Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File:                     4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier:          bmV3LCT2G1eKkVCHpxuWkhAdYzek1cuKW2XltbQ5wpk=
Subject key identifier:   DF:56:41:29:78:30:53:EC:CC:FD:95:8B:61:96:75:13:34:70:2B:7F
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer:       /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial:       019FA14D6292E5A96392B4B8366970348CC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number:          09FA
Signing time:             Mon 27 Jul 2026 02:00:30 +0000
Manifest this update:     Mon 27 Jul 2026 02:00:30 +0000
Manifest next update:     Tue 28 Jul 2026 02:00:30 +0000
Files and hashes:         1: 4Ja60_Ob1qyQ36cA5voSc2uJesU.roa (hash: phe7oxYicIsE5Su+Fgz6QVulHqYmo2k2ps7HRljB/84=)
                          2: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: qarKloyKT14uyAWVMRyGG1FyvtUS16sBFJPRcHddmIM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:4d:62:92:e5:a9:63:92:b4:b8:36:69:70:34:8c:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
        Validity
            Not Before: Jul 27 02:00:30 2026 GMT
            Not After : Jul 28 02:00:30 2026 GMT
        Subject: CN=df564129783053ecccfd958b6196751334702b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:50:95:a8:45:f3:5b:7a:36:09:e1:7b:24:59:
                    ab:ba:c2:c6:3a:c2:04:30:17:12:80:61:1d:a8:91:
                    62:6c:05:fc:b9:2c:2d:50:f2:bf:4c:e7:f4:6c:41:
                    39:ad:9e:62:15:da:c1:b9:9a:5d:c5:8a:ae:47:10:
                    ac:1f:db:3f:75:35:0d:3f:1e:72:4f:de:2b:b5:3f:
                    a1:27:f6:ce:81:72:fc:ea:1b:c7:68:7d:60:06:31:
                    9f:14:19:60:70:a8:25:6a:33:d2:86:d1:3d:5b:5f:
                    b4:64:74:e2:b6:a4:83:83:33:a9:6f:72:cf:c5:24:
                    a4:b5:51:8d:89:4f:f7:86:b9:1c:4a:a3:2f:aa:91:
                    0c:7c:4f:cc:40:f1:02:76:e5:38:9a:56:bd:64:d5:
                    10:80:a6:34:b1:62:a6:ff:95:4e:f3:c1:19:e9:4e:
                    43:6d:50:65:af:60:7e:37:68:01:04:ce:39:1c:a6:
                    c7:89:b1:85:66:2c:3a:03:d7:f5:7a:28:85:4d:27:
                    c1:27:3d:b5:8c:31:2b:6c:c0:89:02:30:1b:e2:00:
                    73:e0:67:f5:50:c6:e3:88:b9:32:7b:99:aa:a8:43:
                    7f:45:1b:16:dc:cb:81:6a:aa:2c:0a:f4:0d:a5:5a:
                    c0:42:8e:63:bf:9b:92:f6:62:94:6a:b6:40:47:56:
                    3a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:56:41:29:78:30:53:EC:CC:FD:95:8B:61:96:75:13:34:70:2B:7F
            X509v3 Authority Key Identifier:
                keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:e8:87:de:e4:50:20:9a:23:19:4c:27:c0:f7:19:46:3e:3b:
         39:de:3a:5b:5d:38:da:c9:aa:82:c7:cb:e9:9d:bd:cb:54:03:
         b1:d0:e0:24:83:40:ab:55:dd:e2:15:b8:8b:31:87:fa:1e:c4:
         1b:4b:5a:84:ab:a1:b5:b5:6a:9d:a0:50:06:10:8c:ae:5d:4b:
         85:f7:d4:0c:36:c6:c5:56:c3:41:9f:24:d0:01:c2:9a:0e:33:
         64:d6:03:88:f3:bc:8b:cf:9f:9d:21:d8:4d:b1:fc:e7:77:71:
         a2:02:7c:53:60:e3:39:25:09:69:c8:e7:d3:c9:82:5e:93:02:
         01:53:50:ab:38:8d:1d:57:79:a5:c9:aa:86:33:ef:08:2e:14:
         d1:85:f4:3c:4e:32:e2:a4:a2:7b:ff:73:61:58:87:d5:d4:c2:
         1f:fa:c9:ac:67:8d:f1:8d:07:18:27:0c:e9:63:cf:87:7e:cd:
         4b:63:d4:22:dd:d2:69:01:68:52:07:12:d8:f4:85:21:d2:45:
         60:e7:89:e8:62:41:15:e3:9b:6b:ad:e7:a8:94:ef:96:0d:31:
         0d:a6:d3:5d:f2:98:7a:32:30:4c:b4:0f:9f:c9:40:1b:6e:bc:
         6e:e4:82:14:01:e8:aa:88:7e:f2:d3:f1:7f:89:6a:a4:45:18:
         63:e7:e3:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hTWKS5aljkrS4NmlwNIzIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxMTUxZDQ4OWIzNjY5NDE5MmFjYmZjYWE1ZTBiYjQ2ZmM5
ZTViZTAwHhcNMjYwNzI3MDIwMDMwWhcNMjYwNzI4MDIwMDMwWjAzMTEwLwYDVQQD
EyhkZjU2NDEyOTc4MzA1M2VjY2NmZDk1OGI2MTk2NzUxMzM0NzAyYjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8FCVqEXzW3o2CeF7JFmrusLGOsIE
MBcSgGEdqJFibAX8uSwtUPK/TOf0bEE5rZ5iFdrBuZpdxYquRxCsH9s/dTUNPx5y
T94rtT+hJ/bOgXL86hvHaH1gBjGfFBlgcKglajPShtE9W1+0ZHTitqSDgzOpb3LP
xSSktVGNiU/3hrkcSqMvqpEMfE/MQPECduU4mla9ZNUQgKY0sWKm/5VO88EZ6U5D
bVBlr2B+N2gBBM45HKbHibGFZiw6A9f1eiiFTSfBJz21jDErbMCJAjAb4gBz4Gf1
UMbjiLkye5mqqEN/RRsW3MuBaqosCvQNpVrAQo5jv5uS9mKUarZAR1Y6vQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN9WQSl4MFPszP2Vi2GWdRM0cCt/MB8GA1UdIwQY
MBaAFOEVHUibNmlBkqy/yqXgu0b8nlvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUt
OTNiNTc4ZDE4YzhjLzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9lMzRjZDUtMDExYS00MDRhLTlhZDUtOTNiNTc4ZDE4Yzhj
LzEvNFJVZFNKczJhVUdTckxfS3BlQzdSdnllVy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIuiH3uRQ
IJojGUwnwPcZRj47Od46W1042smqgsfL6Z29y1QDsdDgJINAq1Xd4hW4izGH+h7E
G0tahKuhtbVqnaBQBhCMrl1LhffUDDbGxVbDQZ8k0AHCmg4zZNYDiPO8i8+fnSHY
TbH853dxogJ8U2DjOSUJacjn08mCXpMCAVNQqziNHVd5pcmqhjPvCC4U0YX0PE4y
4qSie/9zYViH1dTCH/rJrGeN8Y0HGCcM6WPPh37NS2PUIt3SaQFoUgcS2PSFIdJF
YOeJ6GJBFeOba63nqJTvlg0xDabTXfKYejIwTLQPn8lAG268buSCFAHoqoh+8tPx
f4lqpEUYY+fjPw==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:47:09 2026 by rpki-client