Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
File:                     4vX689OhJusn2TfR3mjgcumaJvI.mft (raw, json)
Hash identifier:          kNqmoRc+eUDG7jGN/0VXvpM/6dCx3hqRyDWP7zsB5tg=
Subject key identifier:   AD:B7:4F:AC:82:A3:DE:C0:5B:D7:D9:28:D2:A2:96:E1:17:3F:9C:EE
Authority key identifier: E2:F5:FA:F3:D3:A1:26:EB:27:D9:37:D1:DE:68:E0:72:E9:9A:26:F2
Certificate issuer:       /CN=e2f5faf3d3a126eb27d937d1de68e072e99a26f2
Certificate serial:       019FA0E1081D92D2E4B8EFD3E425431E8D6C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:02:09 +0000
Manifest this update:     Mon 27 Jul 2026 00:02:09 +0000
Manifest next update:     Tue 28 Jul 2026 00:02:09 +0000
Files and hashes:         1: 4vX689OhJusn2TfR3mjgcumaJvI.crl (hash: oVmBpjpBIkwqLAApiAfC2W4WZ7ucz6vLUFDJDa3s9Ps=)
                          2: JzQE4CrMRXQKVLS9q97TLQOr_Nc.roa (hash: E1WJtSiavBJi5tmLgKdSSq+WxQ67uQ350SN9jNFg9xI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e1:08:1d:92:d2:e4:b8:ef:d3:e4:25:43:1e:8d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2f5faf3d3a126eb27d937d1de68e072e99a26f2
        Validity
            Not Before: Jul 27 00:02:09 2026 GMT
            Not After : Jul 28 00:02:09 2026 GMT
        Subject: CN=adb74fac82a3dec05bd7d928d2a296e1173f9cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:e5:c3:68:90:ea:92:1f:99:02:16:9f:40:
                    2e:a7:f0:c8:bd:05:3b:a9:84:be:4c:36:3d:3c:59:
                    b4:0e:d4:ab:ec:ea:9f:fd:ff:b6:6f:c1:71:53:91:
                    f7:60:78:79:b8:a0:d4:19:b0:e9:75:af:e8:ed:c3:
                    00:b6:de:c8:4c:ce:22:1a:cf:8e:63:d7:40:50:f4:
                    15:62:86:ab:52:fa:ed:c7:5c:71:ec:15:46:5e:99:
                    ac:47:e7:ab:1a:f9:1c:2e:bb:b9:c2:92:a5:89:53:
                    52:26:21:25:88:cd:b2:bb:18:6e:83:b9:e9:d1:3a:
                    98:ac:75:64:49:f6:20:bd:97:67:44:17:10:22:b2:
                    16:46:80:37:9c:65:d7:e9:1a:53:eb:89:77:ee:5e:
                    63:53:4a:38:a7:fb:c3:d4:df:0e:c3:64:31:ea:4a:
                    e4:d7:2b:03:c6:65:00:e5:ce:32:7d:04:40:4d:25:
                    2c:3d:11:23:66:17:c7:db:30:19:0d:11:cb:89:8c:
                    fc:5c:7d:ff:c9:d4:21:c5:7f:6a:01:ef:1d:40:0b:
                    37:b0:85:47:6c:b5:71:2a:ec:d5:5b:5d:8f:99:5c:
                    8e:8e:a9:e2:b1:12:08:39:71:0c:5c:6a:ef:bb:fa:
                    01:0e:8b:77:94:1b:85:46:3b:ab:09:16:de:aa:51:
                    b3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B7:4F:AC:82:A3:DE:C0:5B:D7:D9:28:D2:A2:96:E1:17:3F:9C:EE
            X509v3 Authority Key Identifier:
                keyid:E2:F5:FA:F3:D3:A1:26:EB:27:D9:37:D1:DE:68:E0:72:E9:9A:26:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4vX689OhJusn2TfR3mjgcumaJvI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/20b876-eb24-4cdc-ba96-2421aec4e718/1/4vX689OhJusn2TfR3mjgcumaJvI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:e7:4b:a9:bf:e3:3f:49:bc:d9:90:41:b0:ad:c5:34:15:4a:
         3d:2b:be:0d:ed:87:06:0e:cf:84:3c:89:a6:61:98:1b:ef:8b:
         d6:d1:f3:84:ac:b6:ab:f5:b9:bd:2a:26:26:55:01:86:9c:fb:
         fc:e0:69:e9:91:db:a9:5e:cc:8f:11:28:f0:66:00:07:3f:bf:
         12:e4:44:54:21:d0:15:48:a2:ef:e5:d1:c2:d5:93:cc:f7:f7:
         6e:f1:dc:fd:b1:da:78:6d:db:00:77:5f:80:80:4a:5a:45:91:
         ff:79:b7:59:ee:21:89:6a:8b:f0:74:7c:1c:14:f3:82:39:fc:
         4e:e5:6d:e4:6b:23:a4:d1:5d:36:89:12:39:02:85:ea:9c:f3:
         b8:4f:06:24:c0:e2:15:5a:2d:e8:09:30:05:24:63:a0:28:14:
         8b:36:c0:90:c5:c4:13:53:72:72:7f:e0:5b:27:a4:0b:c3:8d:
         a2:a3:80:d0:08:fa:10:a5:4e:b2:1b:ac:c7:89:f5:68:c3:d8:
         df:ca:13:c1:1e:50:05:57:2c:0b:17:32:86:54:6f:bb:81:c9:
         71:54:ad:8c:6e:14:90:49:1f:6a:b0:e7:0f:4e:e6:58:6f:11:
         bd:3c:48:74:e8:ca:89:00:b7:d0:e4:94:61:d4:d7:fa:02:6c:
         1c:d2:6f:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4QgdktLkuO/T5CVDHo1sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyZjVmYWYzZDNhMTI2ZWIyN2Q5MzdkMWRlNjhlMDcyZTk5
YTI2ZjIwHhcNMjYwNzI3MDAwMjA5WhcNMjYwNzI4MDAwMjA5WjAzMTEwLwYDVQQD
EyhhZGI3NGZhYzgyYTNkZWMwNWJkN2Q5MjhkMmEyOTZlMTE3M2Y5Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRLlw2iQ6pIfmQIWn0Aup/DIvQU7
qYS+TDY9PFm0DtSr7Oqf/f+2b8FxU5H3YHh5uKDUGbDpda/o7cMAtt7ITM4iGs+O
Y9dAUPQVYoarUvrtx1xx7BVGXpmsR+erGvkcLru5wpKliVNSJiEliM2yuxhug7np
0TqYrHVkSfYgvZdnRBcQIrIWRoA3nGXX6RpT64l37l5jU0o4p/vD1N8Ow2Qx6krk
1ysDxmUA5c4yfQRATSUsPREjZhfH2zAZDRHLiYz8XH3/ydQhxX9qAe8dQAs3sIVH
bLVxKuzVW12PmVyOjqnisRIIOXEMXGrvu/oBDot3lBuFRjurCRbeqlGzywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK23T6yCo97AW9fZKNKiluEXP5zuMB8GA1UdIwQY
MBaAFOL1+vPToSbrJ9k30d5o4HLpmibyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHZYNjg5T2hKdXNuMlRmUjNtamdjdW1hSnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8yMGI4NzYtZWIyNC00Y2RjLWJhOTYt
MjQyMWFlYzRlNzE4LzEvNHZYNjg5T2hKdXNuMlRmUjNtamdjdW1hSnZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8yMGI4NzYtZWIyNC00Y2RjLWJhOTYtMjQyMWFlYzRlNzE4
LzEvNHZYNjg5T2hKdXNuMlRmUjNtamdjdW1hSnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFOdLqb/j
P0m82ZBBsK3FNBVKPSu+De2HBg7PhDyJpmGYG++L1tHzhKy2q/W5vSomJlUBhpz7
/OBp6ZHbqV7MjxEo8GYABz+/EuREVCHQFUii7+XRwtWTzPf3bvHc/bHaeG3bAHdf
gIBKWkWR/3m3We4hiWqL8HR8HBTzgjn8TuVt5GsjpNFdNokSOQKF6pzzuE8GJMDi
FVot6AkwBSRjoCgUizbAkMXEE1Nycn/gWyekC8ONoqOA0Aj6EKVOshusx4n1aMPY
38oTwR5QBVcsCxcyhlRvu4HJcVStjG4UkEkfarDnD07mWG8RvTxIdOjKiQC30OSU
YdTX+gJsHNJvIA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:38:30 2026 by rpki-client