Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
File:                     4m4BgY9rbo42iNfzYfdTwSNeDNw.mft (raw, json)
Hash identifier:          lx09j3aWDm6qJV+VUzEOg0b8HvQsk5e2e25YREnHTLY=
Subject key identifier:   2F:9F:9F:02:83:FE:A1:3E:F2:98:C1:AF:34:23:5B:2E:88:73:D3:FF
Authority key identifier: E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC
Certificate issuer:       /CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
Certificate serial:       019F419A235885D79569BD9D17641CC392F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
Manifest number:          018C
Signing time:             Wed 08 Jul 2026 12:00:48 +0000
Manifest this update:     Wed 08 Jul 2026 12:00:48 +0000
Manifest next update:     Thu 09 Jul 2026 12:00:48 +0000
Files and hashes:         1: 4m4BgY9rbo42iNfzYfdTwSNeDNw.crl (hash: 3iG7zhqQQrDRUexAP7v9mbp5hoy2hJGzJyuhESYmY/Q=)
                          2: 55lgQHjawIWIBPegmtUWO19P1qY.roa (hash: xr29hGNw/G2B+5szsIy5zpkogZqhj2L/lLvicw1+OJE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 09 Jul 2026 12:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:41:9a:23:58:85:d7:95:69:bd:9d:17:64:1c:c3:92:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e26e01818f6b6e8e3688d7f361f753c1235e0cdc
        Validity
            Not Before: Jul  8 12:00:48 2026 GMT
            Not After : Jul  9 12:00:48 2026 GMT
        Subject: CN=2f9f9f0283fea13ef298c1af34235b2e8873d3ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:aa:ef:e5:05:90:3a:7f:96:67:4a:50:de:2b:
                    92:92:39:b9:08:2c:fc:40:f3:e9:a9:24:97:39:b7:
                    04:db:61:47:5e:d6:c5:ea:45:d2:54:fd:87:d8:75:
                    25:76:a5:62:8b:07:b2:eb:72:65:b9:25:22:22:32:
                    bf:27:f7:44:83:8c:a9:aa:1e:e6:ec:a3:9e:26:bc:
                    e6:90:80:96:97:fa:1a:c1:8b:0b:a5:ba:fd:f2:4b:
                    e9:1e:b1:9d:7f:fc:14:f2:e5:9a:04:cf:b6:1d:47:
                    79:83:af:93:c9:8f:5c:c1:16:0a:aa:5f:80:76:2f:
                    b9:cf:73:03:b7:84:aa:8c:49:13:08:69:38:59:44:
                    16:5c:88:ed:6f:2a:62:fe:05:90:92:1d:28:bf:fa:
                    52:e9:98:94:40:26:87:34:d7:b0:85:9e:7d:23:65:
                    1c:d3:cc:15:28:ec:3f:95:49:df:24:fe:33:d4:20:
                    a7:ab:02:bd:6f:12:85:04:30:71:d3:65:6b:03:cd:
                    5d:51:44:d6:85:49:da:9e:04:ed:a3:ef:87:9d:0e:
                    22:83:a3:30:ac:0a:af:9f:96:d0:79:ff:18:2e:27:
                    b5:18:de:9c:38:bf:90:38:ce:13:e9:87:42:39:95:
                    6d:e7:99:c9:18:17:0c:1a:8f:1b:fa:37:33:24:90:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:9F:9F:02:83:FE:A1:3E:F2:98:C1:AF:34:23:5B:2E:88:73:D3:FF
            X509v3 Authority Key Identifier:
                keyid:E2:6E:01:81:8F:6B:6E:8E:36:88:D7:F3:61:F7:53:C1:23:5E:0C:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4m4BgY9rbo42iNfzYfdTwSNeDNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/ed9c53-8fd5-4921-9f52-d53c7aeb73b4/1/4m4BgY9rbo42iNfzYfdTwSNeDNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:ab:0a:3c:8c:3f:fc:07:8b:cb:29:38:2f:7e:65:de:a2:88:
         7d:d0:6e:2f:c1:58:42:42:bd:3b:ab:da:b0:a0:e8:99:33:97:
         f3:87:20:c4:9b:91:98:16:5a:32:81:7d:12:86:4b:e9:11:87:
         ca:c2:a0:8c:f5:3b:e9:6c:fb:dd:b2:08:cf:cf:1d:a3:00:4e:
         80:44:38:92:90:c5:eb:68:4f:42:67:4c:35:a9:ea:47:d8:b3:
         8d:03:ef:a6:d9:a9:e3:94:6a:5e:f6:3a:a5:f8:a5:57:89:33:
         21:00:80:cd:46:91:62:21:93:0c:f9:a9:f2:38:fb:4e:45:6c:
         f7:42:d5:c9:e0:47:98:ad:39:79:0b:15:14:c9:9b:65:2b:88:
         b0:21:88:e1:c3:ea:11:81:b1:d2:94:54:01:17:04:4c:58:08:
         a0:68:56:c1:87:b8:30:8b:49:a4:b7:ba:15:03:74:f6:55:4e:
         dd:4f:72:aa:5e:7c:54:7b:10:8c:7e:dd:14:7b:53:f7:4f:a9:
         cc:1b:d2:6c:b7:c4:99:0a:85:78:04:41:5b:2a:a9:0f:42:53:
         51:fd:54:35:e8:67:a0:25:d5:2f:44:cd:ad:38:c6:b8:b1:ea:
         78:b9:a6:ce:0b:54:f6:3a:f5:71:98:b6:82:87:d8:ed:c9:a1:
         92:4b:bd:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9BmiNYhdeVab2dF2Qcw5L2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNmUwMTgxOGY2YjZlOGUzNjg4ZDdmMzYxZjc1M2MxMjM1
ZTBjZGMwHhcNMjYwNzA4MTIwMDQ4WhcNMjYwNzA5MTIwMDQ4WjAzMTEwLwYDVQQD
EygyZjlmOWYwMjgzZmVhMTNlZjI5OGMxYWYzNDIzNWIyZTg4NzNkM2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvarv5QWQOn+WZ0pQ3iuSkjm5CCz8
QPPpqSSXObcE22FHXtbF6kXSVP2H2HUldqViiwey63JluSUiIjK/J/dEg4ypqh7m
7KOeJrzmkICWl/oawYsLpbr98kvpHrGdf/wU8uWaBM+2HUd5g6+TyY9cwRYKql+A
di+5z3MDt4SqjEkTCGk4WUQWXIjtbypi/gWQkh0ov/pS6ZiUQCaHNNewhZ59I2Uc
08wVKOw/lUnfJP4z1CCnqwK9bxKFBDBx02VrA81dUUTWhUnangTto++HnQ4ig6Mw
rAqvn5bQef8YLie1GN6cOL+QOM4T6YdCOZVt55nJGBcMGo8b+jczJJBmDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+fnwKD/qE+8pjBrzQjWy6Ic9P/MB8GA1UdIwQY
MBaAFOJuAYGPa26ONojX82H3U8EjXgzcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG00QmdZOXJibzQyaU5mellmZFR3U05lRE53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9lZDljNTMtOGZkNS00OTIxLTlmNTIt
ZDUzYzdhZWI3M2I0LzEvNG00QmdZOXJibzQyaU5mellmZFR3U05lRE53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9lZDljNTMtOGZkNS00OTIxLTlmNTItZDUzYzdhZWI3M2I0
LzEvNG00QmdZOXJibzQyaU5mellmZFR3U05lRE53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArasKPIw/
/AeLyyk4L35l3qKIfdBuL8FYQkK9O6vasKDomTOX84cgxJuRmBZaMoF9EoZL6RGH
ysKgjPU76Wz73bIIz88dowBOgEQ4kpDF62hPQmdMNanqR9izjQPvptmp45RqXvY6
pfilV4kzIQCAzUaRYiGTDPmp8jj7TkVs90LVyeBHmK05eQsVFMmbZSuIsCGI4cPq
EYGx0pRUARcETFgIoGhWwYe4MItJpLe6FQN09lVO3U9yql58VHsQjH7dFHtT90+p
zBvSbLfEmQqFeARBWyqpD0JTUf1UNehnoCXVL0TNrTjGuLHqeLmmzgtU9jr1cZi2
gofY7cmhkku9/Q==
-----END CERTIFICATE-----
Generated at Wed Jul 8 18:30:49 2026 by rpki-client