Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
File:                     d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft (raw, json)
Hash identifier:          6pgLZmAHZv7yK/gsRZ4CNrGHdKJ5XBiNERVyYIKc1Zg=
Subject key identifier:   A4:EE:EF:E9:23:9A:45:09:A9:63:55:1B:4A:0B:1C:54:04:B1:3D:07
Authority key identifier: 77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3
Certificate issuer:       /CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
Certificate serial:       019FAC7725E338EE737A408DD641CEBF19C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:57 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:57 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:57 +0000
Files and hashes:         1: Qo5Twpuw0PJHEUfRV8uv8sKD0Jo.roa (hash: /0O51CgL1416iwNlL7nR6ylxjftB4K89aEzhgfr+0xs=)
                          2: d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl (hash: Z6eHIu91vdlqREWXvLF7gR9kjsawkV/FJRL8gApPGwA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:77:25:e3:38:ee:73:7a:40:8d:d6:41:ce:bf:19:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
        Validity
            Not Before: Jul 29 06:01:57 2026 GMT
            Not After : Jul 30 06:01:57 2026 GMT
        Subject: CN=a4eeefe9239a4509a963551b4a0b1c5404b13d07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:56:14:63:fd:42:8f:68:e1:7c:9e:dc:cb:ea:
                    1f:0f:a0:4d:5e:4a:44:37:ac:68:7d:c0:e3:69:09:
                    92:5a:75:9e:b8:38:c1:c0:dc:e9:fc:e1:95:45:20:
                    87:82:af:ef:56:a4:6f:aa:a4:5f:92:0f:db:ee:6b:
                    fd:1e:3d:70:38:fc:5a:30:c1:94:3c:9f:c3:63:ed:
                    f5:77:2a:4c:e7:46:c8:3c:14:77:ce:cf:42:f5:55:
                    98:de:fe:12:fa:5c:37:fa:a8:fd:59:51:6c:b0:08:
                    86:9f:94:33:71:87:e3:a4:31:06:82:88:38:5b:ef:
                    7c:fc:e4:15:d2:e3:c0:94:4d:6f:92:53:60:2a:3b:
                    8c:b8:3d:24:43:c4:c4:d8:1a:b6:dd:2f:11:74:d8:
                    a2:74:d1:ea:13:f0:e2:64:7a:e8:69:d3:3e:a9:21:
                    2b:84:1b:30:4f:88:3a:7a:89:28:8d:b4:8c:a2:b7:
                    e1:cb:5d:42:de:90:02:71:ec:9f:2c:ca:84:46:a9:
                    79:c1:ce:ca:e9:4c:2b:48:10:51:25:41:dc:df:3c:
                    28:54:3a:69:db:e3:9c:a6:31:33:ec:7b:f5:fa:a5:
                    a6:fc:b0:f8:6b:34:fe:39:13:00:55:8d:63:c7:31:
                    06:f7:2a:c6:65:01:13:d1:b0:31:c0:c1:b4:c1:43:
                    54:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:EE:EF:E9:23:9A:45:09:A9:63:55:1B:4A:0B:1C:54:04:B1:3D:07
            X509v3 Authority Key Identifier:
                keyid:77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:5d:be:05:c8:3f:fe:0b:ae:0e:01:2f:3b:34:54:e5:4f:91:
         5b:e6:bf:ae:be:5e:78:96:df:ae:df:71:97:6d:6d:e4:f5:f3:
         10:3f:4e:85:b6:53:40:d4:59:70:2f:b3:bf:6d:18:42:c2:26:
         a5:1d:ac:b4:3f:fb:6e:38:03:d9:90:34:49:78:50:7f:62:25:
         3e:7e:ea:c4:3d:77:aa:36:b9:90:dc:7d:f9:1e:6c:35:c6:59:
         6c:a5:82:ae:f4:0b:60:84:48:01:22:92:95:2b:6b:93:ed:35:
         76:ca:9a:87:14:2e:7c:b8:50:95:f5:fb:17:dd:6a:97:e1:35:
         fb:81:00:bd:90:29:3e:59:4e:8b:c5:23:3d:2c:5a:22:ff:50:
         66:f8:50:c2:01:17:31:17:e0:11:39:45:37:4a:5d:cc:ec:aa:
         75:17:2b:42:1e:65:5b:2c:52:e4:a5:1b:9f:69:b2:a2:ae:f0:
         2e:d5:70:e7:f3:f3:e5:96:85:1a:ec:4d:01:40:08:87:8c:98:
         f1:11:41:e8:d1:3f:a9:e9:21:e9:cf:71:5c:50:2c:e3:f0:42:
         b8:54:6b:75:b5:e4:23:3f:05:12:e0:ce:51:f9:ae:64:4a:5a:
         80:34:b5:a9:68:4f:85:f6:ab:53:27:a4:ad:e8:46:44:0c:b8:
         47:cf:57:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdyXjOO5zekCN1kHOvxnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3NGEyNTcyOGM5NTBlNjBhYzY5YWVhYzNhYjU3NDVhNGUz
ZTQ0YzMwHhcNMjYwNzI5MDYwMTU3WhcNMjYwNzMwMDYwMTU3WjAzMTEwLwYDVQQD
EyhhNGVlZWZlOTIzOWE0NTA5YTk2MzU1MWI0YTBiMWM1NDA0YjEzZDA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFYUY/1Cj2jhfJ7cy+ofD6BNXkpE
N6xofcDjaQmSWnWeuDjBwNzp/OGVRSCHgq/vVqRvqqRfkg/b7mv9Hj1wOPxaMMGU
PJ/DY+31dypM50bIPBR3zs9C9VWY3v4S+lw3+qj9WVFssAiGn5QzcYfjpDEGgog4
W+98/OQV0uPAlE1vklNgKjuMuD0kQ8TE2Bq23S8RdNiidNHqE/DiZHroadM+qSEr
hBswT4g6eokojbSMorfhy11C3pACceyfLMqERql5wc7K6UwrSBBRJUHc3zwoVDpp
2+OcpjEz7Hv1+qWm/LD4azT+ORMAVY1jxzEG9yrGZQET0bAxwMG0wUNUsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTu7+kjmkUJqWNVG0oLHFQEsT0HMB8GA1UdIwQY
MBaAFHdKJXKMlQ5grGmurDq1dFpOPkTDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDBvbGNveVZEbUNzYWE2c09yVjBXazQtUk1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUt
ZGFhZjI5MjExOTQ5LzEvZDBvbGNveVZEbUNzYWE2c09yVjBXazQtUk1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81MjNiOTUtM2RkYy00ODE4LTkyNjUtZGFhZjI5MjExOTQ5
LzEvZDBvbGNveVZEbUNzYWE2c09yVjBXazQtUk1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqV2+Bcg/
/guuDgEvOzRU5U+RW+a/rr5eeJbfrt9xl21t5PXzED9OhbZTQNRZcC+zv20YQsIm
pR2stD/7bjgD2ZA0SXhQf2IlPn7qxD13qja5kNx9+R5sNcZZbKWCrvQLYIRIASKS
lStrk+01dsqahxQufLhQlfX7F91ql+E1+4EAvZApPllOi8UjPSxaIv9QZvhQwgEX
MRfgETlFN0pdzOyqdRcrQh5lWyxS5KUbn2myoq7wLtVw5/Pz5ZaFGuxNAUAIh4yY
8RFB6NE/qekh6c9xXFAs4/BCuFRrdbXkIz8FEuDOUfmuZEpagDS1qWhPhfarUyek
rehGRAy4R89X4Q==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:05:41 2026 by rpki-client