Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
File:                     n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft (raw, json)
Hash identifier:          7G58XQBPEZ12OcooDl+lHLWr1KX2CwZxHel+1Qf2+hs=
Subject key identifier:   9B:32:15:5A:B5:66:19:99:05:5E:FD:24:7B:97:84:48:83:71:99:0B
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Certificate issuer:       /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial:       019FAC75F274980D80200A2B310B1E8C7ABC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:38 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:38 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:38 +0000
Files and hashes:         1: 3sMnbgFlgRN6qTOgEaIxr6_8d-k.roa (hash: PQf0TYbRUaWDGilp0A7TiyN7qbDatKPuZrY3XALzNR4=)
                          2: 9RxYfwpOllVmFbUnzc-gHoabB44.roa (hash: /FmEDajuom+xgc2h3TGSfCVMlt4s5+O8iK3GFZc2cpQ=)
                          3: C3dLx6qeIik8HQR643ArrOFcxWw.roa (hash: pfrW5zSUbSnHsyVL3Nxv55eIHRIZ43KSi08lC2fGId4=)
                          4: G_OuDbVtKVjP3d0tjZnHLsZ83sE.roa (hash: pP2ZidmFasR/WmTJoaBDlilJcJecRSWLlBbfYiRpn4M=)
                          5: iPUEtdk8uK7It4e5YIwhrS-blIY.roa (hash: cCrIx5/3xv9yTrz1ALRR0gRJeVouvLvQFBFUHgTs3vc=)
                          6: n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl (hash: c3pnzgUtnOlYMixe6eI5ZWi5RXeQNz2Cru85uYuYNGw=)
                          7: q_09y7kzQ35Hofngi_hiaffCZwA.roa (hash: sHIfF0cJoyvJ2aYaxzmWds00JZ6y6D950zXoaEnnPTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:75:f2:74:98:0d:80:20:0a:2b:31:0b:1e:8c:7a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
        Validity
            Not Before: Jul 29 06:00:38 2026 GMT
            Not After : Jul 30 06:00:38 2026 GMT
        Subject: CN=9b32155ab5661999055efd247b9784488371990b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:2e:0d:56:52:9d:b6:63:5b:fb:e5:56:ed:
                    9d:59:50:4c:0f:38:2b:df:e3:fd:ef:5a:9d:ee:f4:
                    85:b6:41:07:fa:34:dd:a2:2d:1d:28:13:7a:17:5d:
                    64:9d:19:ce:e7:ba:75:63:d6:04:d3:9a:1f:c7:5a:
                    eb:af:2b:f8:d5:4c:af:56:66:cd:97:27:91:38:ef:
                    9c:9e:ad:da:49:bc:9b:84:8f:25:de:30:ec:77:33:
                    65:f3:ee:41:8e:be:aa:db:c1:9d:df:07:33:4d:c9:
                    2a:00:0e:9b:f8:cd:ec:f8:59:b5:e2:7b:4c:1c:d0:
                    fb:63:e3:12:78:aa:20:82:23:37:20:71:ba:2d:08:
                    76:2a:b4:71:d4:3e:e1:b5:da:af:a0:97:74:cd:cb:
                    cc:db:40:68:38:9c:5d:f0:33:c0:97:cf:34:6d:d6:
                    12:1f:fa:9e:f8:c8:b5:65:f4:15:ca:52:56:b9:f7:
                    f7:87:96:72:0e:e6:9f:6d:32:ea:0f:e6:83:0d:a5:
                    7b:7e:9c:18:91:b8:51:8c:ce:e4:a7:07:73:f3:73:
                    96:ba:c1:71:77:3f:39:84:23:bb:3b:b4:59:af:8b:
                    7f:56:c6:33:29:7d:79:18:61:5b:80:30:73:ee:6d:
                    06:fd:a0:67:95:ae:39:8a:27:bb:ca:7e:ab:63:d7:
                    d5:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:32:15:5A:B5:66:19:99:05:5E:FD:24:7B:97:84:48:83:71:99:0B
            X509v3 Authority Key Identifier:
                keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:10:24:8c:0b:fb:1e:2c:a5:68:2b:b8:42:7a:96:94:63:f3:
         71:d9:51:2a:da:b0:b1:c2:df:ac:7f:0c:23:8c:f6:28:59:78:
         f2:e0:a2:20:54:90:d8:d7:b0:24:ff:07:35:c2:d8:5e:95:5e:
         fb:75:f9:9f:0d:d1:1d:71:49:38:50:eb:ca:03:20:7f:a5:c4:
         4f:96:3a:7a:8c:a2:da:1a:00:91:36:ab:8f:ad:e7:3f:11:4b:
         59:21:64:38:ef:f0:3a:61:3a:20:b3:b7:a7:62:0c:26:2b:27:
         59:7b:a4:f3:2b:29:4d:90:a6:61:2d:c4:ae:bc:ca:a1:ae:02:
         86:66:63:42:ca:bd:21:60:58:6d:17:80:b3:0b:07:b0:4d:68:
         34:b2:cf:8b:67:ab:11:a0:3d:ec:1d:73:5f:bc:be:34:58:7b:
         65:41:a1:e8:39:d0:ee:e1:7c:b6:9c:1d:65:2e:c4:e0:36:c5:
         c8:72:82:34:8c:c0:6e:53:17:e6:dc:0b:d4:60:92:b7:45:6a:
         c9:27:bb:2f:a3:1c:e2:22:fd:11:4f:ca:bc:58:2c:24:fa:44:
         2e:fb:f8:d7:18:59:28:50:82:51:4e:5f:8c:ab:a5:cd:1a:95:
         b6:61:c0:c9:df:02:eb:e3:76:9c:69:3c:69:eb:9e:5f:4e:ba:
         7a:81:08:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdfJ0mA2AIAorMQsejHq8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODVkMTQ3NjBmOTg2NjJiOTg5ODkzZDhhMWU1ZTA1Y2Qz
YTEzZTQwHhcNMjYwNzI5MDYwMDM4WhcNMjYwNzMwMDYwMDM4WjAzMTEwLwYDVQQD
Eyg5YjMyMTU1YWI1NjYxOTk5MDU1ZWZkMjQ3Yjk3ODQ0ODgzNzE5OTBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyOwuDVZSnbZjW/vlVu2dWVBMDzgr
3+P971qd7vSFtkEH+jTdoi0dKBN6F11knRnO57p1Y9YE05ofx1rrryv41UyvVmbN
lyeROO+cnq3aSbybhI8l3jDsdzNl8+5Bjr6q28Gd3wczTckqAA6b+M3s+Fm14ntM
HND7Y+MSeKoggiM3IHG6LQh2KrRx1D7htdqvoJd0zcvM20BoOJxd8DPAl880bdYS
H/qe+Mi1ZfQVylJWuff3h5ZyDuafbTLqD+aDDaV7fpwYkbhRjM7kpwdz83OWusFx
dz85hCO7O7RZr4t/VsYzKX15GGFbgDBz7m0G/aBnla45iie7yn6rY9fVFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsyFVq1ZhmZBV79JHuXhEiDcZkLMB8GA1UdIwQY
MBaAFJ+F0Udg+YZiuYmJPYoeXgXNOhPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt
ZjA5M2UxN2IyN2VmLzEvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm
LzEvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIhAkjAv7
HiylaCu4QnqWlGPzcdlRKtqwscLfrH8MI4z2KFl48uCiIFSQ2NewJP8HNcLYXpVe
+3X5nw3RHXFJOFDrygMgf6XET5Y6eoyi2hoAkTarj63nPxFLWSFkOO/wOmE6ILO3
p2IMJisnWXuk8yspTZCmYS3ErrzKoa4ChmZjQsq9IWBYbReAswsHsE1oNLLPi2er
EaA97B1zX7y+NFh7ZUGh6DnQ7uF8tpwdZS7E4DbFyHKCNIzAblMX5twL1GCSt0Vq
ySe7L6Mc4iL9EU/KvFgsJPpELvv41xhZKFCCUU5fjKulzRqVtmHAyd8C6+N2nGk8
aeueX066eoEITw==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:42:40 2026 by rpki-client