Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
File:                     E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft (raw, json)
Hash identifier:          crITLQ4DPpzJpqIPUG9cUx1147yHg66HpOo/Z6m5Q3A=
Subject key identifier:   9C:69:A4:1E:4D:FF:81:85:2C:F0:2E:D1:5C:31:1F:EE:6B:02:E8:8F
Authority key identifier: 13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA
Certificate issuer:       /CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
Certificate serial:       019FAA50EAE07DA3AFEEE7938CEDD11672C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
Manifest number:          1965
Signing time:             Tue 28 Jul 2026 20:00:57 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:57 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:57 +0000
Files and hashes:         1: E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl (hash: 0FXmKem8xOsIaeHx1pt564jk0KQal332Fjf9YIS8OTo=)
                          2: lTILXF_5UJEPBougJpxtW4AUOSc.roa (hash: rxyPJTpQ/gl87k+22vSPyFPaWDffDg7c8Gqk+kLh1/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:ea:e0:7d:a3:af:ee:e7:93:8c:ed:d1:16:72:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=135155cebf9de0cb73e40a0fa0a1ab4dcf1d09ca
        Validity
            Not Before: Jul 28 20:00:57 2026 GMT
            Not After : Jul 29 20:00:57 2026 GMT
        Subject: CN=9c69a41e4dff81852cf02ed15c311fee6b02e88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0c:14:80:4d:19:c8:86:5d:b4:8b:94:e6:da:
                    94:c2:eb:01:83:5d:a0:75:14:5c:cc:e5:ca:55:96:
                    18:3f:79:cb:a3:71:40:53:89:ef:15:78:8b:12:96:
                    f3:a8:ef:3c:b0:f4:f4:5b:ef:da:72:6d:51:5c:df:
                    a7:72:ae:ca:b1:ee:b9:de:28:32:df:7f:8c:2a:96:
                    f9:b3:b3:7d:71:4a:9f:fb:f2:5a:8e:0f:53:67:7c:
                    24:fc:19:ff:a5:a1:e9:e5:a1:f0:2a:60:dc:ad:8b:
                    93:61:6b:dc:e6:11:8e:42:05:63:b3:aa:0c:36:d2:
                    99:89:1c:b0:b1:8d:40:d8:2c:20:6f:fd:7e:2a:74:
                    2b:65:34:af:24:8a:21:2f:a2:5f:67:9f:e6:64:85:
                    5a:c5:03:10:eb:5d:ea:0b:3d:6f:ce:7d:6f:e5:f2:
                    01:82:57:3d:29:bb:b1:b5:db:63:62:6b:78:46:6e:
                    25:74:eb:09:a3:18:a3:1b:96:32:1c:16:b7:74:25:
                    16:ad:65:28:8c:b9:89:3a:fc:db:79:99:d6:57:3d:
                    2a:06:26:32:22:ea:c0:ff:3c:45:de:59:00:0b:9d:
                    59:a9:51:ba:23:bb:3d:f3:ca:ec:70:11:ac:2c:83:
                    f8:7b:b3:68:bb:75:9e:92:28:6f:66:03:19:23:73:
                    63:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:69:A4:1E:4D:FF:81:85:2C:F0:2E:D1:5C:31:1F:EE:6B:02:E8:8F
            X509v3 Authority Key Identifier:
                keyid:13:51:55:CE:BF:9D:E0:CB:73:E4:0A:0F:A0:A1:AB:4D:CF:1D:09:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E1FVzr-d4Mtz5AoPoKGrTc8dCco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/67080d-cae0-48c1-a338-38f5d963222c/1/E1FVzr-d4Mtz5AoPoKGrTc8dCco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:0c:13:da:16:db:17:d5:15:a0:3d:6a:29:e4:01:e4:f4:19:
         dd:6f:23:60:89:6e:90:12:ef:c4:f1:f2:17:c5:d8:38:14:f6:
         18:f7:25:e1:49:c1:00:93:bc:ae:0f:35:aa:f6:d0:4c:a2:29:
         04:84:98:6b:34:f5:e3:7d:69:fb:57:86:5a:5e:a8:bc:9d:27:
         a7:60:14:5a:aa:cb:5d:68:a7:03:8f:c8:c2:b7:9f:fa:de:1e:
         7e:fb:d0:18:ce:fd:80:a7:5f:00:2a:96:b5:2f:27:f3:cf:75:
         2a:05:b1:d6:59:8a:37:55:d7:e2:d5:85:ee:77:58:42:9e:e5:
         06:6f:57:60:0f:78:f0:73:c5:3e:4f:a3:8e:c1:e8:61:02:c2:
         7b:60:1a:da:f7:88:8a:3d:f2:a1:aa:a5:fd:03:84:4d:f3:cf:
         2f:50:3d:d5:cc:a8:07:bb:05:e0:33:c9:5a:72:09:9d:c2:87:
         b4:7f:2e:9b:00:48:40:33:2c:75:70:20:da:9f:7c:b9:d5:50:
         d0:f7:2d:f8:f1:e8:15:92:ba:1e:71:42:d2:36:4c:7a:39:c6:
         5d:a0:1a:53:84:2f:ed:bb:06:e1:d7:c2:4a:eb:54:f3:e9:eb:
         33:2c:d4:a4:ba:6a:d4:a6:09:d1:97:1e:25:4a:56:92:af:9c:
         5f:fa:2a:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUOrgfaOv7ueTjO3RFnLBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNTE1NWNlYmY5ZGUwY2I3M2U0MGEwZmEwYTFhYjRkY2Yx
ZDA5Y2EwHhcNMjYwNzI4MjAwMDU3WhcNMjYwNzI5MjAwMDU3WjAzMTEwLwYDVQQD
Eyg5YzY5YTQxZTRkZmY4MTg1MmNmMDJlZDE1YzMxMWZlZTZiMDJlODhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwwUgE0ZyIZdtIuU5tqUwusBg12g
dRRczOXKVZYYP3nLo3FAU4nvFXiLEpbzqO88sPT0W+/acm1RXN+ncq7Kse653igy
33+MKpb5s7N9cUqf+/Jajg9TZ3wk/Bn/paHp5aHwKmDcrYuTYWvc5hGOQgVjs6oM
NtKZiRywsY1A2Cwgb/1+KnQrZTSvJIohL6JfZ5/mZIVaxQMQ613qCz1vzn1v5fIB
glc9KbuxtdtjYmt4Rm4ldOsJoxijG5YyHBa3dCUWrWUojLmJOvzbeZnWVz0qBiYy
IurA/zxF3lkAC51ZqVG6I7s988rscBGsLIP4e7Nou3WekihvZgMZI3NjYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJxppB5N/4GFLPAu0VwxH+5rAuiPMB8GA1UdIwQY
MBaAFBNRVc6/neDLc+QKD6Chq03PHQnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgt
MzhmNWQ5NjMyMjJjLzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy82NzA4MGQtY2FlMC00OGMxLWEzMzgtMzhmNWQ5NjMyMjJj
LzEvRTFGVnpyLWQ0TXR6NUFvUG9LR3JUYzhkQ2NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaAwT2hbb
F9UVoD1qKeQB5PQZ3W8jYIlukBLvxPHyF8XYOBT2GPcl4UnBAJO8rg81qvbQTKIp
BISYazT1431p+1eGWl6ovJ0np2AUWqrLXWinA4/Iwref+t4efvvQGM79gKdfACqW
tS8n8891KgWx1lmKN1XX4tWF7ndYQp7lBm9XYA948HPFPk+jjsHoYQLCe2Aa2veI
ij3yoaql/QOETfPPL1A91cyoB7sF4DPJWnIJncKHtH8umwBIQDMsdXAg2p98udVQ
0Pct+PHoFZK6HnFC0jZMejnGXaAaU4Qv7bsG4dfCSutU8+nrMyzUpLpq1KYJ0Zce
JUpWkq+cX/oqOA==
-----END CERTIFICATE-----
Generated at Tue Jul 28 23:22:31 2026 by rpki-client