Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
File:                     4VgI8_khvIw-6ofHWExYTBAAsFE.mft (raw, json)
Hash identifier:          P4HTJ0httl+fttsJn9Je3tEeyYLQId6RkV4eD63Bri8=
Subject key identifier:   2E:4F:4B:41:06:C9:08:CF:7F:CD:7C:95:6E:AF:83:F0:AE:8B:B1:AB
Authority key identifier: E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51
Certificate issuer:       /CN=e15808f3f921bc8c3eea87c7584c584c1000b051
Certificate serial:       019FA82BD681837AD739E115F247C0ED27AD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
Manifest number:          19F8
Signing time:             Tue 28 Jul 2026 10:01:12 +0000
Manifest this update:     Tue 28 Jul 2026 10:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 10:01:12 +0000
Files and hashes:         1: 1vioh8WBBr0buk8B9XgCVmy0V3o.roa (hash: lVxYMENWKDi2+Xm9/q5pj8wEEX5duZBJRp4Rcletd04=)
                          2: 4VgI8_khvIw-6ofHWExYTBAAsFE.crl (hash: /P2M3yE4h4i5NZbemoWRJxzuShOnh5wC8+rcu1IGtuk=)
                          3: 7YSwmmnczm-7IoOuL55xSYq-HHI.roa (hash: vmDduHs9ZG5F5GFKgvuSm+LC37gRA2woLVlUVZydjb0=)
                          4: 9vE-oLNEkTWomT9KtfRKYgQbe4M.roa (hash: LQb4UezprdlbrPADEMd/FMMoJXKoReBOeeaZW2IdkYc=)
                          5: JEJwDGH6tSVjpBY1h8WbveXmdw8.roa (hash: icAiQJA6CuQCxFfr68wlBhAPrBN1YQOmgCNH/yLz47M=)
                          6: Jkmgylk-bZ3jJ-CP_B9Q3tP5WZI.roa (hash: /wKLPFXDpkj0IH9BXQz2t3Z6Zu30xSfrRgv+F7NNrik=)
                          7: POV4GU1rVaMhtLOjkdJ6JiKB5A0.roa (hash: XEgu/Zx2opS3gJcwoKfkscKC5ZLEdb/Tzp9gunYfHco=)
                          8: fIwE913q7Z06naykIoTvGwGkXuY.roa (hash: EmEG00KHS79oeuuGgXEcyv9se/C+NigaZ2i4jZMNHk4=)
                          9: l2DY81SaEGuuhJDEFJ_Lz0piP9E.roa (hash: krROF8fyVawsHQ+SK0aUD/ZdvI6BJ/t4uCdSw1pg/M0=)
                          10: oFDIJtDDBoVGAzKTE9KXRuqWpB4.roa (hash: D3iuhxVPgcaDAoR/HDppm/vmbt+iyscdjkgBVPTDmTU=)
                          11: qUX2iwB5Vvwjk9xkhqJjvAIpHyM.roa (hash: B/LBg8C9uAjoyAk0cD2HRSSI43uSzwvpTqbFgZE/UJc=)
                          12: rfbJWPwhcMsIzguwyYnSDhcHedA.roa (hash: So+ZZqhyNdhg6nOLV4bqBYBtp42ztDDW9ObzW5Rvhbw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 10:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:2b:d6:81:83:7a:d7:39:e1:15:f2:47:c0:ed:27:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15808f3f921bc8c3eea87c7584c584c1000b051
        Validity
            Not Before: Jul 28 10:01:12 2026 GMT
            Not After : Jul 29 10:01:12 2026 GMT
        Subject: CN=2e4f4b4106c908cf7fcd7c956eaf83f0ae8bb1ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f5:56:c9:bb:95:bf:b0:2d:a3:5a:af:1b:55:
                    50:88:05:be:d5:35:ba:44:f6:b0:9f:8d:3c:b6:3e:
                    9a:15:2c:71:89:75:e7:34:58:a0:57:e2:f2:1b:4d:
                    ea:7e:39:26:21:33:62:33:dd:cb:e2:52:ca:a9:d6:
                    ea:3d:46:ad:56:07:85:4c:0a:64:af:b3:26:7d:8c:
                    7f:59:53:da:20:ef:a5:4b:80:83:b5:fe:b8:c5:04:
                    e4:c2:66:d3:f2:e1:a5:d6:42:4e:93:10:28:d3:44:
                    33:65:64:42:34:79:0c:e5:4e:26:4d:02:eb:04:86:
                    8c:88:92:b3:04:9e:8c:12:a0:01:fd:5c:e4:14:5e:
                    46:57:2b:90:57:bf:45:28:c6:81:35:06:6b:31:b2:
                    3d:79:f3:1b:f7:cb:de:1a:2b:94:99:14:6c:a2:58:
                    f1:11:14:f0:b7:cb:c2:90:a5:0f:64:3b:06:89:ef:
                    fc:e6:fa:d2:7b:91:a9:e9:b1:0b:30:96:8d:5f:89:
                    d3:7e:6c:2d:50:81:5a:95:70:d4:22:9d:d4:09:43:
                    db:a7:2d:af:40:e0:5b:51:17:5e:d9:45:27:46:5a:
                    c6:02:df:1c:81:f1:bd:07:91:69:fc:0c:ca:97:b9:
                    9a:d0:76:41:d0:ea:24:e8:d3:3b:d3:b9:1f:4d:c8:
                    74:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4F:4B:41:06:C9:08:CF:7F:CD:7C:95:6E:AF:83:F0:AE:8B:B1:AB
            X509v3 Authority Key Identifier:
                keyid:E1:58:08:F3:F9:21:BC:8C:3E:EA:87:C7:58:4C:58:4C:10:00:B0:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VgI8_khvIw-6ofHWExYTBAAsFE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/8e8e82-5274-4d2f-8ca0-ab19fcb0ce64/1/4VgI8_khvIw-6ofHWExYTBAAsFE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:18:53:91:38:17:e3:77:cf:b7:69:42:a2:26:2a:35:4e:75:
         35:27:f8:8e:32:98:a1:46:37:d4:1c:c5:b1:e8:52:f0:7a:5f:
         17:7e:eb:6d:23:e2:75:07:4c:d3:ab:2a:73:96:68:b3:f6:00:
         74:a2:7a:d7:fd:36:21:de:28:9e:9d:eb:43:61:03:86:84:da:
         9c:96:f2:ef:67:80:5d:25:ac:b4:43:53:b3:f4:f2:d7:2f:97:
         21:9e:0c:ed:f6:f0:c2:79:b5:f2:d7:64:b7:2c:1b:85:00:f6:
         b2:b5:88:f0:f5:70:1e:8f:17:80:49:01:86:5a:80:49:29:f3:
         d0:ca:a0:fd:ac:26:f7:ed:f3:3d:4d:61:bb:19:fe:f7:b2:f6:
         f9:0d:48:ba:1b:b6:fe:b2:9d:a2:f7:67:5f:89:cc:2d:f1:e5:
         25:6f:bc:d4:76:f6:76:98:eb:c9:47:7f:7f:ac:ee:ad:b0:fb:
         65:e7:ef:0e:81:a0:c1:da:a9:ee:6f:d7:0b:80:36:31:55:73:
         45:4b:87:e3:22:b4:11:99:83:1a:1f:4f:5e:56:fe:9f:b1:df:
         ad:29:1f:83:5b:54:6f:d4:8b:28:d8:2b:54:42:04:b5:06:8f:
         1c:ce:82:90:eb:86:3e:e0:11:4c:8a:ca:ee:87:8b:2e:03:2d:
         ed:5d:8c:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+oK9aBg3rXOeEV8kfA7SetMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTgwOGYzZjkyMWJjOGMzZWVhODdjNzU4NGM1ODRjMTAw
MGIwNTEwHhcNMjYwNzI4MTAwMTEyWhcNMjYwNzI5MTAwMTEyWjAzMTEwLwYDVQQD
EygyZTRmNGI0MTA2YzkwOGNmN2ZjZDdjOTU2ZWFmODNmMGFlOGJiMWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvVWybuVv7Ato1qvG1VQiAW+1TW6
RPawn408tj6aFSxxiXXnNFigV+LyG03qfjkmITNiM93L4lLKqdbqPUatVgeFTApk
r7MmfYx/WVPaIO+lS4CDtf64xQTkwmbT8uGl1kJOkxAo00QzZWRCNHkM5U4mTQLr
BIaMiJKzBJ6MEqAB/VzkFF5GVyuQV79FKMaBNQZrMbI9efMb98veGiuUmRRsoljx
ERTwt8vCkKUPZDsGie/85vrSe5Gp6bELMJaNX4nTfmwtUIFalXDUIp3UCUPbpy2v
QOBbURde2UUnRlrGAt8cgfG9B5Fp/AzKl7ma0HZB0Ook6NM707kfTch0mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC5PS0EGyQjPf818lW6vg/Cui7GrMB8GA1UdIwQY
MBaAFOFYCPP5IbyMPuqHx1hMWEwQALBRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAt
YWIxOWZjYjBjZTY0LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC84ZThlODItNTI3NC00ZDJmLThjYTAtYWIxOWZjYjBjZTY0
LzEvNFZnSThfa2h2SXctNm9mSFdFeFlUQkFBc0ZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFBhTkTgX
43fPt2lCoiYqNU51NSf4jjKYoUY31BzFsehS8HpfF37rbSPidQdM06sqc5Zos/YA
dKJ61/02Id4onp3rQ2EDhoTanJby72eAXSWstENTs/Ty1y+XIZ4M7fbwwnm18tdk
tywbhQD2srWI8PVwHo8XgEkBhlqASSnz0Mqg/awm9+3zPU1huxn+97L2+Q1Iuhu2
/rKdovdnX4nMLfHlJW+81Hb2dpjryUd/f6zurbD7ZefvDoGgwdqp7m/XC4A2MVVz
RUuH4yK0EZmDGh9PXlb+n7HfrSkfg1tUb9SLKNgrVEIEtQaPHM6CkOuGPuARTIrK
7oeLLgMt7V2M2g==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:25:54 2026 by rpki-client