Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File:                     tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier:          ibTb3VSr5zBd7oC5t1gOVgI3S64Z0qFMaccLVlrQBa0=
Subject key identifier:   F3:B1:C4:7C:3A:36:7F:FB:69:06:54:3E:08:28:FE:24:59:BB:83:DE
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer:       /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial:       019FA0A8B19136087EB7EDDCACEB14D0BC25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number:          0B9B
Signing time:             Sun 26 Jul 2026 23:00:37 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:37 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:37 +0000
Files and hashes:         1: HhEHXcVrA4jYly_4JLZyYZncnvg.roa (hash: 6iTpuhytQNXUI4g8368tGo5DhJ/PIFrnzj+J0UysgLI=)
                          2: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: scrWOCkkiwWVxXqvK50Ot6zNv60jqYkLPOO13OLNHWU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:b1:91:36:08:7e:b7:ed:dc:ac:eb:14:d0:bc:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
        Validity
            Not Before: Jul 26 23:00:37 2026 GMT
            Not After : Jul 27 23:00:37 2026 GMT
        Subject: CN=f3b1c47c3a367ffb6906543e0828fe2459bb83de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e8:b3:a6:a6:48:15:94:9f:e2:fb:a3:fb:bb:
                    a6:d3:94:73:5c:3d:cd:23:9a:c2:13:38:4e:40:72:
                    18:f2:fa:2f:a7:7f:35:a9:c9:20:0d:14:b6:1f:c1:
                    d6:61:19:d5:62:16:d9:3a:51:ae:64:15:0e:56:c0:
                    60:83:d9:ae:c9:85:d9:69:59:3e:a3:9a:5f:d7:9a:
                    0f:c7:42:b1:3b:96:d8:e7:63:a9:4d:73:65:6d:8f:
                    3b:89:26:17:28:b8:79:68:a4:81:10:80:ad:ad:0c:
                    35:4f:93:26:59:7c:30:8e:c4:54:2f:f2:f2:83:e2:
                    37:95:b4:af:c7:38:cc:f5:fb:05:80:38:6b:ac:43:
                    80:d8:46:55:b0:98:7a:9b:46:a4:a1:d0:98:6f:68:
                    e2:59:0d:d2:06:74:41:fa:bd:56:f7:64:5d:bb:d5:
                    af:de:e3:cc:18:9d:f3:38:46:ed:d7:f2:04:1f:26:
                    b6:4c:86:ac:ec:a7:0c:e3:ec:1f:53:92:45:4e:f9:
                    fa:1b:f4:2b:20:28:4d:15:09:89:c6:f0:a6:79:88:
                    00:84:9f:91:dc:24:ae:d5:ef:1d:78:7b:f4:99:02:
                    09:25:b0:1b:4e:6d:80:bf:57:02:df:d3:91:59:6e:
                    04:cd:10:21:93:27:21:8c:66:b9:90:7d:62:f4:10:
                    79:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B1:C4:7C:3A:36:7F:FB:69:06:54:3E:08:28:FE:24:59:BB:83:DE
            X509v3 Authority Key Identifier:
                keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:d4:56:68:28:d7:c1:e8:b7:77:54:94:ef:81:d4:c8:dd:80:
         88:c2:42:59:d3:34:ee:bf:6e:84:ed:30:a3:2c:5b:eb:cc:d5:
         6c:f3:d4:a8:54:16:f0:d9:3a:f5:eb:b4:3d:d3:61:e2:2f:8e:
         e0:e3:11:cb:db:28:de:c5:4f:7a:4b:16:01:36:aa:79:d2:b7:
         b1:27:58:29:4d:0b:86:f1:57:51:25:e4:01:7e:02:44:7f:32:
         63:82:5d:2c:32:a1:d2:aa:b1:72:3b:16:92:fa:6e:d0:80:e0:
         16:a6:28:28:e5:0b:c7:c9:67:37:80:ac:bd:78:e9:53:5a:68:
         33:8b:8b:8b:00:f5:e2:07:4f:3b:6f:da:6d:59:81:ea:d7:41:
         b2:32:d5:08:ff:96:02:32:17:5e:d6:4b:16:9e:77:b4:00:fd:
         e5:68:ff:09:f8:00:c2:df:55:5d:97:f8:95:a4:5b:14:dd:24:
         86:2d:a7:73:9d:b6:8e:92:45:ac:bb:41:27:dd:61:ea:5e:1b:
         7b:78:62:96:19:0f:94:7c:1b:bb:d2:38:b8:04:73:5a:7f:15:
         82:1d:18:ca:fd:52:fb:6a:cc:e6:c0:a3:55:81:fb:be:57:da:
         38:ce:2c:e8:f5:cc:b0:4e:c1:ad:e7:af:b7:e4:52:ab:de:5e:
         01:1a:f0:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gqLGRNgh+t+3crOsU0LwlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0ZjQ5Njk4ZDA4ZThjMjgzYzBkZjJhODJmMTY5OTdlNjI1
OWJhYjYwHhcNMjYwNzI2MjMwMDM3WhcNMjYwNzI3MjMwMDM3WjAzMTEwLwYDVQQD
EyhmM2IxYzQ3YzNhMzY3ZmZiNjkwNjU0M2UwODI4ZmUyNDU5YmI4M2RlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuizpqZIFZSf4vuj+7um05RzXD3N
I5rCEzhOQHIY8vovp381qckgDRS2H8HWYRnVYhbZOlGuZBUOVsBgg9muyYXZaVk+
o5pf15oPx0KxO5bY52OpTXNlbY87iSYXKLh5aKSBEICtrQw1T5MmWXwwjsRUL/Ly
g+I3lbSvxzjM9fsFgDhrrEOA2EZVsJh6m0akodCYb2jiWQ3SBnRB+r1W92Rdu9Wv
3uPMGJ3zOEbt1/IEHya2TIas7KcM4+wfU5JFTvn6G/QrIChNFQmJxvCmeYgAhJ+R
3CSu1e8deHv0mQIJJbAbTm2Av1cC39ORWW4EzRAhkychjGa5kH1i9BB59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPOxxHw6Nn/7aQZUPggo/iRZu4PeMB8GA1UdIwQY
MBaAFLT0lpjQjowoPA3yqC8WmX5iWbq2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMt
OWY3YWEwOTQzMDNiLzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS9mNjNkNzYtMmZiNi00M2EyLWJmZWMtOWY3YWEwOTQzMDNi
LzEvdFBTV21OQ09qQ2c4RGZLb0x4YVpmbUpadXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUNRWaCjX
wei3d1SU74HUyN2AiMJCWdM07r9uhO0woyxb68zVbPPUqFQW8Nk69eu0PdNh4i+O
4OMRy9so3sVPeksWATaqedK3sSdYKU0LhvFXUSXkAX4CRH8yY4JdLDKh0qqxcjsW
kvpu0IDgFqYoKOULx8lnN4CsvXjpU1poM4uLiwD14gdPO2/abVmB6tdBsjLVCP+W
AjIXXtZLFp53tAD95Wj/CfgAwt9VXZf4laRbFN0khi2nc522jpJFrLtBJ91h6l4b
e3hilhkPlHwbu9I4uARzWn8Vgh0Yyv1S+2rM5sCjVYH7vlfaOM4s6PXMsE7Breev
t+RSq95eARrwPA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:24 2026 by rpki-client