Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File:                     4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier:          qrNA3Q0Oh2oH+x7Eq9nqanEQOLZkqWn8l0So11uZYnI=
Subject key identifier:   0B:64:3D:E4:64:46:AC:E0:84:26:2F:76:63:B1:42:14:32:F2:D2:BB
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer:       /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial:       019FA9752BE3FAE58F84EA0B82E6984266BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number:          06EE
Signing time:             Tue 28 Jul 2026 16:00:56 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:56 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:56 +0000
Files and hashes:         1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: RU7xbbSj6fqoNIYQL+r6IMvTl8Gbbi5v1t40qUgcFWs=)
                          2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:2b:e3:fa:e5:8f:84:ea:0b:82:e6:98:42:66:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
        Validity
            Not Before: Jul 28 16:00:56 2026 GMT
            Not After : Jul 29 16:00:56 2026 GMT
        Subject: CN=0b643de46446ace084262f7663b1421432f2d2bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:d9:9c:6b:ce:72:94:c9:3e:02:3a:48:70:
                    3d:5f:e1:08:9d:28:8d:d9:10:2e:70:0b:d4:5b:25:
                    7f:17:7e:2a:41:e0:3c:37:fe:e7:1f:d7:ff:cd:42:
                    9b:f4:fb:c0:d8:51:06:50:c0:58:ea:19:ae:9b:9a:
                    1b:ac:e6:68:de:a1:a3:ab:97:d8:c7:30:19:7a:83:
                    66:d4:4e:43:b7:63:a5:db:eb:e9:42:6d:a6:3b:f1:
                    a7:c4:67:bd:07:e2:a7:da:c5:d6:6d:83:eb:02:3d:
                    66:dc:7b:53:90:e3:40:04:40:cd:e9:26:d9:fa:d4:
                    b8:4e:0e:bd:7c:b2:42:e4:b3:10:57:c0:6e:d5:d1:
                    19:1a:83:7e:82:6f:56:41:c7:66:40:07:91:d4:6e:
                    61:1a:e7:e4:9d:e8:82:e3:1d:1f:05:6b:aa:b0:04:
                    0b:c6:6e:53:06:c5:e9:f6:8e:4f:87:56:1d:cb:d8:
                    35:98:73:df:2b:a9:c6:69:ed:a4:e4:fa:b1:76:4f:
                    3e:a2:5d:b6:f0:6c:52:21:18:18:b5:d9:ea:65:2a:
                    f4:63:0a:43:62:ad:8e:c4:c4:8d:d9:10:dc:22:d9:
                    41:d3:65:1a:3a:a4:92:bf:d6:fd:ba:31:4e:d8:78:
                    28:0b:a0:60:0f:91:34:d5:db:fe:d3:b3:21:5f:d7:
                    92:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:64:3D:E4:64:46:AC:E0:84:26:2F:76:63:B1:42:14:32:F2:D2:BB
            X509v3 Authority Key Identifier:
                keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:67:ef:38:09:36:3c:99:2a:e7:42:a4:a0:46:1d:26:55:12:
         ae:04:92:b6:31:f0:db:f4:b1:fa:57:36:17:16:ef:d3:03:a6:
         54:49:4a:65:d0:ac:92:5d:27:59:14:33:0e:a5:5c:8a:70:50:
         02:a0:51:0e:f0:b6:d7:2e:c2:3f:eb:1a:0d:43:b3:07:4b:c3:
         d7:3a:e7:94:bb:18:e1:79:43:a1:38:b4:c5:58:ac:f2:1c:2d:
         5c:8d:90:e8:32:ab:bc:de:fc:23:5f:70:15:62:5c:52:07:dc:
         bf:89:dd:40:41:6f:0a:78:af:a2:57:92:90:6c:b9:04:d4:db:
         bf:9e:10:8b:a4:6c:75:11:97:9a:2b:bc:b5:6a:3d:51:62:f8:
         16:c0:af:bc:63:7c:03:1b:8f:82:7b:7c:5a:55:09:c2:20:bd:
         a6:f1:4c:a0:22:81:a5:1a:34:35:e3:c6:af:90:c2:38:f8:e9:
         12:29:25:b3:2a:dd:1a:f9:18:a1:9b:6f:b1:06:07:df:f2:b4:
         ed:56:bd:21:b6:f4:1f:ac:b9:fc:76:ac:1f:14:7e:15:6a:c6:
         da:ea:aa:d0:64:4c:7c:9b:4f:c4:a0:59:1b:d0:83:0f:e9:c2:
         18:cd:38:1c:f9:38:25:7a:3e:67:8b:87:1e:f7:cc:1e:ec:55:
         33:c2:89:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdSvj+uWPhOoLguaYQma7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj
YmZkZDQwHhcNMjYwNzI4MTYwMDU2WhcNMjYwNzI5MTYwMDU2WjAzMTEwLwYDVQQD
EygwYjY0M2RlNDY0NDZhY2UwODQyNjJmNzY2M2IxNDIxNDMyZjJkMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S7ZnGvOcpTJPgI6SHA9X+EInSiN
2RAucAvUWyV/F34qQeA8N/7nH9f/zUKb9PvA2FEGUMBY6hmum5obrOZo3qGjq5fY
xzAZeoNm1E5Dt2Ol2+vpQm2mO/GnxGe9B+Kn2sXWbYPrAj1m3HtTkONABEDN6SbZ
+tS4Tg69fLJC5LMQV8Bu1dEZGoN+gm9WQcdmQAeR1G5hGufkneiC4x0fBWuqsAQL
xm5TBsXp9o5Ph1Ydy9g1mHPfK6nGae2k5Pqxdk8+ol228GxSIRgYtdnqZSr0YwpD
Yq2OxMSN2RDcItlB02UaOqSSv9b9ujFO2HgoC6BgD5E01dv+07MhX9eSIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtkPeRkRqzghCYvdmOxQhQy8tK7MB8GA1UdIwQY
MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt
M2FkYTM1MjY1MmI0LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0
LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM2fvOAk2
PJkq50KkoEYdJlUSrgSStjHw2/Sx+lc2Fxbv0wOmVElKZdCskl0nWRQzDqVcinBQ
AqBRDvC21y7CP+saDUOzB0vD1zrnlLsY4XlDoTi0xVis8hwtXI2Q6DKrvN78I19w
FWJcUgfcv4ndQEFvCnivoleSkGy5BNTbv54Qi6RsdRGXmiu8tWo9UWL4FsCvvGN8
AxuPgnt8WlUJwiC9pvFMoCKBpRo0NePGr5DCOPjpEiklsyrdGvkYoZtvsQYH3/K0
7Va9Ibb0H6y5/HasHxR+FWrG2uqq0GRMfJtPxKBZG9CDD+nCGM04HPk4JXo+Z4uH
HvfMHuxVM8KJjQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:23 2026 by rpki-client