Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
File:                     vL4wndalMhnOvVZb4fI0uT5WLjk.mft (raw, json)
Hash identifier:          6JWjPn5AX04kk0+zv2JaN9xIifWWS8/a6vj/1E8S3NE=
Subject key identifier:   6B:F5:22:15:1E:AC:3F:5C:A8:CA:78:BC:4A:FC:85:62:C4:E3:69:3A
Authority key identifier: BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
Certificate issuer:       /CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Certificate serial:       019FF9ED0558B141EA6DC3F21B3374AE63C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
Manifest number:          01CA
Signing time:             Thu 13 Aug 2026 07:01:27 +0000
Manifest this update:     Thu 13 Aug 2026 07:01:27 +0000
Manifest next update:     Fri 14 Aug 2026 07:01:27 +0000
Files and hashes:         1: vL4wndalMhnOvVZb4fI0uT5WLjk.crl (hash: HbVz+X6ohVSzcOscrUi/acfkVpNcp9QDJOG1DkO8v3Q=)
                          2: y80B_uuM_hGD_Q988wwVbuTVVzQ.asa (hash: wqE3B1uMY7o5p44haT4r4tbcqIzVxJtI7cONoSQ5lKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f9:ed:05:58:b1:41:ea:6d:c3:f2:1b:33:74:ae:63:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcbe309dd6a53219cebd565be1f234b93e562e39
        Validity
            Not Before: Aug 13 07:01:27 2026 GMT
            Not After : Aug 14 07:01:27 2026 GMT
        Subject: CN=6bf522151eac3f5ca8ca78bc4afc8562c4e3693a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2f:af:1a:2e:b7:96:4b:d9:51:8e:7f:6d:4e:
                    0c:b8:b6:32:5a:87:77:19:d6:81:2b:f6:96:f5:ba:
                    a5:64:c5:78:1b:d4:c8:6a:c7:f7:c7:a8:a0:4f:3f:
                    1b:07:ac:c8:0a:f5:07:29:93:87:ea:0a:c2:2e:e1:
                    12:17:7d:9e:6d:75:b3:3d:81:fa:c0:1e:e2:83:ec:
                    6b:8c:47:46:5a:c6:11:88:df:4a:2f:8a:51:d5:88:
                    ce:40:6a:1e:5e:8d:c8:a4:5e:a0:20:90:e3:a2:7e:
                    0d:92:5c:82:17:c7:2a:38:c3:18:38:88:02:51:19:
                    d6:56:04:d4:73:0a:bb:6b:75:2f:cc:d9:2b:50:fa:
                    3d:e7:af:1e:3e:b4:3b:a9:43:cf:6e:69:0a:15:62:
                    d0:65:2b:e4:7b:dd:ab:1b:e5:89:e8:f3:62:f9:78:
                    d9:fd:f8:e9:c6:8a:85:a6:b9:60:cf:f3:66:05:5d:
                    10:27:c9:20:2a:6c:53:a9:dc:00:74:69:91:d5:5a:
                    e6:87:c1:0c:a8:98:8d:06:1f:65:2b:0d:1e:06:9e:
                    71:ff:c8:d3:c9:1b:42:32:c9:fe:6f:53:b3:8c:fe:
                    b0:7e:0c:60:d7:16:63:5e:c1:49:6c:19:ff:34:53:
                    f9:20:f3:b1:6a:6c:4b:75:90:75:96:de:81:5c:aa:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F5:22:15:1E:AC:3F:5C:A8:CA:78:BC:4A:FC:85:62:C4:E3:69:3A
            X509v3 Authority Key Identifier:
                keyid:BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:1f:a5:02:70:a6:af:4f:f0:0d:30:27:54:7d:fc:12:e1:62:
         1c:0f:c4:97:22:84:0b:85:63:6d:28:3b:b9:69:dc:3d:96:3a:
         82:82:2d:90:46:89:b6:f1:3b:6e:1d:56:50:5b:c1:94:7f:8b:
         05:a8:58:84:69:d0:f9:71:7b:c9:fe:6f:4b:f0:3d:5b:79:c4:
         2f:b4:2b:9e:09:37:ff:39:eb:45:43:93:72:86:4f:7b:bd:4b:
         20:dd:c0:53:f1:f4:e5:c1:2d:26:e7:fd:4d:5d:96:6b:ba:ba:
         04:a3:d7:18:f8:70:b4:30:3b:61:e4:b3:eb:6d:32:57:86:a0:
         66:4d:e1:cf:a4:d8:d7:48:20:68:79:f6:a2:8b:47:2c:78:53:
         3e:3c:24:32:b9:ac:29:cd:2c:b5:a1:c2:2d:f4:7c:10:2d:2a:
         75:09:df:84:b5:c6:9f:fd:2f:f5:1c:b8:ae:2d:60:9e:81:fd:
         66:58:3c:91:d2:a6:f6:ea:ad:d7:02:9c:ef:db:9c:51:21:ab:
         94:9d:b1:ec:c9:b2:20:be:37:6f:7f:f6:bd:71:e1:78:0c:fc:
         bc:65:02:be:cb:5a:05:53:1f:27:8a:7a:6d:57:40:ce:ff:40:
         df:7d:d2:13:8f:5a:0d:d7:ad:ab:a0:3b:4f:95:d2:fc:11:cd:
         65:e8:db:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/57QVYsUHqbcPyGzN0rmPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYmUzMDlkZDZhNTMyMTljZWJkNTY1YmUxZjIzNGI5M2U1
NjJlMzkwHhcNMjYwODEzMDcwMTI3WhcNMjYwODE0MDcwMTI3WjAzMTEwLwYDVQQD
Eyg2YmY1MjIxNTFlYWMzZjVjYThjYTc4YmM0YWZjODU2MmM0ZTM2OTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1i+vGi63lkvZUY5/bU4MuLYyWod3
GdaBK/aW9bqlZMV4G9TIasf3x6igTz8bB6zICvUHKZOH6grCLuESF32ebXWzPYH6
wB7ig+xrjEdGWsYRiN9KL4pR1YjOQGoeXo3IpF6gIJDjon4NklyCF8cqOMMYOIgC
URnWVgTUcwq7a3UvzNkrUPo9568ePrQ7qUPPbmkKFWLQZSvke92rG+WJ6PNi+XjZ
/fjpxoqFprlgz/NmBV0QJ8kgKmxTqdwAdGmR1Vrmh8EMqJiNBh9lKw0eBp5x/8jT
yRtCMsn+b1OzjP6wfgxg1xZjXsFJbBn/NFP5IPOxamxLdZB1lt6BXKpSNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGv1IhUerD9cqMp4vEr8hWLE42k6MB8GA1UdIwQY
MBaAFLy+MJ3WpTIZzr1WW+HyNLk+Vi45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkw0d25kYWxNaG5PdlZaYjRmSTB1VDVXTGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9jMGMzNzUtMDNhZS00OWFjLWJmZmIt
M2QzYmJjNWRiNTQzLzEvdkw0d25kYWxNaG5PdlZaYjRmSTB1VDVXTGprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9jMGMzNzUtMDNhZS00OWFjLWJmZmItM2QzYmJjNWRiNTQz
LzEvdkw0d25kYWxNaG5PdlZaYjRmSTB1VDVXTGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEh+lAnCm
r0/wDTAnVH38EuFiHA/ElyKEC4VjbSg7uWncPZY6goItkEaJtvE7bh1WUFvBlH+L
BahYhGnQ+XF7yf5vS/A9W3nEL7Qrngk3/znrRUOTcoZPe71LIN3AU/H05cEtJuf9
TV2Wa7q6BKPXGPhwtDA7YeSz620yV4agZk3hz6TY10ggaHn2ootHLHhTPjwkMrms
Kc0staHCLfR8EC0qdQnfhLXGn/0v9Ry4ri1gnoH9Zlg8kdKm9uqt1wKc79ucUSGr
lJ2x7MmyIL43b3/2vXHheAz8vGUCvstaBVMfJ4p6bVdAzv9A333SE49aDdetq6A7
T5XS/BHNZejbdw==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:45 2026 by rpki-client