Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
File:                     EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft (raw, json)
Hash identifier:          F7uUt300sRxCJBZXnjA55IujtDvxsBZsfvS/6K0S/1c=
Subject key identifier:   8D:E1:7A:D4:9E:34:96:FD:21:7D:B6:50:2F:6D:F8:F2:6C:4B:B8:9E
Authority key identifier: 10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3
Certificate issuer:       /CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
Certificate serial:       019F18303537DE0CD7872726EDDA4E14E6BF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
Manifest number:          1988
Signing time:             Tue 30 Jun 2026 11:00:40 +0000
Manifest this update:     Tue 30 Jun 2026 11:00:40 +0000
Manifest next update:     Wed 01 Jul 2026 11:00:40 +0000
Files and hashes:         1: EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl (hash: ADGjLWC8X6rKhsjcxncBIMSkFljWEMXwWrInvljo3Vc=)
                          2: zpkqiEr6OZxmuI9IUaACDy7tIx8.roa (hash: p3BKr125MAv68ooq8iK1eGRE8YMR/faVc2WdwuZpJ74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 11:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:18:30:35:37:de:0c:d7:87:27:26:ed:da:4e:14:e6:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1055ba8d49a2dd1e91c3aaccbcf144f04593f1b3
        Validity
            Not Before: Jun 30 11:00:40 2026 GMT
            Not After : Jul  1 11:00:40 2026 GMT
        Subject: CN=8de17ad49e3496fd217db6502f6df8f26c4bb89e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:26:f7:38:20:38:73:1f:57:4d:0b:e8:a4:
                    3d:4c:50:4f:6b:9f:ec:37:32:31:36:85:ce:81:0c:
                    f5:42:f5:c1:05:07:91:0f:f3:b5:e9:4a:16:c3:13:
                    11:70:be:b0:df:51:ca:79:be:d4:2e:cc:6d:29:4c:
                    79:c7:97:5e:b1:ba:41:a7:76:2d:6e:6c:48:ae:53:
                    d0:cd:e3:34:ee:1c:b4:d3:48:85:c5:aa:f9:ab:92:
                    ba:63:0a:95:57:f8:f4:9e:93:fc:2a:29:44:21:bf:
                    d3:65:99:59:a2:f4:7f:de:77:1f:ac:81:96:91:55:
                    b5:dd:3b:a0:86:9f:36:61:2a:39:06:81:e9:49:ee:
                    96:79:fd:39:56:0e:1d:06:9c:6f:4e:a5:8f:05:ca:
                    f0:c7:71:af:f7:ee:57:83:be:8a:c2:70:63:71:f1:
                    d8:b9:be:bd:ac:4e:db:8d:58:dc:c8:a5:1c:db:b0:
                    23:f2:b5:e5:7c:dc:59:a0:4e:d2:8b:5b:03:57:37:
                    b4:9b:95:c5:9a:d1:ae:60:64:cd:cd:b3:a2:02:56:
                    7a:26:2b:63:ae:e6:b5:f1:64:cf:7e:e0:9c:4e:f4:
                    79:0c:56:8f:3b:a7:35:c0:34:e3:82:e8:56:6e:8d:
                    35:50:19:b6:0d:58:7b:4a:a7:76:e8:d0:1d:b1:2f:
                    8e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:E1:7A:D4:9E:34:96:FD:21:7D:B6:50:2F:6D:F8:F2:6C:4B:B8:9E
            X509v3 Authority Key Identifier:
                keyid:10:55:BA:8D:49:A2:DD:1E:91:C3:AA:CC:BC:F1:44:F0:45:93:F1:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/e1d8f8-dbdd-47a3-8c68-4edaf77a0e5d/1/EFW6jUmi3R6Rw6rMvPFE8EWT8bM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:7f:0e:f4:a8:d9:95:7f:bc:4f:ab:44:7c:8d:cd:5e:e4:a8:
         9f:a0:b9:43:8b:e8:26:52:ed:f9:57:7b:44:52:53:1a:8b:3d:
         b3:41:5f:f5:0b:e0:99:88:82:7e:44:81:5b:7a:2c:e1:37:97:
         18:2e:90:3b:6f:31:85:79:7e:af:5b:14:80:f2:66:6e:0c:39:
         a7:88:a5:ba:96:c0:06:ac:48:f7:6e:da:79:2b:12:e0:1c:0c:
         b6:b0:20:d0:c2:00:91:76:00:19:e9:41:f3:dd:33:32:4e:fe:
         40:15:35:83:b8:e4:f2:79:d9:8f:ba:4e:03:5f:6c:de:2a:28:
         ac:d5:7b:2f:b7:2e:62:e7:b4:c4:10:8e:80:2d:25:24:53:39:
         5e:ab:73:5a:fe:ab:0e:95:b4:7a:69:89:59:19:9c:1d:47:9d:
         ab:95:21:43:45:c6:6d:ff:f6:04:56:2e:90:e2:15:4a:8a:0c:
         a5:80:17:07:dc:3d:a5:e5:cc:a6:bc:11:74:38:22:24:ce:1c:
         1e:db:7b:a5:a2:55:a4:0f:92:85:2d:23:66:f2:54:f7:af:6d:
         78:48:cd:8a:b6:50:fc:5d:e9:54:96:32:65:8a:5e:df:b9:28:
         ae:90:07:09:8a:03:3d:29:4c:16:61:b7:c1:8e:20:de:2c:b3:
         e2:91:7f:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8YMDU33gzXhycm7dpOFOa/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwNTViYThkNDlhMmRkMWU5MWMzYWFjY2JjZjE0NGYwNDU5
M2YxYjMwHhcNMjYwNjMwMTEwMDQwWhcNMjYwNzAxMTEwMDQwWjAzMTEwLwYDVQQD
Eyg4ZGUxN2FkNDllMzQ5NmZkMjE3ZGI2NTAyZjZkZjhmMjZjNGJiODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuC0m9zggOHMfV00L6KQ9TFBPa5/s
NzIxNoXOgQz1QvXBBQeRD/O16UoWwxMRcL6w31HKeb7ULsxtKUx5x5desbpBp3Yt
bmxIrlPQzeM07hy000iFxar5q5K6YwqVV/j0npP8KilEIb/TZZlZovR/3ncfrIGW
kVW13Tughp82YSo5BoHpSe6Wef05Vg4dBpxvTqWPBcrwx3Gv9+5Xg76KwnBjcfHY
ub69rE7bjVjcyKUc27Aj8rXlfNxZoE7Si1sDVze0m5XFmtGuYGTNzbOiAlZ6Jitj
rua18WTPfuCcTvR5DFaPO6c1wDTjguhWbo01UBm2DVh7Sqd26NAdsS+OSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI3hetSeNJb9IX22UC9t+PJsS7ieMB8GA1UdIwQY
MBaAFBBVuo1Jot0ekcOqzLzxRPBFk/GzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgt
NGVkYWY3N2EwZTVkLzEvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9lMWQ4ZjgtZGJkZC00N2EzLThjNjgtNGVkYWY3N2EwZTVk
LzEvRUZXNmpVbWkzUjZSdzZyTXZQRkU4RVdUOGJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn8O9KjZ
lX+8T6tEfI3NXuSon6C5Q4voJlLt+Vd7RFJTGos9s0Ff9QvgmYiCfkSBW3os4TeX
GC6QO28xhXl+r1sUgPJmbgw5p4ilupbABqxI927aeSsS4BwMtrAg0MIAkXYAGelB
890zMk7+QBU1g7jk8nnZj7pOA19s3ioorNV7L7cuYue0xBCOgC0lJFM5XqtzWv6r
DpW0emmJWRmcHUedq5UhQ0XGbf/2BFYukOIVSooMpYAXB9w9peXMprwRdDgiJM4c
Htt7paJVpA+ShS0jZvJU969teEjNirZQ/F3pVJYyZYpe37korpAHCYoDPSlMFmG3
wY4g3iyz4pF/zA==
-----END CERTIFICATE-----
Generated at Tue Jun 30 19:33:57 2026 by rpki-client