Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
File:                     vL4wndalMhnOvVZb4fI0uT5WLjk.mft (raw, json)
Hash identifier:          rHH2AeirwB23q3J6W9BySUEO1ombK9Q/KOtkpbKh9OY=
Subject key identifier:   0C:7B:36:35:C8:27:AD:93:7A:00:0A:20:36:F1:78:F1:3F:E2:46:E0
Authority key identifier: BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
Certificate issuer:       /CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Certificate serial:       019FAABE6107BC72F5448755506310CDAC1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
Manifest number:          01A1
Signing time:             Tue 28 Jul 2026 22:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:31 +0000
Files and hashes:         1: vL4wndalMhnOvVZb4fI0uT5WLjk.crl (hash: sa4lamkEKc2/JDtGq+R760ZrulQgu712NdA8Qh2fgj0=)
                          2: y80B_uuM_hGD_Q988wwVbuTVVzQ.asa (hash: wqE3B1uMY7o5p44haT4r4tbcqIzVxJtI7cONoSQ5lKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:61:07:bc:72:f5:44:87:55:50:63:10:cd:ac:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcbe309dd6a53219cebd565be1f234b93e562e39
        Validity
            Not Before: Jul 28 22:00:31 2026 GMT
            Not After : Jul 29 22:00:31 2026 GMT
        Subject: CN=0c7b3635c827ad937a000a2036f178f13fe246e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bb:36:e4:53:b7:53:fd:dc:e1:4e:c1:d1:e4:
                    8b:87:f2:96:de:3d:19:21:e7:84:6a:fc:b1:e7:c9:
                    59:29:27:0b:93:53:8b:4c:26:67:52:bf:42:6d:86:
                    40:a7:3f:c7:65:44:a0:ac:3c:b7:dc:fc:c1:80:52:
                    ec:6e:a1:5b:9b:63:06:48:dc:ee:d1:08:b2:e7:6b:
                    fe:b0:32:8f:e3:64:45:85:39:61:48:04:09:43:25:
                    64:b4:d6:b0:77:e9:b9:f8:d6:b0:3a:e2:a9:53:da:
                    2e:ca:a2:98:da:45:ac:53:f6:79:bb:f0:69:59:31:
                    5c:d7:05:12:70:5f:ab:56:35:72:61:b0:e7:4d:19:
                    7b:fd:93:c2:50:3a:f5:bc:32:14:b4:77:2f:c2:6a:
                    41:17:e5:3f:6a:05:7f:d2:f1:a2:8c:39:0e:81:2e:
                    26:77:e8:17:a2:53:8e:70:87:ea:bd:bc:55:b1:16:
                    2a:66:1b:6b:be:9d:ca:1a:c0:71:07:26:c5:38:dd:
                    8e:fd:99:49:68:ab:26:b9:98:ce:fd:a5:84:b4:a9:
                    b5:09:60:68:2c:67:48:19:b3:fc:1f:3d:61:16:e1:
                    5a:36:61:76:e9:d4:5b:88:63:73:a0:ec:2f:7d:6b:
                    8d:17:3e:6b:1c:c4:28:f1:bd:4d:72:7f:94:8d:b9:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7B:36:35:C8:27:AD:93:7A:00:0A:20:36:F1:78:F1:3F:E2:46:E0
            X509v3 Authority Key Identifier:
                keyid:BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4d:08:09:a1:6f:f0:a5:bf:bd:42:0a:07:8c:e1:42:0a:c3:
         89:f7:c9:3d:60:f4:e0:c5:01:91:37:74:ef:79:bb:27:e5:84:
         1b:7b:11:db:79:8c:44:dd:e3:41:67:5d:be:96:cd:14:f3:b5:
         0c:3a:42:b5:94:ff:12:bc:d4:64:81:7d:c1:ff:11:74:93:c9:
         06:ba:63:4a:f6:3a:52:6d:13:99:15:75:b7:c2:5e:92:54:cd:
         8a:82:06:4a:bf:22:01:ec:87:36:40:4a:4a:26:70:b3:f1:c6:
         6a:42:39:b8:11:ce:1d:51:74:de:37:03:99:52:78:ca:af:6f:
         cc:00:62:82:bc:e9:fe:58:b8:a6:2f:21:2d:50:97:17:3d:5b:
         e2:4d:37:4f:c7:cf:24:d4:76:4f:d3:41:26:f6:2b:68:53:ea:
         20:8f:5a:d3:c3:db:74:a3:bb:25:44:cd:34:fb:e5:ab:c0:e0:
         2d:54:3f:50:9f:48:a0:83:f6:36:bf:9b:35:82:24:46:42:d2:
         b7:c3:bb:3b:4c:97:12:bd:c8:15:59:fb:17:34:b7:34:cd:22:
         61:3a:ea:d7:e9:59:65:70:da:62:10:24:19:c1:8d:0e:fe:68:
         36:60:3e:e6:cf:68:ac:6b:8e:ee:fa:b3:c8:e5:b6:46:b3:5e:
         fa:7f:13:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvmEHvHL1RIdVUGMQzawcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYmUzMDlkZDZhNTMyMTljZWJkNTY1YmUxZjIzNGI5M2U1
NjJlMzkwHhcNMjYwNzI4MjIwMDMxWhcNMjYwNzI5MjIwMDMxWjAzMTEwLwYDVQQD
EygwYzdiMzYzNWM4MjdhZDkzN2EwMDBhMjAzNmYxNzhmMTNmZTI0NmUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbs25FO3U/3c4U7B0eSLh/KW3j0Z
IeeEavyx58lZKScLk1OLTCZnUr9CbYZApz/HZUSgrDy33PzBgFLsbqFbm2MGSNzu
0Qiy52v+sDKP42RFhTlhSAQJQyVktNawd+m5+NawOuKpU9ouyqKY2kWsU/Z5u/Bp
WTFc1wUScF+rVjVyYbDnTRl7/ZPCUDr1vDIUtHcvwmpBF+U/agV/0vGijDkOgS4m
d+gXolOOcIfqvbxVsRYqZhtrvp3KGsBxBybFON2O/ZlJaKsmuZjO/aWEtKm1CWBo
LGdIGbP8Hz1hFuFaNmF26dRbiGNzoOwvfWuNFz5rHMQo8b1Ncn+Ujbm2AwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAx7NjXIJ62TegAKIDbxePE/4kbgMB8GA1UdIwQY
MBaAFLy+MJ3WpTIZzr1WW+HyNLk+Vi45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkw0d25kYWxNaG5PdlZaYjRmSTB1VDVXTGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jMGMzNzUtMDNhZS00OWFjLWJmZmIt
M2QzYmJjNWRiNTQzLzEvdkw0d25kYWxNaG5PdlZaYjRmSTB1VDVXTGprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jMGMzNzUtMDNhZS00OWFjLWJmZmItM2QzYmJjNWRiNTQz
LzEvdkw0d25kYWxNaG5PdlZaYjRmSTB1VDVXTGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKU0ICaFv
8KW/vUIKB4zhQgrDiffJPWD04MUBkTd073m7J+WEG3sR23mMRN3jQWddvpbNFPO1
DDpCtZT/ErzUZIF9wf8RdJPJBrpjSvY6Um0TmRV1t8JeklTNioIGSr8iAeyHNkBK
SiZws/HGakI5uBHOHVF03jcDmVJ4yq9vzABigrzp/li4pi8hLVCXFz1b4k03T8fP
JNR2T9NBJvYraFPqII9a08PbdKO7JUTNNPvlq8DgLVQ/UJ9IoIP2Nr+bNYIkRkLS
t8O7O0yXEr3IFVn7FzS3NM0iYTrq1+lZZXDaYhAkGcGNDv5oNmA+5s9orGuO7vqz
yOW2RrNe+n8TrQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:23:12 2026 by rpki-client