Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
File:                     _MziomuQk8lrKlzN3XA0u1zgEvw.mft (raw, json)
Hash identifier:          PaiHlLDLievmQmaXByqn63rVIRIuqvr4GOHuDLajlNY=
Subject key identifier:   C3:C5:CA:BA:69:70:19:56:C7:4D:B2:93:C7:96:48:D1:D9:8A:72:A0
Authority key identifier: FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC
Certificate issuer:       /CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
Certificate serial:       019FA2CDD0B2427D75625A1716C73CF0C5E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
Manifest number:          49
Signing time:             Mon 27 Jul 2026 09:00:25 +0000
Manifest this update:     Mon 27 Jul 2026 09:00:25 +0000
Manifest next update:     Tue 28 Jul 2026 09:00:25 +0000
Files and hashes:         1: SFuwL9n2ykHG8Q1bG2zh3J3rMY8.roa (hash: MQYGYdS73ZtBvhBLN7sM94ounBVaM1F31AdoiiH3acc=)
                          2: _MziomuQk8lrKlzN3XA0u1zgEvw.crl (hash: 4zpQSpWhbKLIif8nrLeLG6lYP0Pet8G1lpCeKYvFesc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:cd:d0:b2:42:7d:75:62:5a:17:16:c7:3c:f0:c5:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fccce2a26b9093c96b2a5ccddd7034bb5ce012fc
        Validity
            Not Before: Jul 27 09:00:25 2026 GMT
            Not After : Jul 28 09:00:25 2026 GMT
        Subject: CN=c3c5caba69701956c74db293c79648d1d98a72a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:f3:9d:e8:b1:33:f7:c0:06:62:c9:d2:64:
                    7b:1e:b0:d6:93:e2:33:98:6f:58:56:3b:60:c6:a1:
                    a1:04:e0:36:08:f0:46:81:39:3b:a9:d8:ee:d4:13:
                    76:81:ae:ac:af:c4:de:95:fb:43:2f:57:b3:71:0c:
                    00:9d:98:70:47:81:52:72:a2:4c:16:81:18:20:eb:
                    5b:20:ca:3c:b7:a7:13:5d:13:11:1f:e6:d2:0e:83:
                    15:40:2c:53:16:d4:30:6a:e7:27:ab:62:1c:a9:f5:
                    3a:81:a3:ea:36:f4:e4:24:57:ea:f8:9a:31:ae:33:
                    46:38:85:ea:f2:c7:3a:1f:4d:a4:68:c5:e0:3e:20:
                    1d:d7:99:05:58:a0:24:78:3e:66:b3:5f:0f:41:51:
                    45:94:ca:6e:cb:1b:03:89:cb:b8:34:aa:fb:af:2e:
                    af:48:67:b5:23:cd:3d:6e:30:c7:47:fb:cc:d4:84:
                    2c:d0:7b:df:77:ef:64:e3:04:a8:33:6c:30:95:3a:
                    d4:e7:91:4c:58:fd:08:84:0c:da:3c:a2:e8:a2:e5:
                    bd:76:2c:f4:6b:84:df:4d:13:7d:6a:f8:0c:47:37:
                    d5:14:09:c5:74:31:5e:e1:99:66:b9:27:65:59:1e:
                    8e:b6:f3:d0:27:01:7b:fd:44:87:28:12:8c:41:e2:
                    2b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:C5:CA:BA:69:70:19:56:C7:4D:B2:93:C7:96:48:D1:D9:8A:72:A0
            X509v3 Authority Key Identifier:
                keyid:FC:CC:E2:A2:6B:90:93:C9:6B:2A:5C:CD:DD:70:34:BB:5C:E0:12:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_MziomuQk8lrKlzN3XA0u1zgEvw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/0ee2ab-07d9-4a81-abf0-e0e4be6696f9/1/_MziomuQk8lrKlzN3XA0u1zgEvw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:32:6b:9b:23:96:3e:5f:9e:b7:4f:b5:84:97:05:f7:65:6d:
         1b:f5:b2:a8:b6:0c:4f:a3:24:b0:da:b0:6b:9d:15:48:84:b2:
         e6:f4:e7:73:0f:68:17:e9:0f:fe:17:39:c1:5c:9d:1f:63:55:
         a9:cc:37:17:06:72:92:2d:9d:e5:14:a5:cc:c7:7c:3e:41:65:
         a1:78:1b:91:92:ef:2b:b0:47:08:c7:d4:24:86:94:eb:c1:f5:
         88:3d:d9:c7:11:38:fb:90:a4:5b:85:6a:97:13:3d:8b:a8:06:
         3d:14:79:55:dd:73:5b:02:97:1a:bc:62:14:fa:5f:70:b3:88:
         f0:53:8e:97:9a:77:a0:75:59:4c:2b:a9:2d:e8:5a:cb:75:d6:
         b1:c1:0c:19:c1:e8:c4:78:f0:b4:a3:ae:07:c2:98:bd:9e:14:
         dd:86:e3:5f:11:95:30:54:88:78:5b:eb:4f:21:3c:61:5e:3d:
         d2:04:a3:21:28:d2:f5:d8:c9:3b:e6:8d:16:83:95:e9:c3:31:
         eb:62:c7:0a:b8:6c:ce:cc:11:98:3d:13:00:64:88:c3:a2:4d:
         45:7b:06:18:b9:f8:50:a0:1a:8c:a7:82:7f:6a:4f:e7:5e:b0:
         59:e4:ba:aa:46:d1:b2:32:63:c4:e5:64:da:fd:4a:b9:c2:27:
         be:d0:99:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+izdCyQn11YloXFsc88MXjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjY2NlMmEyNmI5MDkzYzk2YjJhNWNjZGRkNzAzNGJiNWNl
MDEyZmMwHhcNMjYwNzI3MDkwMDI1WhcNMjYwNzI4MDkwMDI1WjAzMTEwLwYDVQQD
EyhjM2M1Y2FiYTY5NzAxOTU2Yzc0ZGIyOTNjNzk2NDhkMWQ5OGE3MmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0anzneixM/fABmLJ0mR7HrDWk+Iz
mG9YVjtgxqGhBOA2CPBGgTk7qdju1BN2ga6sr8TelftDL1ezcQwAnZhwR4FScqJM
FoEYIOtbIMo8t6cTXRMRH+bSDoMVQCxTFtQwaucnq2IcqfU6gaPqNvTkJFfq+Jox
rjNGOIXq8sc6H02kaMXgPiAd15kFWKAkeD5ms18PQVFFlMpuyxsDicu4NKr7ry6v
SGe1I809bjDHR/vM1IQs0Hvfd+9k4wSoM2wwlTrU55FMWP0IhAzaPKLoouW9diz0
a4TfTRN9avgMRzfVFAnFdDFe4ZlmuSdlWR6OtvPQJwF7/USHKBKMQeIr2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPFyrppcBlWx02yk8eWSNHZinKgMB8GA1UdIwQY
MBaAFPzM4qJrkJPJaypczd1wNLtc4BL8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX016aW9tdVFrOGxyS2x6TjNYQTB1MXpnRXZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAt
ZTBlNGJlNjY5NmY5LzEvX016aW9tdVFrOGxyS2x6TjNYQTB1MXpnRXZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC8wZWUyYWItMDdkOS00YTgxLWFiZjAtZTBlNGJlNjY5NmY5
LzEvX016aW9tdVFrOGxyS2x6TjNYQTB1MXpnRXZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgzJrmyOW
Pl+et0+1hJcF92VtG/WyqLYMT6MksNqwa50VSISy5vTncw9oF+kP/hc5wVydH2NV
qcw3FwZyki2d5RSlzMd8PkFloXgbkZLvK7BHCMfUJIaU68H1iD3ZxxE4+5CkW4Vq
lxM9i6gGPRR5Vd1zWwKXGrxiFPpfcLOI8FOOl5p3oHVZTCupLehay3XWscEMGcHo
xHjwtKOuB8KYvZ4U3YbjXxGVMFSIeFvrTyE8YV490gSjISjS9djJO+aNFoOV6cMx
62LHCrhszswRmD0TAGSIw6JNRXsGGLn4UKAajKeCf2pP516wWeS6qkbRsjJjxOVk
2v1KucInvtCZ/w==
-----END CERTIFICATE-----
Generated at Mon Jul 27 11:08:50 2026 by rpki-client