Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
File:                     4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft (raw, json)
Hash identifier:          1g36EQ6ad+RD/HfoCukW5PcfNsWnIDWKeUbCvWiKbGc=
Subject key identifier:   75:F4:24:AC:61:AE:97:23:CC:54:B9:BA:60:59:92:1E:10:35:93:A4
Authority key identifier: E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A
Certificate issuer:       /CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
Certificate serial:       01A002B90BC4482BED1B3DA853A44A1F5E5F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
Manifest number:          1500
Signing time:             Sat 15 Aug 2026 00:01:16 +0000
Manifest this update:     Sat 15 Aug 2026 00:01:16 +0000
Manifest next update:     Sun 16 Aug 2026 00:01:16 +0000
Files and hashes:         1: 4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl (hash: 2MqY2urrDLQyqt0DqNHLzLJ3NVdbpRGDsNqZM1+qOsg=)
                          2: 5BcZMkFK4H4HzeU32Pg9Et5_SQ8.roa (hash: yDr7OimE93R5A5WQDfIWvLQYnSnCYBj7r4S1yWKb1hg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:b9:0b:c4:48:2b:ed:1b:3d:a8:53:a4:4a:1f:5e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e284e3d2f1a21c82bbb3d66f76f0bd9333513c9a
        Validity
            Not Before: Aug 15 00:01:16 2026 GMT
            Not After : Aug 16 00:01:16 2026 GMT
        Subject: CN=75f424ac61ae9723cc54b9ba6059921e103593a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:02:24:6c:31:eb:92:27:c8:7f:f7:31:5a:18:
                    ac:36:3e:45:78:54:bf:03:af:24:92:a4:4f:c3:c5:
                    50:7e:81:de:0f:a5:f1:90:11:d9:18:b7:ea:fc:dc:
                    b3:36:90:45:84:51:dd:42:08:5e:78:8e:01:40:49:
                    fe:37:21:02:70:c1:87:ed:e3:f7:ba:5b:74:f6:ff:
                    51:9a:6f:99:96:f9:8c:10:4e:4e:d1:da:f8:99:b6:
                    96:82:51:e7:5f:81:50:1e:6d:47:83:81:27:c0:7c:
                    8f:b6:f0:d5:32:9b:b7:25:81:23:d9:b6:77:b9:18:
                    e7:b4:cb:c0:b2:0a:7a:cd:29:c2:70:35:23:e9:39:
                    48:ce:8e:5d:0c:7b:c3:48:1d:44:17:7e:8f:f5:ea:
                    45:e9:25:9c:55:30:41:34:6b:84:de:69:ff:1b:32:
                    3d:49:ff:f6:b3:4e:28:54:6a:2f:37:3d:0a:e2:44:
                    d5:c2:14:0f:84:ce:53:fe:bc:00:a7:8b:bb:b5:5b:
                    df:dd:5b:2e:5b:91:e1:81:c9:5b:81:a2:95:b0:20:
                    80:f2:e7:b2:50:71:fd:ce:9c:8c:4c:df:20:03:6e:
                    0a:dd:cd:39:02:21:80:bf:cf:aa:6a:e8:29:ea:dd:
                    08:f9:08:a9:08:c9:3d:f2:05:ee:87:7a:56:7e:63:
                    da:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F4:24:AC:61:AE:97:23:CC:54:B9:BA:60:59:92:1E:10:35:93:A4
            X509v3 Authority Key Identifier:
                keyid:E2:84:E3:D2:F1:A2:1C:82:BB:B3:D6:6F:76:F0:BD:93:33:51:3C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/7c9bb7-268a-4362-bd08-901a373df080/1/4oTj0vGiHIK7s9ZvdvC9kzNRPJo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:7c:44:8f:be:98:41:6b:96:7d:09:01:4a:59:b8:64:8f:96:
         0a:be:62:bc:69:d6:da:e2:b8:b8:36:a3:0e:38:4f:03:71:71:
         30:61:fa:ce:2b:1c:2f:ef:df:a3:5c:45:76:21:ec:0b:31:90:
         2e:e2:14:fc:48:41:ab:81:16:ec:de:1b:02:ff:a6:35:52:7c:
         ef:47:4b:4c:af:a7:57:6e:6a:5c:44:2e:df:f8:a9:eb:99:a5:
         e7:82:25:86:f2:f0:88:76:36:4e:53:72:57:f2:f1:a3:71:e6:
         c1:1a:84:9b:d1:ca:a3:de:2b:c1:67:84:d6:6f:6c:d6:60:d4:
         93:4d:71:6f:d2:a5:1e:bd:b4:3e:83:9f:0b:a1:42:ed:da:80:
         3d:f7:36:7e:f6:82:d5:16:9b:c3:9e:25:12:77:68:53:14:fa:
         c6:b7:af:75:0c:a9:69:af:ee:50:65:5f:6b:a4:f2:ad:64:fa:
         12:f9:2a:10:24:fd:5a:0e:e3:0d:4b:3a:6c:74:6d:7b:b7:67:
         00:9c:31:ad:34:78:72:c8:bf:05:b8:12:a7:ba:55:56:9b:9c:
         b5:d0:53:57:97:00:27:60:2d:17:65:f8:4e:09:6c:f0:4a:34:
         94:b8:cb:7e:28:6b:60:bf:01:cb:2d:00:51:d1:37:a8:08:49:
         c3:27:3b:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACuQvESCvtGz2oU6RKH15fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyODRlM2QyZjFhMjFjODJiYmIzZDY2Zjc2ZjBiZDkzMzM1
MTNjOWEwHhcNMjYwODE1MDAwMTE2WhcNMjYwODE2MDAwMTE2WjAzMTEwLwYDVQQD
Eyg3NWY0MjRhYzYxYWU5NzIzY2M1NGI5YmE2MDU5OTIxZTEwMzU5M2E0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5wIkbDHrkifIf/cxWhisNj5FeFS/
A68kkqRPw8VQfoHeD6XxkBHZGLfq/NyzNpBFhFHdQgheeI4BQEn+NyECcMGH7eP3
ult09v9Rmm+ZlvmMEE5O0dr4mbaWglHnX4FQHm1Hg4EnwHyPtvDVMpu3JYEj2bZ3
uRjntMvAsgp6zSnCcDUj6TlIzo5dDHvDSB1EF36P9epF6SWcVTBBNGuE3mn/GzI9
Sf/2s04oVGovNz0K4kTVwhQPhM5T/rwAp4u7tVvf3VsuW5HhgclbgaKVsCCA8uey
UHH9zpyMTN8gA24K3c05AiGAv8+qaugp6t0I+QipCMk98gXuh3pWfmPa+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHX0JKxhrpcjzFS5umBZkh4QNZOkMB8GA1UdIwQY
MBaAFOKE49LxohyCu7PWb3bwvZMzUTyaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgt
OTAxYTM3M2RmMDgwLzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy83YzliYjctMjY4YS00MzYyLWJkMDgtOTAxYTM3M2RmMDgw
LzEvNG9UajB2R2lISUs3czladmR2Qzlrek5SUEpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMHxEj76Y
QWuWfQkBSlm4ZI+WCr5ivGnW2uK4uDajDjhPA3FxMGH6ziscL+/fo1xFdiHsCzGQ
LuIU/EhBq4EW7N4bAv+mNVJ870dLTK+nV25qXEQu3/ip65ml54IlhvLwiHY2TlNy
V/Lxo3HmwRqEm9HKo94rwWeE1m9s1mDUk01xb9KlHr20PoOfC6FC7dqAPfc2fvaC
1Rabw54lEndoUxT6xrevdQypaa/uUGVfa6TyrWT6EvkqECT9Wg7jDUs6bHRte7dn
AJwxrTR4csi/BbgSp7pVVpuctdBTV5cAJ2AtF2X4Tgls8Eo0lLjLfihrYL8Byy0A
UdE3qAhJwyc7qw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:47 2026 by rpki-client