Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
File:                     d7__1npLmUVKyaQA50ecdg1VRsw.mft (raw, json)
Hash identifier:          ezsotOVSjB1IlpIWGWvyGPhPLawUVWTwgcMyNbIqXb4=
Subject key identifier:   7C:95:90:02:4F:59:E3:E9:06:6E:9E:1C:2E:75:EF:6C:A6:81:45:99
Authority key identifier: 77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC
Certificate issuer:       /CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
Certificate serial:       019F84C45151E33B3EB3D7C4528E80CD8F50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
Manifest number:          0736
Signing time:             Tue 21 Jul 2026 13:01:25 +0000
Manifest this update:     Tue 21 Jul 2026 13:01:25 +0000
Manifest next update:     Wed 22 Jul 2026 13:01:25 +0000
Files and hashes:         1: 1uDiO66z4_GJhppKD5iOYZne4xo.roa (hash: njjChOiFqIrX1FbvslTiBWjd0QGU3XMKBcIu3VrqVf0=)
                          2: d7__1npLmUVKyaQA50ecdg1VRsw.crl (hash: 1As8hRWN7rcx6oeCyTB0Mb3hrlDn9Xjwb1c0Me275IM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c4:51:51:e3:3b:3e:b3:d7:c4:52:8e:80:cd:8f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77bfffd67a4b99454ac9a400e7479c760d5546cc
        Validity
            Not Before: Jul 21 13:01:25 2026 GMT
            Not After : Jul 22 13:01:25 2026 GMT
        Subject: CN=7c9590024f59e3e9066e9e1c2e75ef6ca6814599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:76:e8:e9:95:8b:24:f4:e9:9f:65:96:35:29:
                    04:51:53:ff:8f:d3:67:11:20:fa:28:59:b0:4d:41:
                    24:fe:58:7f:a5:19:9f:a0:3a:07:48:a6:45:2c:8e:
                    a3:09:cf:44:b2:55:04:0f:79:3a:32:78:5b:aa:0e:
                    17:e7:e4:3c:6b:25:22:35:fd:23:3a:dd:7d:c5:b7:
                    ee:57:59:3f:70:32:41:dc:82:d0:68:13:fa:f7:e5:
                    21:8d:a2:b0:ff:ab:c9:4a:fe:72:b2:12:3b:9a:c1:
                    96:9a:44:b0:a1:87:da:1e:bc:e2:22:c5:69:da:a9:
                    7f:d5:7e:14:a2:ae:ba:c5:9f:6c:42:c4:ed:63:f7:
                    58:25:d4:7c:54:30:6b:e5:f2:98:24:5d:6f:bc:86:
                    ad:c1:70:ac:d0:37:34:ee:a6:d3:68:fd:e3:e3:d8:
                    b5:70:91:2f:ae:31:26:fa:2a:a5:2a:d4:0f:d6:3e:
                    65:45:ad:71:92:87:72:f1:dc:2d:47:0f:bb:9b:3c:
                    da:59:6f:e7:62:29:43:e6:a9:a3:01:78:28:61:a2:
                    2b:76:57:c6:74:1a:31:7d:08:ca:77:87:b9:21:e3:
                    56:12:14:21:01:47:fb:a6:2e:c8:b6:46:80:61:d6:
                    7b:b9:64:cb:e6:44:db:3d:d6:11:9d:30:91:0a:59:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:95:90:02:4F:59:E3:E9:06:6E:9E:1C:2E:75:EF:6C:A6:81:45:99
            X509v3 Authority Key Identifier:
                keyid:77:BF:FF:D6:7A:4B:99:45:4A:C9:A4:00:E7:47:9C:76:0D:55:46:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7__1npLmUVKyaQA50ecdg1VRsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e74e65-5c9d-46c7-967c-44d1e24b7b25/1/d7__1npLmUVKyaQA50ecdg1VRsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fb:ec:52:1b:74:10:42:f6:01:0c:f4:b6:e5:3c:a7:57:22:
         8e:af:61:57:35:0f:1a:17:dc:40:0f:e3:eb:e1:63:82:f4:46:
         82:00:4a:2b:c1:29:4f:39:36:3f:77:05:a3:f9:24:01:f2:f1:
         ad:b4:aa:06:81:d9:50:2b:81:89:2f:6d:b2:74:16:15:ee:0a:
         71:c1:a3:ac:0a:01:dc:15:88:ea:80:51:ab:54:79:35:e0:48:
         35:3c:8a:a3:1f:c8:19:88:01:87:1e:78:b8:56:e0:85:fb:0b:
         c4:33:8a:ca:9c:ba:a2:b9:3a:1d:62:b7:b9:c6:5a:4b:77:72:
         bc:9b:aa:e5:bf:fb:42:ea:0c:c1:93:84:9d:32:ac:fd:88:8f:
         6a:d5:17:cb:24:89:b9:c4:94:67:e3:8c:87:e2:1a:ce:10:98:
         bb:a5:18:70:29:66:68:fa:2a:84:fe:09:27:4c:5a:b8:a1:d1:
         f7:01:58:aa:f9:05:09:8d:4c:2e:85:83:9d:af:4f:91:69:eb:
         f7:91:aa:60:74:75:cb:61:5a:ff:15:b6:74:49:a6:51:60:06:
         27:67:f5:2f:53:21:ff:86:78:5b:81:7b:72:79:88:6f:f9:8a:
         28:de:fd:0e:0c:b2:77:ac:16:1b:eb:2c:da:68:85:3a:b7:d1:
         75:dc:87:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ExFFR4zs+s9fEUo6AzY9QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YmZmZmQ2N2E0Yjk5NDU0YWM5YTQwMGU3NDc5Yzc2MGQ1
NTQ2Y2MwHhcNMjYwNzIxMTMwMTI1WhcNMjYwNzIyMTMwMTI1WjAzMTEwLwYDVQQD
Eyg3Yzk1OTAwMjRmNTllM2U5MDY2ZTllMWMyZTc1ZWY2Y2E2ODE0NTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHbo6ZWLJPTpn2WWNSkEUVP/j9Nn
ESD6KFmwTUEk/lh/pRmfoDoHSKZFLI6jCc9EslUED3k6Mnhbqg4X5+Q8ayUiNf0j
Ot19xbfuV1k/cDJB3ILQaBP69+UhjaKw/6vJSv5yshI7msGWmkSwoYfaHrziIsVp
2ql/1X4Uoq66xZ9sQsTtY/dYJdR8VDBr5fKYJF1vvIatwXCs0Dc07qbTaP3j49i1
cJEvrjEm+iqlKtQP1j5lRa1xkody8dwtRw+7mzzaWW/nYilD5qmjAXgoYaIrdlfG
dBoxfQjKd4e5IeNWEhQhAUf7pi7ItkaAYdZ7uWTL5kTbPdYRnTCRClmHzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHyVkAJPWePpBm6eHC5172ymgUWZMB8GA1UdIwQY
MBaAFHe//9Z6S5lFSsmkAOdHnHYNVUbMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2Mt
NDRkMWUyNGI3YjI1LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9lNzRlNjUtNWM5ZC00NmM3LTk2N2MtNDRkMWUyNGI3YjI1
LzEvZDdfXzFucExtVVZLeWFRQTUwZWNkZzFWUnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvvsUht0
EEL2AQz0tuU8p1cijq9hVzUPGhfcQA/j6+FjgvRGggBKK8EpTzk2P3cFo/kkAfLx
rbSqBoHZUCuBiS9tsnQWFe4KccGjrAoB3BWI6oBRq1R5NeBINTyKox/IGYgBhx54
uFbghfsLxDOKypy6ork6HWK3ucZaS3dyvJuq5b/7QuoMwZOEnTKs/YiPatUXyySJ
ucSUZ+OMh+IazhCYu6UYcClmaPoqhP4JJ0xauKHR9wFYqvkFCY1MLoWDna9PkWnr
95GqYHR1y2Fa/xW2dEmmUWAGJ2f1L1Mh/4Z4W4F7cnmIb/mKKN79Dgyyd6wWG+ss
2miFOrfRddyH6g==
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:57 2026 by rpki-client