Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File:                     4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier:          mX2ya9DijYQmtna7lM05qN2LF55/P5l/xt/mUdGuVnQ=
Subject key identifier:   05:37:34:40:8D:7A:C3:CB:EF:BE:A4:EF:C1:C9:A4:15:A9:3C:2D:FE
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer:       /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial:       019F17C31CB32B7F3D3F5128DF581397CA05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number:          1987
Signing time:             Tue 30 Jun 2026 09:01:30 +0000
Manifest this update:     Tue 30 Jun 2026 09:01:30 +0000
Manifest next update:     Wed 01 Jul 2026 09:01:30 +0000
Files and hashes:         1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: e69lCsKbXQihGk7BtrwfGYzhenjFKbRfV+h9r22qdJ4=)
                          2: Ut_nk45-PrVxes0DMrlE6POGcXc.roa (hash: oo94Gr3/o7iKPPOqsqmwUWcuIt1lQW+gn6zRbGd06vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:17:c3:1c:b3:2b:7f:3d:3f:51:28:df:58:13:97:ca:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
        Validity
            Not Before: Jun 30 09:01:30 2026 GMT
            Not After : Jul  1 09:01:30 2026 GMT
        Subject: CN=053734408d7ac3cbefbea4efc1c9a415a93c2dfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:d5:36:36:51:ce:47:f7:32:08:c6:0f:b8:
                    89:f4:17:20:74:96:96:0c:fa:bd:f3:2c:20:dc:26:
                    ce:b5:40:aa:bd:1c:b3:ee:b1:9f:ac:99:6e:53:17:
                    12:58:7a:e2:8c:f5:4f:8b:05:df:b4:58:f9:9f:cd:
                    c0:26:0d:e8:c7:ac:b7:88:31:34:eb:1f:2e:a0:6c:
                    57:54:07:61:78:ec:5a:e3:5f:a8:35:c4:0f:13:5c:
                    95:4c:62:ad:e2:a5:23:b5:fe:0d:61:28:a2:9e:5f:
                    e9:e0:49:cf:4a:97:f1:6c:2b:73:85:14:27:93:51:
                    5c:f9:7c:ac:08:b8:fc:88:ca:61:ab:2a:88:57:bb:
                    53:b4:27:3d:6e:a3:39:dd:e7:9f:26:bd:60:c9:3c:
                    5e:10:fd:60:a6:05:72:78:c4:71:03:59:6c:a2:ad:
                    f2:79:ec:4c:7c:0d:f6:a8:89:78:b6:13:a6:a1:53:
                    f9:c1:6f:3f:a3:c1:90:b4:f0:3b:2d:f6:ce:5d:b7:
                    e4:f8:19:63:86:51:46:92:89:ac:84:71:44:01:18:
                    64:14:18:95:51:61:64:aa:8a:43:ba:25:f8:ae:41:
                    49:42:0e:06:c0:19:f4:8b:0e:56:7f:11:22:cb:9c:
                    c4:31:99:da:1e:a8:0f:0b:ec:e0:e4:5d:27:8e:82:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:37:34:40:8D:7A:C3:CB:EF:BE:A4:EF:C1:C9:A4:15:A9:3C:2D:FE
            X509v3 Authority Key Identifier:
                keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:e8:7b:47:fe:98:92:d4:3c:33:68:0a:13:70:33:94:8f:fc:
         04:f4:69:80:90:5e:95:95:3f:26:c0:2a:ff:41:6f:b9:bf:de:
         a9:0d:d7:13:4e:17:5e:7d:ed:74:23:95:b3:25:33:1d:41:27:
         58:e1:23:85:5c:b2:75:6d:5d:6a:30:89:f1:3f:d8:e4:77:01:
         c6:96:61:70:30:f2:7c:ed:47:2d:6f:34:8a:d1:9d:b1:0c:4b:
         82:d1:0e:fd:ad:db:48:61:20:1c:25:11:08:9d:28:a9:00:ef:
         a1:50:cc:74:b7:28:1e:0d:22:20:20:eb:fe:ad:7f:30:e5:ee:
         2b:e8:3e:ed:80:98:82:ad:d6:fe:62:f0:02:7d:6b:39:5f:5a:
         a4:b4:de:c5:2b:91:87:da:cb:60:e7:37:23:ec:8f:43:ac:a5:
         d7:d9:97:38:71:be:a4:c2:c7:e3:01:86:51:9d:d9:06:e5:f3:
         4d:39:41:3a:f9:ac:35:01:a6:4e:2a:72:70:44:1a:d7:2b:2c:
         a0:30:ee:f7:de:78:8e:06:1f:5d:16:8b:95:a7:d9:d5:9d:8e:
         00:a4:a0:fd:d5:6c:f8:aa:7b:c5:36:b2:da:03:f8:b2:e4:74:
         4a:4f:2d:92:0a:0a:ef:9a:a3:a4:72:84:32:3d:94:1a:0c:56:
         af:79:8d:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8XwxyzK389P1Eo31gTl8oFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMzhjZDY4MTFkY2UyZWQ0ZjQyNjE0M2MzZmM4NDU3YjFi
NDM0YmIwHhcNMjYwNjMwMDkwMTMwWhcNMjYwNzAxMDkwMTMwWjAzMTEwLwYDVQQD
EygwNTM3MzQ0MDhkN2FjM2NiZWZiZWE0ZWZjMWM5YTQxNWE5M2MyZGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38PVNjZRzkf3MgjGD7iJ9BcgdJaW
DPq98ywg3CbOtUCqvRyz7rGfrJluUxcSWHrijPVPiwXftFj5n83AJg3ox6y3iDE0
6x8uoGxXVAdheOxa41+oNcQPE1yVTGKt4qUjtf4NYSiinl/p4EnPSpfxbCtzhRQn
k1Fc+XysCLj8iMphqyqIV7tTtCc9bqM53eefJr1gyTxeEP1gpgVyeMRxA1lsoq3y
eexMfA32qIl4thOmoVP5wW8/o8GQtPA7LfbOXbfk+BljhlFGkomshHFEARhkFBiV
UWFkqopDuiX4rkFJQg4GwBn0iw5WfxEiy5zEMZnaHqgPC+zg5F0njoKt3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU3NECNesPL776k78HJpBWpPC3+MB8GA1UdIwQY
MBaAFOM4zWgR3OLtT0JhQ8P8hFextDS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYt
MmViMGFmM2FjNzgxLzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy81ZWE0YjQtOWVkNy00NDRlLTg2YmYtMmViMGFmM2FjNzgx
LzEvNHpqTmFCSGM0dTFQUW1GRHdfeUVWN0cwTkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOh7R/6Y
ktQ8M2gKE3AzlI/8BPRpgJBelZU/JsAq/0Fvub/eqQ3XE04XXn3tdCOVsyUzHUEn
WOEjhVyydW1dajCJ8T/Y5HcBxpZhcDDyfO1HLW80itGdsQxLgtEO/a3bSGEgHCUR
CJ0oqQDvoVDMdLcoHg0iICDr/q1/MOXuK+g+7YCYgq3W/mLwAn1rOV9apLTexSuR
h9rLYOc3I+yPQ6yl19mXOHG+pMLH4wGGUZ3ZBuXzTTlBOvmsNQGmTipycEQa1yss
oDDu9954jgYfXRaLlafZ1Z2OAKSg/dVs+Kp7xTay2gP4suR0Sk8tkgoK75qjpHKE
Mj2UGgxWr3mNBA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:30:20 2026 by rpki-client