Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
File:                     W8DpSJV2WYzYDP0T6D2fp63IeR8.mft (raw, json)
Hash identifier:          Ro3/hhTWefJtLBLePt+aqDXOyUXgHwqabMHA3tZ7Rks=
Subject key identifier:   DB:BE:47:7A:18:8F:7D:F1:31:C7:DF:C3:60:E6:48:AD:1B:32:06:5A
Authority key identifier: 5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F
Certificate issuer:       /CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
Certificate serial:       019FA89987022C91F52E74E7B4BAE4ED739E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:01 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:01 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:01 +0000
Files and hashes:         1: 1-DANYdHbsdN8eF4D9x25gbY4HM4.asa (hash: da1OXz6NVUalkjUuu1Xja51Ja8EYRSGQX9dUI8+RFOk=)
                          2: 3mm9P-FdP0-jDL-4nrrptbD_jB8.roa (hash: QwWJgEY+dC/sU9EOt0b9HTBsM5YGl/obs/+Vb9lhNMU=)
                          3: 7Yz3ruAw4kUL5OGdcvqgX7DjQLg.roa (hash: BMrCMeTI47GMj+Fyfiw7DgkMoB9AVwLEitxZnfi4FEM=)
                          4: IaAb2SK8EToZ3e7j0TfiW41DJ5k.roa (hash: x7R7BzlmMrfd4ImvpXAAcm0eBgLlqygHWCAkIPrZPM8=)
                          5: NEEbN8JynyHhxumwB0vTIHcw5XY.roa (hash: qAw0kKhjXj/KB3/1ygdKpx2cD51ri9hvDX+NCaJivps=)
                          6: W8DpSJV2WYzYDP0T6D2fp63IeR8.crl (hash: B4bdZJDE8Evd1bmN17tTM5a1fvhlj0q7TTPuxoooDNQ=)
                          7: bVgFXhmiCtpbDc9ylmo9zoqKzek.roa (hash: GOe4tb2POgSuUcx9oLt0ppXtCPu00Xxudx2ysHpaSxc=)
                          8: mC9PlY-I_Iq2Rd9WtQsbARZOLZY.roa (hash: 9v7Y8PkVFmHD6mDpJycH6qfgI2cIsbWqEglvHtvCITA=)
                          9: q2JOfzQUXDsaYML0xhmy_cGFoFo.roa (hash: gCK4j8piqegwon0im3JtD1xJ3+wnF3l7H3N4tNnqK7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:87:02:2c:91:f5:2e:74:e7:b4:ba:e4:ed:73:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bc0e9489576598cd80cfd13e83d9fa7adc8791f
        Validity
            Not Before: Jul 28 12:01:01 2026 GMT
            Not After : Jul 29 12:01:01 2026 GMT
        Subject: CN=dbbe477a188f7df131c7dfc360e648ad1b32065a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:62:13:ac:9a:76:cb:ef:b8:33:59:48:89:98:
                    5b:c1:3d:5a:00:8f:6d:46:32:3d:44:cc:59:e8:ed:
                    56:a6:fa:e6:11:74:7f:59:22:a1:d0:70:9f:04:49:
                    be:1f:b8:a7:76:fb:dd:92:16:25:1e:c6:29:4d:44:
                    ba:d0:e6:f9:44:cf:8e:01:df:58:97:57:bb:78:71:
                    b2:ed:45:2f:07:03:d4:6e:04:e4:d7:ed:93:c5:95:
                    b8:95:54:0e:2a:6a:7c:fb:1a:72:b1:01:15:b9:8f:
                    bc:34:d5:6c:85:e9:e9:1c:c1:dd:f0:3d:1c:3e:24:
                    22:c0:80:4a:f3:ba:6a:29:9a:df:66:64:18:e9:e0:
                    bb:fe:b9:d9:fa:9d:d6:e3:80:5d:3b:e0:9e:e1:0a:
                    0e:e0:a7:9b:66:7c:ce:c9:c4:fb:45:d1:86:4f:a4:
                    27:38:e5:d7:2b:79:a7:0e:f1:b5:98:95:66:79:e3:
                    a1:9d:91:f6:f5:bc:51:80:f6:e4:cc:df:1e:11:b8:
                    f1:4d:c7:91:33:05:a8:00:2b:44:e6:73:cd:b6:8a:
                    6d:11:e6:54:80:18:84:cf:17:dc:73:1b:9f:7d:4c:
                    86:43:57:ee:ca:5c:7d:65:28:24:c6:10:7e:18:52:
                    4b:73:04:90:e6:91:55:a0:87:e3:dd:5e:d5:6e:da:
                    91:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:BE:47:7A:18:8F:7D:F1:31:C7:DF:C3:60:E6:48:AD:1B:32:06:5A
            X509v3 Authority Key Identifier:
                keyid:5B:C0:E9:48:95:76:59:8C:D8:0C:FD:13:E8:3D:9F:A7:AD:C8:79:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W8DpSJV2WYzYDP0T6D2fp63IeR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4f701a-ed6f-47c8-bf73-f4c5fc3ca2c4/1/W8DpSJV2WYzYDP0T6D2fp63IeR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:51:b7:37:a5:e3:98:54:81:7b:8d:e2:20:03:31:3c:5b:e1:
         56:d0:a6:6b:a5:74:f7:25:20:52:bc:c7:cc:0d:93:8c:2f:70:
         be:04:f0:f8:a5:f8:de:c7:0f:8b:88:39:c4:75:22:53:53:d0:
         21:26:e8:ec:71:32:60:77:a0:93:08:70:c0:f6:4d:a0:3e:a8:
         07:b5:fb:a3:1a:86:e6:2b:58:34:15:a9:1e:83:77:d0:da:50:
         46:5e:35:7a:95:79:44:e1:3e:15:a9:18:40:58:94:76:20:bf:
         d9:ea:9a:c7:9f:c8:1e:d0:af:78:11:bf:15:30:43:f3:d6:c6:
         93:78:3e:46:1c:aa:1a:28:84:69:06:af:15:f8:d0:2f:e7:e8:
         b6:5c:ea:1e:35:cd:de:ba:46:db:2f:ac:59:83:12:ac:43:4a:
         5c:be:a4:12:1c:ad:38:e0:f8:c2:32:f2:73:ff:78:0c:93:5e:
         f4:28:85:4c:cd:32:bb:ce:36:9e:8c:6d:ed:1f:8f:51:ba:91:
         83:a1:3d:88:d2:e2:29:4a:21:9b:0c:0c:9b:ff:ed:38:31:9d:
         c5:be:ca:95:d0:83:53:88:ca:8a:61:64:36:16:26:36:7b:14:
         ea:4b:b0:ee:b2:24:7a:53:78:14:98:11:97:ba:e9:bf:0a:a7:
         1a:29:e4:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omYcCLJH1LnTntLrk7XOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViYzBlOTQ4OTU3NjU5OGNkODBjZmQxM2U4M2Q5ZmE3YWRj
ODc5MWYwHhcNMjYwNzI4MTIwMTAxWhcNMjYwNzI5MTIwMTAxWjAzMTEwLwYDVQQD
EyhkYmJlNDc3YTE4OGY3ZGYxMzFjN2RmYzM2MGU2NDhhZDFiMzIwNjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmITrJp2y++4M1lIiZhbwT1aAI9t
RjI9RMxZ6O1WpvrmEXR/WSKh0HCfBEm+H7indvvdkhYlHsYpTUS60Ob5RM+OAd9Y
l1e7eHGy7UUvBwPUbgTk1+2TxZW4lVQOKmp8+xpysQEVuY+8NNVshenpHMHd8D0c
PiQiwIBK87pqKZrfZmQY6eC7/rnZ+p3W44BdO+Ce4QoO4KebZnzOycT7RdGGT6Qn
OOXXK3mnDvG1mJVmeeOhnZH29bxRgPbkzN8eEbjxTceRMwWoACtE5nPNtoptEeZU
gBiEzxfccxuffUyGQ1fuylx9ZSgkxhB+GFJLcwSQ5pFVoIfj3V7VbtqRlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNu+R3oYj33xMcffw2DmSK0bMgZaMB8GA1UdIwQY
MBaAFFvA6UiVdlmM2Az9E+g9n6etyHkfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzhEcFNKVjJXWXpZRFAwVDZEMmZwNjNJZVI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMt
ZjRjNWZjM2NhMmM0LzEvVzhEcFNKVjJXWXpZRFAwVDZEMmZwNjNJZVI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC80ZjcwMWEtZWQ2Zi00N2M4LWJmNzMtZjRjNWZjM2NhMmM0
LzEvVzhEcFNKVjJXWXpZRFAwVDZEMmZwNjNJZVI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADVG3N6Xj
mFSBe43iIAMxPFvhVtCma6V09yUgUrzHzA2TjC9wvgTw+KX43scPi4g5xHUiU1PQ
ISbo7HEyYHegkwhwwPZNoD6oB7X7oxqG5itYNBWpHoN30NpQRl41epV5ROE+FakY
QFiUdiC/2eqax5/IHtCveBG/FTBD89bGk3g+RhyqGiiEaQavFfjQL+fotlzqHjXN
3rpG2y+sWYMSrENKXL6kEhytOOD4wjLyc/94DJNe9CiFTM0yu842noxt7R+PUbqR
g6E9iNLiKUohmwwMm//tODGdxb7KldCDU4jKimFkNhYmNnsU6kuw7rIkelN4FJgR
l7rpvwqnGinkxw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:40:52 2026 by rpki-client