Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
File:                     4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft (raw, json)
Hash identifier:          BaaWCmUdnflTkD/Wjxc02dxYjUUpPwAfyPSVM4KySDM=
Subject key identifier:   79:65:69:DA:E7:CF:76:0C:8A:E7:D1:AF:44:8E:92:AB:4C:24:04:89
Authority key identifier: E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18
Certificate issuer:       /CN=e2c756c691073752260eda0b29df3140cec48c18
Certificate serial:       019FA861F743EDE94509F210E84A37D6D480
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
Manifest number:          12BE
Signing time:             Tue 28 Jul 2026 11:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 11:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 11:00:20 +0000
Files and hashes:         1: 4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl (hash: W/7zD7z7gSXCLsrBp0KU/CHAO9wz4Nf7SHutYSSHW5M=)
                          2: T3y-vjZIxVWN7JxZPOetrQJcWz0.roa (hash: XkyUMDJqJv6+3HQxI00RxtfuBMdhPrCaA/EHDWTyM5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 11:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:61:f7:43:ed:e9:45:09:f2:10:e8:4a:37:d6:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c756c691073752260eda0b29df3140cec48c18
        Validity
            Not Before: Jul 28 11:00:20 2026 GMT
            Not After : Jul 29 11:00:20 2026 GMT
        Subject: CN=796569dae7cf760c8ae7d1af448e92ab4c240489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:00:aa:77:22:4d:07:1e:6d:be:57:f3:25:56:
                    c5:33:22:9f:8f:9c:8f:3e:33:b6:0f:7c:2b:a7:db:
                    73:70:46:03:a3:51:82:ec:61:49:e1:74:6a:4d:18:
                    15:fc:ca:5c:bf:44:84:a5:21:36:10:6c:92:e9:cc:
                    a2:d1:b1:75:96:a7:0c:74:5d:f3:3c:b9:77:5f:c9:
                    ef:a4:d0:8f:d8:ac:a1:22:cb:da:a8:7c:bc:c2:ed:
                    bd:26:94:cb:f1:e2:78:cb:4c:35:c2:dd:7f:06:ed:
                    67:4e:79:e5:cd:7b:bb:37:45:68:41:fe:63:10:3c:
                    31:88:68:0d:f3:6c:49:b5:bd:6a:ee:45:3f:fd:ea:
                    51:11:2c:b9:4c:08:da:c3:6c:95:b8:29:31:03:d7:
                    f9:7d:73:53:f0:cf:e7:ee:0a:da:d8:fb:1b:dc:8d:
                    55:d5:d3:e0:09:5d:63:17:0c:e1:ea:01:3d:ff:14:
                    2d:d3:b1:5f:8a:62:ff:92:aa:fb:59:e4:de:53:14:
                    f3:f4:81:23:ec:df:fb:2f:76:c2:9e:b5:2d:b9:77:
                    83:a1:19:c5:eb:d5:9a:3e:33:31:b8:b8:26:ef:7c:
                    41:36:27:09:f8:8b:93:6d:a8:9d:7c:17:b9:04:c3:
                    ab:88:bb:7d:90:39:1b:89:23:9e:d8:fc:d2:1f:b8:
                    d5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:65:69:DA:E7:CF:76:0C:8A:E7:D1:AF:44:8E:92:AB:4C:24:04:89
            X509v3 Authority Key Identifier:
                keyid:E2:C7:56:C6:91:07:37:52:26:0E:DA:0B:29:DF:31:40:CE:C4:8C:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sdWxpEHN1ImDtoLKd8xQM7EjBg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/454f11-fc35-498c-a7c0-5a4d8b4e3f0a/1/4sdWxpEHN1ImDtoLKd8xQM7EjBg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:79:ff:12:62:b3:89:9c:e9:ca:bc:24:9a:5e:2e:88:1a:77:
         6e:26:94:70:39:29:9b:30:24:99:c2:c2:b8:81:56:b0:6a:35:
         75:cb:26:a6:67:6c:dd:d9:83:80:18:14:21:18:11:d9:a8:03:
         f9:60:7f:bc:db:97:84:a8:ab:cd:7c:d3:82:3f:61:25:9d:0f:
         9c:c4:65:95:ea:ea:9c:4f:02:24:09:ca:17:49:38:ff:01:6c:
         ba:4d:33:29:e7:b3:36:55:1b:9d:bf:39:bb:64:c7:c6:3e:65:
         d6:3a:c6:1c:9a:0b:5e:f5:b5:42:86:99:75:9f:92:9b:d1:72:
         00:98:ee:24:26:4a:fd:3a:4a:1f:76:53:cc:81:e8:df:d2:66:
         51:8b:48:4f:7b:a5:8c:e7:37:f2:95:a3:c2:09:2b:8c:cb:e3:
         51:54:4c:68:be:03:21:92:df:f6:18:38:78:95:d4:32:04:9f:
         6f:bc:f8:77:8e:e8:21:d1:e0:9f:9c:0a:08:96:32:a1:37:fa:
         c8:6c:99:c6:d4:86:1c:4d:23:fb:70:45:87:83:9a:f2:93:d7:
         4b:81:ae:68:74:6a:1c:9c:c0:b3:eb:4c:8c:d9:2c:79:fb:fe:
         2e:d3:52:33:70:92:11:fd:ee:22:bb:99:0e:db:f5:b7:b6:b1:
         9f:ea:bc:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oYfdD7elFCfIQ6Eo31tSAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzc1NmM2OTEwNzM3NTIyNjBlZGEwYjI5ZGYzMTQwY2Vj
NDhjMTgwHhcNMjYwNzI4MTEwMDIwWhcNMjYwNzI5MTEwMDIwWjAzMTEwLwYDVQQD
Eyg3OTY1NjlkYWU3Y2Y3NjBjOGFlN2QxYWY0NDhlOTJhYjRjMjQwNDg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuACqdyJNBx5tvlfzJVbFMyKfj5yP
PjO2D3wrp9tzcEYDo1GC7GFJ4XRqTRgV/Mpcv0SEpSE2EGyS6cyi0bF1lqcMdF3z
PLl3X8nvpNCP2KyhIsvaqHy8wu29JpTL8eJ4y0w1wt1/Bu1nTnnlzXu7N0VoQf5j
EDwxiGgN82xJtb1q7kU//epRESy5TAjaw2yVuCkxA9f5fXNT8M/n7gra2Psb3I1V
1dPgCV1jFwzh6gE9/xQt07FfimL/kqr7WeTeUxTz9IEj7N/7L3bCnrUtuXeDoRnF
69WaPjMxuLgm73xBNicJ+IuTbaidfBe5BMOriLt9kDkbiSOe2PzSH7jVJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlladrnz3YMiufRr0SOkqtMJASJMB8GA1UdIwQY
MBaAFOLHVsaRBzdSJg7aCynfMUDOxIwYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAt
NWE0ZDhiNGUzZjBhLzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC80NTRmMTEtZmMzNS00OThjLWE3YzAtNWE0ZDhiNGUzZjBh
LzEvNHNkV3hwRUhOMUltRHRvTEtkOHhRTTdFakJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHn/EmKz
iZzpyrwkml4uiBp3biaUcDkpmzAkmcLCuIFWsGo1dcsmpmds3dmDgBgUIRgR2agD
+WB/vNuXhKirzXzTgj9hJZ0PnMRllerqnE8CJAnKF0k4/wFsuk0zKeezNlUbnb85
u2THxj5l1jrGHJoLXvW1QoaZdZ+Sm9FyAJjuJCZK/TpKH3ZTzIHo39JmUYtIT3ul
jOc38pWjwgkrjMvjUVRMaL4DIZLf9hg4eJXUMgSfb7z4d47oIdHgn5wKCJYyoTf6
yGyZxtSGHE0j+3BFh4Oa8pPXS4GuaHRqHJzAs+tMjNksefv+LtNSM3CSEf3uIruZ
Dtv1t7axn+q8DQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:43:28 2026 by rpki-client