Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File:                     fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier:          7aHg0tlCK5dEUJmL7ebDOScrOphOtxVRy4LeRmbQnHE=
Subject key identifier:   4C:60:BF:EB:7A:30:A3:66:95:3C:3F:01:42:B6:20:F7:1C:6E:DA:F6
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer:       /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial:       019FA1F211764BEBDE15B3CCBCA429A8664B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number:          10B7
Signing time:             Mon 27 Jul 2026 05:00:23 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:23 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:23 +0000
Files and hashes:         1: 3g6ILoE9ejngNxt1ax6rYM1LQ60.roa (hash: LEUisAJ5IBxkUseMOfjHAnJQfW3VdAcMs8IPdC6dNso=)
                          2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: YuaMJaCP0u0q5fWm/H0D5ndY0Fm4Ug6StCw9KZnv9jg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:11:76:4b:eb:de:15:b3:cc:bc:a4:29:a8:66:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
        Validity
            Not Before: Jul 27 05:00:23 2026 GMT
            Not After : Jul 28 05:00:23 2026 GMT
        Subject: CN=4c60bfeb7a30a366953c3f0142b620f71c6edaf6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:90:12:6e:47:b4:62:7f:24:1c:70:0d:9f:
                    f7:f9:54:0b:9b:c4:fa:83:2c:3e:8a:e1:01:56:4c:
                    a5:98:13:43:9c:87:49:68:0c:d0:86:c6:2e:2b:9b:
                    fe:f1:f0:fe:04:34:16:4f:e5:f9:c5:f4:b3:fa:16:
                    ec:00:0a:66:ce:7c:1b:04:9c:67:38:97:3d:7a:cb:
                    25:42:e5:d4:9b:7d:5b:21:ef:89:ea:ca:81:9c:10:
                    9f:86:f0:d2:7b:e5:c1:e4:4e:60:fc:61:92:a1:a6:
                    ab:d1:ba:e7:6d:b2:24:7a:1c:b8:6e:22:fb:f0:0c:
                    92:3b:b5:bd:6d:88:cf:22:0a:98:92:0e:8f:31:87:
                    4f:ef:d5:e1:be:13:c3:95:dd:7d:b4:25:24:41:ce:
                    95:f7:be:bd:a6:65:3a:ac:4a:bd:76:7c:e1:7e:ad:
                    72:69:72:9b:78:50:13:c5:0c:a2:97:e2:ac:20:40:
                    29:0c:5f:fd:70:57:2e:44:24:ee:df:d6:e1:1b:a1:
                    4b:aa:ea:95:7c:b8:04:32:0b:69:da:96:9c:26:fa:
                    93:da:8a:a0:86:90:6e:c2:ec:d3:20:97:6b:6a:50:
                    1a:f1:22:5f:6f:c6:43:30:59:6f:ca:cb:6a:83:37:
                    d6:49:50:21:b1:96:99:03:50:12:c8:0b:07:3c:2f:
                    cb:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:60:BF:EB:7A:30:A3:66:95:3C:3F:01:42:B6:20:F7:1C:6E:DA:F6
            X509v3 Authority Key Identifier:
                keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:41:23:c4:bc:28:ff:49:d4:f0:b1:f8:f3:aa:e8:80:2e:9c:
         96:27:47:e9:a8:f6:66:7a:15:78:8b:1b:1f:c6:31:b9:7e:15:
         75:30:38:f1:d8:d7:b9:64:ba:53:60:4e:d7:ac:b5:a5:16:4c:
         57:80:f9:c9:54:58:ac:1a:14:11:d6:97:3c:3a:35:29:d5:12:
         ee:32:ae:95:96:db:b1:8a:9b:11:de:7b:e6:9f:4d:b8:d2:e5:
         a2:e8:7b:c9:79:ba:d7:1a:c3:80:e5:fa:da:e2:14:b4:0d:dd:
         4d:79:33:da:45:ea:e9:f3:8c:c9:a2:31:f8:f1:91:25:19:c7:
         bc:ce:9b:49:bb:d5:16:c8:41:c6:a9:c8:f3:61:2a:80:62:eb:
         24:6c:df:96:21:bf:9b:0a:8e:83:48:ef:d2:a3:4b:99:01:c0:
         80:e1:11:e3:4e:c0:3b:51:2e:9e:38:1a:93:ed:de:0c:1d:70:
         58:a5:a9:1b:cb:0e:a0:04:04:29:34:ac:54:3c:ef:db:49:d7:
         0c:44:a5:13:44:d5:65:03:75:e6:68:27:7f:a4:4e:e2:55:e9:
         c6:83:32:4d:af:bc:5d:68:97:a1:e4:31:6d:f8:0e:af:07:38:
         3b:05:ee:28:16:72:b3:26:e0:d3:4b:c7:d3:c4:ef:2e:ce:0a:
         86:23:d3:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+h8hF2S+veFbPMvKQpqGZLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj
MzYyZGEwHhcNMjYwNzI3MDUwMDIzWhcNMjYwNzI4MDUwMDIzWjAzMTEwLwYDVQQD
Eyg0YzYwYmZlYjdhMzBhMzY2OTUzYzNmMDE0MmI2MjBmNzFjNmVkYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDeQEm5HtGJ/JBxwDZ/3+VQLm8T6
gyw+iuEBVkylmBNDnIdJaAzQhsYuK5v+8fD+BDQWT+X5xfSz+hbsAApmznwbBJxn
OJc9esslQuXUm31bIe+J6sqBnBCfhvDSe+XB5E5g/GGSoaar0brnbbIkehy4biL7
8AySO7W9bYjPIgqYkg6PMYdP79XhvhPDld19tCUkQc6V9769pmU6rEq9dnzhfq1y
aXKbeFATxQyil+KsIEApDF/9cFcuRCTu39bhG6FLquqVfLgEMgtp2pacJvqT2oqg
hpBuwuzTIJdralAa8SJfb8ZDMFlvystqgzfWSVAhsZaZA1ASyAsHPC/LOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFExgv+t6MKNmlTw/AUK2IPccbtr2MB8GA1UdIwQY
MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt
Mzg2NjE3YTY2NGZlLzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl
LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsUEjxLwo
/0nU8LH486rogC6clidH6aj2ZnoVeIsbH8YxuX4VdTA48djXuWS6U2BO16y1pRZM
V4D5yVRYrBoUEdaXPDo1KdUS7jKulZbbsYqbEd575p9NuNLlouh7yXm61xrDgOX6
2uIUtA3dTXkz2kXq6fOMyaIx+PGRJRnHvM6bSbvVFshBxqnI82EqgGLrJGzfliG/
mwqOg0jv0qNLmQHAgOER407AO1Eunjgak+3eDB1wWKWpG8sOoAQEKTSsVDzv20nX
DESlE0TVZQN15mgnf6RO4lXpxoMyTa+8XWiXoeQxbfgOrwc4OwXuKBZysybg00vH
08TvLs4KhiPTvg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 09:40:09 2026 by rpki-client