Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
File:                     E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft (raw, json)
Hash identifier:          AbyA2Ktd9NxIR4pYHg0OLJW3fJEncRaNBSsyfPFQirs=
Subject key identifier:   4F:84:E2:A8:2A:5F:CD:AE:08:CC:4B:7B:49:A4:F5:4B:4C:C3:25:85
Authority key identifier: 13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56
Certificate issuer:       /CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
Certificate serial:       019FAA8803BA2E62F8A695101532FABB30BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
Manifest number:          10BB
Signing time:             Tue 28 Jul 2026 21:01:08 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:08 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:08 +0000
Files and hashes:         1: E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl (hash: Oe2JBu05WkrKfaZsAA4grgdeuLx47JyDp37IgLJx0eA=)
                          2: sjVifTsqCFnPEPjh_BafeqtcnzE.roa (hash: U+Qobqemfwl34W+0l2bHf3Kc8qUqCwokA6NOdvQQ/0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:03:ba:2e:62:f8:a6:95:10:15:32:fa:bb:30:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1346e30276e0c603d0dee2f2d42fcd9a4415e256
        Validity
            Not Before: Jul 28 21:01:08 2026 GMT
            Not After : Jul 29 21:01:08 2026 GMT
        Subject: CN=4f84e2a82a5fcdae08cc4b7b49a4f54b4cc32585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:6b:05:81:54:a0:7c:68:2e:2c:a5:30:29:
                    16:f4:9b:37:4c:ba:a9:c4:a7:95:48:cd:c1:a6:ef:
                    56:95:87:04:82:1e:d3:cb:de:1c:64:0d:1f:b6:e6:
                    d0:cc:00:cc:e0:72:72:e7:32:95:45:d9:4f:2d:85:
                    ea:ec:2e:47:ca:80:20:6e:20:19:29:f8:c3:f0:b9:
                    ca:26:2e:5c:9e:09:fe:10:36:49:03:78:93:1b:f3:
                    73:21:c9:c2:21:bc:55:39:e5:76:2a:12:28:06:08:
                    eb:71:25:0b:72:38:97:6c:fb:cb:4b:b5:bd:81:c5:
                    40:3d:ad:b2:d4:de:ce:c6:2d:fa:10:3c:f1:0d:c7:
                    99:bd:d6:77:1f:6a:f2:83:fb:18:cd:00:84:0b:67:
                    9f:c2:f6:17:5a:8c:bb:e7:37:df:90:1c:f4:fa:e9:
                    35:c8:4a:18:13:0c:19:f7:96:b7:f7:56:63:1f:dc:
                    9a:70:cc:b2:4f:f3:b8:f8:ea:63:7c:5e:99:6a:d2:
                    af:bc:71:c6:14:3a:25:56:4e:4b:b1:11:ee:92:6e:
                    42:27:ee:9c:54:e3:6f:44:4e:4e:9f:db:4d:af:3a:
                    ab:1c:78:82:1e:c1:46:0b:a1:09:1b:5f:89:c9:46:
                    ae:05:a4:16:80:d7:69:af:37:b4:29:6d:cb:47:2c:
                    c6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:84:E2:A8:2A:5F:CD:AE:08:CC:4B:7B:49:A4:F5:4B:4C:C3:25:85
            X509v3 Authority Key Identifier:
                keyid:13:46:E3:02:76:E0:C6:03:D0:DE:E2:F2:D4:2F:CD:9A:44:15:E2:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4ee463-f0a8-4fdb-8c86-c4376273a2df/1/E0bjAnbgxgPQ3uLy1C_NmkQV4lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:54:43:57:ce:db:44:2e:0d:e1:32:62:4d:c0:41:2e:2c:85:
         53:0d:5e:95:fd:37:db:9c:36:de:50:c3:67:fd:1f:c5:25:c4:
         ef:56:ef:76:c7:cb:37:7a:b5:60:2d:47:a5:b2:ac:ab:c8:47:
         b5:11:39:80:17:0d:bb:27:43:5b:e3:75:51:04:2b:5b:7b:ad:
         6e:b0:89:c9:82:ce:e0:3e:7d:c3:b3:07:18:82:d7:a0:e8:8d:
         bc:3a:ee:88:ce:fa:e8:9e:d8:31:41:33:17:8f:54:e3:09:36:
         04:27:2f:90:a1:fc:ec:5a:98:3b:4d:70:80:8e:6d:ae:72:1e:
         70:01:27:26:82:04:7a:06:25:63:06:33:1d:da:08:7f:71:79:
         ca:31:d1:da:92:57:ba:01:b3:69:f9:fc:ad:1a:f1:8a:40:49:
         7c:37:73:f4:8d:20:8b:c2:3a:fc:35:7a:92:8b:6a:66:4e:bd:
         37:c3:d6:64:76:5b:ca:35:bf:5a:b3:83:89:a9:4f:9f:f1:59:
         39:34:19:c0:3a:e5:a7:93:6f:14:be:66:d7:0e:c1:dd:e9:60:
         08:9d:4b:89:1e:1e:d5:e2:24:7e:f5:16:8f:56:2d:36:2f:a3:
         34:be:c1:7f:ba:d6:70:64:eb:99:ca:11:a7:5a:a7:b2:83:e7:
         c4:69:a1:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qiAO6LmL4ppUQFTL6uzC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNDZlMzAyNzZlMGM2MDNkMGRlZTJmMmQ0MmZjZDlhNDQx
NWUyNTYwHhcNMjYwNzI4MjEwMTA4WhcNMjYwNzI5MjEwMTA4WjAzMTEwLwYDVQQD
Eyg0Zjg0ZTJhODJhNWZjZGFlMDhjYzRiN2I0OWE0ZjU0YjRjYzMyNTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwg9rBYFUoHxoLiylMCkW9Js3TLqp
xKeVSM3Bpu9WlYcEgh7Ty94cZA0ftubQzADM4HJy5zKVRdlPLYXq7C5HyoAgbiAZ
KfjD8LnKJi5cngn+EDZJA3iTG/NzIcnCIbxVOeV2KhIoBgjrcSULcjiXbPvLS7W9
gcVAPa2y1N7Oxi36EDzxDceZvdZ3H2ryg/sYzQCEC2efwvYXWoy75zffkBz0+uk1
yEoYEwwZ95a391ZjH9yacMyyT/O4+OpjfF6ZatKvvHHGFDolVk5LsRHukm5CJ+6c
VONvRE5On9tNrzqrHHiCHsFGC6EJG1+JyUauBaQWgNdprze0KW3LRyzGFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE+E4qgqX82uCMxLe0mk9UtMwyWFMB8GA1UdIwQY
MBaAFBNG4wJ24MYD0N7i8tQvzZpEFeJWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYt
YzQzNzYyNzNhMmRmLzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy80ZWU0NjMtZjBhOC00ZmRiLThjODYtYzQzNzYyNzNhMmRm
LzEvRTBiakFuYmd4Z1BRM3VMeTFDX05ta1FWNGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoVRDV87b
RC4N4TJiTcBBLiyFUw1elf0325w23lDDZ/0fxSXE71bvdsfLN3q1YC1HpbKsq8hH
tRE5gBcNuydDW+N1UQQrW3utbrCJyYLO4D59w7MHGILXoOiNvDruiM766J7YMUEz
F49U4wk2BCcvkKH87FqYO01wgI5trnIecAEnJoIEegYlYwYzHdoIf3F5yjHR2pJX
ugGzafn8rRrxikBJfDdz9I0gi8I6/DV6kotqZk69N8PWZHZbyjW/WrODialPn/FZ
OTQZwDrlp5NvFL5m1w7B3elgCJ1LiR4e1eIkfvUWj1YtNi+jNL7Bf7rWcGTrmcoR
p1qnsoPnxGmhAA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:38:36 2026 by rpki-client