Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
File:                     4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft (raw, json)
Hash identifier:          aCXTMogN8+SOjmgCuSBWIN3I2EKw/hJg6iaj2l3GREo=
Subject key identifier:   36:FE:B6:D4:0F:E4:80:B6:E1:17:8F:F9:5B:92:66:FE:C8:F8:09:99
Authority key identifier: E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03
Certificate issuer:       /CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
Certificate serial:       019EAC786270F01E274C8E68A0437186BA5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
Manifest number:          168B
Signing time:             Tue 09 Jun 2026 13:00:30 +0000
Manifest this update:     Tue 09 Jun 2026 13:00:30 +0000
Manifest next update:     Wed 10 Jun 2026 13:00:30 +0000
Files and hashes:         1: 4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl (hash: GquOuyE0qzzIrCdWSB2cOdktDH/c3DGN++DQAtwUVBY=)
                          2: 8OYdUjrlp_CiIecRp3Rh15sihI4.roa (hash: u8J8QYG/m1scGBBJx74Dh3l5h4W60dwIobWX8cGTUE4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jun 2026 13:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ac:78:62:70:f0:1e:27:4c:8e:68:a0:43:71:86:ba:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1d7e9ff1278a14dc26ef33f9ff531d86eff5d03
        Validity
            Not Before: Jun  9 13:00:30 2026 GMT
            Not After : Jun 10 13:00:30 2026 GMT
        Subject: CN=36feb6d40fe480b6e1178ff95b9266fec8f80999
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:2b:bb:22:7d:4a:be:92:4f:02:c6:f3:61:
                    e7:2a:4d:05:c8:68:d9:06:8c:3a:5e:38:f0:fa:88:
                    5a:47:94:f7:82:98:ed:97:14:03:bf:c1:d7:53:94:
                    43:07:7c:9b:43:a3:6e:dd:ec:7a:76:21:e9:28:55:
                    81:d4:00:5b:8a:d3:45:ae:0b:03:8b:9c:a4:30:e6:
                    50:76:08:23:dc:88:b6:12:46:f3:c6:5a:24:2d:19:
                    74:8c:5b:a3:8d:7a:d6:03:0f:64:54:da:cb:16:77:
                    2b:3e:87:62:a4:ef:97:98:66:13:a1:9f:f8:99:e4:
                    cc:c6:b1:51:1f:2c:2f:e8:01:e4:2f:a0:35:98:0c:
                    e3:da:51:86:26:a0:5d:9c:cb:2f:61:32:a2:f1:e8:
                    c8:5d:73:d6:71:1d:32:df:d5:42:4f:4c:b5:62:57:
                    3a:4c:fd:3f:26:b7:11:90:8b:b0:93:31:e2:20:74:
                    64:3a:03:6e:b7:f2:28:49:5d:14:4a:d6:be:2b:1d:
                    5b:41:5e:42:18:67:78:ca:24:3d:a1:37:0c:44:60:
                    d8:79:b0:ba:5d:f7:74:d6:65:71:89:01:d8:dc:a1:
                    a4:88:d8:be:69:90:70:b6:66:44:9b:e2:9d:6e:0b:
                    bb:3f:a4:22:58:eb:11:42:5c:91:97:24:65:60:40:
                    b3:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:FE:B6:D4:0F:E4:80:B6:E1:17:8F:F9:5B:92:66:FE:C8:F8:09:99
            X509v3 Authority Key Identifier:
                keyid:E1:D7:E9:FF:12:78:A1:4D:C2:6E:F3:3F:9F:F5:31:D8:6E:FF:5D:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/aa7922-c2c0-47ae-9108-6030a9da3b89/1/4dfp_xJ4oU3CbvM_n_Ux2G7_XQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:29:1a:02:df:3c:fd:b5:43:e0:b8:cd:38:43:2b:67:d9:ca:
         42:cb:2b:3f:2f:e8:92:c6:45:3e:75:59:d3:67:06:b0:8b:0b:
         4a:3e:84:a8:9a:55:78:01:ce:84:33:63:16:84:4c:29:d1:65:
         35:d7:57:b2:d3:1b:5a:19:86:d1:17:5b:9a:be:94:82:2d:13:
         ed:1b:46:e4:aa:27:e7:e6:78:f8:14:ac:2e:4d:e7:56:62:2a:
         fc:bf:34:92:84:66:c4:32:58:f5:fe:ed:ca:fd:68:a2:37:db:
         6d:d0:5d:46:70:63:18:84:c2:88:f2:7c:09:73:92:a0:27:19:
         61:f4:5e:07:f4:e7:ad:5c:de:cd:34:3a:9f:2d:69:6e:84:60:
         79:e3:f6:59:05:d6:b9:49:a8:1a:d5:a2:6e:68:d7:59:d7:41:
         83:43:d2:7b:be:64:49:90:4d:6e:80:44:cb:35:6f:d8:0c:24:
         8f:49:06:f4:cf:5b:e8:48:4d:3e:11:54:74:8d:99:37:39:4c:
         2b:8a:e1:92:e7:f7:98:cb:15:e7:b4:31:80:8e:43:66:95:60:
         e0:3d:3d:75:a4:98:07:6d:22:9a:ac:7a:79:9a:9a:c5:42:1e:
         af:4d:30:9d:44:fd:70:b7:cf:89:39:b3:ce:c5:34:50:0e:41:
         d5:84:e9:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6seGJw8B4nTI5ooENxhrpfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZDdlOWZmMTI3OGExNGRjMjZlZjMzZjlmZjUzMWQ4NmVm
ZjVkMDMwHhcNMjYwNjA5MTMwMDMwWhcNMjYwNjEwMTMwMDMwWjAzMTEwLwYDVQQD
EygzNmZlYjZkNDBmZTQ4MGI2ZTExNzhmZjk1YjkyNjZmZWM4ZjgwOTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNMruyJ9Sr6STwLG82HnKk0FyGjZ
Bow6Xjjw+ohaR5T3gpjtlxQDv8HXU5RDB3ybQ6Nu3ex6diHpKFWB1ABbitNFrgsD
i5ykMOZQdggj3Ii2EkbzxlokLRl0jFujjXrWAw9kVNrLFncrPodipO+XmGYToZ/4
meTMxrFRHywv6AHkL6A1mAzj2lGGJqBdnMsvYTKi8ejIXXPWcR0y39VCT0y1Ylc6
TP0/JrcRkIuwkzHiIHRkOgNut/IoSV0USta+Kx1bQV5CGGd4yiQ9oTcMRGDYebC6
Xfd01mVxiQHY3KGkiNi+aZBwtmZEm+Kdbgu7P6QiWOsRQlyRlyRlYECzhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDb+ttQP5IC24ReP+VuSZv7I+AmZMB8GA1UdIwQY
MBaAFOHX6f8SeKFNwm7zP5/1Mdhu/10DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hYTc5MjItYzJjMC00N2FlLTkxMDgt
NjAzMGE5ZGEzYjg5LzEvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hYTc5MjItYzJjMC00N2FlLTkxMDgtNjAzMGE5ZGEzYjg5
LzEvNGRmcF94SjRvVTNDYnZNX25fVXgyRzdfWFFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJykaAt88
/bVD4LjNOEMrZ9nKQssrPy/oksZFPnVZ02cGsIsLSj6EqJpVeAHOhDNjFoRMKdFl
NddXstMbWhmG0Rdbmr6Ugi0T7RtG5Kon5+Z4+BSsLk3nVmIq/L80koRmxDJY9f7t
yv1oojfbbdBdRnBjGITCiPJ8CXOSoCcZYfReB/TnrVzezTQ6ny1pboRgeeP2WQXW
uUmoGtWibmjXWddBg0PSe75kSZBNboBEyzVv2Awkj0kG9M9b6EhNPhFUdI2ZNzlM
K4rhkuf3mMsV57QxgI5DZpVg4D09daSYB20imqx6eZqaxUIer00wnUT9cLfPiTmz
zsU0UA5B1YTpcw==
-----END CERTIFICATE-----
Generated at Tue Jun 9 23:05:20 2026 by rpki-client