Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
File:                     iB4xmT-oWHVos_zeW3_ulttDqbc.mft (raw, json)
Hash identifier:          r2Kuaa7uwltFw6vAouDE5PrLsv/iB2n/UwsZNCGfEPE=
Subject key identifier:   5D:1C:A0:7E:B3:9B:A9:1D:FA:55:30:A0:B3:3D:58:03:57:7B:2C:1B
Authority key identifier: 88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7
Certificate issuer:       /CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
Certificate serial:       019FAD51C5951393A098B5E442B0E00F8B61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
Manifest number:          04C6
Signing time:             Wed 29 Jul 2026 10:00:45 +0000
Manifest this update:     Wed 29 Jul 2026 10:00:45 +0000
Manifest next update:     Thu 30 Jul 2026 10:00:45 +0000
Files and hashes:         1: 4x52VzYQnWKO_ybg9X988TnYMsg.roa (hash: P/+424hxb13nk4lYvoJNoDe5orzU5YP9hjQuy88CbIw=)
                          2: iB4xmT-oWHVos_zeW3_ulttDqbc.crl (hash: k3zTs1ryNlf17GN4iri6scYOlbcK4d44EXMEbN/s/aA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:51:c5:95:13:93:a0:98:b5:e4:42:b0:e0:0f:8b:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881e31993fa8587568b3fcde5b7fee96db43a9b7
        Validity
            Not Before: Jul 29 10:00:45 2026 GMT
            Not After : Jul 30 10:00:45 2026 GMT
        Subject: CN=5d1ca07eb39ba91dfa5530a0b33d5803577b2c1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:2b:b6:98:ea:5c:b5:00:c1:8a:36:bf:6a:ed:
                    40:f3:f4:1c:52:26:7b:e3:17:59:18:f8:b2:ca:6e:
                    91:ed:d1:92:52:7f:28:39:34:b3:2c:b3:6a:36:f2:
                    44:e5:6a:f8:db:32:16:53:82:95:c8:22:43:c3:d5:
                    46:a9:83:e0:98:c6:89:c5:a4:6d:d7:93:7d:4b:d3:
                    68:1b:0e:be:6e:31:f6:70:d8:06:78:4c:f0:3e:2d:
                    d6:8d:6c:3d:4f:e2:ed:ce:ec:6e:91:c7:70:2f:c4:
                    1b:eb:62:ee:a2:e1:12:c1:5c:d7:72:42:85:64:4f:
                    dd:3d:c3:ed:70:6c:e5:be:8b:e7:1a:f0:99:57:52:
                    ba:56:93:e7:38:99:74:a0:8a:d9:b4:59:d1:35:29:
                    80:71:0c:7d:11:e4:f2:37:f4:2e:12:03:06:a5:cb:
                    58:49:b6:72:db:72:01:34:19:2c:e9:7c:d6:b7:98:
                    06:0e:18:4e:c0:ec:59:8c:a6:af:b8:92:e9:d2:66:
                    ea:28:fc:2b:e8:02:51:08:43:ef:5a:df:7c:e5:47:
                    b8:40:84:69:65:da:47:13:d9:7b:ef:2f:5e:cb:75:
                    be:db:39:58:b9:2e:be:1c:4f:e8:d0:88:73:db:8b:
                    45:b2:81:72:55:4d:67:a4:90:d4:76:7f:87:a8:ac:
                    84:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:1C:A0:7E:B3:9B:A9:1D:FA:55:30:A0:B3:3D:58:03:57:7B:2C:1B
            X509v3 Authority Key Identifier:
                keyid:88:1E:31:99:3F:A8:58:75:68:B3:FC:DE:5B:7F:EE:96:DB:43:A9:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iB4xmT-oWHVos_zeW3_ulttDqbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/71/607766-8e57-451a-8b3f-5138f342e9f5/1/iB4xmT-oWHVos_zeW3_ulttDqbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:1a:4b:d8:03:8b:a2:bc:83:5b:07:d8:f6:36:94:36:04:9f:
         fd:be:1e:4a:1e:cc:98:19:6d:a8:6a:c8:6d:4c:c6:e5:f7:8e:
         42:fa:be:f1:a4:66:4a:fb:e8:3e:a3:c3:cc:83:b4:8c:c9:60:
         f3:b8:78:89:91:a5:58:3c:63:86:f3:f3:4d:18:a6:c6:10:0b:
         4d:3f:f3:47:65:1a:3c:94:39:c2:24:23:e5:e7:6c:18:58:db:
         3f:28:4b:54:b8:d5:35:ca:b6:56:a7:bd:61:19:0d:86:57:c4:
         3d:52:02:f7:bd:66:31:95:ce:9b:a0:a7:d8:15:12:8c:e1:93:
         70:cd:40:99:81:30:aa:1f:8a:12:94:9d:c1:0b:7d:2a:72:36:
         60:ee:42:dc:d5:7a:ce:15:e0:bc:a9:44:4f:2f:13:68:2f:ad:
         1b:fe:50:93:7a:04:ef:c4:a8:66:e8:cf:a6:5f:14:28:cc:46:
         e4:69:04:eb:88:19:8e:05:cb:6d:13:5f:be:55:2e:45:53:d1:
         6d:07:e6:61:e3:0a:be:25:c6:92:97:15:e9:dc:1b:76:e8:77:
         7b:17:cf:73:c2:6e:28:a5:69:20:5e:42:cd:61:bb:58:94:dc:
         74:27:5b:b3:ef:8d:12:6e:00:79:7c:9e:32:66:e9:d8:30:3a:
         f0:f6:eb:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUcWVE5OgmLXkQrDgD4thMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MWUzMTk5M2ZhODU4NzU2OGIzZmNkZTViN2ZlZTk2ZGI0
M2E5YjcwHhcNMjYwNzI5MTAwMDQ1WhcNMjYwNzMwMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg1ZDFjYTA3ZWIzOWJhOTFkZmE1NTMwYTBiMzNkNTgwMzU3N2IyYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Su2mOpctQDBija/au1A8/QcUiZ7
4xdZGPiyym6R7dGSUn8oOTSzLLNqNvJE5Wr42zIWU4KVyCJDw9VGqYPgmMaJxaRt
15N9S9NoGw6+bjH2cNgGeEzwPi3WjWw9T+LtzuxukcdwL8Qb62LuouESwVzXckKF
ZE/dPcPtcGzlvovnGvCZV1K6VpPnOJl0oIrZtFnRNSmAcQx9EeTyN/QuEgMGpctY
SbZy23IBNBks6XzWt5gGDhhOwOxZjKavuJLp0mbqKPwr6AJRCEPvWt985Ue4QIRp
ZdpHE9l77y9ey3W+2zlYuS6+HE/o0Ihz24tFsoFyVU1npJDUdn+HqKyEowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0coH6zm6kd+lUwoLM9WANXeywbMB8GA1UdIwQY
MBaAFIgeMZk/qFh1aLP83lt/7pbbQ6m3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2Yt
NTEzOGYzNDJlOWY1LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82MDc3NjYtOGU1Ny00NTFhLThiM2YtNTEzOGYzNDJlOWY1
LzEvaUI0eG1ULW9XSFZvc196ZVczX3VsdHREcWJjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxpL2AOL
oryDWwfY9jaUNgSf/b4eSh7MmBltqGrIbUzG5feOQvq+8aRmSvvoPqPDzIO0jMlg
87h4iZGlWDxjhvPzTRimxhALTT/zR2UaPJQ5wiQj5edsGFjbPyhLVLjVNcq2Vqe9
YRkNhlfEPVIC971mMZXOm6Cn2BUSjOGTcM1AmYEwqh+KEpSdwQt9KnI2YO5C3NV6
zhXgvKlETy8TaC+tG/5Qk3oE78SoZujPpl8UKMxG5GkE64gZjgXLbRNfvlUuRVPR
bQfmYeMKviXGkpcV6dwbduh3exfPc8JuKKVpIF5CzWG7WJTcdCdbs++NEm4AeXye
Mmbp2DA68Pbrwg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:41:38 2026 by rpki-client