Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
File:                     4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft (raw, json)
Hash identifier:          TWQ/woZKg/CWew6fTkOujfpPRcrRn1c+Fz0gljDv9Ps=
Subject key identifier:   49:06:27:4F:A2:38:DB:B0:5B:88:2C:A0:F0:2D:32:20:2A:60:1E:73
Authority key identifier: E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83
Certificate issuer:       /CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
Certificate serial:       01A001A5F6A7F68E4580F4BBE2CFB7AC38A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
Manifest number:          18FB
Signing time:             Fri 14 Aug 2026 19:00:48 +0000
Manifest this update:     Fri 14 Aug 2026 19:00:48 +0000
Manifest next update:     Sat 15 Aug 2026 19:00:48 +0000
Files and hashes:         1: 4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl (hash: v2J7eqXPrSeNWc71kv4brgf1LDE2gSsO7vnkhp7ixw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:a5:f6:a7:f6:8e:45:80:f4:bb:e2:cf:b7:ac:38:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e15503b11b98a5f58d4f55efaea3ad2b21aaec83
        Validity
            Not Before: Aug 14 19:00:48 2026 GMT
            Not After : Aug 15 19:00:48 2026 GMT
        Subject: CN=4906274fa238dbb05b882ca0f02d32202a601e73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:e2:ed:c8:88:f8:63:02:80:ca:f2:6b:b2:
                    61:4d:f6:52:61:97:01:9b:fc:eb:3d:02:67:1e:40:
                    71:fb:4f:d9:ae:63:fb:8b:16:69:06:17:c7:12:94:
                    7d:32:73:29:59:69:85:39:ac:00:53:d2:96:60:73:
                    1d:81:59:a3:4c:82:a2:5d:71:b4:cc:88:d7:7a:18:
                    c5:52:e8:4b:c8:40:7f:b0:ff:07:97:3b:af:35:9a:
                    9a:56:40:60:8e:16:ee:e1:09:a8:4f:58:87:ef:8e:
                    5d:16:67:6b:c5:9b:20:27:97:cb:b7:0b:9d:07:6e:
                    e2:be:f2:a9:a7:5e:5b:dc:0f:51:f8:60:6f:88:5d:
                    fb:27:0f:a6:57:2d:75:9a:0e:e2:ae:06:96:2b:4a:
                    f3:40:a4:fb:90:b7:54:eb:69:cb:5f:4c:7c:57:43:
                    2f:80:95:95:1c:df:c8:12:ae:d1:34:b3:81:ba:e6:
                    2a:f7:17:17:31:b8:f1:c0:99:15:d2:70:2d:ea:fb:
                    48:e7:71:89:b1:9f:1c:b3:5a:e1:7d:bd:01:8f:45:
                    32:23:c6:8a:57:c7:05:37:91:c4:cf:f7:78:5a:b7:
                    9a:55:b7:f6:39:3e:28:91:31:69:cb:06:be:55:02:
                    1d:8d:76:bc:1d:93:6c:1e:f1:e2:9c:71:24:41:0f:
                    b5:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:06:27:4F:A2:38:DB:B0:5B:88:2C:A0:F0:2D:32:20:2A:60:1E:73
            X509v3 Authority Key Identifier:
                keyid:E1:55:03:B1:1B:98:A5:F5:8D:4F:55:EF:AE:A3:AD:2B:21:AA:EC:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VUDsRuYpfWNT1XvrqOtKyGq7IM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a1b761-4c7d-4db9-aec6-35a5a25f1401/1/4VUDsRuYpfWNT1XvrqOtKyGq7IM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:16:8a:8d:a4:22:77:d4:22:0d:0b:87:cc:10:1a:77:e9:2c:
         f6:66:a8:b9:36:88:13:99:03:f0:d9:23:c1:6f:f9:31:0f:5f:
         af:80:20:02:22:ae:a4:1a:1f:12:94:c4:54:d8:14:fe:cf:df:
         34:b0:e1:9d:83:1b:94:3c:e9:d6:b4:a9:12:c0:c6:71:9a:d4:
         c4:24:f3:d6:e6:bd:6c:86:da:8f:33:54:46:cc:97:6d:52:e0:
         e3:0a:cd:9d:19:e7:47:4a:a5:10:34:d2:6c:18:df:ff:b4:20:
         12:17:b7:f6:6d:a3:fd:23:0e:df:30:ae:fa:5e:a2:c5:45:bf:
         7c:fc:d4:5d:a9:62:dc:0e:cb:41:36:c5:3f:9c:04:e2:b7:0b:
         72:6b:47:c9:b1:05:01:7c:16:99:5f:f3:cb:24:2f:57:67:57:
         7b:6e:9a:8e:1e:cc:ef:5b:8b:66:5e:76:5c:1b:7f:c2:c8:7c:
         66:a0:72:42:6f:e2:a6:5f:7f:94:d8:c4:a8:b6:34:f6:bd:cb:
         f9:a6:78:19:92:d6:e3:43:8a:29:c4:0e:0e:68:cd:5c:6c:63:
         13:4e:4c:fe:27:e3:61:6d:20:3d:54:a7:02:c0:65:c9:b8:11:
         05:4c:1d:5f:4a:52:73:65:c3:62:cd:00:20:7e:6f:58:31:66:
         58:f5:e4:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABpfan9o5FgPS74s+3rDinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxNTUwM2IxMWI5OGE1ZjU4ZDRmNTVlZmFlYTNhZDJiMjFh
YWVjODMwHhcNMjYwODE0MTkwMDQ4WhcNMjYwODE1MTkwMDQ4WjAzMTEwLwYDVQQD
Eyg0OTA2Mjc0ZmEyMzhkYmIwNWI4ODJjYTBmMDJkMzIyMDJhNjAxZTczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrbi7ciI+GMCgMrya7JhTfZSYZcB
m/zrPQJnHkBx+0/ZrmP7ixZpBhfHEpR9MnMpWWmFOawAU9KWYHMdgVmjTIKiXXG0
zIjXehjFUuhLyEB/sP8HlzuvNZqaVkBgjhbu4QmoT1iH745dFmdrxZsgJ5fLtwud
B27ivvKpp15b3A9R+GBviF37Jw+mVy11mg7irgaWK0rzQKT7kLdU62nLX0x8V0Mv
gJWVHN/IEq7RNLOBuuYq9xcXMbjxwJkV0nAt6vtI53GJsZ8cs1rhfb0Bj0UyI8aK
V8cFN5HEz/d4WreaVbf2OT4okTFpywa+VQIdjXa8HZNsHvHinHEkQQ+13wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEkGJ0+iONuwW4gsoPAtMiAqYB5zMB8GA1UdIwQY
MBaAFOFVA7EbmKX1jU9V766jrSshquyDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYt
MzVhNWEyNWYxNDAxLzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMWI3NjEtNGM3ZC00ZGI5LWFlYzYtMzVhNWEyNWYxNDAx
LzEvNFZVRHNSdVlwZldOVDFYdnJxT3RLeUdxN0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAURaKjaQi
d9QiDQuHzBAad+ks9maouTaIE5kD8NkjwW/5MQ9fr4AgAiKupBofEpTEVNgU/s/f
NLDhnYMblDzp1rSpEsDGcZrUxCTz1ua9bIbajzNURsyXbVLg4wrNnRnnR0qlEDTS
bBjf/7QgEhe39m2j/SMO3zCu+l6ixUW/fPzUXali3A7LQTbFP5wE4rcLcmtHybEF
AXwWmV/zyyQvV2dXe26ajh7M71uLZl52XBt/wsh8ZqByQm/ipl9/lNjEqLY09r3L
+aZ4GZLW40OKKcQODmjNXGxjE05M/ifjYW0gPVSnAsBlybgRBUwdX0pSc2XDYs0A
IH5vWDFmWPXkJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:30:06 2026 by rpki-client