Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
File:                     vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft (raw, json)
Hash identifier:          Nt8Kh4uvpd9C7RvtZ8J8vUjZJN/qHPjaMzT4DKd07jw=
Subject key identifier:   3A:04:6C:39:67:FB:FB:E2:0D:7C:8D:F2:9C:1E:BE:82:B3:61:90:DD
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Certificate issuer:       /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial:       019FA899AF2EFCE84D6664646CBB5B27A0D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:11 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:11 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:11 +0000
Files and hashes:         1: HDFBj63zZKtSC6Jw4UiShUElLMM.roa (hash: dM6soWydRdWA9tO0ayG6aaBJ/bKBsqmgot+omBKKzgI=)
                          2: MV9jYxZc4Pt5SR7yy233XyCWLl0.roa (hash: CCSfxKCBfU96JZOkhVpKkTvEVxdzHUgSCznNnbc32HM=)
                          3: QVN9r5UaSNS6ZHGlLVWnFmnGcFY.roa (hash: hnbKkDbftBuvAa8vwX3rQQSx/8OuOGXHnpFHQ2CyWKo=)
                          4: WpnuLvnippB8tVyEsrRUR3ewk_U.roa (hash: BHza+2duMNR9nIMzQqoFfpCBTh9mkWoaMy7myW/tl3E=)
                          5: dMUseDjB4Vm4-QaNQKEDVpMbMMA.roa (hash: wDNh4iJtkmG2Tv4fXnbCCR59EatzQ/W+vho/keWCSrQ=)
                          6: vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl (hash: iBtz7w2KuCDLjWECM/VL0Qy90HgxlXQJQafdF8Ucvnw=)
                          7: wjlwL_TATpRkl3IwETvo11EU7l0.roa (hash: uMoT+Y/uxFQEEAREXENe/LFmTT6LeqDGlq2BaS0K//Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:af:2e:fc:e8:4d:66:64:64:6c:bb:5b:27:a0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
        Validity
            Not Before: Jul 28 12:01:11 2026 GMT
            Not After : Jul 29 12:01:11 2026 GMT
        Subject: CN=3a046c3967fbfbe20d7c8df29c1ebe82b36190dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:05:3e:d5:70:28:11:7c:16:85:f8:7f:ff:ad:
                    2e:82:f6:35:7d:a5:48:1c:e3:0b:d0:79:20:3b:6f:
                    aa:e3:03:d8:22:bf:6e:08:25:31:a6:1e:f0:b8:70:
                    e7:9e:53:62:a8:19:b2:5c:f0:48:da:b6:e6:ed:d8:
                    e4:4e:1b:a1:54:04:ea:13:d4:ee:e9:ab:1d:43:ba:
                    2b:6f:b2:df:f2:2e:30:b6:c0:8d:b2:35:7d:45:7a:
                    70:f0:bc:0f:84:4d:0e:68:95:78:e5:35:d2:31:5a:
                    fb:22:19:e3:77:ed:4f:60:17:e3:7a:d7:88:ee:d7:
                    01:45:9c:6a:db:b5:96:4f:e3:e9:d8:be:a8:01:4d:
                    78:63:78:5b:9c:21:ca:aa:c8:02:26:c9:1f:3a:f1:
                    b0:ff:17:77:f7:63:ba:61:33:a9:40:f3:6c:22:3e:
                    8b:56:c3:12:fe:81:ff:5e:fe:55:00:d8:f9:a5:81:
                    a2:88:ba:83:d3:81:2b:d8:63:ad:4d:0f:98:d0:ca:
                    0a:5f:47:48:7a:af:f7:6d:48:33:dc:d2:fc:16:87:
                    22:60:eb:ab:66:f5:2a:4e:8e:18:e8:d2:c5:47:52:
                    e8:43:e7:b9:35:21:8f:d2:7b:4e:76:76:7c:7f:eb:
                    00:12:95:f1:c1:a8:32:56:94:2a:91:40:79:52:b9:
                    fb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:04:6C:39:67:FB:FB:E2:0D:7C:8D:F2:9C:1E:BE:82:B3:61:90:DD
            X509v3 Authority Key Identifier:
                keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:02:41:2a:0e:b8:ff:4d:4b:10:c7:0e:f5:9b:6f:0a:1d:df:
         3a:5e:a7:1b:7f:05:82:f5:63:d7:2b:ef:bb:29:d4:ee:aa:f1:
         cc:2e:3a:0b:fc:a0:58:d1:e6:7c:ea:ef:77:47:2d:5e:eb:37:
         8b:83:68:26:35:4b:5c:bc:52:1e:3b:c5:b9:73:90:83:eb:e2:
         77:28:1d:c8:91:b3:17:b0:fa:63:93:1d:59:81:ac:4d:86:ff:
         db:a8:36:83:e8:90:f2:67:13:8b:a4:35:82:e8:4c:6e:90:7b:
         f6:43:18:9e:3e:db:16:1e:35:77:33:d6:dd:28:e5:f6:14:06:
         31:5d:38:5c:19:fa:94:77:fb:c5:03:d8:42:f4:f0:8c:ee:dc:
         06:f2:83:70:61:6d:af:5e:8a:2e:4a:42:56:4c:cf:fa:10:98:
         f4:81:9d:b2:82:de:2c:76:03:b2:88:02:fc:eb:39:35:a4:99:
         f6:a5:15:da:51:66:f1:cb:09:e2:f6:04:86:ab:1b:86:68:01:
         98:62:18:39:3b:c7:33:ee:ae:ea:ae:4e:d0:e7:28:ce:bf:3a:
         86:7e:5f:37:8e:60:22:8c:74:ce:53:88:33:19:82:d3:62:07:
         94:f0:65:5d:00:96:05:b6:1a:b8:1f:3f:1f:6e:7e:42:f9:47:
         85:1e:64:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oma8u/OhNZmRkbLtbJ6DSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMjQ0ZDc2NjNhYzRkMWIxMDQ4YmNiZjY5N2YxNjkzZjg4
NTNkOWUwHhcNMjYwNzI4MTIwMTExWhcNMjYwNzI5MTIwMTExWjAzMTEwLwYDVQQD
EygzYTA0NmMzOTY3ZmJmYmUyMGQ3YzhkZjI5YzFlYmU4MmIzNjE5MGRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwU+1XAoEXwWhfh//60ugvY1faVI
HOML0HkgO2+q4wPYIr9uCCUxph7wuHDnnlNiqBmyXPBI2rbm7djkThuhVATqE9Tu
6asdQ7orb7Lf8i4wtsCNsjV9RXpw8LwPhE0OaJV45TXSMVr7Ihnjd+1PYBfjeteI
7tcBRZxq27WWT+Pp2L6oAU14Y3hbnCHKqsgCJskfOvGw/xd392O6YTOpQPNsIj6L
VsMS/oH/Xv5VANj5pYGiiLqD04Er2GOtTQ+Y0MoKX0dIeq/3bUgz3NL8FociYOur
ZvUqTo4Y6NLFR1LoQ+e5NSGP0ntOdnZ8f+sAEpXxwagyVpQqkUB5Urn7YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDoEbDln+/viDXyN8pwevoKzYZDdMB8GA1UdIwQY
MBaAFL0kTXZjrE0bEEi8v2l/FpP4hT2eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNSTmRtT3NUUnNRU0x5X2FYOFdrX2lGUFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt
N2Y0MzViZjU1MDFjLzEvdlNSTmRtT3NUUnNRU0x5X2FYOFdrX2lGUFo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj
LzEvdlNSTmRtT3NUUnNRU0x5X2FYOFdrX2lGUFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgJBKg64
/01LEMcO9ZtvCh3fOl6nG38FgvVj1yvvuynU7qrxzC46C/ygWNHmfOrvd0ctXus3
i4NoJjVLXLxSHjvFuXOQg+vidygdyJGzF7D6Y5MdWYGsTYb/26g2g+iQ8mcTi6Q1
guhMbpB79kMYnj7bFh41dzPW3Sjl9hQGMV04XBn6lHf7xQPYQvTwjO7cBvKDcGFt
r16KLkpCVkzP+hCY9IGdsoLeLHYDsogC/Os5NaSZ9qUV2lFm8csJ4vYEhqsbhmgB
mGIYOTvHM+6u6q5O0Ocozr86hn5fN45gIox0zlOIMxmC02IHlPBlXQCWBbYauB8/
H25+QvlHhR5kjQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:54:21 2026 by rpki-client