Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
File:                     dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft (raw, json)
Hash identifier:          vn1JUWln1qimEWSph5i79CuGG+6Jqsu3+dKP2sa/ads=
Subject key identifier:   4F:70:1C:F1:66:AE:97:75:D7:77:13:51:99:A2:AE:9D:2D:3F:D2:E5
Authority key identifier: 74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
Certificate issuer:       /CN=749304120ce64942efb3896623b386a041dcb364
Certificate serial:       019F867B189927F7EDDB280D621BCAF2B1C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
Manifest number:          4D
Signing time:             Tue 21 Jul 2026 21:00:41 +0000
Manifest this update:     Tue 21 Jul 2026 21:00:41 +0000
Manifest next update:     Wed 22 Jul 2026 21:00:41 +0000
Files and hashes:         1: Q5a6HBab7XkMUuUmzB37I_bZ51M.roa (hash: usPWG+ZUU2Ik0VUcffT2eLkXW+tgdFOyEMe83evsQaE=)
                          2: dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl (hash: i+693mr5g/Sh+JtGgdVg67ui9Wdd3NhYb1AcuGNhMz0=)
                          3: x8Ef8kUk1ABUGDrdvpPX2q-sM5Y.roa (hash: eqyvuJE0kO0nJaVY9QksYF1dsyytJE+brJXIzn/oUAM=)
                          4: yn-UQ1pVJZDABMVLeJ9nhqXgCpk.roa (hash: 9X5Y2Cv2UIpJSqjKJPAjPpvZNJ4jzPmiAP1leQcKFxw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 21:00:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:7b:18:99:27:f7:ed:db:28:0d:62:1b:ca:f2:b1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=749304120ce64942efb3896623b386a041dcb364
        Validity
            Not Before: Jul 21 21:00:41 2026 GMT
            Not After : Jul 22 21:00:41 2026 GMT
        Subject: CN=4f701cf166ae9775d777135199a2ae9d2d3fd2e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5f:22:5e:e5:c6:d6:a3:e5:68:7b:60:6a:dc:
                    d4:5b:a1:6e:6b:8e:86:66:51:4c:92:bc:03:25:f5:
                    07:03:0c:fb:f0:6c:f2:6c:0f:29:f4:06:89:e3:4e:
                    ab:4f:a0:aa:ac:12:b8:8a:70:21:3e:15:df:4e:0f:
                    9e:91:5c:9e:6e:e9:24:ea:61:c9:40:78:6b:c8:78:
                    d3:27:d2:e6:f8:09:0e:94:3a:3a:ed:e7:cd:9e:a2:
                    d1:5d:00:ec:59:3c:a1:e1:c7:35:ea:cd:e8:c8:c6:
                    c5:89:8d:03:4c:2c:56:14:6f:b5:e1:38:34:69:dc:
                    1f:86:29:5f:12:1b:b1:8c:38:92:a2:0c:82:b1:d0:
                    7d:a1:0a:0d:21:d4:5b:e0:be:93:1f:0a:d0:5e:2a:
                    9d:82:bf:76:93:e7:61:8e:c4:e7:97:c4:30:cd:e0:
                    b4:e5:fb:b6:61:91:bb:7e:e2:42:09:9f:32:e4:cf:
                    18:34:a1:89:07:b9:6c:b5:17:c6:1b:94:8c:a5:a1:
                    d3:61:69:bf:fb:f6:59:1d:7c:32:df:ac:5d:95:67:
                    8a:47:8b:f3:ac:6a:29:73:a4:2d:e5:21:8d:0f:4b:
                    6b:ee:c2:4c:ec:f6:84:66:de:81:4b:12:f5:e6:3a:
                    df:0c:40:2c:70:8a:f2:95:5f:6e:27:b0:55:b2:72:
                    82:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:70:1C:F1:66:AE:97:75:D7:77:13:51:99:A2:AE:9D:2D:3F:D2:E5
            X509v3 Authority Key Identifier:
                keyid:74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:fb:c4:3e:a6:eb:90:70:bd:48:8c:f2:32:c8:60:69:5d:4c:
         4f:31:b1:9a:10:a7:a9:0b:48:77:04:05:30:4e:da:df:55:b8:
         b9:7d:da:70:96:d0:f1:c1:81:cf:fa:08:6d:4f:4a:30:af:3d:
         e7:b1:46:05:20:48:29:2f:41:78:cc:b5:29:ba:a2:91:ed:86:
         c9:ac:06:59:ad:4b:4c:b5:37:3d:36:3a:13:38:5f:61:61:34:
         9f:2a:28:b9:9b:d5:ce:cf:e1:cc:c9:35:60:e3:79:d0:39:49:
         2b:10:11:0d:a5:55:29:0d:42:cb:d5:27:23:ee:5e:e0:6b:cc:
         d6:f0:66:90:65:95:cf:2b:9f:34:87:4f:61:04:e4:87:fe:15:
         b1:c9:3a:a9:ae:b7:0d:b2:ff:a0:4a:26:fb:62:c1:7e:26:98:
         ac:79:25:23:96:3b:99:3e:9a:2b:83:5a:e5:62:19:eb:71:b4:
         66:05:9a:1d:3c:45:87:a6:e9:27:c1:a2:4f:52:cf:04:89:b6:
         03:ba:2b:9d:c5:cb:ab:3d:e2:fb:70:31:1f:55:40:9b:70:7a:
         2b:22:8a:38:3a:31:05:46:cb:b3:04:f4:a4:fa:02:bf:69:e3:
         e8:76:96:85:6b:2d:b5:d9:73:35:bb:5b:ad:81:a0:ff:ea:14:
         49:54:36:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GexiZJ/ft2ygNYhvK8rHFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTMwNDEyMGNlNjQ5NDJlZmIzODk2NjIzYjM4NmEwNDFk
Y2IzNjQwHhcNMjYwNzIxMjEwMDQxWhcNMjYwNzIyMjEwMDQxWjAzMTEwLwYDVQQD
Eyg0ZjcwMWNmMTY2YWU5Nzc1ZDc3NzEzNTE5OWEyYWU5ZDJkM2ZkMmU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu18iXuXG1qPlaHtgatzUW6Fua46G
ZlFMkrwDJfUHAwz78GzybA8p9AaJ406rT6CqrBK4inAhPhXfTg+ekVyebukk6mHJ
QHhryHjTJ9Lm+AkOlDo67efNnqLRXQDsWTyh4cc16s3oyMbFiY0DTCxWFG+14Tg0
adwfhilfEhuxjDiSogyCsdB9oQoNIdRb4L6THwrQXiqdgr92k+dhjsTnl8QwzeC0
5fu2YZG7fuJCCZ8y5M8YNKGJB7lstRfGG5SMpaHTYWm/+/ZZHXwy36xdlWeKR4vz
rGopc6Qt5SGND0tr7sJM7PaEZt6BSxL15jrfDEAscIrylV9uJ7BVsnKCyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE9wHPFmrpd113cTUZmirp0tP9LlMB8GA1UdIwQY
MBaAFHSTBBIM5klC77OJZiOzhqBB3LNkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpNRUVnem1TVUx2czRsbUk3T0dvRUhjczJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9iNjg0ZGItYjZiMy00OGRkLWFlOTIt
NDMwOGIxMDU0MTdmLzEvZEpNRUVnem1TVUx2czRsbUk3T0dvRUhjczJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9iNjg0ZGItYjZiMy00OGRkLWFlOTItNDMwOGIxMDU0MTdm
LzEvZEpNRUVnem1TVUx2czRsbUk3T0dvRUhjczJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM/vEPqbr
kHC9SIzyMshgaV1MTzGxmhCnqQtIdwQFME7a31W4uX3acJbQ8cGBz/oIbU9KMK89
57FGBSBIKS9BeMy1Kbqike2GyawGWa1LTLU3PTY6EzhfYWE0nyoouZvVzs/hzMk1
YON50DlJKxARDaVVKQ1Cy9UnI+5e4GvM1vBmkGWVzyufNIdPYQTkh/4Vsck6qa63
DbL/oEom+2LBfiaYrHklI5Y7mT6aK4Na5WIZ63G0ZgWaHTxFh6bpJ8GiT1LPBIm2
A7orncXLqz3i+3AxH1VAm3B6KyKKODoxBUbLswT0pPoCv2nj6HaWhWsttdlzNbtb
rYGg/+oUSVQ2AA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 01:08:25 2026 by rpki-client