Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
File:                     4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft (raw, json)
Hash identifier:          AUkeigevOO2ZEj1YXYKnUCvJuXCagWIkKJfJ55Uxo1M=
Subject key identifier:   EB:A7:7E:66:A7:39:9B:A4:A5:70:C5:0F:CC:D4:18:66:0E:BC:A3:B4
Authority key identifier: E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2
Certificate issuer:       /CN=e18c718b45a77675909d7fd1afec6daabafe88b2
Certificate serial:       01A00213F8420B05503E78787A72D98FE013
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
Manifest number:          0B83
Signing time:             Fri 14 Aug 2026 21:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:58 +0000
Files and hashes:         1: 4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl (hash: RoYzp+NMDxDlpQvrDgtHBhdDiOqOX8jHp9GcyGulMoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:f8:42:0b:05:50:3e:78:78:7a:72:d9:8f:e0:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e18c718b45a77675909d7fd1afec6daabafe88b2
        Validity
            Not Before: Aug 14 21:00:58 2026 GMT
            Not After : Aug 15 21:00:58 2026 GMT
        Subject: CN=eba77e66a7399ba4a570c50fccd418660ebca3b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:fb:67:54:f9:8c:83:56:86:87:52:13:bc:0c:
                    37:c0:07:57:a3:e7:34:1f:14:55:47:ea:83:19:a5:
                    73:75:5e:17:3b:96:e0:68:86:70:58:fc:51:b1:dd:
                    c0:32:60:9e:ac:a2:f5:1f:cf:87:35:4e:c3:bd:c9:
                    9e:ec:08:24:65:52:24:0a:54:eb:ac:50:7b:bd:e1:
                    eb:0c:ff:a5:45:ba:63:0b:ad:0e:99:8a:42:b9:cc:
                    8b:2c:36:b1:77:a0:37:de:14:f3:35:fc:f2:2f:2f:
                    7c:cb:ab:41:b2:49:60:1c:52:89:09:41:44:23:7a:
                    53:b8:04:ce:b9:b2:56:7a:ba:94:fb:3a:db:4c:da:
                    a8:92:c4:3c:e6:55:a1:f1:42:b5:27:4c:10:55:b8:
                    0a:f0:c1:f7:34:5a:7b:85:b5:2f:3c:99:ec:38:7d:
                    69:e1:79:0e:61:60:1a:dd:ef:8f:24:72:52:1f:90:
                    3a:2a:94:6d:78:f2:40:fb:ed:75:49:2f:20:4a:f2:
                    c6:8c:46:1e:18:ff:76:ac:c0:20:11:84:18:67:37:
                    b1:91:a5:33:cd:49:d6:5a:60:da:70:25:e2:9c:e8:
                    a6:53:c9:f7:7a:0b:8c:71:0f:27:80:92:47:3f:6a:
                    e1:7a:64:71:df:a3:f9:9d:62:52:83:90:50:5e:a5:
                    37:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A7:7E:66:A7:39:9B:A4:A5:70:C5:0F:CC:D4:18:66:0E:BC:A3:B4
            X509v3 Authority Key Identifier:
                keyid:E1:8C:71:8B:45:A7:76:75:90:9D:7F:D1:AF:EC:6D:AA:BA:FE:88:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/467ba7-5c93-4ded-9978-04f044bb98c2/1/4Yxxi0WndnWQnX_Rr-xtqrr-iLI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:54:bb:00:d1:f3:61:60:0a:e9:3a:d7:ba:c6:dc:e1:b7:6c:
         0f:d1:7f:ae:aa:33:68:b2:20:bf:cd:aa:84:18:67:33:d3:28:
         0e:5f:3a:f6:55:6e:6c:2e:bc:5e:02:16:2e:1d:29:ab:2e:c0:
         82:3b:54:26:90:56:20:0f:f3:ac:5b:ae:cb:01:5f:c4:7d:f0:
         c0:7f:45:58:5d:24:e5:2b:d1:55:03:82:08:67:59:45:38:7b:
         c1:05:5e:bc:d0:b9:08:9c:e0:ef:2c:81:0d:26:c8:9d:f7:2a:
         48:3e:d5:84:e9:de:a5:28:8d:63:2c:8e:c9:83:e2:b7:0f:75:
         00:d8:09:ec:96:a0:eb:1a:5b:a4:45:a4:88:3f:8b:80:85:4e:
         6f:2c:bc:34:44:cb:00:21:d0:0a:ad:b4:63:d8:f3:00:a2:64:
         e9:25:01:1d:b8:60:57:b0:6a:f1:d2:ff:55:52:8c:74:c6:d2:
         ce:93:ff:09:7f:71:04:fa:90:a6:a5:4b:05:f6:2e:fa:32:be:
         1e:91:90:e3:01:bd:3b:b1:3b:cb:be:5e:97:80:9b:c9:d9:7d:
         6d:dd:e6:25:a1:dc:cc:f3:92:86:30:a6:2e:c6:b1:77:e9:03:
         00:cd:50:f3:45:34:e9:6a:48:07:84:bd:6d:e7:19:88:09:58:
         bf:5f:1c:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE/hCCwVQPnh4enLZj+ATMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOGM3MThiNDVhNzc2NzU5MDlkN2ZkMWFmZWM2ZGFhYmFm
ZTg4YjIwHhcNMjYwODE0MjEwMDU4WhcNMjYwODE1MjEwMDU4WjAzMTEwLwYDVQQD
EyhlYmE3N2U2NmE3Mzk5YmE0YTU3MGM1MGZjY2Q0MTg2NjBlYmNhM2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiftnVPmMg1aGh1ITvAw3wAdXo+c0
HxRVR+qDGaVzdV4XO5bgaIZwWPxRsd3AMmCerKL1H8+HNU7Dvcme7AgkZVIkClTr
rFB7veHrDP+lRbpjC60OmYpCucyLLDaxd6A33hTzNfzyLy98y6tBsklgHFKJCUFE
I3pTuATOubJWerqU+zrbTNqoksQ85lWh8UK1J0wQVbgK8MH3NFp7hbUvPJnsOH1p
4XkOYWAa3e+PJHJSH5A6KpRtePJA++11SS8gSvLGjEYeGP92rMAgEYQYZzexkaUz
zUnWWmDacCXinOimU8n3eguMcQ8ngJJHP2rhemRx36P5nWJSg5BQXqU3twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOunfmanOZukpXDFD8zUGGYOvKO0MB8GA1UdIwQY
MBaAFOGMcYtFp3Z1kJ1/0a/sbaq6/oiyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5Nzgt
MDRmMDQ0YmI5OGMyLzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC80NjdiYTctNWM5My00ZGVkLTk5NzgtMDRmMDQ0YmI5OGMy
LzEvNFl4eGkwV25kbldRblhfUnIteHRxcnItaUxJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN1S7ANHz
YWAK6TrXusbc4bdsD9F/rqozaLIgv82qhBhnM9MoDl869lVubC68XgIWLh0pqy7A
gjtUJpBWIA/zrFuuywFfxH3wwH9FWF0k5SvRVQOCCGdZRTh7wQVevNC5CJzg7yyB
DSbInfcqSD7VhOnepSiNYyyOyYPitw91ANgJ7Jag6xpbpEWkiD+LgIVObyy8NETL
ACHQCq20Y9jzAKJk6SUBHbhgV7Bq8dL/VVKMdMbSzpP/CX9xBPqQpqVLBfYu+jK+
HpGQ4wG9O7E7y75el4Cbydl9bd3mJaHczPOShjCmLsaxd+kDAM1Q80U06WpIB4S9
becZiAlYv18c7w==
-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:07 2026 by rpki-client