Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft
File:                     CUvO1ntmV262mwYxmFRQE9YSvp8.mft (raw, json)
Hash identifier:          FC/qexmkaJ4lizn6SVgGOne5rsGY2DWEprEFpE+fLD4=
Subject key identifier:   31:5D:57:E3:2F:B3:BF:D7:98:E5:E5:8B:71:F8:CF:9A:83:E5:29:7A
Authority key identifier: 09:4B:CE:D6:7B:66:57:6E:B6:9B:06:31:98:54:50:13:D6:12:BE:9F
Certificate issuer:       /CN=094bced67b66576eb69b063198545013d612be9f
Certificate serial:       019F6426B1CD65FA11D6B2D1A23ADFF95E76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CUvO1ntmV262mwYxmFRQE9YSvp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft
Manifest number:          4C
Signing time:             Wed 15 Jul 2026 05:01:25 +0000
Manifest this update:     Wed 15 Jul 2026 05:01:25 +0000
Manifest next update:     Thu 16 Jul 2026 05:01:25 +0000
Files and hashes:         1: CUvO1ntmV262mwYxmFRQE9YSvp8.crl (hash: NbtnpMnCXA+lzQZQMYS5pBokqhkbGlD5GlhkrSp+Y5c=)
                          2: ganKDfLJdP7vPbYxHCXqjVQXEN4.roa (hash: ABkWl8T8DuxKNXgQueib6qSpuf6zbYF/8XCKQm4RzlY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/CUvO1ntmV262mwYxmFRQE9YSvp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 16 Jul 2026 05:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:64:26:b1:cd:65:fa:11:d6:b2:d1:a2:3a:df:f9:5e:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=094bced67b66576eb69b063198545013d612be9f
        Validity
            Not Before: Jul 15 05:01:25 2026 GMT
            Not After : Jul 16 05:01:25 2026 GMT
        Subject: CN=315d57e32fb3bfd798e5e58b71f8cf9a83e5297a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:a8:88:d6:9f:4c:6c:f3:10:89:c2:1e:3d:
                    60:f8:90:8a:f1:7f:9f:f5:2c:68:36:8e:a6:88:b3:
                    07:ae:12:50:50:7a:2a:de:75:3c:d5:c4:de:67:46:
                    83:47:8d:5a:b5:ca:8a:eb:37:1b:99:6a:7f:fe:f8:
                    b6:7a:43:f2:94:30:17:16:04:58:55:4b:ac:94:c5:
                    be:c7:01:2e:7a:13:57:1b:98:5e:c9:c6:90:3b:d2:
                    8a:a3:de:e9:6f:38:5f:cb:13:ac:b1:6a:e3:fb:49:
                    09:62:2c:b5:b7:94:4d:35:89:09:d3:6e:89:7b:61:
                    d9:3f:d1:f0:d8:b8:16:fb:ba:54:ae:e3:b6:13:10:
                    b9:08:00:46:85:1c:df:de:2e:30:05:f5:41:5b:0a:
                    1a:bf:bb:38:5f:62:61:77:a0:3f:68:af:d6:f3:6f:
                    25:1a:f6:9e:61:55:2e:44:ff:12:28:fd:90:d9:ef:
                    37:8b:bb:c6:f5:01:d8:f8:b7:cf:ab:fa:0d:66:b0:
                    5c:be:57:f0:51:7e:f3:c9:9a:b6:45:c6:fc:ea:0e:
                    70:8f:4e:19:5c:a1:35:0f:d2:87:6b:a0:c5:35:f4:
                    69:fb:c3:c7:71:4e:5e:ee:51:1a:81:8a:a9:72:0c:
                    35:c0:e4:32:89:e1:81:22:0a:95:3c:44:1d:2e:df:
                    6c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:5D:57:E3:2F:B3:BF:D7:98:E5:E5:8B:71:F8:CF:9A:83:E5:29:7A
            X509v3 Authority Key Identifier:
                keyid:09:4B:CE:D6:7B:66:57:6E:B6:9B:06:31:98:54:50:13:D6:12:BE:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CUvO1ntmV262mwYxmFRQE9YSvp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/207216-1213-4824-8a97-640b6bb979b1/1/CUvO1ntmV262mwYxmFRQE9YSvp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:8c:d8:51:6c:95:9d:5b:a3:0f:c9:55:14:70:ba:54:f0:21:
         b9:4c:c5:29:ae:45:4e:ea:54:d3:b8:3e:d4:63:8f:b7:6c:49:
         1b:4b:65:2e:93:f9:c5:d6:50:6c:b4:34:87:e3:16:48:94:df:
         e2:70:36:97:cd:33:b7:5f:9d:1e:08:aa:33:6d:54:4e:9d:f8:
         f9:b0:e8:1e:73:2d:8d:2c:98:ab:6e:07:f9:97:2a:ac:b5:c2:
         3e:0f:60:27:b2:6e:82:da:07:e2:02:af:f3:b6:1f:84:3a:72:
         c2:ec:8c:d0:7b:ef:6e:69:cf:2b:c8:a2:5c:c9:cd:0d:4f:14:
         07:b8:69:da:44:b2:26:fc:3c:79:9b:a2:e7:b4:7d:4f:8e:77:
         32:a8:11:88:45:4a:4d:0c:59:2a:de:44:16:a1:8a:bd:e9:0f:
         e0:37:f3:aa:c0:9c:26:be:17:f4:b7:23:ab:03:c2:23:09:bb:
         49:c7:f2:47:db:aa:5b:51:95:ba:c3:ae:16:4c:a9:d0:b7:c9:
         0a:fd:b6:93:26:17:d8:bf:8c:f1:0c:36:e5:6c:c0:5a:ef:72:
         35:b5:e0:d3:69:e2:bd:ee:37:a6:e3:22:1a:c3:5b:47:1e:d3:
         6b:52:7f:28:35:f9:06:e0:e6:e2:28:f9:52:54:d1:84:0f:8e:
         15:45:43:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ9kJrHNZfoR1rLRojrf+V52MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5NGJjZWQ2N2I2NjU3NmViNjliMDYzMTk4NTQ1MDEzZDYx
MmJlOWYwHhcNMjYwNzE1MDUwMTI1WhcNMjYwNzE2MDUwMTI1WjAzMTEwLwYDVQQD
EygzMTVkNTdlMzJmYjNiZmQ3OThlNWU1OGI3MWY4Y2Y5YTgzZTUyOTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp42oiNafTGzzEInCHj1g+JCK8X+f
9SxoNo6miLMHrhJQUHoq3nU81cTeZ0aDR41atcqK6zcbmWp//vi2ekPylDAXFgRY
VUuslMW+xwEuehNXG5heycaQO9KKo97pbzhfyxOssWrj+0kJYiy1t5RNNYkJ026J
e2HZP9Hw2LgW+7pUruO2ExC5CABGhRzf3i4wBfVBWwoav7s4X2Jhd6A/aK/W828l
GvaeYVUuRP8SKP2Q2e83i7vG9QHY+LfPq/oNZrBcvlfwUX7zyZq2Rcb86g5wj04Z
XKE1D9KHa6DFNfRp+8PHcU5e7lEagYqpcgw1wOQyieGBIgqVPEQdLt9sxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFdV+Mvs7/XmOXli3H4z5qD5Sl6MB8GA1UdIwQY
MBaAFAlLztZ7ZldutpsGMZhUUBPWEr6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1V2TzFudG1WMjYybXdZeG1GUlFFOVlTdnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yMDcyMTYtMTIxMy00ODI0LThhOTct
NjQwYjZiYjk3OWIxLzEvQ1V2TzFudG1WMjYybXdZeG1GUlFFOVlTdnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yMDcyMTYtMTIxMy00ODI0LThhOTctNjQwYjZiYjk3OWIx
LzEvQ1V2TzFudG1WMjYybXdZeG1GUlFFOVlTdnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgozYUWyV
nVujD8lVFHC6VPAhuUzFKa5FTupU07g+1GOPt2xJG0tlLpP5xdZQbLQ0h+MWSJTf
4nA2l80zt1+dHgiqM21UTp34+bDoHnMtjSyYq24H+ZcqrLXCPg9gJ7JugtoH4gKv
87YfhDpywuyM0HvvbmnPK8iiXMnNDU8UB7hp2kSyJvw8eZui57R9T453MqgRiEVK
TQxZKt5EFqGKvekP4DfzqsCcJr4X9LcjqwPCIwm7ScfyR9uqW1GVusOuFkyp0LfJ
Cv22kyYX2L+M8Qw25WzAWu9yNbXg02nive43puMiGsNbRx7Ta1J/KDX5BuDm4ij5
UlTRhA+OFUVDqg==
-----END CERTIFICATE-----
Generated at Wed Jul 15 14:49:54 2026 by rpki-client