Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
File:                     0CIVj9T34wlqA33Dz6vY807qq9E.mft (raw, json)
Hash identifier:          b6fbRlc8X8Vn6fMZRQFv0WUXK21SXWKkMPU9XZU4Afg=
Subject key identifier:   B8:E5:E7:7F:2A:28:1F:57:B2:BB:18:F7:06:EA:1F:AC:7C:60:D1:6E
Authority key identifier: D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1
Certificate issuer:       /CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
Certificate serial:       019FAC766615E9A8F5A0B7B5464B8D76649B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:01:08 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:08 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:08 +0000
Files and hashes:         1: 0CIVj9T34wlqA33Dz6vY807qq9E.crl (hash: xNZR9pXOUYBh1v+Ga1XszwzGr+hP/SUeeCPi6RyRY2o=)
                          2: Bz5NRIKEHWfWVwIKVd1EZ3eOmwc.roa (hash: xvKgGhY+ZlcBTXkjAQHJhU0l6IZYcdXuey6wO6lkMfc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:66:15:e9:a8:f5:a0:b7:b5:46:4b:8d:76:64:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d022158fd4f7e3096a037dc3cfabd8f34eeaabd1
        Validity
            Not Before: Jul 29 06:01:08 2026 GMT
            Not After : Jul 30 06:01:08 2026 GMT
        Subject: CN=b8e5e77f2a281f57b2bb18f706ea1fac7c60d16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:4f:2b:79:fe:59:e2:18:85:ea:50:a8:c8:49:
                    22:d6:f4:03:95:f8:e9:8c:df:af:08:03:bc:65:a6:
                    22:d2:9e:72:1b:07:49:d0:dd:50:4d:b0:22:a1:3e:
                    81:a1:3f:80:b8:88:7f:55:f4:9b:3a:45:6b:4f:3d:
                    7c:95:d9:5b:85:1d:41:0e:43:7d:6e:e0:a9:1b:d8:
                    30:7e:42:e2:78:4f:eb:2e:06:22:01:e3:35:c1:5b:
                    f1:f9:e5:b4:51:2b:3a:a0:be:3f:bb:eb:6c:5e:4d:
                    05:a5:fd:4a:86:0e:c2:d3:08:0e:1b:35:84:9d:40:
                    2a:e1:b8:a6:a0:da:e6:64:3d:47:b8:91:16:02:dd:
                    50:7e:66:cc:11:52:3f:be:f8:f3:ee:b8:aa:ed:d1:
                    1f:5a:a2:01:8a:a7:bd:90:df:6a:4a:4d:ac:81:72:
                    42:6a:69:cf:b1:d6:63:9f:69:6a:f0:92:bb:fe:93:
                    89:72:40:38:49:09:fc:5e:d3:7a:33:9a:b3:f6:70:
                    54:d2:6d:3a:6d:c9:ba:5f:6b:83:1c:17:a5:b1:7f:
                    00:db:06:6d:74:0c:82:51:64:6c:79:84:87:18:8c:
                    49:c9:21:41:76:d7:f1:de:a1:ca:86:ac:53:2d:07:
                    f0:e9:7a:21:97:31:82:05:66:d9:00:80:59:5d:87:
                    a7:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:E5:E7:7F:2A:28:1F:57:B2:BB:18:F7:06:EA:1F:AC:7C:60:D1:6E
            X509v3 Authority Key Identifier:
                keyid:D0:22:15:8F:D4:F7:E3:09:6A:03:7D:C3:CF:AB:D8:F3:4E:EA:AB:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0CIVj9T34wlqA33Dz6vY807qq9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/82d65a-45e2-4efb-b23c-955ad78bcb07/1/0CIVj9T34wlqA33Dz6vY807qq9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:de:01:7d:03:6b:8d:10:ec:bd:57:6b:92:0a:8e:7e:da:
         2a:e6:c0:a8:ca:a6:55:81:b2:d8:05:3d:f7:0e:8f:da:ba:51:
         a2:63:13:d8:91:fb:08:29:45:59:33:e2:dd:8b:d5:8f:40:c6:
         13:c5:43:7b:df:09:55:ff:ee:a8:15:8d:63:df:e4:f9:96:a4:
         93:a7:45:cf:83:2b:76:ff:6a:97:9d:14:2d:87:01:0d:bb:30:
         62:0a:1c:ff:79:cd:32:4d:fd:43:19:24:d8:5f:28:93:b0:d4:
         4f:08:98:fc:af:06:3d:60:7d:f5:21:16:b8:bd:f9:41:08:d3:
         48:1d:4e:cb:dc:ef:a8:a7:cb:fd:f9:87:b2:35:56:9a:34:12:
         4a:85:7f:a7:62:54:50:b3:0d:d5:36:c1:d3:b8:0b:43:cf:7f:
         bc:2f:60:81:fb:e4:d1:7e:60:01:80:7e:3c:7d:13:16:cf:88:
         49:f9:40:6b:a1:33:c9:80:c1:c4:f6:48:ba:a1:ed:ef:66:03:
         fc:65:18:01:cb:55:8f:0e:6e:a0:76:60:8a:d9:b5:d0:e9:84:
         76:c7:3e:b0:d3:99:1b:9c:e5:8b:18:40:39:a9:6f:9e:69:01:
         4b:3a:14:ea:be:1d:19:b8:c6:23:c1:b9:f6:13:0c:47:6d:99:
         67:94:08:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sdmYV6aj1oLe1RkuNdmSbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwMjIxNThmZDRmN2UzMDk2YTAzN2RjM2NmYWJkOGYzNGVl
YWFiZDEwHhcNMjYwNzI5MDYwMTA4WhcNMjYwNzMwMDYwMTA4WjAzMTEwLwYDVQQD
EyhiOGU1ZTc3ZjJhMjgxZjU3YjJiYjE4ZjcwNmVhMWZhYzdjNjBkMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAok8ref5Z4hiF6lCoyEki1vQDlfjp
jN+vCAO8ZaYi0p5yGwdJ0N1QTbAioT6BoT+AuIh/VfSbOkVrTz18ldlbhR1BDkN9
buCpG9gwfkLieE/rLgYiAeM1wVvx+eW0USs6oL4/u+tsXk0Fpf1Khg7C0wgOGzWE
nUAq4bimoNrmZD1HuJEWAt1QfmbMEVI/vvjz7riq7dEfWqIBiqe9kN9qSk2sgXJC
amnPsdZjn2lq8JK7/pOJckA4SQn8XtN6M5qz9nBU0m06bcm6X2uDHBelsX8A2wZt
dAyCUWRseYSHGIxJySFBdtfx3qHKhqxTLQfw6XohlzGCBWbZAIBZXYenVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjl538qKB9XsrsY9wbqH6x8YNFuMB8GA1UdIwQY
MBaAFNAiFY/U9+MJagN9w8+r2PNO6qvRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2Mt
OTU1YWQ3OGJjYjA3LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC84MmQ2NWEtNDVlMi00ZWZiLWIyM2MtOTU1YWQ3OGJjYjA3
LzEvMENJVmo5VDM0d2xxQTMzRHo2dlk4MDdxcTlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4DeAX0D
a40Q7L1Xa5IKjn7aKubAqMqmVYGy2AU99w6P2rpRomMT2JH7CClFWTPi3YvVj0DG
E8VDe98JVf/uqBWNY9/k+Zakk6dFz4Mrdv9ql50ULYcBDbswYgoc/3nNMk39Qxkk
2F8ok7DUTwiY/K8GPWB99SEWuL35QQjTSB1Oy9zvqKfL/fmHsjVWmjQSSoV/p2JU
ULMN1TbB07gLQ89/vC9ggfvk0X5gAYB+PH0TFs+ISflAa6EzyYDBxPZIuqHt72YD
/GUYActVjw5uoHZgitm10OmEdsc+sNOZG5zlixhAOalvnmkBSzoU6r4dGbjGI8G5
9hMMR22ZZ5QIKg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:57 2026 by rpki-client