Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
File:                     g026NqGaEf0f34ohJn8s01da1Rg.mft (raw, json)
Hash identifier:          uzUdyoDkhmND+F0eFptPeWKQxqJnoiFypiE4PK+YXmw=
Subject key identifier:   03:A6:3F:5E:7C:9A:F3:F1:B1:DC:B5:FF:8E:56:25:D4:F6:E9:67:B2
Authority key identifier: 83:4D:BA:36:A1:9A:11:FD:1F:DF:8A:21:26:7F:2C:D3:57:5A:D5:18
Certificate issuer:       /CN=834dba36a19a11fd1fdf8a21267f2cd3575ad518
Certificate serial:       019FA7F4E91076A8B3DE178705E019BE9C64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 09:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 09:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 09:01:13 +0000
Files and hashes:         1: g026NqGaEf0f34ohJn8s01da1Rg.crl (hash: Wo2B0eg4PlDPnu9uxmlvlx0qjmFSqDf2520e4chJW3I=)
                          2: ywr2yHe5YezVa2DkSIoiUW3iClE.asa (hash: jWQ90LGYbnX6nj6NxZX7augHUME0QxkMdKQ2+9Sa29s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:f4:e9:10:76:a8:b3:de:17:87:05:e0:19:be:9c:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=834dba36a19a11fd1fdf8a21267f2cd3575ad518
        Validity
            Not Before: Jul 28 09:01:13 2026 GMT
            Not After : Jul 29 09:01:13 2026 GMT
        Subject: CN=03a63f5e7c9af3f1b1dcb5ff8e5625d4f6e967b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:23:70:6c:3b:df:ec:10:3b:d3:0d:69:11:c5:
                    99:ce:80:00:5e:00:48:ad:5b:7f:b9:1d:1d:d8:5a:
                    9b:ea:2e:86:6b:52:f8:95:91:c5:4b:68:24:ce:5a:
                    94:3d:19:7e:eb:16:1e:97:6a:16:c0:cd:5c:e5:d0:
                    ca:c5:01:eb:a0:91:5f:65:c8:e5:6b:1f:75:4d:74:
                    04:5f:03:bf:f4:be:58:49:51:f9:f2:42:e4:d8:d1:
                    5a:75:f2:e8:8c:5f:d2:26:96:cc:9f:55:bf:96:3b:
                    2b:63:53:74:bb:24:7a:93:04:22:6f:eb:39:49:f6:
                    27:25:00:82:4f:42:6a:96:f0:68:8f:e7:18:37:f6:
                    3a:88:58:64:8f:d1:2a:93:d8:61:d1:2a:14:14:f6:
                    90:3b:40:15:0c:c7:f2:6f:b0:47:97:c6:cc:4b:77:
                    84:6c:78:ca:ff:f0:0b:38:8f:8e:f9:72:4b:18:f7:
                    c5:7f:1f:0e:a4:84:7e:49:38:41:8b:db:5a:58:1b:
                    0b:87:e7:80:ad:77:af:66:c1:09:64:81:37:0d:7b:
                    af:34:49:81:f4:12:11:72:c8:82:e3:e6:5d:f3:59:
                    15:4c:1c:b6:b1:0a:d5:d5:12:c3:2d:1c:d7:d2:57:
                    84:ad:4d:1f:74:53:12:43:cd:4a:3c:f1:ae:90:86:
                    b5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A6:3F:5E:7C:9A:F3:F1:B1:DC:B5:FF:8E:56:25:D4:F6:E9:67:B2
            X509v3 Authority Key Identifier:
                keyid:83:4D:BA:36:A1:9A:11:FD:1F:DF:8A:21:26:7F:2C:D3:57:5A:D5:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g026NqGaEf0f34ohJn8s01da1Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3c2c18-6c7b-4a33-8659-f56816deaf30/1/g026NqGaEf0f34ohJn8s01da1Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a3:34:c1:40:4b:b8:93:d4:6f:62:d0:ec:3b:65:32:be:31:
         e6:8d:7a:94:17:5f:98:16:56:ec:02:5c:f5:11:da:0e:80:75:
         18:49:d7:d9:97:6e:b5:96:03:ef:6b:12:07:64:1b:99:bb:ee:
         7f:87:91:56:04:1d:a3:3c:0b:b3:ac:53:51:55:06:45:7a:02:
         88:2f:0e:e5:68:35:6c:a9:3b:62:db:aa:ff:22:cf:eb:ea:8f:
         55:dd:d8:c3:22:ad:60:54:c8:d7:7e:91:4e:81:1a:e3:cf:ba:
         62:4d:b8:f5:9c:ef:cb:06:24:c3:3d:5a:ac:50:f6:24:4d:c1:
         c3:8e:62:cc:4c:84:69:ef:66:e7:44:4f:3b:0b:5b:85:45:c3:
         86:1f:18:7d:67:1a:e9:8f:81:53:ed:be:1a:07:64:47:08:23:
         f1:83:fc:73:86:86:29:b7:62:2c:07:f1:2d:47:57:70:0c:41:
         fa:3e:0e:ef:01:73:f9:ff:50:a1:4c:b2:6b:4b:81:a5:e7:13:
         f8:d0:ab:4c:61:ae:c7:de:87:f7:46:0b:3d:e0:12:b8:b9:7b:
         ce:fe:27:41:e4:6f:7e:27:e7:ea:3b:27:0b:e1:88:ab:97:79:
         de:21:1f:81:85:4b:98:20:83:18:3d:a8:8a:f8:32:6a:fe:f3:
         ba:0e:bd:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+n9OkQdqiz3heHBeAZvpxkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNGRiYTM2YTE5YTExZmQxZmRmOGEyMTI2N2YyY2QzNTc1
YWQ1MTgwHhcNMjYwNzI4MDkwMTEzWhcNMjYwNzI5MDkwMTEzWjAzMTEwLwYDVQQD
EygwM2E2M2Y1ZTdjOWFmM2YxYjFkY2I1ZmY4ZTU2MjVkNGY2ZTk2N2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iNwbDvf7BA70w1pEcWZzoAAXgBI
rVt/uR0d2Fqb6i6Ga1L4lZHFS2gkzlqUPRl+6xYel2oWwM1c5dDKxQHroJFfZcjl
ax91TXQEXwO/9L5YSVH58kLk2NFadfLojF/SJpbMn1W/ljsrY1N0uyR6kwQib+s5
SfYnJQCCT0JqlvBoj+cYN/Y6iFhkj9Eqk9hh0SoUFPaQO0AVDMfyb7BHl8bMS3eE
bHjK//ALOI+O+XJLGPfFfx8OpIR+SThBi9taWBsLh+eArXevZsEJZIE3DXuvNEmB
9BIRcsiC4+Zd81kVTBy2sQrV1RLDLRzX0leErU0fdFMSQ81KPPGukIa1KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOmP158mvPxsdy1/45WJdT26WeyMB8GA1UdIwQY
MBaAFINNujahmhH9H9+KISZ/LNNXWtUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzAyNk5xR2FFZjBmMzRvaEpuOHMwMWRhMVJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8zYzJjMTgtNmM3Yi00YTMzLTg2NTkt
ZjU2ODE2ZGVhZjMwLzEvZzAyNk5xR2FFZjBmMzRvaEpuOHMwMWRhMVJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8zYzJjMTgtNmM3Yi00YTMzLTg2NTktZjU2ODE2ZGVhZjMw
LzEvZzAyNk5xR2FFZjBmMzRvaEpuOHMwMWRhMVJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlaM0wUBL
uJPUb2LQ7DtlMr4x5o16lBdfmBZW7AJc9RHaDoB1GEnX2ZdutZYD72sSB2Qbmbvu
f4eRVgQdozwLs6xTUVUGRXoCiC8O5Wg1bKk7Ytuq/yLP6+qPVd3YwyKtYFTI136R
ToEa48+6Yk249ZzvywYkwz1arFD2JE3Bw45izEyEae9m50RPOwtbhUXDhh8YfWca
6Y+BU+2+GgdkRwgj8YP8c4aGKbdiLAfxLUdXcAxB+j4O7wFz+f9QoUyya0uBpecT
+NCrTGGux96H90YLPeASuLl7zv4nQeRvfifn6jsnC+GIq5d53iEfgYVLmCCDGD2o
ivgyav7zug696Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 14:42:05 2026 by rpki-client