Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
File:                     n0GAXmDdl0CETR3HpMFKq6uEhR4.mft (raw, json)
Hash identifier:          knpTR+Q3/KFwZiED3oeEYEpvIxLHBZSZAPIEiOS5meM=
Subject key identifier:   77:5B:D4:0C:DF:C8:2F:BD:B8:A4:73:37:CD:A2:7F:58:BF:4D:D5:AC
Authority key identifier: 9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E
Certificate issuer:       /CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
Certificate serial:       019FA89930CEDC33E7CE9F7864CE2DD19DD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:00:39 +0000
Manifest this update:     Tue 28 Jul 2026 12:00:39 +0000
Manifest next update:     Wed 29 Jul 2026 12:00:39 +0000
Files and hashes:         1: TOC7yt8pwcnAu99gFYCGhlQGgZg.roa (hash: PsN09pvtWWcsEJydhp81MFNJ3GP97ijkJSu2F+CCjjs=)
                          2: n0GAXmDdl0CETR3HpMFKq6uEhR4.crl (hash: e0tzSFpIjw4LSsqo4ra4EKhZQrqc3ww/n5Sw+O1i3R8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:30:ce:dc:33:e7:ce:9f:78:64:ce:2d:d1:9d:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f41805e60dd9740844d1dc7a4c14aabab84851e
        Validity
            Not Before: Jul 28 12:00:39 2026 GMT
            Not After : Jul 29 12:00:39 2026 GMT
        Subject: CN=775bd40cdfc82fbdb8a47337cda27f58bf4dd5ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:8b:5a:23:19:d3:f5:f1:0f:e5:61:b7:f3:d9:
                    59:2a:7c:e0:ac:f4:89:1f:10:e4:6a:f7:86:89:c3:
                    95:f1:a0:4d:83:82:da:7c:29:0b:3f:9b:36:39:36:
                    b0:3f:28:0c:30:8e:3d:25:c4:e8:10:51:3c:c9:97:
                    08:ab:d5:8c:b7:f4:92:c9:2a:60:11:5c:49:e2:ef:
                    e0:ef:b0:9a:22:81:f5:99:12:7c:7a:62:96:a9:83:
                    aa:ce:ef:9c:31:30:3c:bd:6d:59:41:39:0a:62:82:
                    cf:72:4b:26:77:b8:ce:35:81:d6:7c:c5:ca:4c:8e:
                    f1:0f:da:e7:b3:1f:4a:84:55:eb:15:04:4c:e1:c4:
                    a5:8a:96:bc:e9:1f:06:95:14:15:88:84:70:65:bf:
                    fb:fc:5d:cf:ef:a1:b9:75:68:fa:10:eb:e1:a4:49:
                    37:5d:d1:6b:b6:3a:04:4b:f6:07:5f:34:53:b9:06:
                    ab:0e:c9:ca:8c:18:f6:6f:41:72:d6:28:4a:59:d7:
                    58:8c:27:9c:b8:ac:5e:3d:78:4d:34:0f:18:2c:78:
                    19:25:61:03:77:af:58:6f:e1:3d:4f:b8:4a:1d:70:
                    9f:e9:cc:25:a4:f0:22:3e:d1:fb:cf:23:08:a8:59:
                    34:1b:f6:40:98:db:61:52:63:2f:dc:ea:d6:18:0e:
                    3d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5B:D4:0C:DF:C8:2F:BD:B8:A4:73:37:CD:A2:7F:58:BF:4D:D5:AC
            X509v3 Authority Key Identifier:
                keyid:9F:41:80:5E:60:DD:97:40:84:4D:1D:C7:A4:C1:4A:AB:AB:84:85:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0GAXmDdl0CETR3HpMFKq6uEhR4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/1b8292-86e7-4fb5-a387-2ae90c3fae31/1/n0GAXmDdl0CETR3HpMFKq6uEhR4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:f4:ef:40:94:43:00:67:b7:d3:d0:fb:14:18:86:e0:d3:fc:
         bd:9c:b9:a9:93:be:c0:f6:5a:2f:1b:26:36:80:32:a2:49:ee:
         f2:b6:a4:a9:e5:b6:b3:d1:d9:e2:9f:7c:b9:be:0a:f9:6f:34:
         56:ab:5b:a7:fb:2b:f9:19:3d:d9:66:26:17:15:b4:bc:eb:07:
         98:67:42:d2:49:75:4c:3a:98:8d:ac:39:ed:0b:87:2d:f4:26:
         d8:6a:7a:16:87:9d:b3:61:ed:d2:11:e5:0c:86:0a:f5:5f:cf:
         5a:c2:9d:a4:14:c2:3b:72:4f:53:e1:9b:6e:90:24:53:40:f6:
         d2:bc:4e:5a:87:30:cf:60:72:69:a5:2e:d3:c4:1e:56:55:33:
         22:1f:b4:5e:7a:6c:a4:c3:b1:2f:4f:31:82:b8:0f:48:8b:35:
         ff:22:56:d1:3d:07:d4:26:12:6e:17:ff:17:dd:91:84:a8:93:
         96:4f:6a:ce:b6:41:2b:a9:d5:68:6f:d7:74:dd:7f:c8:3f:78:
         6d:21:24:1c:0a:72:2a:b4:1e:1d:19:a6:39:8b:7d:d8:8f:26:
         00:18:19:6d:6e:02:8f:d4:2a:e3:27:3f:e3:ea:b9:3b:84:c2:
         0c:9f:da:61:29:81:33:8e:ff:62:b3:1c:44:0b:70:24:2b:8c:
         aa:24:b0:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omTDO3DPnzp94ZM4t0Z3XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNDE4MDVlNjBkZDk3NDA4NDRkMWRjN2E0YzE0YWFiYWI4
NDg1MWUwHhcNMjYwNzI4MTIwMDM5WhcNMjYwNzI5MTIwMDM5WjAzMTEwLwYDVQQD
Eyg3NzViZDQwY2RmYzgyZmJkYjhhNDczMzdjZGEyN2Y1OGJmNGRkNWFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+YtaIxnT9fEP5WG389lZKnzgrPSJ
HxDkaveGicOV8aBNg4LafCkLP5s2OTawPygMMI49JcToEFE8yZcIq9WMt/SSySpg
EVxJ4u/g77CaIoH1mRJ8emKWqYOqzu+cMTA8vW1ZQTkKYoLPcksmd7jONYHWfMXK
TI7xD9rnsx9KhFXrFQRM4cSlipa86R8GlRQViIRwZb/7/F3P76G5dWj6EOvhpEk3
XdFrtjoES/YHXzRTuQarDsnKjBj2b0Fy1ihKWddYjCecuKxePXhNNA8YLHgZJWED
d69Yb+E9T7hKHXCf6cwlpPAiPtH7zyMIqFk0G/ZAmNthUmMv3OrWGA49MQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdb1AzfyC+9uKRzN82if1i/TdWsMB8GA1UdIwQY
MBaAFJ9BgF5g3ZdAhE0dx6TBSqurhIUeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjBHQVhtRGRsMENFVFIzSHBNRktxNnVFaFI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODct
MmFlOTBjM2ZhZTMxLzEvbjBHQVhtRGRsMENFVFIzSHBNRktxNnVFaFI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8xYjgyOTItODZlNy00ZmI1LWEzODctMmFlOTBjM2ZhZTMx
LzEvbjBHQVhtRGRsMENFVFIzSHBNRktxNnVFaFI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPTvQJRD
AGe309D7FBiG4NP8vZy5qZO+wPZaLxsmNoAyoknu8rakqeW2s9HZ4p98ub4K+W80
Vqtbp/sr+Rk92WYmFxW0vOsHmGdC0kl1TDqYjaw57QuHLfQm2Gp6Foeds2Ht0hHl
DIYK9V/PWsKdpBTCO3JPU+GbbpAkU0D20rxOWocwz2ByaaUu08QeVlUzIh+0Xnps
pMOxL08xgrgPSIs1/yJW0T0H1CYSbhf/F92RhKiTlk9qzrZBK6nVaG/XdN1/yD94
bSEkHApyKrQeHRmmOYt92I8mABgZbW4Cj9Qq4yc/4+q5O4TCDJ/aYSmBM47/YrMc
RAtwJCuMqiSwIg==
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:53:52 2026 by rpki-client