Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
File:                     rPbqD_sq7k927hoQSJabi1Bl2kU.mft (raw, json)
Hash identifier:          SgZreuLdiB0DD+c06tDXbTz6UEpniaWOMLSBqHibsf0=
Subject key identifier:   A3:E8:E4:45:0A:CD:10:4F:F7:2F:59:DC:64:40:9A:02:35:EB:22:EF
Authority key identifier: AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45
Certificate issuer:       /CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
Certificate serial:       019FA184D224F0DCC1434F2D60A5769FFDCA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
Manifest number:          0D90
Signing time:             Mon 27 Jul 2026 03:01:04 +0000
Manifest this update:     Mon 27 Jul 2026 03:01:04 +0000
Manifest next update:     Tue 28 Jul 2026 03:01:04 +0000
Files and hashes:         1: CXD8wfMhKiKiO997lKcwfqvgnd4.roa (hash: GXzecNWlAWU/oBfDZ4cMgGfToo/UFOLMCS/xikLLiZA=)
                          2: Nj5WcVxMsB8s2IvjCOfX6OYyL9c.roa (hash: rf5S758DEbKW96IfUMXXqn9C0gkyLzbP4cr3lVYPPio=)
                          3: p5jfW6ha4amA42QcQVPgAaZ9Pmw.roa (hash: hdqNSuQrQNGkaTv7LpPhrSIwMr6CxzgGsrUQLxZoMvg=)
                          4: rPbqD_sq7k927hoQSJabi1Bl2kU.crl (hash: k7wQX6nxlWFmYU9J+KbAskSFnqzqUnmA0vibUGyEAtM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 03:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:84:d2:24:f0:dc:c1:43:4f:2d:60:a5:76:9f:fd:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf6ea0ffb2aee4f76ee1a1048969b8b5065da45
        Validity
            Not Before: Jul 27 03:01:04 2026 GMT
            Not After : Jul 28 03:01:04 2026 GMT
        Subject: CN=a3e8e4450acd104ff72f59dc64409a0235eb22ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d0:d7:57:47:10:24:00:45:f1:d2:32:d9:dc:
                    47:26:73:fc:f3:29:91:73:0b:3a:31:b9:f7:b3:12:
                    41:cb:f3:18:55:8b:e1:4f:f8:46:43:ac:7c:d1:32:
                    41:5d:de:98:f1:75:b5:6c:a0:90:c2:f2:b9:b6:5f:
                    bf:09:28:38:9f:ea:40:4d:71:e4:b5:15:35:48:9b:
                    b4:87:7c:d8:bd:63:b2:8c:9e:2a:16:78:af:e6:4f:
                    bd:31:78:e7:3b:5f:21:16:a8:b2:59:0f:1c:e8:ab:
                    0a:d1:7e:17:f9:f5:08:5f:d6:09:79:d7:db:d8:eb:
                    3b:32:51:cb:db:43:38:26:81:7a:27:95:05:25:9e:
                    d9:ca:e4:7d:52:01:6f:af:a6:41:8c:1f:23:cb:16:
                    39:63:7d:5d:e6:98:f5:6e:29:87:7b:76:39:f5:01:
                    b0:96:70:20:e5:a1:dd:90:b2:ef:86:59:43:85:b0:
                    80:62:f3:03:43:12:94:2f:cd:73:68:8b:1c:3b:16:
                    fa:70:30:c4:a6:63:0f:78:9c:f4:9a:a8:65:8a:85:
                    52:86:99:f6:b0:e6:c8:8e:ee:9d:83:c2:7c:d5:a2:
                    92:43:0c:e0:07:0f:c1:0d:5f:b3:8b:c8:a6:0d:f4:
                    16:ec:3e:ca:3e:2d:1c:8b:7c:11:40:3b:52:76:2b:
                    1f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E8:E4:45:0A:CD:10:4F:F7:2F:59:DC:64:40:9A:02:35:EB:22:EF
            X509v3 Authority Key Identifier:
                keyid:AC:F6:EA:0F:FB:2A:EE:4F:76:EE:1A:10:48:96:9B:8B:50:65:DA:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPbqD_sq7k927hoQSJabi1Bl2kU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/34439e-9cd2-44c5-9cfd-555f3f18e54f/1/rPbqD_sq7k927hoQSJabi1Bl2kU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f5:9a:a8:39:2a:80:17:6f:4d:a3:93:25:79:31:57:dd:8d:
         4d:29:62:60:74:33:42:c6:5a:41:0d:20:8c:2d:81:3a:02:d2:
         13:84:39:a5:d1:f3:62:ed:b3:cd:d9:a2:7b:04:bf:48:50:88:
         04:ce:65:85:d3:aa:d6:1e:11:c3:5a:53:b2:22:35:1a:b2:61:
         3e:71:05:36:87:e3:37:0c:5e:cc:3f:9d:e2:ed:7b:03:b4:84:
         8d:13:35:7a:1e:0f:5c:0d:e2:85:a4:63:cc:0c:60:a8:79:90:
         84:ef:cb:14:d0:c7:f5:7a:81:e7:fd:d4:1a:24:be:3f:8b:45:
         cf:07:3f:90:ee:ca:ef:4a:10:6b:e5:56:8a:39:14:11:7e:75:
         d3:bf:e4:d8:33:1f:60:fc:0d:e4:55:da:78:0f:5b:c6:a9:80:
         d4:82:1e:5b:da:07:a1:f6:27:9c:f8:a0:de:83:69:93:1a:88:
         ea:c9:d6:0d:65:fd:39:7c:f2:4b:7a:89:37:be:bc:1f:4b:45:
         30:30:ab:a9:79:25:87:34:27:7f:a6:60:61:9f:87:56:c4:25:
         ef:19:fa:c0:8b:f4:aa:8d:0a:57:42:60:da:eb:72:58:74:89:
         e2:4d:b4:7b:39:bf:be:91:e2:37:1e:9e:15:fa:35:ed:4b:23:
         53:01:4f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hhNIk8NzBQ08tYKV2n/3KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZjZlYTBmZmIyYWVlNGY3NmVlMWExMDQ4OTY5YjhiNTA2
NWRhNDUwHhcNMjYwNzI3MDMwMTA0WhcNMjYwNzI4MDMwMTA0WjAzMTEwLwYDVQQD
EyhhM2U4ZTQ0NTBhY2QxMDRmZjcyZjU5ZGM2NDQwOWEwMjM1ZWIyMmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9DXV0cQJABF8dIy2dxHJnP88ymR
cws6Mbn3sxJBy/MYVYvhT/hGQ6x80TJBXd6Y8XW1bKCQwvK5tl+/CSg4n+pATXHk
tRU1SJu0h3zYvWOyjJ4qFniv5k+9MXjnO18hFqiyWQ8c6KsK0X4X+fUIX9YJedfb
2Os7MlHL20M4JoF6J5UFJZ7ZyuR9UgFvr6ZBjB8jyxY5Y31d5pj1bimHe3Y59QGw
lnAg5aHdkLLvhllDhbCAYvMDQxKUL81zaIscOxb6cDDEpmMPeJz0mqhlioVShpn2
sObIju6dg8J81aKSQwzgBw/BDV+zi8imDfQW7D7KPi0ci3wRQDtSdisfmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPo5EUKzRBP9y9Z3GRAmgI16yLvMB8GA1UdIwQY
MBaAFKz26g/7Ku5Pdu4aEEiWm4tQZdpFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQt
NTU1ZjNmMThlNTRmLzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi8zNDQzOWUtOWNkMi00NGM1LTljZmQtNTU1ZjNmMThlNTRm
LzEvclBicURfc3E3azkyN2hvUVNKYWJpMUJsMmtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPWaqDkq
gBdvTaOTJXkxV92NTSliYHQzQsZaQQ0gjC2BOgLSE4Q5pdHzYu2zzdmiewS/SFCI
BM5lhdOq1h4Rw1pTsiI1GrJhPnEFNofjNwxezD+d4u17A7SEjRM1eh4PXA3ihaRj
zAxgqHmQhO/LFNDH9XqB5/3UGiS+P4tFzwc/kO7K70oQa+VWijkUEX5107/k2DMf
YPwN5FXaeA9bxqmA1IIeW9oHofYnnPig3oNpkxqI6snWDWX9OXzyS3qJN768H0tF
MDCrqXklhzQnf6ZgYZ+HVsQl7xn6wIv0qo0KV0Jg2utyWHSJ4k20ezm/vpHiNx6e
Ffo17UsjUwFPIA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:38:29 2026 by rpki-client