Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
File:                     4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft (raw, json)
Hash identifier:          Je4PQc5m9RnPunq6h4SLseThfu7Mt3Na+8gXjJ0f3is=
Subject key identifier:   0F:93:6E:8C:9B:8A:21:3B:03:31:E2:B7:E5:9E:96:96:39:1E:DD:62
Authority key identifier: E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C
Certificate issuer:       /CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
Certificate serial:       019F859F758CFB3623DE5665244CA82DA39F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
Manifest number:          1ACD
Signing time:             Tue 21 Jul 2026 17:00:47 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:47 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:47 +0000
Files and hashes:         1: 4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl (hash: +lOHfIlEtUYqPMN8j42gX1bHcxaLhzMMrDlDc4ZF+lA=)
                          2: 7f-qk0jKjn3Hv6ygSTSqX-A52T8.roa (hash: wWQY3pRKERmG9ujMWcp884MAVgXLED92sf1A7NartQU=)
                          3: Qpzdfxddg7sAd9HOkX4hdICsNh8.roa (hash: 4zKxw2hbsJ7DHleUFCRfkqUEw6l9X5X22tDEvhwM0Q4=)
                          4: mISVN3pJCEKgpp-F0_a-pzPapx0.roa (hash: SadnkN5S+WCTiUpwfkYUMGUV79xfU7cL1Bs5TXckcuQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:75:8c:fb:36:23:de:56:65:24:4c:a8:2d:a3:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e32bcd40c6774677d2c3702ef59edf49d0b36c6c
        Validity
            Not Before: Jul 21 17:00:47 2026 GMT
            Not After : Jul 22 17:00:47 2026 GMT
        Subject: CN=0f936e8c9b8a213b0331e2b7e59e9696391edd62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:ec:79:10:bd:6a:03:0d:e4:81:50:49:83:
                    1d:38:f9:3b:dd:aa:c3:bb:ac:98:45:80:ff:2d:d8:
                    36:82:87:61:e7:09:6a:a1:6e:a5:ed:c0:31:9d:78:
                    cd:7e:3a:e8:85:71:b0:97:0d:3c:d9:ed:e5:a2:53:
                    bf:2e:3a:89:c8:4c:23:fb:89:9a:1a:70:3e:b7:e4:
                    7d:e6:1f:be:e5:19:12:a7:4d:3a:f4:0b:23:14:f6:
                    c4:f2:df:0f:17:11:fc:3b:c0:df:b0:01:53:46:f0:
                    3b:05:a5:0a:63:35:fe:2a:93:c6:c6:db:31:e2:09:
                    1e:b1:a1:1f:75:ab:2e:af:32:e8:fd:2a:b5:11:f1:
                    ef:c1:20:8e:f4:ff:e4:18:06:c3:86:b9:67:2a:db:
                    b5:9c:51:97:37:37:58:68:2c:cb:cf:de:b7:1c:24:
                    70:a4:6e:29:b5:b2:e6:e9:e7:9b:6c:de:19:39:f1:
                    4b:7d:50:6f:ed:8d:a0:59:9a:49:30:4b:5d:6e:0c:
                    5b:51:94:68:e5:b6:ea:e7:06:97:05:f3:e4:c1:dc:
                    d7:a2:b7:64:7a:75:9e:86:08:a9:7d:1d:f5:52:3f:
                    76:9c:e4:16:f0:d8:55:3c:e1:ca:40:68:20:90:5a:
                    7d:3c:45:24:17:ea:64:2c:43:4e:1b:24:db:37:df:
                    b9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:93:6E:8C:9B:8A:21:3B:03:31:E2:B7:E5:9E:96:96:39:1E:DD:62
            X509v3 Authority Key Identifier:
                keyid:E3:2B:CD:40:C6:77:46:77:D2:C3:70:2E:F5:9E:DF:49:D0:B3:6C:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4b7ef8-8643-4dbb-92aa-0740115b5a52/1/4yvNQMZ3RnfSw3Au9Z7fSdCzbGw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:31:38:d4:47:2d:aa:62:b3:9a:fb:38:14:b0:b9:b3:d6:9f:
         18:90:47:c3:de:a7:31:05:a4:fd:fe:f3:01:f3:b1:64:a6:96:
         31:21:57:1f:b5:1a:82:30:d7:ea:d6:60:13:46:a7:66:ff:e5:
         7e:bc:c4:a0:33:fc:51:3e:bc:59:3b:55:e8:3a:d2:c5:37:1b:
         3b:f5:95:d8:ea:61:01:56:c4:5d:4f:71:81:88:16:51:4f:02:
         05:2f:6e:74:f4:9f:ca:9b:88:ee:e3:f6:57:6d:2f:66:e9:23:
         9e:9e:b7:e9:cd:ed:ec:57:1c:f0:86:fa:94:c0:5f:b9:e8:e6:
         7b:0e:02:aa:e2:62:e9:79:10:9e:3b:35:b0:52:49:18:f8:cb:
         d5:f5:8b:22:25:e0:88:69:1e:c4:1c:09:ba:f5:54:a6:10:08:
         c7:2a:87:31:09:b5:a7:42:cd:b5:8c:ad:16:1c:14:57:96:55:
         fe:4a:70:64:75:8c:d9:97:e8:f0:85:35:26:d9:36:54:89:04:
         04:1f:10:66:e8:16:5e:8e:76:e3:5b:c5:37:87:4d:23:fc:31:
         5d:c1:8c:89:56:96:d3:d3:c1:eb:11:3c:fd:df:8a:c6:0d:5f:
         32:f1:43:e6:4c:84:89:6f:f4:11:6d:51:71:90:29:e7:66:a0:
         be:e4:e8:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Fn3WM+zYj3lZlJEyoLaOfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMmJjZDQwYzY3NzQ2NzdkMmMzNzAyZWY1OWVkZjQ5ZDBi
MzZjNmMwHhcNMjYwNzIxMTcwMDQ3WhcNMjYwNzIyMTcwMDQ3WjAzMTEwLwYDVQQD
EygwZjkzNmU4YzliOGEyMTNiMDMzMWUyYjdlNTllOTY5NjM5MWVkZDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCbseRC9agMN5IFQSYMdOPk73arD
u6yYRYD/Ldg2godh5wlqoW6l7cAxnXjNfjrohXGwlw082e3lolO/LjqJyEwj+4ma
GnA+t+R95h++5RkSp0069AsjFPbE8t8PFxH8O8DfsAFTRvA7BaUKYzX+KpPGxtsx
4gkesaEfdasurzLo/Sq1EfHvwSCO9P/kGAbDhrlnKtu1nFGXNzdYaCzLz963HCRw
pG4ptbLm6eebbN4ZOfFLfVBv7Y2gWZpJMEtdbgxbUZRo5bbq5waXBfPkwdzXordk
enWehgipfR31Uj92nOQW8NhVPOHKQGggkFp9PEUkF+pkLENOGyTbN9+5JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+TboybiiE7AzHit+WelpY5Ht1iMB8GA1UdIwQY
MBaAFOMrzUDGd0Z30sNwLvWe30nQs2xsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEt
MDc0MDExNWI1YTUyLzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80YjdlZjgtODY0My00ZGJiLTkyYWEtMDc0MDExNWI1YTUy
LzEvNHl2TlFNWjNSbmZTdzNBdTlaN2ZTZEN6Ykd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANTE41Ect
qmKzmvs4FLC5s9afGJBHw96nMQWk/f7zAfOxZKaWMSFXH7UagjDX6tZgE0anZv/l
frzEoDP8UT68WTtV6DrSxTcbO/WV2OphAVbEXU9xgYgWUU8CBS9udPSfypuI7uP2
V20vZukjnp636c3t7Fcc8Ib6lMBfuejmew4CquJi6XkQnjs1sFJJGPjL1fWLIiXg
iGkexBwJuvVUphAIxyqHMQm1p0LNtYytFhwUV5ZV/kpwZHWM2Zfo8IU1Jtk2VIkE
BB8QZugWXo5241vFN4dNI/wxXcGMiVaW09PB6xE8/d+Kxg1fMvFD5kyEiW/0EW1R
cZAp52agvuToSw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:33:49 2026 by rpki-client