Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
File:                     boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft (raw, json)
Hash identifier:          ecVER1djOQaiikS5Q6UrF+ncKnqFYK6aYggoXaZC5Mg=
Subject key identifier:   0C:F4:B1:87:34:71:8B:E4:15:07:4E:06:C5:2C:32:D7:01:45:0D:2B
Authority key identifier: 6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E
Certificate issuer:       /CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
Certificate serial:       019FA14D619A3FD978CE5B3E40A04891AA09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
Manifest number:          1928
Signing time:             Mon 27 Jul 2026 02:00:30 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:30 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:30 +0000
Files and hashes:         1: 06gNA3LV7YBXuhA1rKiMTeDxRoA.roa (hash: d9wHD1t/r/V+XScUKTAXojVgXFDnOgiwl/ANGl0ElHU=)
                          2: boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl (hash: 0BdJFXRNdQkso2Swo4evtJa+58EASRTQ6Im3KLrkPtg=)
                          3: p_w8TFQKrPjZFeqKHXZkgHKF9Tc.roa (hash: tr6X6XVYM4REThJ5QdRO15I8HLm0u1bXqwDznTVnWXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:61:9a:3f:d9:78:ce:5b:3e:40:a0:48:91:aa:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e83251661b0b774271c5cf526aab884b1fa7c7e
        Validity
            Not Before: Jul 27 02:00:30 2026 GMT
            Not After : Jul 28 02:00:30 2026 GMT
        Subject: CN=0cf4b18734718be415074e06c52c32d701450d2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8f:77:f3:70:2e:76:e3:bd:e8:f3:4b:85:c7:
                    92:d5:c6:18:a1:e2:86:5c:e9:50:94:bb:f2:01:d9:
                    39:ca:08:1f:bc:53:17:4b:0d:ad:a9:e3:42:cc:81:
                    61:8d:c0:11:ee:a2:8b:e9:08:8b:ee:e5:bf:52:17:
                    28:68:c6:72:f0:a9:9e:2f:a3:2c:22:4a:65:e4:9c:
                    39:0f:4f:35:d7:76:90:84:b0:ef:e6:95:18:87:5d:
                    96:2f:60:ae:01:6b:36:3e:f2:c3:29:b9:74:f7:f6:
                    fc:27:eb:0d:5f:6f:2b:7c:93:2a:0d:41:90:24:69:
                    4e:91:37:d6:6c:2c:6c:ed:06:f5:05:11:77:d5:0f:
                    5e:0d:38:d6:be:9e:1a:1e:9b:37:9d:0e:39:be:ba:
                    71:72:6f:ef:75:5c:44:62:fc:46:be:8e:d1:35:7e:
                    fe:cb:a9:89:44:8c:5d:bc:e5:bd:90:22:66:a4:30:
                    5a:41:3f:a7:2e:43:a6:13:53:74:fe:4c:67:e8:6d:
                    be:69:87:b4:74:d2:38:56:07:95:12:6e:1c:bf:8f:
                    b8:3c:19:42:93:cf:e1:86:45:4e:59:f5:a3:b8:35:
                    98:8e:d5:50:05:e2:2b:78:79:d3:c8:74:23:d2:2b:
                    eb:76:fe:6b:45:99:06:1b:59:7f:6f:e6:02:71:cf:
                    21:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:F4:B1:87:34:71:8B:E4:15:07:4E:06:C5:2C:32:D7:01:45:0D:2B
            X509v3 Authority Key Identifier:
                keyid:6E:83:25:16:61:B0:B7:74:27:1C:5C:F5:26:AA:B8:84:B1:FA:7C:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMlFmGwt3QnHFz1Jqq4hLH6fH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c626d5-d405-406e-8c81-5c01817fb822/1/boMlFmGwt3QnHFz1Jqq4hLH6fH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:bc:00:8c:ca:2f:0e:e5:19:44:58:7f:1b:9b:cf:60:59:89:
         ee:55:c5:51:52:6c:da:85:cb:bf:08:82:55:17:f4:9d:d3:e3:
         62:69:15:33:0e:12:27:12:13:ab:ab:20:06:70:7a:0d:04:9a:
         43:28:8b:b2:ed:52:4e:03:c6:9d:c3:a6:be:47:9e:f5:86:03:
         d5:f7:3d:82:b5:05:21:4d:5c:02:60:22:13:22:4a:69:e0:70:
         2b:70:01:1c:d3:f8:0a:8e:b1:43:c4:76:a3:ce:68:92:05:0f:
         b3:d8:47:18:7e:3e:40:76:e6:48:1c:37:85:b0:cf:7d:f9:94:
         77:38:28:cc:93:ca:77:3a:70:87:9a:d3:c4:82:ad:c8:71:b5:
         99:70:fc:75:75:14:22:ba:bf:ab:bd:eb:4e:55:be:92:32:6e:
         b6:2d:81:3e:46:bb:8a:b2:79:ad:c7:77:ef:0b:59:ba:40:8a:
         75:12:d9:9f:89:fe:8c:80:e2:94:57:c4:c6:5a:48:59:1d:07:
         57:d0:f9:02:64:f9:05:4c:17:41:83:9a:d5:5b:fc:4e:99:66:
         15:ef:27:f1:b6:a0:29:b1:5e:98:71:fa:03:14:22:10:49:7f:
         9a:4e:d2:df:dc:56:28:a4:7a:66:fc:99:06:cd:f3:33:c1:01:
         16:8f:d6:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTWGaP9l4zls+QKBIkaoJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlODMyNTE2NjFiMGI3NzQyNzFjNWNmNTI2YWFiODg0YjFm
YTdjN2UwHhcNMjYwNzI3MDIwMDMwWhcNMjYwNzI4MDIwMDMwWjAzMTEwLwYDVQQD
EygwY2Y0YjE4NzM0NzE4YmU0MTUwNzRlMDZjNTJjMzJkNzAxNDUwZDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY9383AuduO96PNLhceS1cYYoeKG
XOlQlLvyAdk5yggfvFMXSw2tqeNCzIFhjcAR7qKL6QiL7uW/UhcoaMZy8KmeL6Ms
Ikpl5Jw5D08113aQhLDv5pUYh12WL2CuAWs2PvLDKbl09/b8J+sNX28rfJMqDUGQ
JGlOkTfWbCxs7Qb1BRF31Q9eDTjWvp4aHps3nQ45vrpxcm/vdVxEYvxGvo7RNX7+
y6mJRIxdvOW9kCJmpDBaQT+nLkOmE1N0/kxn6G2+aYe0dNI4VgeVEm4cv4+4PBlC
k8/hhkVOWfWjuDWYjtVQBeIreHnTyHQj0ivrdv5rRZkGG1l/b+YCcc8hJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAz0sYc0cYvkFQdOBsUsMtcBRQ0rMB8GA1UdIwQY
MBaAFG6DJRZhsLd0Jxxc9SaquISx+nx+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEt
NWMwMTgxN2ZiODIyLzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9jNjI2ZDUtZDQwNS00MDZlLThjODEtNWMwMTgxN2ZiODIy
LzEvYm9NbEZtR3d0M1FuSEZ6MUpxcTRoTEg2Zkg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrwAjMov
DuUZRFh/G5vPYFmJ7lXFUVJs2oXLvwiCVRf0ndPjYmkVMw4SJxITq6sgBnB6DQSa
QyiLsu1STgPGncOmvkee9YYD1fc9grUFIU1cAmAiEyJKaeBwK3ABHNP4Co6xQ8R2
o85okgUPs9hHGH4+QHbmSBw3hbDPffmUdzgozJPKdzpwh5rTxIKtyHG1mXD8dXUU
Irq/q73rTlW+kjJuti2BPka7irJ5rcd37wtZukCKdRLZn4n+jIDilFfExlpIWR0H
V9D5AmT5BUwXQYOa1Vv8TplmFe8n8bagKbFemHH6AxQiEEl/mk7S39xWKKR6ZvyZ
Bs3zM8EBFo/WEA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:43:38 2026 by rpki-client