Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
File:                     R-7_wnFGJLkjfa3lP70kQfQZKsc.mft (raw, json)
Hash identifier:          BBxnNZUeuhANZVLDXTAqGdoyHBoURPWdd2SmrfCzG18=
Subject key identifier:   D1:D4:C6:B5:C4:FE:93:AF:ED:59:EF:58:EE:3B:D0:42:C9:46:B2:7A
Authority key identifier: 47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7
Certificate issuer:       /CN=47eeffc2714624b9237dade53fbd2441f4192ac7
Certificate serial:       019E5F0254132B4A3C2989B0E5C677643B14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
Manifest number:          08C5
Signing time:             Mon 25 May 2026 12:00:48 +0000
Manifest this update:     Mon 25 May 2026 12:00:48 +0000
Manifest next update:     Tue 26 May 2026 12:00:48 +0000
Files and hashes:         1: 6gLUsBkG-831LvTIKcOMB6anenc.roa (hash: 0P++i0Px+QNc8KIJpDVgXYAXiNKGP7NiivE2XFE/A70=)
                          2: R-7_wnFGJLkjfa3lP70kQfQZKsc.crl (hash: NxNfAG8AohrtzokTR3hS2D2hpsL4MWXGtD8XqYfgmYI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 08:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:5f:02:54:13:2b:4a:3c:29:89:b0:e5:c6:77:64:3b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47eeffc2714624b9237dade53fbd2441f4192ac7
        Validity
            Not Before: May 25 12:00:48 2026 GMT
            Not After : May 26 12:00:48 2026 GMT
        Subject: CN=d1d4c6b5c4fe93afed59ef58ee3bd042c946b27a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:56:4c:c4:a3:34:18:75:d9:5d:5e:44:c0:18:
                    89:bc:9c:2c:3a:50:3b:75:b8:c9:4b:0d:b4:93:70:
                    8f:67:48:3c:1b:8d:57:0b:fa:18:66:64:c2:2d:df:
                    52:02:66:d4:6b:0b:2b:14:bf:f7:65:0f:6a:00:c5:
                    b6:b6:58:ed:87:db:6b:e8:01:e7:8b:5b:6e:21:ee:
                    cc:35:7a:9e:72:b3:e7:3b:0e:44:a3:71:00:6d:c3:
                    96:ef:16:61:56:e5:c9:87:2f:6d:fb:47:54:69:92:
                    2e:e6:13:28:6a:fb:7b:c2:5d:c4:eb:47:0d:4b:6c:
                    60:e6:e6:43:07:6f:7d:3f:19:68:6f:0b:ab:30:27:
                    3e:b2:e8:66:3a:db:1e:75:bb:99:85:2e:a4:20:42:
                    c2:57:2e:9f:c4:c9:2e:0a:69:c1:cc:ff:a0:32:4c:
                    0e:30:6c:e9:6c:38:5c:8f:35:0d:25:4f:b9:d3:6d:
                    70:fb:fe:38:ea:a6:e0:59:5c:ff:84:f8:8b:65:db:
                    b1:e8:66:c1:c6:80:b6:aa:b8:57:3d:fb:da:ed:75:
                    30:c1:10:e0:07:be:82:f7:c3:74:81:0e:11:d3:f5:
                    0b:8c:6b:26:65:4e:55:c5:bd:70:a1:6f:c1:c5:f5:
                    87:5d:be:c4:96:79:a5:d2:f7:bf:39:7e:bd:f1:9f:
                    d8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:D4:C6:B5:C4:FE:93:AF:ED:59:EF:58:EE:3B:D0:42:C9:46:B2:7A
            X509v3 Authority Key Identifier:
                keyid:47:EE:FF:C2:71:46:24:B9:23:7D:AD:E5:3F:BD:24:41:F4:19:2A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R-7_wnFGJLkjfa3lP70kQfQZKsc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/085ae7-99f8-4190-aa53-d49923a15fd9/1/R-7_wnFGJLkjfa3lP70kQfQZKsc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:62:48:75:0d:1f:26:2c:e9:a6:e9:44:8b:6a:5d:32:a1:f1:
         f6:58:29:59:9c:3c:9c:59:f5:4c:62:43:54:47:07:60:dc:75:
         be:14:18:69:9b:db:b2:4a:1b:ff:a0:e7:ab:76:a5:6a:79:98:
         f5:83:52:19:3a:af:74:0d:21:a9:7e:f3:0c:c5:63:ea:b0:ce:
         46:f7:69:3e:6a:e3:6d:7f:40:43:ce:8e:53:70:e4:fe:c3:63:
         c8:11:60:ff:7d:e8:e5:16:55:53:49:2c:dc:5f:d3:4e:c2:a9:
         8e:75:d8:b9:e7:62:dd:96:b4:80:5f:91:33:20:d9:4f:c7:db:
         d1:a4:66:f6:59:c5:17:79:dc:be:19:7a:36:e7:e3:9e:21:9a:
         a8:d9:46:b9:77:49:aa:a0:d1:00:12:6a:cf:13:35:f0:e5:2e:
         3d:0b:ae:bb:02:41:3a:d2:da:79:de:91:75:43:ad:b3:a1:41:
         d4:34:1d:01:ef:7c:cb:34:49:ee:2e:c7:ae:69:4d:e5:c0:be:
         3e:1b:ae:92:81:0d:f7:4e:39:e8:dc:ac:5e:a0:a2:e9:ed:4e:
         80:68:d5:2e:e7:40:66:f3:f5:b6:8a:af:94:e7:d5:8c:a7:2c:
         b2:aa:04:dd:cc:b3:cb:b1:ec:6c:0b:bc:53:25:d7:e4:0f:a4:
         22:29:a3:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5fAlQTK0o8KYmw5cZ3ZDsUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3ZWVmZmMyNzE0NjI0YjkyMzdkYWRlNTNmYmQyNDQxZjQx
OTJhYzcwHhcNMjYwNTI1MTIwMDQ4WhcNMjYwNTI2MTIwMDQ4WjAzMTEwLwYDVQQD
EyhkMWQ0YzZiNWM0ZmU5M2FmZWQ1OWVmNThlZTNiZDA0MmM5NDZiMjdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lZMxKM0GHXZXV5EwBiJvJwsOlA7
dbjJSw20k3CPZ0g8G41XC/oYZmTCLd9SAmbUawsrFL/3ZQ9qAMW2tljth9tr6AHn
i1tuIe7MNXqecrPnOw5Eo3EAbcOW7xZhVuXJhy9t+0dUaZIu5hMoavt7wl3E60cN
S2xg5uZDB299PxlobwurMCc+suhmOtsedbuZhS6kIELCVy6fxMkuCmnBzP+gMkwO
MGzpbDhcjzUNJU+5021w+/446qbgWVz/hPiLZdux6GbBxoC2qrhXPfva7XUwwRDg
B76C98N0gQ4R0/ULjGsmZU5Vxb1woW/BxfWHXb7Elnml0ve/OX698Z/Y+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNHUxrXE/pOv7VnvWO470ELJRrJ6MB8GA1UdIwQY
MBaAFEfu/8JxRiS5I32t5T+9JEH0GSrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMt
ZDQ5OTIzYTE1ZmQ5LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi8wODVhZTctOTlmOC00MTkwLWFhNTMtZDQ5OTIzYTE1ZmQ5
LzEvUi03X3duRkdKTGtqZmEzbFA3MGtRZlFaS3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOWJIdQ0f
JizppulEi2pdMqHx9lgpWZw8nFn1TGJDVEcHYNx1vhQYaZvbskob/6Dnq3alanmY
9YNSGTqvdA0hqX7zDMVj6rDORvdpPmrjbX9AQ86OU3Dk/sNjyBFg/33o5RZVU0ks
3F/TTsKpjnXYuedi3Za0gF+RMyDZT8fb0aRm9lnFF3ncvhl6NufjniGaqNlGuXdJ
qqDRABJqzxM18OUuPQuuuwJBOtLaed6RdUOts6FB1DQdAe98yzRJ7i7HrmlN5cC+
PhuukoEN90456NysXqCi6e1OgGjVLudAZvP1toqvlOfVjKcssqoE3cyzy7HsbAu8
UyXX5A+kIimjNQ==
-----END CERTIFICATE-----
Generated at Mon May 25 17:17:15 2026 by rpki-client