Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
File:                     4sVVsgW63NgpS9MyW5wvvViNIZA.mft (raw, json)
Hash identifier:          vm9r2tfZHIvN10FdEIhWBrlGG41kCNI6u6rFA/qNpuA=
Subject key identifier:   EE:4B:DA:44:32:E8:A6:D0:D4:94:5E:4F:82:E4:C3:EF:AD:FC:80:FA
Authority key identifier: E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90
Certificate issuer:       /CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
Certificate serial:       019FA89A59FC9E12652F8C99A6ECFA960381
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
Manifest number:          1961
Signing time:             Tue 28 Jul 2026 12:01:55 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:55 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:55 +0000
Files and hashes:         1: 4sVVsgW63NgpS9MyW5wvvViNIZA.crl (hash: +qCAlNpiBpbmqTrsVGxhHTB7RKCLGLUQ3ZidYbQc7bU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:9a:59:fc:9e:12:65:2f:8c:99:a6:ec:fa:96:03:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2c555b205badcd8294bd3325b9c2fbd588d2190
        Validity
            Not Before: Jul 28 12:01:55 2026 GMT
            Not After : Jul 29 12:01:55 2026 GMT
        Subject: CN=ee4bda4432e8a6d0d4945e4f82e4c3efadfc80fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c2:9e:6f:14:f1:07:0b:61:f8:ef:52:b8:67:
                    bb:43:b6:b5:81:74:8a:cb:bc:a0:ff:da:b2:ea:89:
                    67:22:05:5e:59:9b:39:ef:a0:43:e3:90:39:15:e2:
                    51:b3:3f:95:6b:88:2a:55:2f:e3:35:26:c4:38:6c:
                    bc:4a:69:63:82:32:8d:89:74:73:b2:37:08:50:31:
                    b8:3c:63:a7:a6:4f:ed:4e:10:f6:8d:ed:56:df:6e:
                    3c:24:c2:09:21:2f:ea:68:ac:b6:75:76:07:78:ec:
                    72:fd:2b:96:f9:be:52:52:da:78:52:a7:08:ac:03:
                    f8:f3:08:23:4e:b7:98:30:27:89:be:22:ee:c0:13:
                    21:1a:bb:b9:a7:3a:23:ae:63:b6:44:63:23:27:d1:
                    68:0c:a9:95:48:d6:a2:89:40:18:fa:55:58:2f:31:
                    79:b1:64:7d:c6:bf:0f:76:a4:ac:2e:ca:11:92:34:
                    0f:8b:f5:7b:88:a8:6a:9b:58:e9:03:94:7a:af:f5:
                    ea:ae:54:a3:49:35:23:ba:79:6b:a6:8e:63:f4:9f:
                    21:9f:da:21:e2:85:62:a8:48:32:d0:89:f3:3c:07:
                    e4:7c:d6:e8:68:86:80:61:68:ad:08:99:4a:40:4e:
                    7a:d8:88:f2:12:35:72:75:95:e4:d3:f0:f2:eb:b7:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:4B:DA:44:32:E8:A6:D0:D4:94:5E:4F:82:E4:C3:EF:AD:FC:80:FA
            X509v3 Authority Key Identifier:
                keyid:E2:C5:55:B2:05:BA:DC:D8:29:4B:D3:32:5B:9C:2F:BD:58:8D:21:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sVVsgW63NgpS9MyW5wvvViNIZA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/15c9f0-0ec4-4129-984f-44871e6852f7/1/4sVVsgW63NgpS9MyW5wvvViNIZA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:76:fb:23:c5:51:20:87:6e:15:99:11:35:6f:a7:7e:61:b9:
         97:df:a5:16:c2:0c:d0:10:96:93:fa:56:5b:dd:e9:10:53:df:
         15:ae:63:18:ec:1a:73:d8:5d:6c:88:7f:34:ca:d3:03:81:5c:
         2b:1b:87:30:e6:0b:1f:05:95:0c:1e:b1:fa:81:a5:1b:cb:7b:
         a5:07:6b:94:c0:0a:7d:61:b7:36:24:4c:91:be:d7:5a:ed:13:
         07:f7:45:02:0b:e0:b2:fc:a9:83:98:0d:f7:f6:0c:06:4f:00:
         17:29:fb:a4:b0:d8:61:0b:77:6c:7c:bf:e5:3e:41:3f:f4:ac:
         4d:e3:29:70:09:e8:4c:63:32:41:93:52:4c:16:3a:76:6d:45:
         6f:e8:b7:7a:72:20:79:cb:46:cd:cf:f1:56:75:a0:6f:33:38:
         84:56:5b:26:92:a3:83:9f:d5:40:51:d8:9c:33:aa:e1:b3:b0:
         38:d8:2f:5f:9a:8e:5e:ac:4f:1e:8f:3f:34:6d:37:81:9a:58:
         13:b9:6b:2b:fd:4d:98:1f:41:7f:43:90:02:8b:63:36:78:ae:
         55:91:72:c0:d7:91:18:da:76:86:26:62:63:73:3f:cb:c4:2a:
         7e:65:fb:17:62:23:ee:fb:b9:9b:8a:6c:5e:ae:0b:6c:45:94:
         37:b9:20:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omln8nhJlL4yZpuz6lgOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYzU1NWIyMDViYWRjZDgyOTRiZDMzMjViOWMyZmJkNTg4
ZDIxOTAwHhcNMjYwNzI4MTIwMTU1WhcNMjYwNzI5MTIwMTU1WjAzMTEwLwYDVQQD
EyhlZTRiZGE0NDMyZThhNmQwZDQ5NDVlNGY4MmU0YzNlZmFkZmM4MGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cKebxTxBwth+O9SuGe7Q7a1gXSK
y7yg/9qy6olnIgVeWZs576BD45A5FeJRsz+Va4gqVS/jNSbEOGy8SmljgjKNiXRz
sjcIUDG4PGOnpk/tThD2je1W3248JMIJIS/qaKy2dXYHeOxy/SuW+b5SUtp4UqcI
rAP48wgjTreYMCeJviLuwBMhGru5pzojrmO2RGMjJ9FoDKmVSNaiiUAY+lVYLzF5
sWR9xr8PdqSsLsoRkjQPi/V7iKhqm1jpA5R6r/XqrlSjSTUjunlrpo5j9J8hn9oh
4oViqEgy0InzPAfkfNboaIaAYWitCJlKQE562IjyEjVydZXk0/Dy67dRNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5L2kQy6KbQ1JReT4Lkw++t/ID6MB8GA1UdIwQY
MBaAFOLFVbIFutzYKUvTMlucL71YjSGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS8xNWM5ZjAtMGVjNC00MTI5LTk4NGYt
NDQ4NzFlNjg1MmY3LzEvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS8xNWM5ZjAtMGVjNC00MTI5LTk4NGYtNDQ4NzFlNjg1MmY3
LzEvNHNWVnNnVzYzTmdwUzlNeVc1d3Z2VmlOSVpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA53b7I8VR
IIduFZkRNW+nfmG5l9+lFsIM0BCWk/pWW93pEFPfFa5jGOwac9hdbIh/NMrTA4Fc
KxuHMOYLHwWVDB6x+oGlG8t7pQdrlMAKfWG3NiRMkb7XWu0TB/dFAgvgsvypg5gN
9/YMBk8AFyn7pLDYYQt3bHy/5T5BP/SsTeMpcAnoTGMyQZNSTBY6dm1Fb+i3enIg
ectGzc/xVnWgbzM4hFZbJpKjg5/VQFHYnDOq4bOwONgvX5qOXqxPHo8/NG03gZpY
E7lrK/1NmB9Bf0OQAotjNniuVZFywNeRGNp2hiZiY3M/y8QqfmX7F2Ij7vu5m4ps
Xq4LbEWUN7kgMQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:36:31 2026 by rpki-client