Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
File:                     4-d1gqvilic_V6RVSq2m-lwf6bA.mft (raw, json)
Hash identifier:          lmF60alcT5YTgHiVkysz3lHK5cG8GDpFhVyV1n+AlZQ=
Subject key identifier:   EB:B7:2D:95:A1:DC:BE:8D:69:4B:D5:54:AC:B8:8D:07:A3:BE:64:A3
Authority key identifier: E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0
Certificate issuer:       /CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
Certificate serial:       019E1D592F6A3C3745D7A8E859975B409AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
Manifest number:          07CC
Signing time:             Tue 12 May 2026 18:00:44 +0000
Manifest this update:     Tue 12 May 2026 18:00:44 +0000
Manifest next update:     Wed 13 May 2026 18:00:44 +0000
Files and hashes:         1: 4-d1gqvilic_V6RVSq2m-lwf6bA.crl (hash: AIuQGkSOGBQIDPh4macaw+Re58ytrB90RNZqVFmctSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:59:2f:6a:3c:37:45:d7:a8:e8:59:97:5b:40:9a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3e77582abe296273f57a4554aada6fa5c1fe9b0
        Validity
            Not Before: May 12 18:00:44 2026 GMT
            Not After : May 13 18:00:44 2026 GMT
        Subject: CN=ebb72d95a1dcbe8d694bd554acb88d07a3be64a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:51:79:e0:64:a0:bf:81:08:bc:f5:d8:45:2e:
                    e1:22:33:65:04:f0:eb:10:4e:3e:10:11:87:4f:dc:
                    ae:ca:28:57:c0:82:09:5e:45:e4:81:d1:bc:16:16:
                    6c:88:d9:51:df:b3:68:6b:1b:60:50:f3:b2:57:c3:
                    ce:83:d0:44:45:77:80:da:90:9d:4e:2a:59:0b:fc:
                    1a:39:26:27:e2:09:a8:68:b9:ed:5f:46:de:7f:61:
                    7d:f2:0c:23:a3:f8:43:d6:0e:a4:ee:5d:f1:2e:f4:
                    d1:f8:86:52:8d:6c:fd:6e:a6:42:0a:21:af:3a:51:
                    ae:e0:7d:23:ac:f6:20:e0:77:5b:2f:39:37:ca:c7:
                    92:be:d2:44:82:f1:f6:21:a1:f5:e5:18:9b:bd:b2:
                    74:b1:4a:f1:d5:7a:5d:d5:49:a0:26:c7:4d:7e:7e:
                    32:c9:80:df:2e:4d:6a:e6:91:72:83:c0:9e:18:ab:
                    8e:1c:96:61:94:fc:21:99:fd:d6:bc:8a:1e:28:39:
                    cb:2f:37:82:5c:cb:f2:0d:f6:c8:89:4e:a9:a7:12:
                    3d:f7:65:b3:de:ac:c7:c1:69:b3:9a:df:f4:8d:d8:
                    e9:c6:96:03:f2:35:00:51:83:9d:49:93:fe:4e:b1:
                    58:09:28:bb:5b:0c:c2:79:5c:5a:0d:ff:aa:5a:5d:
                    8c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:B7:2D:95:A1:DC:BE:8D:69:4B:D5:54:AC:B8:8D:07:A3:BE:64:A3
            X509v3 Authority Key Identifier:
                keyid:E3:E7:75:82:AB:E2:96:27:3F:57:A4:55:4A:AD:A6:FA:5C:1F:E9:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-d1gqvilic_V6RVSq2m-lwf6bA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/168096-c887-476f-b335-118960ef62c6/1/4-d1gqvilic_V6RVSq2m-lwf6bA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b5:58:ad:6f:69:e3:04:95:8d:62:20:07:90:31:c7:21:4c:
         9d:5d:79:ee:14:94:11:20:bf:18:8b:61:80:19:9b:49:ae:9f:
         d8:72:eb:6e:4e:7a:ff:46:4a:c1:7c:bb:9a:e5:55:be:21:af:
         32:72:76:d0:f0:e7:53:d4:4b:29:0d:4e:bc:24:3b:7a:26:48:
         5d:43:42:85:fb:a3:41:9b:60:c0:1b:b3:23:1c:0c:4f:1b:41:
         e4:9c:fc:ad:e3:a4:7f:cf:ee:8c:b4:f9:fd:cd:df:cc:46:ad:
         00:bc:6f:f9:85:e7:7a:ad:40:4d:df:12:ae:d1:29:20:d5:53:
         37:ac:77:ff:9c:e5:d4:a4:2b:e2:34:75:7b:8e:0b:e4:6a:85:
         73:a2:c8:fd:e7:32:7f:39:36:a2:0e:ff:2a:d2:97:91:21:43:
         6d:4a:e8:ef:57:cd:88:95:08:49:65:88:d6:72:fd:14:42:ba:
         70:01:17:e1:97:97:b8:cd:30:bc:ef:23:b2:2f:41:f7:7b:a7:
         57:bf:41:70:31:da:cb:52:76:b7:b4:6c:d5:9a:55:97:f8:b5:
         de:c9:09:04:de:ef:e8:1d:ab:17:65:7b:06:5c:78:7d:93:e3:
         dd:e5:db:d1:b5:e9:83:bb:06:e5:28:be:9a:72:79:71:c0:27:
         8a:3e:2e:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWS9qPDdF16joWZdbQJrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzZTc3NTgyYWJlMjk2MjczZjU3YTQ1NTRhYWRhNmZhNWMx
ZmU5YjAwHhcNMjYwNTEyMTgwMDQ0WhcNMjYwNTEzMTgwMDQ0WjAzMTEwLwYDVQQD
EyhlYmI3MmQ5NWExZGNiZThkNjk0YmQ1NTRhY2I4OGQwN2EzYmU2NGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlF54GSgv4EIvPXYRS7hIjNlBPDr
EE4+EBGHT9yuyihXwIIJXkXkgdG8FhZsiNlR37NoaxtgUPOyV8POg9BERXeA2pCd
TipZC/waOSYn4gmoaLntX0bef2F98gwjo/hD1g6k7l3xLvTR+IZSjWz9bqZCCiGv
OlGu4H0jrPYg4HdbLzk3yseSvtJEgvH2IaH15RibvbJ0sUrx1Xpd1UmgJsdNfn4y
yYDfLk1q5pFyg8CeGKuOHJZhlPwhmf3WvIoeKDnLLzeCXMvyDfbIiU6ppxI992Wz
3qzHwWmzmt/0jdjpxpYD8jUAUYOdSZP+TrFYCSi7WwzCeVxaDf+qWl2MIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOu3LZWh3L6NaUvVVKy4jQejvmSjMB8GA1UdIwQY
MBaAFOPndYKr4pYnP1ekVUqtpvpcH+mwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUt
MTE4OTYwZWY2MmM2LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny8xNjgwOTYtYzg4Ny00NzZmLWIzMzUtMTE4OTYwZWY2MmM2
LzEvNC1kMWdxdmlsaWNfVjZSVlNxMm0tbHdmNmJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPbVYrW9p
4wSVjWIgB5AxxyFMnV157hSUESC/GIthgBmbSa6f2HLrbk56/0ZKwXy7muVVviGv
MnJ20PDnU9RLKQ1OvCQ7eiZIXUNChfujQZtgwBuzIxwMTxtB5Jz8reOkf8/ujLT5
/c3fzEatALxv+YXneq1ATd8SrtEpINVTN6x3/5zl1KQr4jR1e44L5GqFc6LI/ecy
fzk2og7/KtKXkSFDbUro71fNiJUISWWI1nL9FEK6cAEX4ZeXuM0wvO8jsi9B93un
V79BcDHay1J2t7Rs1ZpVl/i13skJBN7v6B2rF2V7Blx4fZPj3eXb0bXpg7sG5Si+
mnJ5ccAnij4ugA==
-----END CERTIFICATE-----
Generated at Tue May 12 21:30:26 2026 by rpki-client