Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
File:                     mEtpDW3TsPrs4DvyCPADDjOMIhY.mft (raw, json)
Hash identifier:          XNz6PNSrObeP+j+K80kL0vcNWIiRMARALjT98dE9hn8=
Subject key identifier:   E5:1B:C0:A6:A3:22:9F:5A:41:0E:2C:D5:A1:60:45:64:9B:D6:AF:E1
Authority key identifier: 98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16
Certificate issuer:       /CN=984b690d6dd3b0faece03bf208f0030e338c2216
Certificate serial:       019F8568118FB8A80B0A3D42DEC7CF5D2277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
Manifest number:          1143
Signing time:             Tue 21 Jul 2026 16:00:17 +0000
Manifest this update:     Tue 21 Jul 2026 16:00:17 +0000
Manifest next update:     Wed 22 Jul 2026 16:00:17 +0000
Files and hashes:         1: G8esPcMzQ9AFE_Fw8xl_QXTlOTU.roa (hash: 3RDVfSY7ZJX5UewWPelwEVlTR7B8w1TOwr419YQ9XiI=)
                          2: mEtpDW3TsPrs4DvyCPADDjOMIhY.crl (hash: zX05UStoNbsJIxIBeugWEIenU9eTI+NefOHM8fYJM/o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:68:11:8f:b8:a8:0b:0a:3d:42:de:c7:cf:5d:22:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984b690d6dd3b0faece03bf208f0030e338c2216
        Validity
            Not Before: Jul 21 16:00:17 2026 GMT
            Not After : Jul 22 16:00:17 2026 GMT
        Subject: CN=e51bc0a6a3229f5a410e2cd5a16045649bd6afe1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:26:b1:1c:61:f3:0e:91:71:6c:42:4c:2a:e1:
                    04:5e:a1:dd:43:a5:ce:57:27:28:73:43:db:93:f4:
                    71:9d:b6:d5:96:16:d1:95:f3:91:fd:de:34:de:7c:
                    70:84:1f:cb:df:d7:a2:3b:f6:19:9a:55:38:e3:a9:
                    c2:a5:27:02:12:0a:1f:17:22:c9:43:d2:da:9b:62:
                    10:db:0c:cf:24:a2:e6:54:98:26:6f:aa:18:5e:f6:
                    6a:14:95:ca:fb:ef:4e:41:fe:25:b0:a0:0f:32:37:
                    95:dc:5e:18:9a:b6:98:5d:be:71:c6:bf:e4:8a:d4:
                    4c:63:8c:be:cd:3c:b8:d1:a0:c4:36:21:6a:80:3b:
                    6f:e4:92:57:05:3b:32:10:5e:84:fc:7f:82:18:2a:
                    0e:50:b0:74:57:8e:93:06:22:6c:71:d9:fa:b9:0b:
                    98:78:1f:07:d5:94:2f:39:58:c4:63:5e:cb:d1:96:
                    df:09:6b:56:ab:ea:3c:35:41:a6:f2:da:20:23:a4:
                    dd:77:9a:62:f7:2d:e2:5f:b8:1b:d7:5b:02:6f:76:
                    4c:d9:2b:55:7d:50:ea:22:20:99:24:71:ed:4b:de:
                    82:92:c1:28:40:89:e4:f7:74:7e:da:1c:0c:22:59:
                    f7:ab:9e:ad:6b:58:08:96:1f:90:8c:e2:10:8d:ea:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1B:C0:A6:A3:22:9F:5A:41:0E:2C:D5:A1:60:45:64:9B:D6:AF:E1
            X509v3 Authority Key Identifier:
                keyid:98:4B:69:0D:6D:D3:B0:FA:EC:E0:3B:F2:08:F0:03:0E:33:8C:22:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mEtpDW3TsPrs4DvyCPADDjOMIhY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/34ffe7-9bf4-452b-9199-1255da04d986/1/mEtpDW3TsPrs4DvyCPADDjOMIhY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:f6:27:43:f3:2a:0e:91:a3:b3:e2:ab:64:0e:b3:49:96:da:
         b9:29:61:a0:2a:fe:15:25:33:12:c2:b0:b7:bd:d8:c7:5c:8e:
         11:3a:78:8e:83:ca:8b:32:4f:1c:37:9c:38:d7:0b:eb:fe:1b:
         5e:36:04:3b:5c:74:e8:c8:7e:8c:bf:00:a1:c9:09:cc:37:8d:
         5e:74:8e:bf:52:e2:1b:f8:a4:b9:f7:1f:75:34:22:4d:45:a2:
         8c:79:e8:35:de:b7:1c:cf:58:8f:26:c4:ca:89:83:c8:d5:f9:
         54:65:6f:79:ac:55:b9:31:9e:74:4e:7e:43:96:e5:72:94:f4:
         66:f9:ff:6c:95:27:79:fa:84:71:20:ef:2e:ae:67:ee:d1:75:
         f7:22:1e:db:ae:6c:9a:17:29:bf:52:26:5a:35:c9:29:a7:4c:
         08:20:6f:1f:f7:e8:3b:93:32:9a:6f:49:3f:7d:7b:51:7b:71:
         15:5c:3a:b4:f2:8e:1e:a2:6c:d5:8c:37:cc:f9:74:b4:bf:7b:
         ac:ab:fb:33:9a:85:eb:51:03:22:02:7f:a0:94:d7:d0:44:31:
         f7:34:0b:46:b4:21:cf:97:3d:37:6c:a0:0a:3c:68:01:90:86:
         4b:28:a7:02:7b:e3:65:3d:b5:e3:40:8a:88:8d:81:d3:b0:63:
         80:6e:db:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+FaBGPuKgLCj1C3sfPXSJ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4NGI2OTBkNmRkM2IwZmFlY2UwM2JmMjA4ZjAwMzBlMzM4
YzIyMTYwHhcNMjYwNzIxMTYwMDE3WhcNMjYwNzIyMTYwMDE3WjAzMTEwLwYDVQQD
EyhlNTFiYzBhNmEzMjI5ZjVhNDEwZTJjZDVhMTYwNDU2NDliZDZhZmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSaxHGHzDpFxbEJMKuEEXqHdQ6XO
Vycoc0Pbk/RxnbbVlhbRlfOR/d403nxwhB/L39eiO/YZmlU446nCpScCEgofFyLJ
Q9Lam2IQ2wzPJKLmVJgmb6oYXvZqFJXK++9OQf4lsKAPMjeV3F4YmraYXb5xxr/k
itRMY4y+zTy40aDENiFqgDtv5JJXBTsyEF6E/H+CGCoOULB0V46TBiJscdn6uQuY
eB8H1ZQvOVjEY17L0ZbfCWtWq+o8NUGm8togI6Tdd5pi9y3iX7gb11sCb3ZM2StV
fVDqIiCZJHHtS96CksEoQInk93R+2hwMIln3q56ta1gIlh+QjOIQjeoUgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUbwKajIp9aQQ4s1aFgRWSb1q/hMB8GA1UdIwQY
MBaAFJhLaQ1t07D67OA78gjwAw4zjCIWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTkt
MTI1NWRhMDRkOTg2LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8zNGZmZTctOWJmNC00NTJiLTkxOTktMTI1NWRhMDRkOTg2
LzEvbUV0cERXM1RzUHJzNER2eUNQQUREak9NSWhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXfYnQ/Mq
DpGjs+KrZA6zSZbauSlhoCr+FSUzEsKwt73Yx1yOETp4joPKizJPHDecONcL6/4b
XjYEO1x06Mh+jL8AockJzDeNXnSOv1LiG/ikufcfdTQiTUWijHnoNd63HM9YjybE
yomDyNX5VGVveaxVuTGedE5+Q5blcpT0Zvn/bJUnefqEcSDvLq5n7tF19yIe265s
mhcpv1ImWjXJKadMCCBvH/foO5Mymm9JP317UXtxFVw6tPKOHqJs1Yw3zPl0tL97
rKv7M5qF61EDIgJ/oJTX0EQx9zQLRrQhz5c9N2ygCjxoAZCGSyinAnvjZT2140CK
iI2B07BjgG7bMQ==
-----END CERTIFICATE-----
Generated at Tue Jul 21 22:15:34 2026 by rpki-client