Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
File:                     91anOU_9JyHWClrS6Saj0OHIu3k.mft (raw, json)
Hash identifier:          90GEOkALoXe5hnPci7R0QWw1GnYCTdy8uHgcpPaokj8=
Subject key identifier:   B4:95:B7:B8:AE:AD:57:D6:4F:B1:9D:6D:52:93:97:49:6C:8C:5B:AE
Authority key identifier: F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79
Certificate issuer:       /CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
Certificate serial:       019FAC767505D8650CD7AFB82AE8C3408E3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:12 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:12 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:12 +0000
Files and hashes:         1: 91anOU_9JyHWClrS6Saj0OHIu3k.crl (hash: QOKXfMIdcqpBMdTYFDcak+by2bemxRZiXAWiT8JGPJY=)
                          2: UE3rL7zpaLm2SNTNuQ_P2WzZEmA.roa (hash: xmWFoDrPk0aUWmQMRX8ayV7sBUWalQjY9fCBxeyV5bc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:75:05:d8:65:0c:d7:af:b8:2a:e8:c3:40:8e:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f756a7394ffd2721d60a5ad2e926a3d0e1c8bb79
        Validity
            Not Before: Jul 29 06:01:12 2026 GMT
            Not After : Jul 30 06:01:12 2026 GMT
        Subject: CN=b495b7b8aead57d64fb19d6d529397496c8c5bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:90:7e:fa:be:08:f6:e0:6d:71:77:32:5d:70:
                    91:99:55:63:81:37:74:6a:df:0b:23:ff:ca:b4:c7:
                    72:0d:17:9a:e8:01:86:95:2c:b5:c7:59:b9:1c:71:
                    cf:40:54:ac:df:1e:a6:97:fa:a9:49:79:a6:e0:05:
                    10:ae:60:a1:72:29:c4:75:43:e3:f9:b0:90:16:19:
                    5e:35:ab:f9:a0:1b:f0:73:63:4a:80:76:a0:48:c5:
                    95:2e:61:52:9b:9d:41:23:b4:d1:24:a9:be:10:bf:
                    8a:1a:01:aa:57:2d:d5:f4:b7:73:93:0f:b1:27:42:
                    6f:17:de:a0:23:d4:75:ac:8d:c8:79:e4:fc:56:5a:
                    98:a7:00:67:05:10:83:66:8e:d9:b5:0f:36:37:47:
                    04:90:ad:db:d7:06:3e:ff:3e:f6:fa:e5:fa:f9:d5:
                    9b:bb:f7:1d:8a:73:a8:9b:23:1d:26:25:dc:12:4b:
                    84:ae:a9:a8:27:f9:c3:bc:70:49:d7:5c:90:69:c2:
                    76:2b:fc:f7:59:e6:a8:2d:3d:9f:84:41:cf:ce:d3:
                    a4:8c:c3:ff:fa:9d:b4:74:eb:8f:a5:56:d5:45:d1:
                    3e:23:e5:b0:61:bd:09:dc:a5:5a:e5:75:96:f5:28:
                    20:0b:6a:df:d4:5f:69:d3:6f:33:c9:56:88:d1:9f:
                    30:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:95:B7:B8:AE:AD:57:D6:4F:B1:9D:6D:52:93:97:49:6C:8C:5B:AE
            X509v3 Authority Key Identifier:
                keyid:F7:56:A7:39:4F:FD:27:21:D6:0A:5A:D2:E9:26:A3:D0:E1:C8:BB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/91anOU_9JyHWClrS6Saj0OHIu3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/91anOU_9JyHWClrS6Saj0OHIu3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:50:8b:56:6b:bc:a3:1e:73:b3:fe:f9:52:6c:41:91:9e:
         c2:1d:ac:4b:6e:fb:a8:e7:2b:ef:b5:c4:ce:4f:60:1a:ab:a8:
         84:d3:b7:a5:3c:c9:63:8f:4d:bd:c6:a8:fb:ec:17:7c:04:10:
         bd:a2:43:99:f5:bf:ab:70:c0:0c:11:49:c6:6d:cf:65:97:11:
         00:b0:d1:ff:62:77:2b:5e:25:75:20:ec:2f:f2:d1:bc:24:93:
         61:d5:02:f5:e3:57:f9:48:26:4c:93:b5:eb:a1:14:8c:bf:cd:
         db:3f:4a:fb:44:67:d3:b3:c9:4b:0b:2c:9c:81:ad:8b:96:5f:
         7c:32:48:af:1e:47:17:7e:af:27:c4:c6:91:ac:d0:3c:de:26:
         41:cb:a0:83:8f:f9:e2:3d:89:fa:53:91:1a:e9:26:49:5d:6d:
         28:c7:dd:a1:b0:a7:d9:a4:ca:74:87:8e:41:28:f9:19:88:cc:
         54:a4:3f:9b:30:5f:10:4a:39:9d:17:06:60:77:08:64:10:e9:
         b8:26:61:3b:cb:88:ca:62:5d:d3:6c:86:a8:b4:29:03:53:5b:
         70:23:1e:17:cf:30:54:16:c7:7c:12:65:27:80:12:52:f2:a9:
         2a:b9:66:2f:7c:1d:b6:66:b7:f4:99:fa:db:d2:27:7d:26:d4:
         3d:53:99:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdnUF2GUM16+4KujDQI46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NTZhNzM5NGZmZDI3MjFkNjBhNWFkMmU5MjZhM2QwZTFj
OGJiNzkwHhcNMjYwNzI5MDYwMTEyWhcNMjYwNzMwMDYwMTEyWjAzMTEwLwYDVQQD
EyhiNDk1YjdiOGFlYWQ1N2Q2NGZiMTlkNmQ1MjkzOTc0OTZjOGM1YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJB++r4I9uBtcXcyXXCRmVVjgTd0
at8LI//KtMdyDRea6AGGlSy1x1m5HHHPQFSs3x6ml/qpSXmm4AUQrmChcinEdUPj
+bCQFhleNav5oBvwc2NKgHagSMWVLmFSm51BI7TRJKm+EL+KGgGqVy3V9Ldzkw+x
J0JvF96gI9R1rI3IeeT8VlqYpwBnBRCDZo7ZtQ82N0cEkK3b1wY+/z72+uX6+dWb
u/cdinOomyMdJiXcEkuErqmoJ/nDvHBJ11yQacJ2K/z3WeaoLT2fhEHPztOkjMP/
+p20dOuPpVbVRdE+I+WwYb0J3KVa5XWW9SggC2rf1F9p028zyVaI0Z8wLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSVt7iurVfWT7GdbVKTl0lsjFuuMB8GA1UdIwQY
MBaAFPdWpzlP/Sch1gpa0ukmo9DhyLt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTFhbk9VXzlKeUhXQ2xyUzZTYWowT0hJdTNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmIt
MmMyMTgwNzE0ZTcxLzEvOTFhbk9VXzlKeUhXQ2xyUzZTYWowT0hJdTNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9kOGI3M2ItNTAxMy00M2NkLWJhMmItMmMyMTgwNzE0ZTcx
LzEvOTFhbk9VXzlKeUhXQ2xyUzZTYWowT0hJdTNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ9ZQi1Zr
vKMec7P++VJsQZGewh2sS277qOcr77XEzk9gGquohNO3pTzJY49Nvcao++wXfAQQ
vaJDmfW/q3DADBFJxm3PZZcRALDR/2J3K14ldSDsL/LRvCSTYdUC9eNX+UgmTJO1
66EUjL/N2z9K+0Rn07PJSwssnIGti5ZffDJIrx5HF36vJ8TGkazQPN4mQcugg4/5
4j2J+lORGukmSV1tKMfdobCn2aTKdIeOQSj5GYjMVKQ/mzBfEEo5nRcGYHcIZBDp
uCZhO8uIymJd02yGqLQpA1NbcCMeF88wVBbHfBJlJ4ASUvKpKrlmL3wdtma39Jn6
29InfSbUPVOZuQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:23:52 2026 by rpki-client