Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
File:                     1sOjfCGNyegU2_xCq0dvJhZjHUc.mft (raw, json)
Hash identifier:          P3ZrAZtgTYprhWCvC31fnm8lD6yuFyqW2e7eB/n5C38=
Subject key identifier:   8B:4A:C1:A2:08:B2:F8:97:47:E9:3E:C7:9C:EC:9B:14:9B:46:BE:40
Authority key identifier: D6:C3:A3:7C:21:8D:C9:E8:14:DB:FC:42:AB:47:6F:26:16:63:1D:47
Certificate issuer:       /CN=d6c3a37c218dc9e814dbfc42ab476f2616631d47
Certificate serial:       019FAC760DF7A1E789D439DD8D320E4B1E34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:45 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:45 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:45 +0000
Files and hashes:         1: 1sOjfCGNyegU2_xCq0dvJhZjHUc.crl (hash: F4+tDIW4tFgaEwZwHyDsypiWdQg4Tv8hZ/yuaW7dYMQ=)
                          2: Eu0fB4RPCslDaY2STwFsEjtmjM4.roa (hash: baHCjNbN0yoBwK8/yKMs0jfLYaaJD3Ay7zAQGrvne+A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:0d:f7:a1:e7:89:d4:39:dd:8d:32:0e:4b:1e:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6c3a37c218dc9e814dbfc42ab476f2616631d47
        Validity
            Not Before: Jul 29 06:00:45 2026 GMT
            Not After : Jul 30 06:00:45 2026 GMT
        Subject: CN=8b4ac1a208b2f89747e93ec79cec9b149b46be40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:3b:cc:1c:7c:19:b3:ac:ca:98:c5:84:d8:a5:
                    56:60:1e:d2:63:95:c9:2b:a5:40:cc:c2:b7:54:34:
                    04:a9:13:7d:8e:5f:b3:d9:71:4c:9a:b2:79:22:ea:
                    45:e3:89:6c:81:4b:c3:6d:e2:08:bd:b1:35:a6:95:
                    8e:ca:7d:6c:83:c2:d5:ab:34:fc:97:b5:45:f0:8e:
                    55:db:b9:cf:82:7e:ee:03:27:6a:c6:39:fd:2b:fe:
                    97:8e:e9:89:b7:26:2d:c7:ea:d8:7f:d4:a8:78:7e:
                    f4:2a:db:cc:43:16:bb:46:35:65:c7:f4:ff:3e:c0:
                    e0:df:e0:cd:c5:d4:fe:9c:0f:d0:d7:57:22:55:10:
                    09:f7:9d:cf:b5:e2:09:79:7c:b0:9a:46:26:61:3c:
                    48:22:85:6f:9b:2e:d0:ee:58:b6:2c:0f:a0:53:87:
                    46:e2:29:aa:18:4b:d3:d7:bc:96:d1:71:3a:00:8c:
                    cc:a2:b4:9c:95:e3:5c:f0:4e:a0:f5:31:fd:12:5a:
                    01:4b:38:b7:1b:69:c3:f3:39:5a:7d:37:61:8e:42:
                    15:c5:c4:a6:24:aa:c4:0b:e5:a1:bb:39:f4:48:c1:
                    28:62:03:55:5c:0e:93:d8:76:bf:13:31:ce:3c:17:
                    e3:d3:ac:5b:d0:f0:79:a8:2b:b8:4a:bf:27:6a:c9:
                    0d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4A:C1:A2:08:B2:F8:97:47:E9:3E:C7:9C:EC:9B:14:9B:46:BE:40
            X509v3 Authority Key Identifier:
                keyid:D6:C3:A3:7C:21:8D:C9:E8:14:DB:FC:42:AB:47:6F:26:16:63:1D:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1sOjfCGNyegU2_xCq0dvJhZjHUc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/5d0e44-0b8e-43ea-98d8-cd8be1c59d8d/1/1sOjfCGNyegU2_xCq0dvJhZjHUc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e0:6b:fb:fd:74:27:0d:5f:d8:02:60:28:8c:ef:cc:44:ed:
         1f:22:61:e8:67:ad:1a:02:de:db:3f:fc:ac:ba:cf:92:ef:1e:
         ea:ed:35:e5:58:05:88:61:87:b8:aa:25:1f:64:e7:08:90:2c:
         2e:cc:d7:9b:15:a4:ca:53:c8:02:a1:7a:57:b5:70:32:b2:e7:
         c4:cc:3c:38:12:10:00:ad:63:a1:b6:7f:b9:84:78:80:62:31:
         ad:3c:2e:52:e8:3c:a9:15:21:4a:51:db:0a:f7:83:f3:22:ec:
         93:c9:fe:54:fb:9a:a6:a5:70:db:f5:84:87:19:5d:f6:3f:bd:
         cd:59:78:bc:e3:0f:13:a0:b5:e6:24:88:3d:c5:a4:f3:54:b9:
         c4:0b:62:8b:f4:71:cb:d7:f3:28:4b:6d:c5:13:26:f5:95:70:
         b1:8d:17:f5:cb:ce:09:89:06:9d:a6:01:60:01:49:99:f1:88:
         e2:7a:ab:f3:95:47:f4:56:f4:2d:41:ba:3e:77:b3:8b:b1:66:
         52:68:f9:4f:00:8d:b4:fb:59:f9:0e:41:2e:ff:19:e5:ad:8d:
         bf:9f:14:bd:9e:21:90:ed:c8:42:ec:10:6e:d0:53:af:23:63:
         5d:c1:da:a3:8b:b5:31:96:bc:9e:b5:e9:f8:c4:74:b9:d0:a8:
         d8:48:6c:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdg33oeeJ1DndjTIOSx40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2YzNhMzdjMjE4ZGM5ZTgxNGRiZmM0MmFiNDc2ZjI2MTY2
MzFkNDcwHhcNMjYwNzI5MDYwMDQ1WhcNMjYwNzMwMDYwMDQ1WjAzMTEwLwYDVQQD
Eyg4YjRhYzFhMjA4YjJmODk3NDdlOTNlYzc5Y2VjOWIxNDliNDZiZTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zvMHHwZs6zKmMWE2KVWYB7SY5XJ
K6VAzMK3VDQEqRN9jl+z2XFMmrJ5IupF44lsgUvDbeIIvbE1ppWOyn1sg8LVqzT8
l7VF8I5V27nPgn7uAydqxjn9K/6XjumJtyYtx+rYf9SoeH70KtvMQxa7RjVlx/T/
PsDg3+DNxdT+nA/Q11ciVRAJ953PteIJeXywmkYmYTxIIoVvmy7Q7li2LA+gU4dG
4imqGEvT17yW0XE6AIzMorScleNc8E6g9TH9EloBSzi3G2nD8zlafTdhjkIVxcSm
JKrEC+Whuzn0SMEoYgNVXA6T2Ha/EzHOPBfj06xb0PB5qCu4Sr8naskNAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItKwaIIsviXR+k+x5zsmxSbRr5AMB8GA1UdIwQY
MBaAFNbDo3whjcnoFNv8QqtHbyYWYx1HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXNPamZDR055ZWdVMl94Q3EwZHZKaFpqSFVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgt
Y2Q4YmUxYzU5ZDhkLzEvMXNPamZDR055ZWdVMl94Q3EwZHZKaFpqSFVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My81ZDBlNDQtMGI4ZS00M2VhLTk4ZDgtY2Q4YmUxYzU5ZDhk
LzEvMXNPamZDR055ZWdVMl94Q3EwZHZKaFpqSFVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPOBr+/10
Jw1f2AJgKIzvzETtHyJh6GetGgLe2z/8rLrPku8e6u015VgFiGGHuKolH2TnCJAs
LszXmxWkylPIAqF6V7VwMrLnxMw8OBIQAK1jobZ/uYR4gGIxrTwuUug8qRUhSlHb
CveD8yLsk8n+VPuapqVw2/WEhxld9j+9zVl4vOMPE6C15iSIPcWk81S5xAtii/Rx
y9fzKEttxRMm9ZVwsY0X9cvOCYkGnaYBYAFJmfGI4nqr85VH9Fb0LUG6Pnezi7Fm
Umj5TwCNtPtZ+Q5BLv8Z5a2Nv58UvZ4hkO3IQuwQbtBTryNjXcHao4u1MZa8nrXp
+MR0udCo2EhsPg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 14:15:12 2026 by rpki-client