Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
File:                     5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft (raw, json)
Hash identifier:          wn0nnqEN7w3pa+h9YXOxbvqT84jWpcTtFFot3vIYNHA=
Subject key identifier:   45:ED:42:BA:61:13:90:A6:4C:55:91:18:10:EC:6D:78:35:1D:FB:CE
Authority key identifier: E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C
Certificate issuer:       /CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
Certificate serial:       019F8FEC63D8B29C366F5BB2BC9A51761612
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
Manifest number:          0636
Signing time:             Thu 23 Jul 2026 17:01:01 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:01 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:01 +0000
Files and hashes:         1: 5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl (hash: 2KJYAq371XDCK3UTYnTJrWFNZa2EL5QVvKt1e7n3/1U=)
                          2: VRLe_vrVUBu7hrug_AwRCwsEDDw.roa (hash: 1ZW4YMZPRX134FBX/m+hkmhqXkoGgUz70QQefV/wFo8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:63:d8:b2:9c:36:6f:5b:b2:bc:9a:51:76:16:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e46b3d61fe43ab6804b6f1e3297a8cdcc26b9d6c
        Validity
            Not Before: Jul 23 17:01:01 2026 GMT
            Not After : Jul 24 17:01:01 2026 GMT
        Subject: CN=45ed42ba611390a64c55911810ec6d78351dfbce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:44:e2:4e:8b:5f:ef:19:80:53:1f:22:1d:ea:
                    c9:18:94:e4:1e:00:6a:51:aa:30:56:9a:22:16:a0:
                    ac:21:9a:00:b5:90:38:3d:cf:74:1f:6e:ff:61:ae:
                    56:f2:d8:d7:ff:b8:6d:9e:dd:16:71:f1:ef:01:55:
                    b7:4b:05:8c:81:ba:b6:ed:d3:19:3d:4d:c3:5f:e5:
                    0e:4d:49:99:07:fc:16:1c:25:7b:d0:e0:b1:b5:56:
                    74:e6:c8:e5:71:a2:3a:82:fa:b2:cc:1a:3d:a2:aa:
                    2f:84:20:f3:53:0b:bb:d3:33:9f:ab:c0:25:75:15:
                    d8:7a:91:8d:01:95:4a:1f:78:b9:0c:86:f4:29:83:
                    d0:33:22:37:4f:69:80:85:06:bf:7f:b2:c6:f0:dc:
                    cc:90:82:27:5b:73:69:02:37:f2:a7:88:20:ce:0a:
                    e5:cd:eb:9c:3e:ef:28:dd:8e:2b:2e:6d:f2:72:65:
                    f9:00:9a:92:1f:11:84:03:9e:d4:cf:68:55:53:46:
                    bd:cb:40:73:8c:40:cd:40:92:05:7d:a4:88:5a:b8:
                    8d:5c:63:78:ac:3d:90:77:91:92:eb:75:51:75:12:
                    ce:e7:c1:bd:a6:aa:0a:c4:6b:fd:a5:5e:14:93:08:
                    29:26:c1:60:87:79:2d:27:ec:06:f0:74:76:bf:c2:
                    68:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:ED:42:BA:61:13:90:A6:4C:55:91:18:10:EC:6D:78:35:1D:FB:CE
            X509v3 Authority Key Identifier:
                keyid:E4:6B:3D:61:FE:43:AB:68:04:B6:F1:E3:29:7A:8C:DC:C2:6B:9D:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/1a024c-6b75-4ad8-b59d-af9bb3d125d8/1/5Gs9Yf5Dq2gEtvHjKXqM3MJrnWw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:fc:46:98:de:2b:8b:d0:41:17:2a:46:94:f1:0a:e0:54:56:
         52:17:09:b4:5a:cc:8c:04:e0:67:e6:14:d8:b9:61:51:d7:af:
         92:dc:16:20:62:7a:e2:20:b4:ab:d2:fb:33:ec:1a:3f:cb:b2:
         51:14:cb:f9:d7:cf:04:91:10:f7:c1:ee:2f:15:47:c7:32:d1:
         f5:34:fd:d6:49:e8:a7:34:9b:3a:4b:f9:74:e7:cd:cc:37:2d:
         9f:53:a5:0e:16:67:b4:f3:bc:28:66:8a:52:66:2b:88:4e:82:
         f3:24:a5:49:1c:17:2c:34:9c:0a:8d:1b:74:2c:18:5c:73:57:
         d0:32:64:4b:d3:1f:26:d2:ef:f7:68:36:45:4d:7d:32:4b:24:
         1c:b2:38:c8:ee:3e:12:dd:b2:50:b1:92:ec:59:fd:5c:01:e1:
         42:ff:d1:a0:1a:a5:27:97:4e:ff:8f:ea:31:74:51:6c:ad:48:
         75:29:f3:54:18:74:1a:c1:e1:65:e2:d0:4f:a6:2b:9d:5f:b3:
         c2:ae:03:2f:51:92:3c:40:9b:53:e6:08:a8:6f:40:f4:50:aa:
         e4:ec:0d:da:a9:2e:05:a3:35:a2:e6:42:00:5d:7b:ab:d5:b3:
         bc:30:6f:44:2a:56:2a:3d:b7:a9:c1:89:a7:a1:ae:63:0b:81:
         c6:8d:15:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P7GPYspw2b1uyvJpRdhYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0NmIzZDYxZmU0M2FiNjgwNGI2ZjFlMzI5N2E4Y2RjYzI2
YjlkNmMwHhcNMjYwNzIzMTcwMTAxWhcNMjYwNzI0MTcwMTAxWjAzMTEwLwYDVQQD
Eyg0NWVkNDJiYTYxMTM5MGE2NGM1NTkxMTgxMGVjNmQ3ODM1MWRmYmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnETiTotf7xmAUx8iHerJGJTkHgBq
UaowVpoiFqCsIZoAtZA4Pc90H27/Ya5W8tjX/7htnt0WcfHvAVW3SwWMgbq27dMZ
PU3DX+UOTUmZB/wWHCV70OCxtVZ05sjlcaI6gvqyzBo9oqovhCDzUwu70zOfq8Al
dRXYepGNAZVKH3i5DIb0KYPQMyI3T2mAhQa/f7LG8NzMkIInW3NpAjfyp4ggzgrl
zeucPu8o3Y4rLm3ycmX5AJqSHxGEA57Uz2hVU0a9y0BzjEDNQJIFfaSIWriNXGN4
rD2Qd5GS63VRdRLO58G9pqoKxGv9pV4UkwgpJsFgh3ktJ+wG8HR2v8JoaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEXtQrphE5CmTFWRGBDsbXg1HfvOMB8GA1UdIwQY
MBaAFORrPWH+Q6toBLbx4yl6jNzCa51sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQt
YWY5YmIzZDEyNWQ4LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8xYTAyNGMtNmI3NS00YWQ4LWI1OWQtYWY5YmIzZDEyNWQ4
LzEvNUdzOVlmNURxMmdFdHZIaktYcU0zTUpybld3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvxGmN4r
i9BBFypGlPEK4FRWUhcJtFrMjATgZ+YU2LlhUdevktwWIGJ64iC0q9L7M+waP8uy
URTL+dfPBJEQ98HuLxVHxzLR9TT91knopzSbOkv5dOfNzDctn1OlDhZntPO8KGaK
UmYriE6C8ySlSRwXLDScCo0bdCwYXHNX0DJkS9MfJtLv92g2RU19MkskHLI4yO4+
Et2yULGS7Fn9XAHhQv/RoBqlJ5dO/4/qMXRRbK1IdSnzVBh0GsHhZeLQT6YrnV+z
wq4DL1GSPECbU+YIqG9A9FCq5OwN2qkuBaM1ouZCAF17q9WzvDBvRCpWKj23qcGJ
p6GuYwuBxo0Vug==
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:25:06 2026 by rpki-client