q
JmdLRZbG8ctvRR286+LyGV8Bn0rYt3bUjrbs0RDmIIAVomAbaNXdy3yDNlxhSBBZ
tElQvHlerKeozGNOcA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:01:24 2026 by rpki-client