Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.mft
File:                     75YI_56fSNVLIJcl1I9nyEh1FHo.mft (raw, json)
Hash identifier:          gHXrv0jPaTQoB+C/z0tw4b9zPckpZgoXUO781scWZJQ=
Subject key identifier:   EF:BA:D6:53:FA:AA:5E:8E:83:36:CA:E0:FF:41:8E:0D:17:58:4F:DA
Authority key identifier: EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A
Certificate issuer:       /CN=ef9608ff9e9f48d54b209725d48f67c84875147a
Certificate serial:       019FA0E129C2A7D2BBC288F8045EF00609E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:02:18 +0000
Manifest this update:     Mon 27 Jul 2026 00:02:18 +0000
Manifest next update:     Tue 28 Jul 2026 00:02:18 +0000
Files and hashes:         1: 75YI_56fSNVLIJcl1I9nyEh1FHo.crl (hash: N4TDvFO6K8TOzOtTWC4SOyyroGJh5QmFDGaDoaSdRLg=)
                          2: Bp4o3PtdDR3VRbnyrYPNu5u0q6A.roa (hash: sXTP7rRbvjH2GCpBGE0w+N3/UUJO2wFbZXvL4X/0f9Q=)
                          3: IsMsXLfSs2vsgsxtfMoL7ji94OY.roa (hash: Ped2jsIPE2DeVXNb46SdOVwPkO1Se/uZIcMprT51uN8=)
                          4: TOSe0dEpW059OXyr8k_MBw11vLs.roa (hash: gXblBtqKayIFAaROQkX00Vdj/Evs6LIvpVQSI3UqMBU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 00:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e1:29:c2:a7:d2:bb:c2:88:f8:04:5e:f0:06:09:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef9608ff9e9f48d54b209725d48f67c84875147a
        Validity
            Not Before: Jul 27 00:02:18 2026 GMT
            Not After : Jul 28 00:02:18 2026 GMT
        Subject: CN=efbad653faaa5e8e8336cae0ff418e0d17584fda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:25:3b:ce:39:3b:fb:d1:eb:e1:15:32:42:
                    5f:ee:4c:ee:ab:b2:fd:92:09:80:84:d0:c5:8b:ed:
                    be:13:e5:b7:d2:a9:6c:5a:8f:e2:2d:97:a4:06:42:
                    54:8e:21:5c:03:26:c2:4d:c9:8a:59:ce:f4:38:a8:
                    71:bc:20:01:71:e8:a4:b4:1a:24:b3:79:3a:17:1b:
                    ac:a3:a2:98:23:82:66:2a:1b:50:b1:ac:20:3b:f7:
                    65:4c:27:56:ec:b0:b1:57:5f:fe:49:c5:c7:98:21:
                    ca:fa:af:0d:c6:13:71:4f:c8:48:12:5b:be:ec:36:
                    f3:b3:4f:88:24:7a:6e:85:12:d7:81:48:6a:e7:36:
                    3b:5b:ff:ed:bb:61:27:d5:fc:58:91:77:c7:06:60:
                    8e:86:ea:4f:3d:be:63:93:45:ee:07:68:ab:b0:b6:
                    d3:bd:d0:b4:b5:28:6a:a1:6b:1c:10:59:af:3b:43:
                    69:8d:57:34:ac:b7:aa:ed:23:61:0c:58:52:f0:19:
                    4b:7b:3f:c1:d1:b5:f0:5a:b9:6b:4f:51:90:9e:3e:
                    cb:71:54:fd:e1:b3:aa:ed:5b:65:3c:fa:46:5e:1c:
                    ea:b9:b4:0a:61:bf:85:03:45:86:d4:e5:92:ff:f4:
                    15:4d:57:82:82:9e:e7:db:f2:3f:a5:fe:74:21:c2:
                    88:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:BA:D6:53:FA:AA:5E:8E:83:36:CA:E0:FF:41:8E:0D:17:58:4F:DA
            X509v3 Authority Key Identifier:
                keyid:EF:96:08:FF:9E:9F:48:D5:4B:20:97:25:D4:8F:67:C8:48:75:14:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75YI_56fSNVLIJcl1I9nyEh1FHo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/cf24bd-c15b-484c-9732-04b3813f3b3d/1/75YI_56fSNVLIJcl1I9nyEh1FHo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:67:56:83:af:79:50:bd:17:6c:fe:db:c1:01:c1:7d:4e:2b:
         70:98:35:bd:95:19:f1:b1:4e:94:ff:46:fd:a5:e3:91:7a:61:
         9d:20:dd:a8:20:8f:eb:fa:ab:61:46:1e:1b:f3:12:e9:3a:00:
         cc:ae:01:4b:5c:b8:0b:79:eb:bd:f7:67:67:fb:82:96:fb:75:
         72:ee:45:e0:69:62:17:e7:65:5c:ec:f4:9e:a7:84:af:5b:bc:
         11:10:50:49:63:94:b7:5e:22:99:0f:58:c7:56:db:9f:dc:f9:
         ee:12:e1:20:13:d5:24:07:b5:61:78:e6:1a:a0:74:57:ff:fa:
         95:e9:64:53:59:57:68:46:cd:6c:6e:f9:a9:44:a9:cd:ec:f7:
         1c:44:5e:c1:fb:f8:ed:95:56:96:f6:fe:4c:56:70:3c:2c:30:
         82:88:50:60:9c:e9:47:a9:fb:0b:58:a2:4f:3c:20:05:14:3c:
         83:3a:ff:61:6c:7c:f5:51:94:6c:4e:4b:4a:ad:f3:31:7b:ba:
         21:b1:9a:48:79:ce:a6:06:a2:5a:41:64:45:c9:28:94:1e:73:
         64:d5:bc:7e:71:6b:1e:db:b4:99:42:8d:43:15:09:9c:8a:27:
         2b:c7:49:59:cf:4d:c6:21:2b:2d:f1:30:7e:1e:5e:77:be:24:
         39:4c:b8:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4SnCp9K7woj4BF7wBgnpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOTYwOGZmOWU5ZjQ4ZDU0YjIwOTcyNWQ0OGY2N2M4NDg3
NTE0N2EwHhcNMjYwNzI3MDAwMjE4WhcNMjYwNzI4MDAwMjE4WjAzMTEwLwYDVQQD
EyhlZmJhZDY1M2ZhYWE1ZThlODMzNmNhZTBmZjQxOGUwZDE3NTg0ZmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArY8lO845O/vR6+EVMkJf7kzuq7L9
kgmAhNDFi+2+E+W30qlsWo/iLZekBkJUjiFcAybCTcmKWc70OKhxvCABceiktBok
s3k6Fxuso6KYI4JmKhtQsawgO/dlTCdW7LCxV1/+ScXHmCHK+q8NxhNxT8hIElu+
7Dbzs0+IJHpuhRLXgUhq5zY7W//tu2En1fxYkXfHBmCOhupPPb5jk0XuB2irsLbT
vdC0tShqoWscEFmvO0NpjVc0rLeq7SNhDFhS8BlLez/B0bXwWrlrT1GQnj7LcVT9
4bOq7VtlPPpGXhzqubQKYb+FA0WG1OWS//QVTVeCgp7n2/I/pf50IcKI5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+61lP6ql6OgzbK4P9Bjg0XWE/aMB8GA1UdIwQY
MBaAFO+WCP+en0jVSyCXJdSPZ8hIdRR6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzVZSV81NmZTTlZMSUpjbDFJOW55RWgxRkhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzIt
MDRiMzgxM2YzYjNkLzEvNzVZSV81NmZTTlZMSUpjbDFJOW55RWgxRkhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC9jZjI0YmQtYzE1Yi00ODRjLTk3MzItMDRiMzgxM2YzYjNk
LzEvNzVZSV81NmZTTlZMSUpjbDFJOW55RWgxRkhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAymdWg695
UL0XbP7bwQHBfU4rcJg1vZUZ8bFOlP9G/aXjkXphnSDdqCCP6/qrYUYeG/MS6ToA
zK4BS1y4C3nrvfdnZ/uClvt1cu5F4GliF+dlXOz0nqeEr1u8ERBQSWOUt14imQ9Y
x1bbn9z57hLhIBPVJAe1YXjmGqB0V//6lelkU1lXaEbNbG75qUSpzez3HERewfv4
7ZVWlvb+TFZwPCwwgohQYJzpR6n7C1iiTzwgBRQ8gzr/YWx89VGUbE5LSq3zMXu6
IbGaSHnOpgaiWkFkRckolB5zZNW8fnFrHtu0mUKNQxUJnIonK8dJWc9NxiErLfEw
fh5ed74kOUy4SA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:24:11 2026 by rpki-client