Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
File:                     4KM3CoQbiT57aPhqOTNjWC4QVkg.mft (raw, json)
Hash identifier:          pXEowb22n6y0v0cdNIPnn6kXIvKlT6AvxxAXrQ26Ts0=
Subject key identifier:   74:CD:28:44:93:A1:4C:54:16:DB:6D:A1:CE:82:D3:4A:80:79:BF:19
Authority key identifier: E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48
Certificate issuer:       /CN=e0a3370a841b893e7b68f86a393363582e105648
Certificate serial:       01A0016F73975FD0F38D55B0E9197267F30B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
Manifest number:          0EDA
Signing time:             Fri 14 Aug 2026 18:01:16 +0000
Manifest this update:     Fri 14 Aug 2026 18:01:16 +0000
Manifest next update:     Sat 15 Aug 2026 18:01:16 +0000
Files and hashes:         1: 4KM3CoQbiT57aPhqOTNjWC4QVkg.crl (hash: 13ti/8mxRmuvS7RpRTZoGFKaGmXAzRoFa4GNd07V+yM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6f:73:97:5f:d0:f3:8d:55:b0:e9:19:72:67:f3:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0a3370a841b893e7b68f86a393363582e105648
        Validity
            Not Before: Aug 14 18:01:16 2026 GMT
            Not After : Aug 15 18:01:16 2026 GMT
        Subject: CN=74cd284493a14c5416db6da1ce82d34a8079bf19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:12:5a:ea:22:a9:36:60:df:dd:83:3b:42:
                    a8:17:ab:e6:bf:4b:b1:b4:d6:6f:09:16:4e:ec:9b:
                    02:e1:f4:3a:37:57:8a:32:0c:4e:d8:b6:8a:04:dc:
                    38:de:c8:3c:80:af:22:e6:08:e8:7e:37:8f:c9:44:
                    ac:8b:61:8d:5b:f0:22:72:4e:43:d7:bc:74:fd:95:
                    7b:3e:16:a9:1e:2d:be:e4:36:9b:c3:5b:29:d1:80:
                    73:02:ab:3f:75:87:47:f0:35:78:66:ff:e3:25:0b:
                    f9:a5:e2:60:66:53:5d:df:56:47:fa:9f:1e:51:cd:
                    e6:d5:3d:70:e0:be:d0:bf:0d:66:84:38:05:61:56:
                    21:5c:2c:77:a0:65:d5:0b:99:67:e0:fe:04:ef:e1:
                    ae:b4:bd:1b:f4:0c:6b:48:c0:85:41:a7:e8:59:46:
                    a0:a3:db:61:85:e2:06:bd:0e:4b:f2:4f:51:00:d5:
                    9b:c5:28:a7:a8:69:f1:0b:e7:02:35:1d:06:b4:3b:
                    0b:60:b7:b2:9e:2f:f3:30:18:17:c0:98:ad:ec:4d:
                    77:dc:ee:11:c8:a3:02:87:06:5c:da:0d:89:40:d0:
                    52:84:dc:89:96:77:db:25:c2:79:0a:91:d5:b6:e0:
                    3c:6a:6c:45:a8:80:f0:b0:f1:d5:07:66:f8:b0:0d:
                    bc:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CD:28:44:93:A1:4C:54:16:DB:6D:A1:CE:82:D3:4A:80:79:BF:19
            X509v3 Authority Key Identifier:
                keyid:E0:A3:37:0A:84:1B:89:3E:7B:68:F8:6A:39:33:63:58:2E:10:56:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KM3CoQbiT57aPhqOTNjWC4QVkg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/95746e-be52-42ee-9cc8-c3edb4d8f71e/1/4KM3CoQbiT57aPhqOTNjWC4QVkg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:74:11:7e:02:94:ff:74:cd:30:cc:ef:dc:ad:a5:ba:9d:c3:
         3d:25:69:6e:ba:10:e6:71:44:47:05:a6:49:0d:e7:9b:fb:32:
         c5:c3:99:87:97:c1:a5:26:0a:82:9c:dd:a2:fc:76:b6:9d:ae:
         27:24:4f:ab:07:53:89:ba:be:25:92:f2:2e:c8:25:41:b6:d2:
         a9:55:a7:eb:c4:91:e5:5b:6b:56:f5:20:ea:6f:d5:45:1b:f2:
         bd:db:2b:bb:84:09:15:cd:64:ad:79:09:4c:99:f9:56:92:cd:
         99:7f:68:f1:d5:ea:1b:e7:08:2c:7e:9d:ed:6d:5a:f2:31:50:
         6b:b1:65:65:8f:c6:d5:3b:b0:14:24:c7:6c:00:8e:67:ba:a1:
         ec:36:24:a3:28:92:69:98:f2:11:95:34:14:7d:e0:3f:b5:aa:
         ad:6c:22:fa:9a:e1:69:62:eb:16:95:f4:a6:0c:59:41:16:14:
         1b:08:b4:78:88:23:7c:7d:ca:4a:77:a4:d7:80:88:23:88:7f:
         e7:4d:ca:7b:b2:fd:cb:77:b1:6f:e9:17:2a:d0:65:25:93:05:
         35:a6:f5:9d:78:a1:0b:21:35:ee:98:c3:0c:b6:bd:86:00:57:
         fe:7a:a2:39:22:74:47:5a:e7:96:a6:5a:7f:db:9b:a3:ac:d4:
         f5:57:ea:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb3OXX9DzjVWw6RlyZ/MLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwYTMzNzBhODQxYjg5M2U3YjY4Zjg2YTM5MzM2MzU4MmUx
MDU2NDgwHhcNMjYwODE0MTgwMTE2WhcNMjYwODE1MTgwMTE2WjAzMTEwLwYDVQQD
Eyg3NGNkMjg0NDkzYTE0YzU0MTZkYjZkYTFjZTgyZDM0YTgwNzliZjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo4SWuoiqTZg392DO0KoF6vmv0ux
tNZvCRZO7JsC4fQ6N1eKMgxO2LaKBNw43sg8gK8i5gjofjePyUSsi2GNW/Aick5D
17x0/ZV7PhapHi2+5Dabw1sp0YBzAqs/dYdH8DV4Zv/jJQv5peJgZlNd31ZH+p8e
Uc3m1T1w4L7Qvw1mhDgFYVYhXCx3oGXVC5ln4P4E7+GutL0b9AxrSMCFQafoWUag
o9thheIGvQ5L8k9RANWbxSinqGnxC+cCNR0GtDsLYLeyni/zMBgXwJit7E133O4R
yKMChwZc2g2JQNBShNyJlnfbJcJ5CpHVtuA8amxFqIDwsPHVB2b4sA28EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTNKESToUxUFtttoc6C00qAeb8ZMB8GA1UdIwQY
MBaAFOCjNwqEG4k+e2j4ajkzY1guEFZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEtNM0NvUWJpVDU3YVBocU9UTmpXQzRRVmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC85NTc0NmUtYmU1Mi00MmVlLTljYzgt
YzNlZGI0ZDhmNzFlLzEvNEtNM0NvUWJpVDU3YVBocU9UTmpXQzRRVmtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC85NTc0NmUtYmU1Mi00MmVlLTljYzgtYzNlZGI0ZDhmNzFl
LzEvNEtNM0NvUWJpVDU3YVBocU9UTmpXQzRRVmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHQRfgKU
/3TNMMzv3K2lup3DPSVpbroQ5nFERwWmSQ3nm/syxcOZh5fBpSYKgpzdovx2tp2u
JyRPqwdTibq+JZLyLsglQbbSqVWn68SR5VtrVvUg6m/VRRvyvdsru4QJFc1krXkJ
TJn5VpLNmX9o8dXqG+cILH6d7W1a8jFQa7FlZY/G1TuwFCTHbACOZ7qh7DYkoyiS
aZjyEZU0FH3gP7WqrWwi+prhaWLrFpX0pgxZQRYUGwi0eIgjfH3KSnek14CII4h/
503Ke7L9y3exb+kXKtBlJZMFNab1nXihCyE17pjDDLa9hgBX/nqiOSJ0R1rnlqZa
f9ubo6zU9Vfqiw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:31:40 2026 by rpki-client