Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
File:                     RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft (raw, json)
Hash identifier:          CEw57X/MWWAMKh4IMiGnk2XCT5UIPOK8bl8fJu2n/uI=
Subject key identifier:   9C:2F:78:56:F5:A2:CA:7F:2A:01:51:A3:C0:8C:DF:45:60:F7:2B:57
Authority key identifier: 46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47
Certificate issuer:       /CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
Certificate serial:       019FAC772EDB2BA6FD86E3BFF129F46055B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:59 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:59 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:59 +0000
Files and hashes:         1: A3vyQNFZmIIiVEvn821V3LPNqkc.roa (hash: 0mBujLmZOmOPTcByzEM0WftntYdLFr6SGaantjpe9Ko=)
                          2: RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl (hash: acn78fCb7wrHAxkM68ofFnn1GMn63VyJD6H8yUkuYo4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:77:2e:db:2b:a6:fd:86:e3:bf:f1:29:f4:60:55:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46d43da6ade5f2d2333ded52f5831fbed48cfd47
        Validity
            Not Before: Jul 29 06:01:59 2026 GMT
            Not After : Jul 30 06:01:59 2026 GMT
        Subject: CN=9c2f7856f5a2ca7f2a0151a3c08cdf4560f72b57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4b:82:f2:40:5a:99:2c:71:24:2f:42:83:19:
                    15:c7:54:7a:51:1a:3b:77:f3:80:de:ae:b8:95:44:
                    8e:ef:de:de:d1:05:59:be:5c:f0:65:c1:10:d4:9e:
                    ae:dc:3b:c1:1c:64:4c:56:d7:be:39:a0:8e:7e:01:
                    7b:77:9a:0e:5a:eb:15:14:77:45:5a:a9:0e:05:cc:
                    c5:ed:5c:f6:15:60:96:be:37:f8:6b:29:d4:47:c2:
                    52:f4:90:7c:07:16:c4:6e:c7:b3:eb:16:8e:67:34:
                    36:7d:0f:4b:9d:59:ee:2f:ae:21:36:cc:2e:e8:8a:
                    46:04:23:c5:08:f8:1c:60:cf:4b:98:6f:54:d6:85:
                    82:11:81:77:28:6c:4f:dd:05:17:49:2c:8a:f0:c8:
                    a2:87:1c:6f:88:a7:65:0e:fe:c9:52:88:f4:b2:56:
                    25:23:59:7f:5b:c8:07:cc:7f:c2:e9:5d:8d:a7:a4:
                    85:82:52:62:87:c6:71:0d:94:90:38:8c:d1:53:83:
                    57:d3:01:b9:84:a4:18:b3:93:59:67:1e:05:aa:78:
                    44:4a:00:7e:72:79:bf:0b:fb:30:9c:40:32:45:fe:
                    d1:b2:99:eb:b1:a0:47:a9:e7:ac:c7:91:80:4f:c8:
                    7f:48:d5:e9:69:08:b4:7f:e8:5a:e8:c7:0f:7a:53:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2F:78:56:F5:A2:CA:7F:2A:01:51:A3:C0:8C:DF:45:60:F7:2B:57
            X509v3 Authority Key Identifier:
                keyid:46:D4:3D:A6:AD:E5:F2:D2:33:3D:ED:52:F5:83:1F:BE:D4:8C:FD:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/f894a3-8ed7-4d6f-bb03-6ab05568ade2/1/RtQ9pq3l8tIzPe1S9YMfvtSM_Uc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:dc:12:ef:9e:b3:1e:70:17:c9:5c:36:d2:da:3f:93:87:0c:
         3d:af:f6:2e:3a:99:56:03:fa:35:0b:e4:78:d5:0d:fa:78:c3:
         36:91:7f:2d:6d:d0:2f:7b:19:90:2e:dd:1d:0b:b8:0b:63:89:
         4b:1d:52:9a:3e:17:fc:89:d0:ce:85:0d:bd:c9:1f:ef:84:6d:
         23:99:b0:e6:1e:a3:da:4a:2b:50:6e:64:fc:b4:5c:46:9a:e8:
         54:c5:1d:f5:fb:8b:93:39:fe:b7:ef:23:45:9d:9b:64:f7:d6:
         2b:7d:30:76:fc:72:17:50:de:d1:42:69:83:a7:c5:c5:f2:f7:
         89:2f:c0:2c:98:ed:a0:67:c9:3f:d8:3a:75:ad:b7:88:a9:aa:
         48:67:00:26:5f:70:61:b9:06:61:e5:31:06:22:7e:00:df:ca:
         95:5a:f8:3e:b4:ed:08:82:10:5b:6e:1b:cb:97:52:5c:89:b9:
         37:db:a5:75:f9:91:a0:9c:3b:7b:0c:b6:88:ed:f7:82:41:01:
         72:58:c4:92:ed:d8:0d:da:6a:9a:c7:4e:bf:23:23:25:60:4d:
         17:43:7f:29:a8:21:0a:b8:22:8e:57:ac:a9:fb:f6:3d:ba:ec:
         48:61:c1:13:7e:2e:d1:b1:ab:35:48:0a:27:f8:b4:45:12:21:
         d9:3d:e0:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdy7bK6b9huO/8Sn0YFW1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDQzZGE2YWRlNWYyZDIzMzNkZWQ1MmY1ODMxZmJlZDQ4
Y2ZkNDcwHhcNMjYwNzI5MDYwMTU5WhcNMjYwNzMwMDYwMTU5WjAzMTEwLwYDVQQD
Eyg5YzJmNzg1NmY1YTJjYTdmMmEwMTUxYTNjMDhjZGY0NTYwZjcyYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlUuC8kBamSxxJC9CgxkVx1R6URo7
d/OA3q64lUSO797e0QVZvlzwZcEQ1J6u3DvBHGRMVte+OaCOfgF7d5oOWusVFHdF
WqkOBczF7Vz2FWCWvjf4aynUR8JS9JB8BxbEbsez6xaOZzQ2fQ9LnVnuL64hNswu
6IpGBCPFCPgcYM9LmG9U1oWCEYF3KGxP3QUXSSyK8MiihxxviKdlDv7JUoj0slYl
I1l/W8gHzH/C6V2Np6SFglJih8ZxDZSQOIzRU4NX0wG5hKQYs5NZZx4FqnhESgB+
cnm/C/swnEAyRf7RspnrsaBHqeesx5GAT8h/SNXpaQi0f+ha6McPelMLPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJwveFb1osp/KgFRo8CM30Vg9ytXMB8GA1UdIwQY
MBaAFEbUPaat5fLSMz3tUvWDH77UjP1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRROXBxM2w4dEl6UGUxUzlZTWZ2dFNNX1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMt
NmFiMDU1NjhhZGUyLzEvUnRROXBxM2w4dEl6UGUxUzlZTWZ2dFNNX1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS9mODk0YTMtOGVkNy00ZDZmLWJiMDMtNmFiMDU1NjhhZGUy
LzEvUnRROXBxM2w4dEl6UGUxUzlZTWZ2dFNNX1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtwS756z
HnAXyVw20to/k4cMPa/2LjqZVgP6NQvkeNUN+njDNpF/LW3QL3sZkC7dHQu4C2OJ
Sx1Smj4X/InQzoUNvckf74RtI5mw5h6j2korUG5k/LRcRproVMUd9fuLkzn+t+8j
RZ2bZPfWK30wdvxyF1De0UJpg6fFxfL3iS/ALJjtoGfJP9g6da23iKmqSGcAJl9w
YbkGYeUxBiJ+AN/KlVr4PrTtCIIQW24by5dSXIm5N9uldfmRoJw7ewy2iO33gkEB
cljEku3YDdpqmsdOvyMjJWBNF0N/KaghCrgijlesqfv2PbrsSGHBE34u0bGrNUgK
J/i0RRIh2T3g4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:52:45 2026 by rpki-client