Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File:                     4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier:          vrd9v7sq809ilE65zxDMbFEecSAfrfqNUeOcjTw5kjo=
Subject key identifier:   F1:38:5D:88:A4:57:D1:FE:1E:1B:98:9B:E8:00:6F:11:60:3B:92:C1
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer:       /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial:       01A0005C7760738374B5C2DDDFA641997565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number:          071B
Signing time:             Fri 14 Aug 2026 13:00:54 +0000
Manifest this update:     Fri 14 Aug 2026 13:00:54 +0000
Manifest next update:     Sat 15 Aug 2026 13:00:54 +0000
Files and hashes:         1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: 4RiwJKyoE8NthBxCb8q+X7A1oSYPhVeXEO2xzV/mQ0E=)
                          2: mX8HnTFvLthfSZ2ZAzBIL5WiGxo.roa (hash: JasekT6eOU4dUWNEwUdVF7G0JwY0SRq9zwzctkh7yh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 13:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:5c:77:60:73:83:74:b5:c2:dd:df:a6:41:99:75:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
        Validity
            Not Before: Aug 14 13:00:54 2026 GMT
            Not After : Aug 15 13:00:54 2026 GMT
        Subject: CN=f1385d88a457d1fe1e1b989be8006f11603b92c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:c6:c5:79:ad:8c:d8:5f:21:ff:d2:45:64:
                    36:d9:71:e9:3d:55:4d:4f:d2:b7:87:40:d5:dc:6b:
                    50:29:78:af:47:89:dc:ed:72:38:5b:92:70:a3:fc:
                    2c:77:d8:5f:fa:49:98:d2:d7:d8:2b:7c:62:e3:ce:
                    79:fa:31:fa:07:f3:b0:07:c7:e1:79:28:ab:9e:67:
                    e6:19:15:3e:bb:44:dd:e0:52:58:4e:e7:43:73:3f:
                    5f:79:8b:93:b2:48:70:87:84:d8:20:b9:a7:f0:e1:
                    d6:69:1b:9d:71:ef:06:46:05:12:33:50:40:98:72:
                    22:5d:21:d3:12:42:27:17:1a:22:f9:31:82:ec:16:
                    08:d7:fb:f0:18:d7:fa:c6:10:52:5f:33:c2:1f:ea:
                    77:e1:78:1a:e2:72:de:c5:c1:1d:12:87:ba:a6:db:
                    f5:d5:39:fc:09:f2:a1:55:af:c6:18:31:47:56:c3:
                    12:b3:bb:15:51:ae:2e:0a:49:d0:e1:c1:9b:95:79:
                    2a:c6:d6:46:15:94:bf:67:d4:ff:af:b3:86:f8:e7:
                    e1:48:4b:1f:54:87:b5:0d:76:23:78:eb:59:71:69:
                    52:14:be:a0:60:ab:da:ce:4c:9c:63:40:6a:f6:24:
                    9c:a6:57:8e:19:b0:4f:a2:8b:25:78:93:52:1e:7c:
                    e4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:38:5D:88:A4:57:D1:FE:1E:1B:98:9B:E8:00:6F:11:60:3B:92:C1
            X509v3 Authority Key Identifier:
                keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:32:8b:4c:69:b3:8b:6f:38:11:ab:b1:16:f0:a6:c6:fe:04:
         a9:85:0a:4e:7c:46:b3:91:58:ea:ee:24:70:66:18:ce:1d:c0:
         3c:cd:a9:29:f9:17:b7:54:83:99:18:5d:a3:e8:3e:65:f1:4c:
         d1:1b:35:e2:48:6e:f8:7e:5a:bc:3a:76:d3:18:0a:48:ac:e9:
         44:b7:6b:fd:0e:99:c4:4d:45:26:d0:98:ed:4c:4f:5c:71:d5:
         44:9d:7c:a4:66:b6:5d:2e:88:2a:74:56:83:54:33:df:c7:d4:
         b7:5a:82:0b:c3:5b:40:a1:ea:27:33:0d:a2:bd:7d:cd:17:8f:
         f8:6a:dd:1c:c6:67:c5:c8:d5:db:cd:d1:da:db:51:3e:df:62:
         c0:50:f4:df:07:a1:ec:0b:44:c3:79:72:6f:12:cf:de:ca:c1:
         3f:06:eb:5b:62:c1:85:3b:98:e9:32:12:69:91:c2:bf:00:62:
         17:63:f7:8e:15:ae:06:06:35:7f:97:81:56:c7:9a:d5:dd:40:
         94:39:1d:e6:d0:96:4f:05:d3:25:02:d9:01:4c:93:7b:62:9b:
         0e:78:f9:6e:80:0f:cb:91:ec:2d:88:f6:d9:d0:3e:e2:28:b4:
         c1:0a:c1:0c:cf:ae:9b:41:43:ca:d6:34:6c:9f:d5:e2:31:d4:
         d4:18:8a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAAXHdgc4N0tcLd36ZBmXVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDM2MmU0OGFjYmUwMDQ4ZTlkMTI1YTYyYjhkOWIxNDBj
YmZkZDQwHhcNMjYwODE0MTMwMDU0WhcNMjYwODE1MTMwMDU0WjAzMTEwLwYDVQQD
EyhmMTM4NWQ4OGE0NTdkMWZlMWUxYjk4OWJlODAwNmYxMTYwM2I5MmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvcvGxXmtjNhfIf/SRWQ22XHpPVVN
T9K3h0DV3GtQKXivR4nc7XI4W5Jwo/wsd9hf+kmY0tfYK3xi4855+jH6B/OwB8fh
eSirnmfmGRU+u0Td4FJYTudDcz9feYuTskhwh4TYILmn8OHWaRudce8GRgUSM1BA
mHIiXSHTEkInFxoi+TGC7BYI1/vwGNf6xhBSXzPCH+p34Xga4nLexcEdEoe6ptv1
1Tn8CfKhVa/GGDFHVsMSs7sVUa4uCknQ4cGblXkqxtZGFZS/Z9T/r7OG+OfhSEsf
VIe1DXYjeOtZcWlSFL6gYKvazkycY0Bq9iScpleOGbBPoosleJNSHnzkLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPE4XYikV9H+HhuYm+gAbxFgO5LBMB8GA1UdIwQY
MBaAFOHTYuSKy+AEjp0SWmK42bFAy/3UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgt
M2FkYTM1MjY1MmI0LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS84YWU1NzktMDAwYy00ZTczLTlmNjgtM2FkYTM1MjY1MmI0
LzEvNGROaTVJckw0QVNPblJKYVlyalpzVURMX2RRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfjKLTGmz
i284EauxFvCmxv4EqYUKTnxGs5FY6u4kcGYYzh3APM2pKfkXt1SDmRhdo+g+ZfFM
0Rs14khu+H5avDp20xgKSKzpRLdr/Q6ZxE1FJtCY7UxPXHHVRJ18pGa2XS6IKnRW
g1Qz38fUt1qCC8NbQKHqJzMNor19zReP+GrdHMZnxcjV283R2ttRPt9iwFD03weh
7AtEw3lybxLP3srBPwbrW2LBhTuY6TISaZHCvwBiF2P3jhWuBgY1f5eBVsea1d1A
lDkd5tCWTwXTJQLZAUyTe2KbDnj5boAPy5HsLYj22dA+4ii0wQrBDM+um0FDytY0
bJ/V4jHU1BiKWA==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:21:44 2026 by rpki-client