Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
File:                     4PcIYcfPbv530i_HBJvpbGdopQA.mft (raw, json)
Hash identifier:          xJzHEzEg55X+tIOR6jMiuFsHpQL6oqK2OELOQnRr1NU=
Subject key identifier:   50:A8:08:63:FE:E1:D7:43:29:35:AB:05:EA:0F:85:51:61:57:65:0A
Authority key identifier: E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00
Certificate issuer:       /CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
Certificate serial:       019F905A78D60161F58E8D44C84A79D25B35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
Manifest number:          0989
Signing time:             Thu 23 Jul 2026 19:01:15 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:15 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:15 +0000
Files and hashes:         1: 4PcIYcfPbv530i_HBJvpbGdopQA.crl (hash: pbSVTJ2YsIk7pgkGSuu2ALQ1wmlUUqdNAXUGg+OHiT0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:78:d6:01:61:f5:8e:8d:44:c8:4a:79:d2:5b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f70861c7cf6efe77d22fc7049be96c6768a500
        Validity
            Not Before: Jul 23 19:01:15 2026 GMT
            Not After : Jul 24 19:01:15 2026 GMT
        Subject: CN=50a80863fee1d7432935ab05ea0f85516157650a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e4:93:03:12:7a:81:8d:32:c7:cd:69:a4:5f:
                    d1:12:cd:c5:bd:11:e5:7d:ca:32:0f:b6:00:c1:2f:
                    e1:28:61:30:ba:74:bd:4d:44:86:90:bd:48:18:b2:
                    25:ab:30:14:77:5a:8e:c8:a9:47:8f:e8:3c:43:05:
                    eb:87:48:ba:46:d9:50:3e:7f:c8:07:e3:92:4b:60:
                    d5:2f:31:43:64:e2:8f:bc:53:34:46:d7:da:08:64:
                    a7:72:dd:8b:f0:f6:d9:ba:23:c0:f4:30:38:b8:da:
                    e5:57:71:54:a1:bf:d3:d7:62:e7:2a:28:ff:da:4c:
                    58:62:0c:7d:d7:32:63:f9:cc:03:c6:f6:6b:a9:b3:
                    c9:5b:46:27:93:8b:ee:60:5d:d7:d9:43:ff:51:0a:
                    09:2d:54:75:73:bd:2e:33:fe:66:65:e2:4b:ec:b2:
                    ef:87:32:e6:70:60:0d:56:50:98:c0:de:7d:b5:5c:
                    f4:eb:b6:28:11:cf:57:f8:f9:62:58:32:a1:e8:35:
                    3d:0c:77:04:ac:52:b2:d7:9c:6f:88:b5:6c:85:d1:
                    f3:a2:60:47:27:fc:29:d0:43:71:40:be:7e:ca:03:
                    b7:3b:53:4c:97:96:44:18:86:7b:f7:9c:6e:d7:02:
                    cf:15:9a:c4:4a:c5:d7:4b:a9:a0:d2:53:3a:0d:d6:
                    2c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A8:08:63:FE:E1:D7:43:29:35:AB:05:EA:0F:85:51:61:57:65:0A
            X509v3 Authority Key Identifier:
                keyid:E0:F7:08:61:C7:CF:6E:FE:77:D2:2F:C7:04:9B:E9:6C:67:68:A5:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PcIYcfPbv530i_HBJvpbGdopQA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/542830-cc49-415a-97b6-4473c0b1e046/1/4PcIYcfPbv530i_HBJvpbGdopQA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:85:fa:cd:cd:22:3a:74:89:7e:86:c5:d0:c4:41:c0:32:d9:
         69:76:10:e1:90:4a:e6:41:9f:0a:95:09:ac:6e:82:f5:03:20:
         d6:3f:f4:c6:15:6a:40:7c:25:f6:68:d4:ef:a5:ef:89:6f:af:
         c0:20:47:25:e0:53:a4:2f:78:40:97:14:e0:9a:0d:e3:f2:ea:
         43:29:e6:ba:69:dd:89:76:0c:f0:78:5c:45:b7:68:95:52:f9:
         5f:b4:10:5b:1d:52:d0:3b:00:be:69:3e:b9:3e:8e:ae:54:ad:
         ca:a9:7d:bd:91:84:98:a7:21:19:0d:51:53:1c:d8:09:f4:fd:
         1b:04:24:e2:9c:8b:37:f2:7a:fc:62:e2:1f:78:18:07:63:1c:
         70:ae:ca:c0:6d:65:27:52:68:50:23:93:af:de:5d:76:05:37:
         18:7a:b0:49:d7:fc:46:d4:da:01:ae:f8:38:80:25:64:94:3f:
         32:ee:44:e7:84:03:8c:41:9e:90:8c:eb:09:f2:76:e9:9c:63:
         ad:8a:fe:4c:21:1d:ef:21:6c:0a:e9:61:fa:19:27:ec:33:60:
         25:74:46:37:9a:86:dc:a2:5b:a7:a9:bf:97:cb:90:cd:03:a1:
         a1:95:c3:70:6f:a1:d2:a3:d4:67:bb:bb:ed:b4:a4:b2:4a:7d:
         21:b4:2f:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+QWnjWAWH1jo1EyEp50ls1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZjcwODYxYzdjZjZlZmU3N2QyMmZjNzA0OWJlOTZjNjc2
OGE1MDAwHhcNMjYwNzIzMTkwMTE1WhcNMjYwNzI0MTkwMTE1WjAzMTEwLwYDVQQD
Eyg1MGE4MDg2M2ZlZTFkNzQzMjkzNWFiMDVlYTBmODU1MTYxNTc2NTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+STAxJ6gY0yx81ppF/REs3FvRHl
fcoyD7YAwS/hKGEwunS9TUSGkL1IGLIlqzAUd1qOyKlHj+g8QwXrh0i6RtlQPn/I
B+OSS2DVLzFDZOKPvFM0RtfaCGSnct2L8PbZuiPA9DA4uNrlV3FUob/T12LnKij/
2kxYYgx91zJj+cwDxvZrqbPJW0Ynk4vuYF3X2UP/UQoJLVR1c70uM/5mZeJL7LLv
hzLmcGANVlCYwN59tVz067YoEc9X+PliWDKh6DU9DHcErFKy15xviLVshdHzomBH
J/wp0ENxQL5+ygO3O1NMl5ZEGIZ795xu1wLPFZrESsXXS6mg0lM6DdYspwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCoCGP+4ddDKTWrBeoPhVFhV2UKMB8GA1UdIwQY
MBaAFOD3CGHHz27+d9IvxwSb6WxnaKUAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYt
NDQ3M2MwYjFlMDQ2LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81NDI4MzAtY2M0OS00MTVhLTk3YjYtNDQ3M2MwYjFlMDQ2
LzEvNFBjSVljZlBidjUzMGlfSEJKdnBiR2RvcFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlIX6zc0i
OnSJfobF0MRBwDLZaXYQ4ZBK5kGfCpUJrG6C9QMg1j/0xhVqQHwl9mjU76XviW+v
wCBHJeBTpC94QJcU4JoN4/LqQynmumndiXYM8HhcRbdolVL5X7QQWx1S0DsAvmk+
uT6OrlStyql9vZGEmKchGQ1RUxzYCfT9GwQk4pyLN/J6/GLiH3gYB2MccK7KwG1l
J1JoUCOTr95ddgU3GHqwSdf8RtTaAa74OIAlZJQ/Mu5E54QDjEGekIzrCfJ26Zxj
rYr+TCEd7yFsCulh+hkn7DNgJXRGN5qG3KJbp6m/l8uQzQOhoZXDcG+h0qPUZ7u7
7bSkskp9IbQv/w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:07 2026 by rpki-client